This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft File: AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft (raw, json) Hash identifier: mJLODqz3GAk1yT5l0asiKGhAZUMdDPEFn9RwF4RMQzc= Subject key identifier: 46:E9:C6:D7:B4:8D:A1:49:FE:28:FE:CF:2A:54:A5:D3:F3:52:C9:9B Authority key identifier: 01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4 Certificate issuer: /CN=01e622564484649a5a657b45c9d3bb30c789a3e4 Certificate serial: 019B3C7F075B438A85929EB883D3E6FBEECF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft Manifest number: 01F9 Signing time: Sat 20 Dec 2025 16:01:56 +0000 Manifest this update: Sat 20 Dec 2025 16:01:56 +0000 Manifest next update: Sun 21 Dec 2025 16:01:56 +0000 Files and hashes: 1: AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl (hash: yCKYzRyfbh1E6PUrGmh8Kchf55s7mc2PU/fUZoj7dWU=) 2: I_Z5070VnqjEINScGnrsjIIGhyI.roa (hash: aKnIa9mebw8FwAQj874+YedV1EUpg+SaV2Y+JlM4u6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:07:5b:43:8a:85:92:9e:b8:83:d3:e6:fb:ee:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01e622564484649a5a657b45c9d3bb30c789a3e4 Validity Not Before: Dec 20 16:01:56 2025 GMT Not After : Dec 21 16:01:56 2025 GMT Subject: CN=46e9c6d7b48da149fe28fecf2a54a5d3f352c99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:48:3c:2d:13:80:5d:b0:5a:59:9d:7e:2e:e1: b4:96:22:bb:4e:f9:cc:6e:e6:b2:8b:e5:27:a1:20: 47:27:19:8e:7c:0c:96:49:c1:16:65:3e:0f:ac:a6: 31:9d:76:db:71:10:99:c6:f3:cc:12:0e:f6:b7:f6: e7:6b:68:8d:fc:82:6d:f2:2f:d6:0b:9f:2e:a8:b7: 04:cb:ac:d7:b1:25:0c:42:36:22:30:1d:39:cd:77: 74:f2:75:dc:e7:cc:93:8c:ce:54:da:44:a9:4d:f6: 39:ca:67:86:6a:c3:0c:c3:73:34:c7:90:b0:6b:07: cb:fa:34:17:42:3e:21:14:df:47:1a:b5:23:3f:32: a3:1b:26:d6:7c:6c:33:e7:97:bb:94:5a:09:b5:cb: db:23:0d:8a:30:2c:8e:a2:e6:f7:03:b4:cd:55:91: 83:3b:6a:03:56:e1:76:e3:42:55:a2:23:ac:75:20: 15:87:f2:21:91:4e:76:21:25:da:b7:28:cb:a2:50: 6b:23:ab:85:25:f1:08:fd:e5:3c:04:24:aa:21:9a: ab:86:0e:66:fd:74:84:f0:2c:16:54:80:0d:30:bd: 17:7a:18:82:e5:db:9c:56:dc:17:fb:ab:f8:a9:da: 42:fc:93:3d:f9:ba:6a:e4:b1:1d:93:54:7b:1f:93: da:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E9:C6:D7:B4:8D:A1:49:FE:28:FE:CF:2A:54:A5:D3:F3:52:C9:9B X509v3 Authority Key Identifier: keyid:01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:e5:6d:5e:95:2d:c6:00:53:82:d8:0f:85:b3:6b:c1:73:99: