This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft File: aluKc4anCgzU9gC-dYHe-JRHOkE.mft (raw, json) Hash identifier: 4BTKTIkeibYsW7OwLo8e8DuuYgappD23r8MlUpZ502E= Subject key identifier: 71:65:BC:0D:1B:9E:98:00:79:B0:55:C7:1F:92:A4:10:D6:26:FA:28 Authority key identifier: 6A:5B:8A:73:86:A7:0A:0C:D4:F6:00:BE:75:81:DE:F8:94:47:3A:41 Certificate issuer: /CN=6a5b8a7386a70a0cd4f600be7581def894473a41 Certificate serial: 019B544F61D04E299541910D0C0C12003C53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft Manifest number: 08B3 Signing time: Thu 25 Dec 2025 07:00:46 +0000 Manifest this update: Thu 25 Dec 2025 07:00:46 +0000 Manifest next update: Fri 26 Dec 2025 07:00:46 +0000 Files and hashes: 1: aluKc4anCgzU9gC-dYHe-JRHOkE.crl (hash: gbyR9gXayTzLb2PAAlGYuLoykhnVMu6wImSZsHehmJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:61:d0:4e:29:95:41:91:0d:0c:0c:12:00:3c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5b8a7386a70a0cd4f600be7581def894473a41 Validity Not Before: Dec 25 07:00:46 2025 GMT Not After : Dec 26 07:00:46 2025 GMT Subject: CN=7165bc0d1b9e980079b055c71f92a410d626fa28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8b:2c:a1:e0:54:ee:a7:37:d4:b8:07:ad:b6: d2:8d:15:6f:8a:3c:77:ab:3c:86:ae:be:68:fd:ff: e2:87:19:a7:82:ee:31:7d:66:ef:da:bb:4d:0b:d6: 7a:be:03:96:73:60:aa:e8:2a:09:7e:63:ad:1c:59: c3:db:8b:ad:5f:46:89:7c:53:aa:6e:1c:df:5a:06: 1c:a8:99:43:d2:5b:9b:31:fd:19:d8:1a:48:fc:b6: e2:6a:1c:5e:6e:2a:04:aa:2f:f3:4c:62:a1:76:0e: e0:15:47:81:7b:dd:f6:23:00:c3:b3:ce:3d:22:20: 2f:11:af:a9:a9:0e:74:8e:2b:51:1c:ed:8b:ad:55: d0:68:c6:0c:e2:78:7c:b9:9e:57:54:86:36:ce:dd: 8d:8c:54:72:c8:f4:37:68:e9:9e:89:a5:04:9d:fe: c6:7f:40:5a:bd:62:7b:81:d8:83:4a:0d:41:37:cd: b9:0b:fa:39:23:c9:f4:26:89:02:66:98:2f:9b:84: 2f:df:5e:e1:e7:e4:cf:58:f2:04:bd:51:42:f8:a8: e0:a4:0f:b5:ea:ae:91:49:85:90:3b:ae:d8:ea:58: cb:94:c9:b8:37:2b:2c:49:a5:4a:78:23:48:e0:cc: d0:f0:03:4e:eb:6d:e9:19:a3:d3:2e:c8:1c:6f:8f: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:65:BC:0D:1B:9E:98:00:79:B0:55:C7:1F:92:A4:10:D6:26:FA:28 X509v3 Authority Key Identifier: keyid:6A:5B:8A:73:86:A7:0A:0C:D4:F6:00:BE:75:81:DE:F8:94:47:3A:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aluKc4anCgzU9gC-dYHe-JRHOkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/854c21-5e1a-451d-aea1-fca0741a586e/1/aluKc4anCgzU9gC-dYHe-JRHOkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:bd:2c:01:b2:81:98:16:da:2f:b9:76:3e:cf:23:14:86:7f: 