This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json) Hash identifier: vIYcOY0K1B5cObhqfWp40yBDc1NekRkWLpW8fGVNlPA= Subject key identifier: 7A:0F:B6:E3:A7:05:89:50:7F:73:63:50:B0:C9:AB:4B:59:92:BF:EA Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5 Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5 Certificate serial: 019B34C4D36C888DB3518FBE291FB1CDEABC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft Manifest number: 01B6 Signing time: Fri 19 Dec 2025 04:01:12 +0000 Manifest this update: Fri 19 Dec 2025 04:01:12 +0000 Manifest next update: Sat 20 Dec 2025 04:01:12 +0000 Files and hashes: 1: SoVNckei1TZS01RLg6ip1YkBFdU.roa (hash: KPfyNB1/7HOPIBk4Fgq8x7IV18jBNl24nXpSJtvP3V8=) 2: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: P8sSBM2cfTc2jj0HDGafGx5ayOQv/cF9PgM4lWhCTOU=) 3: iGb2Jc_QU7J2Z5O3vod9I-OICPc.roa (hash: /45Up2AlP9mP2cq1r60NU4ej4jg7gPVu93jZTMBBI8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:d3:6c:88:8d:b3:51:8f:be:29:1f:b1:cd:ea:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5 Validity Not Before: Dec 19 04:01:12 2025 GMT Not After : Dec 20 04:01:12 2025 GMT Subject: CN=7a0fb6e3a70589507f736350b0c9ab4b5992bfea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:87:a2:40:54:0c:49:4f:f6:1e:7c:4a:a6:82: 11:7f:03:79:7e:bf:ad:07:e5:d7:08:c4:81:ed:8a: 17:74:63:b9:c3:82:d6:23:2a:c6:e4:8c:20:19:5f: 24:df:26:df:73:5a:c9:22:ae:7e:6e:1f:f9:b8:68: d3:60:8a:f4:17:fc:70:6f:83:aa:5b:52:db:48:3a: 9f:90:e1:6b:52:d1:f3:9b:50:f4:44:a1:1e:97:24: c7:53:ba:5f:fc:67:90:43:0d:e1:8f:09:ad:cd:39: 38:c6:9a:a8:b2:3f:ff:29:15:3f:96:e1:51:31:61: 13:77:48:a2:7e:e3:85:17:b0:50:b3:1e:38:d6:4b: e0:c9:73:c2:c7:33:9d:e6:9f:a3:38:dd:d4:aa:3c: 0a:d5:89:91:ec:4b:7c:9c:17:c1:52:72:35:5c:79: 23:42:9f:e9:8c:4e:74:31:1f:02:18:7e:ab:9e:f0: 61:51:a1:16:3e:07:18:0e:d3:f5:eb:0d:46:1d:31: e6:2d:60:56:cb:ed:f7:11:a3:56:cd:03:fd:ed:3c: 65:4e:14:cf:e0:fc:6f:e1:c1:59:66:dc:c8:32:1f: 60:61:33:a0:49:05:25:45:e8:59:fa:92:78:5f:f6: 48:2f:df:2f:22:ca:cc:d7:ed:62:97:8d:75:97:30: 65:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0F:B6:E3:A7:05:89:50:7F:73:63:50:B0:C9:AB:4B:59:92:BF:EA X509v3 Authority Key Identifier: keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:c8:af:7f:bf:77:a6:58:3c:6b:bb:4f:de:b7:e3:76:9c:47: 69:3d:df:a0:79:d5:a0:60:4a:16:e3:c1:f6:10:4d:b1:9b:ee: 00:d9:d2:d2:a3:6a:ce:71:c1:17:e3:e9:8f:77:b6:6a:b2:64: 8b:2b:06:ca:a0:7f:09:8f:a5:02:5a:68:a3:16:0a:0c:18:a3: b9:5a:8b:ff:74:66:f0:f0:6b:98:08:e0:8f:6e:b3:76:85:5d: f5:3c:45:46:b0:17:b4:25:7e:18:a7:6f:f9:04:25:2d:9c:59: 48:e8:81:ea:79:41:a1:0d:45:17:d2:18:dc:41:c2:63:7d:bb: a8:d6:22:88:1c:05:a7:71:5f:31:87:57:75:a5:32:ea:cc:7a: be:5f:59:4a:78:ef:0f:76:6f:18:33:f3:37:0e:a0:c4:7f:42: d2:6c:56:7a:03:93:5a:9e:98:af:1b:82:fe:2a:27:a6:ae:2b: a8:69:f1:cb:09:50:8d:97:26:72:26:f2:e7:fc:be:dd:de:ac: 8a:59:5c:5e:ed:0f:e0:80:74:7a:7f:39:db:72:a1:88:f9:dc: 89:5d:bd:06:75:b2:e5:6e:6e:bd:bd:f0:10:da:d7:c4:3d:63: 8a:48:8a:59:40:6e:9d:03:68:ab:87:0e:c6:d4:a6:bd:31:c8: fe:35:b0:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xNNsiI2zUY++KR+xzeq8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZjQzYjViYmNjNDk2MjgwNmVhOTMyMmVjMjkyZTliNjZk ZGNjYzUwHhcNMjUxMjE5MDQwMTEyWhcNMjUxMjIwMDQwMTEyWjAzMTEwLwYDVQQD Eyg3YTBmYjZlM2E3MDU4OTUwN2Y3MzYzNTBiMGM5YWI0YjU5OTJiZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIeiQFQMSU/2HnxKpoIRfwN5fr+t B+XXCMSB7YoXdGO5w4LWIyrG5IwgGV8k3ybfc1rJIq5+bh/5uGjTYIr0F/xwb4Oq W1LbSDqfkOFrUtHzm1D0RKEelyTHU7pf/GeQQw3hjwmtzTk4xpqosj//KRU/luFR MWETd0iifuOFF7BQsx441kvgyXPCxzOd5p+jON3UqjwK1YmR7Et8nBfBUnI1XHkj Qp/pjE50MR8CGH6rnvBhUaEWPgcYDtP16w1GHTHmLWBWy+33EaNWzQP97TxlThTP 4Pxv4cFZZtzIMh9gYTOgSQUlRehZ+pJ4X/ZIL98vIsrM1+1il411lzBlCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoPtuOnBYlQf3NjULDJq0tZkr/qMB8GA1UdIwQY MBaAFGj0O1u8xJYoBuqTIuwpLptm3czFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wNDZmZmUtMDVlYi00YzhjLTg1NDUt MDI0ODNlNjQ4MmNiLzEvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wNDZmZmUtMDVlYi00YzhjLTg1NDUtMDI0ODNlNjQ4MmNi LzEvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy8ivf793 plg8a7tP3rfjdpxHaT3foHnVoGBKFuPB9hBNsZvuANnS0qNqznHBF+Ppj3e2arJk iysGyqB/CY+lAlpooxYKDBijuVqL/3Rm8PBrmAjgj26zdoVd9TxFRrAXtCV+GKdv +QQlLZxZSOiB6nlBoQ1FF9IY3EHCY327qNYiiBwFp3FfMYdXdaUy6sx6vl9ZSnjv D3ZvGDPzNw6gxH9C0mxWegOTWp6YrxuC/ionpq4rqGnxywlQjZcmciby5/y+3d6s illcXu0P4IB0en8523KhiPnciV29BnWy5W5uvb3wENrXxD1jikiKWUBunQNoq4cO xtSmvTHI/jWwIQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:22:35 2025 by rpki-client