cb:b3:a6:3a:1d:f8:71:93:80:22:9f:54:78:70:b5:c4:61:1a: 4d:85:32:52:98:51:54:93:89:fd:14:94:55:1c:99:ef:18:3c: 49:f1:1c:33:6e:e9:c8:ad:b3:62:ff:cf:47:88:56:aa:11:9f: 60:02:67:6f:b6:4e:d2:84:a6:54:21:92:6d:81:7d:df:be:7c: 27:97:1f:f7:1d:bc:de:de:ab:0d:34:13:5b:18:ff:e7:56:6e: 1e:1d:87:e2:c4:86:3e:67:d2:f9:d8:71:10:2a:8f:80:a7:77: 78:bd:87:24:47:4b:6a:15:33:65:13:7a:0d:41:89:e4:85:f8: 63:66:e8:36:00:51:3f:31:8e:72:a8:65:23:25:8a:9a:e1:08: d4:8c:49:d3:91:fe:ce:fc:4a:09:6c:12:72:bb:2d:d8:50:2e: bb:e3:03:a1:92:0f:4e:1a:0b:70:53:49:87:4f:69:d3:a8:00: 58:6e:f0:dd:e7:11:4e:b9:75:15:e6:e4:39:60:e4:be:be:5b: cb:de:02:e7:9b:1e:57:8f:6f:48:71:36:28:bf:97:87:2e:b9: 1d:4d:04:f6:4b:7f:ac:35:c7:c8:4b:20:4a:21:f9:6d:f2:a6: 7a:33:11:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fwdbQ4qFkp64g9Pm++7PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZTYyMjU2NDQ4NDY0OWE1YTY1N2I0NWM5ZDNiYjMwYzc4 OWEzZTQwHhcNMjUxMjIwMTYwMTU2WhcNMjUxMjIxMTYwMTU2WjAzMTEwLwYDVQQD Eyg0NmU5YzZkN2I0OGRhMTQ5ZmUyOGZlY2YyYTU0YTVkM2YzNTJjOTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkg8LROAXbBaWZ1+LuG0liK7TvnM buayi+UnoSBHJxmOfAyWScEWZT4PrKYxnXbbcRCZxvPMEg72t/bna2iN/IJt8i/W C58uqLcEy6zXsSUMQjYiMB05zXd08nXc58yTjM5U2kSpTfY5ymeGasMMw3M0x5Cw awfL+jQXQj4hFN9HGrUjPzKjGybWfGwz55e7lFoJtcvbIw2KMCyOoub3A7TNVZGD O2oDVuF240JVoiOsdSAVh/IhkU52ISXatyjLolBrI6uFJfEI/eU8BCSqIZqrhg5m /XSE8CwWVIANML0XehiC5ducVtwX+6v4qdpC/JM9+bpq5LEdk1R7H5Pa5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbpxte0jaFJ/ij+zypUpdPzUsmbMB8GA1UdIwQY MBaAFAHmIlZEhGSaWmV7RcnTuzDHiaPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWVZaVZrU0VaSnBhWlh0RnlkTzdNTWVKby1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jMmYyMDYtMjE5Zi00NTk5LThlMjIt NzIyNjE0Y2VjYjA5LzEvQWVZaVZrU0VaSnBhWlh0RnlkTzdNTWVKby1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jMmYyMDYtMjE5Zi00NTk5LThlMjItNzIyNjE0Y2VjYjA5 LzEvQWVZaVZrU0VaSnBhWlh0RnlkTzdNTWVKby1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+VtXpUt xgBTgtgPhbNrwXOZy7OmOh34cZOAIp9UeHC1xGEaTYUyUphRVJOJ/RSUVRyZ7xg8 SfEcM27pyK2zYv/PR4hWqhGfYAJnb7ZO0oSmVCGSbYF93758J5cf9x283t6rDTQT Wxj/51ZuHh2H4sSGPmfS+dhxECqPgKd3eL2HJEdLahUzZRN6DUGJ5IX4Y2boNgBR PzGOcqhlIyWKmuEI1IxJ05H+zvxKCWwScrst2FAuu+MDoZIPThoLcFNJh09p06gA WG7w3ecRTrl1FebkOWDkvr5by94C55seV49vSHE2KL+Xhy65HU0E9kt/rDXHyEsg SiH5bfKmejMRaw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:09:55 2025 by rpki-client