4d:4e:43:87:95:b8:ca:5f:17:5b:34:32:19:35:08:8c:b0:b8: c9:91:57:70:7f:78:98:6e:32:de:ee:43:14:0a:80:4b:99:64: ca:00:27:ca:42:bb:a1:6e:07:75:e1:01:11:45:39:3b:86:d7: c7:c1:54:ad:8b:85:c8:d1:b9:b4:ab:c8:c1:60:03:a2:c2:1d: 77:cd:b4:70:b7:6b:50:8d:9b:9b:1d:11:d9:18:e8:2c:15:16: 84:0d:a3:cb:bf:47:08:b6:9c:1e:7e:d2:48:62:de:2c:95:7f: 5e:1f:b6:b8:7d:e9:d1:ab:01:3e:6a:3b:3c:02:4a:5e:5d:72: 51:ce:8b:91:60:77:0b:ae:9a:ec:eb:ff:d3:41:c5:b4:7b:a8: 03:18:9a:31:72:f8:90:b7:a8:2e:10:1e:14:c3:f1:31:ca:7e: b1:5f:f3:39:73:e3:58:c6:f7:0d:1c:17:c3:61:ab:96:4f:ef: c6:c7:f9:52:ed:e7:3d:0a:d9:ce:8a:7d:1a:51:0a:8c:2b:05: 21:6c:89:d1:c7:56:2f:3b:92:91:d4:01:b2:be:06:bf:4f:9b: da:ca:18:9a:4a:ce:34:1a:6e:18:b8:30:da:d4:6d:86:d0:24: d5:4d:40:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUT2HQTimVQZENDAwSADxTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNWI4YTczODZhNzBhMGNkNGY2MDBiZTc1ODFkZWY4OTQ0 NzNhNDEwHhcNMjUxMjI1MDcwMDQ2WhcNMjUxMjI2MDcwMDQ2WjAzMTEwLwYDVQQD Eyg3MTY1YmMwZDFiOWU5ODAwNzliMDU1YzcxZjkyYTQxMGQ2MjZmYTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqossoeBU7qc31LgHrbbSjRVvijx3 qzyGrr5o/f/ihxmngu4xfWbv2rtNC9Z6vgOWc2Cq6CoJfmOtHFnD24utX0aJfFOq bhzfWgYcqJlD0lubMf0Z2BpI/LbiahxebioEqi/zTGKhdg7gFUeBe932IwDDs849 IiAvEa+pqQ50jitRHO2LrVXQaMYM4nh8uZ5XVIY2zt2NjFRyyPQ3aOmeiaUEnf7G f0BavWJ7gdiDSg1BN825C/o5I8n0JokCZpgvm4Qv317h5+TPWPIEvVFC+KjgpA+1 6q6RSYWQO67Y6ljLlMm4NyssSaVKeCNI4MzQ8ANO623pGaPTLsgcb48edwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFlvA0bnpgAebBVxx+SpBDWJvooMB8GA1UdIwQY MBaAFGpbinOGpwoM1PYAvnWB3viURzpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWx1S2M0YW5DZ3pVOWdDLWRZSGUtSlJIT2tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS84NTRjMjEtNWUxYS00NTFkLWFlYTEt ZmNhMDc0MWE1ODZlLzEvYWx1S2M0YW5DZ3pVOWdDLWRZSGUtSlJIT2tFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS84NTRjMjEtNWUxYS00NTFkLWFlYTEtZmNhMDc0MWE1ODZl LzEvYWx1S2M0YW5DZ3pVOWdDLWRZSGUtSlJIT2tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATr0sAbKB mBbaL7l2Ps8jFIZ/TU5Dh5W4yl8XWzQyGTUIjLC4yZFXcH94mG4y3u5DFAqAS5lk ygAnykK7oW4HdeEBEUU5O4bXx8FUrYuFyNG5tKvIwWADosIdd820cLdrUI2bmx0R 2RjoLBUWhA2jy79HCLacHn7SSGLeLJV/Xh+2uH3p0asBPmo7PAJKXl1yUc6LkWB3 C66a7Ov/00HFtHuoAxiaMXL4kLeoLhAeFMPxMcp+sV/zOXPjWMb3DRwXw2Grlk/v xsf5Uu3nPQrZzop9GlEKjCsFIWyJ0cdWLzuSkdQBsr4Gv0+b2soYmkrONBpuGLgw 2tRthtAk1U1ASg== -----END CERTIFICATE-----Generated at Thu Dec 25 14:34:45 2025 by rpki-client