This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft File: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft (raw, json) Hash identifier: TJH3ruuJM0BhNtkHhkS9p/HnS/a/2jdbNqx9COwEj1w= Subject key identifier: D6:82:AA:8C:11:86:82:4B:98:D9:6B:EB:A0:46:DA:0C:46:CD:61:53 Authority key identifier: 68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17 Certificate issuer: /CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17 Certificate serial: 019B4DE0852BFDAE9280B85446E1116C9CA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 01:01:58 +0000 Manifest this update: Wed 24 Dec 2025 01:01:58 +0000 Manifest next update: Thu 25 Dec 2025 01:01:58 +0000 Files and hashes: 1: 1-POC2nfhxokaO34U4IxxrQdEyHg.roa (hash: HGa5ESI5zwwldA7SOJhQSh4vTo8C4LN7Ht6oX1cZupU=) 2: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl (hash: IZamDac5QHEslgg/TSsiQK3Nkttx9eACGFg6/vEK4ic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:85:2b:fd:ae:92:80:b8:54:46:e1:11:6c:9c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17 Validity Not Before: Dec 24 01:01:58 2025 GMT Not After : Dec 25 01:01:58 2025 GMT Subject: CN=d682aa8c1186824b98d96beba046da0c46cd6153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:5a:42:68:cf:c4:fe:b2:d4:11:94:86:f8: 2a:da:e3:97:b3:00:f8:5f:cb:94:f9:03:aa:d9:ab: 17:e0:78:cd:45:00:df:3d:2e:44:b6:8e:f7:62:bb: b5:d6:dc:6b:2a:ea:30:49:56:3b:b2:39:97:76:88: 30:a1:c1:f4:b6:00:b9:bb:28:78:9d:64:62:48:66: 58:84:d5:40:f3:a9:2a:5a:c0:dc:18:1f:74:26:60: 4a:ba:ba:22:6a:f1:a4:6a:45:8a:75:3b:ed:23:95: 49:69:b1:49:4a:2f:d5:95:35:af:89:7c:43:d8:da: bf:17:e2:c4:53:86:b2:3b:ed:f8:c4:f0:05:8e:63: a0:98:ba:f5:9e:20:57:4d:2f:8c:34:93:c5:5c:6a: b1:20:58:97:bb:5e:69:fd:b8:bd:f5:4b:94:ce:fc: e3:d9:e1:27:af:bc:bb:5e:f2:bf:20:f3:01:8a:88: 29:96:96:82:ba:00:fd:b2:e3:4b:46:bc:92:c9:2c: 37:00:02:e9:bb:31:e0:00:30:53:77:e5:5d:c7:21: ae:c5:6b:c3:b3:fe:fe:df:c5:ad:98:da:8f:e7:1c: 74:0a:1c:2b:92:36:46:68:c2:72:ab:14:46:eb:df: 84:62:5f:a1:64:66:ad:19:93:5e:82:6e:ef:18:89: 99:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:82:AA:8C:11:86:82:4B:98:D9:6B:EB:A0:46:DA:0C:46:CD:61:53 X509v3 Authority Key Identifier: keyid:68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:86:45:35:37:d1:74:45:20:8c:d5:36:63:8e:e2:a7:61:ad: ea:d5:95:cb:3d:ff:3f:b0:20:50:56:61:97:00:f0:b1:f2:47: f8:90:07:19:52:d6:72:62:2e:3a:c2:24:e6:2b:04:1c:1d:14: c9:c1:23:0d:17:3a:75:a0:65:6c:5b:38:51:de:a5:a3:54:4b: f3:83:20:db:d3:aa:fd:c5:fc:b5:52:9c:14:2b:40:38:ae:3a: ef:ad:4b:05:55:ad:33:f9:d9:04:f8:56:31:c7:d2:ef:85:68: 12:cf:02:d3:34:46:dd:02:e9:6a:44:de:50:b8:14:f3:94:f8: 86:0d:4a:ab:fd:1b:e7:a4:b2:1f:bb:7e:89:92:f3:28:61:4b: 84:e6:93:1b:f4:77:22:3d:5e:40:63:49:a5:6d:22:49:61:1f: 31:05:e2:86:0f:29:81:c6:f7:c3:ac:2e:08:16:9c:d4:b4:5e: 47:63:85:5e:1f:41:c7:01:6a:01:39:1b:10:dd:11:99:d6:cd: 5d:d1:0b:ba:74:82:40:09:75:92:7d:94:ce:e5:c9:7b:2d:dc: f2:c5:f8:db:c8:5e:8a:12:b8:aa:cd:13:2f:a0:f2:61:ff:f4: 88:23:36:f1:a0:67:dd:38:63:50:9f:53:5b:10:b3:2c:e0:e9: 6c:e8:0c:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4IUr/a6SgLhURuERbJyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OTMxODhlYmZjZTIwZTViYzUzZjNhY2Y1N2Y0MDdkOWU1 N2FjMTcwHhcNMjUxMjI0MDEwMTU4WhcNMjUxMjI1MDEwMTU4WjAzMTEwLwYDVQQD EyhkNjgyYWE4YzExODY4MjRiOThkOTZiZWJhMDQ2ZGEwYzQ2Y2Q2MTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5RaQmjPxP6y1BGUhvgq2uOXswD4 X8uU+QOq2asX4HjNRQDfPS5Eto73Yru11txrKuowSVY7sjmXdogwocH0tgC5uyh4 nWRiSGZYhNVA86kqWsDcGB90JmBKuroiavGkakWKdTvtI5VJabFJSi/VlTWviXxD 2Nq/F+LEU4ayO+34xPAFjmOgmLr1niBXTS+MNJPFXGqxIFiXu15p/bi99UuUzvzj 2eEnr7y7XvK/IPMBiogplpaCugD9suNLRrySySw3AALpuzHgADBTd+VdxyGuxWvD s/7+38WtmNqP5xx0ChwrkjZGaMJyqxRG69+EYl+hZGatGZNegm7vGImZ8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaCqowRhoJLmNlr66BG2gxGzWFTMB8GA1UdIwQY MBaAFGiTGI6/ziDlvFPzrPV/QH2eV6wXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUpNWWpyX09JT1c4VV9PczlYOUFmWjVYckJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMzJlZDUtN2ExYi00ZjI2LWFkM2Yt MmQyYjRmNzBjM2EzLzEvYUpNWWpyX09JT1c4VV9PczlYOUFmWjVYckJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jMzJlZDUtN2ExYi00ZjI2LWFkM2YtMmQyYjRmNzBjM2Ez LzEvYUpNWWpyX09JT1c4VV9PczlYOUFmWjVYckJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIZFNTfR dEUgjNU2Y47ip2Gt6tWVyz3/P7AgUFZhlwDwsfJH+JAHGVLWcmIuOsIk5isEHB0U ycEjDRc6daBlbFs4Ud6lo1RL84Mg29Oq/cX8tVKcFCtAOK46761LBVWtM/nZBPhW McfS74VoEs8C0zRG3QLpakTeULgU85T4hg1Kq/0b56SyH7t+iZLzKGFLhOaTG/R3 Ij1eQGNJpW0iSWEfMQXihg8pgcb3w6wuCBac1LReR2OFXh9BxwFqATkbEN0RmdbN XdELunSCQAl1kn2UzuXJey3c8sX428heihK4qs0TL6DyYf/0iCM28aBn3ThjUJ9T WxCzLODpbOgMFw== -----END CERTIFICATE-----Generated at Wed Dec 24 09:22:51 2025 by rpki-client