This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft File: aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json) Hash identifier: oV4WYtMtd4BIFPHZMVBSR6WDHIL3FXtaZrC+5TO9MzQ= Subject key identifier: B4:7F:1B:DD:3D:AB:B8:92:5B:5E:73:1A:A4:E5:05:75:F8:74:D7:41 Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac Certificate serial: 019B3A9094059D489039C46E1EAA781F6052 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft Manifest number: 08C4 Signing time: Sat 20 Dec 2025 07:01:52 +0000 Manifest this update: Sat 20 Dec 2025 07:01:52 +0000 Manifest next update: Sun 21 Dec 2025 07:01:52 +0000 Files and hashes: 1: 1-rRPCopFYmDMNDGALSnqCobspg8.roa (hash: 6hVXHifql97bRcIsJvQpXwPkBPemWPvtCyhSEbh0CDo=) 2: 8IS2SGLZvuejfiILX_HZy4EbxZ8.roa (hash: rsd4qoWJU7YOxhWnkiEgm/sIgrMf/LleiBk2mG4ubQg=) 3: CSQOd1Ivsq7SauN1-IwPUSzYm48.roa (hash: dGIueTuGLpuTY7iHF/OWsqSj5IRgJq+ixisf6vrNlv0=) 4: MUEabXTH7J0BwsIog7I6OfzuzkI.roa (hash: 9N5LvBOATRgD8zsq92oJDhXIXtyB1ta37GI9iUSZndY=) 5: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: NPTdUDgIPy5ERBi0DatpEuxrR0IzkogP+FanNlJOTeM=) 6: bG3vNkLD1dncPLRJXBDHmzwN_FU.roa (hash: VPIXy61pzu1bOvlxodUgzAm3JOVOrTVgSVJvZhBRPLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:94:05:9d:48:90:39:c4:6e:1e:aa:78:1f:60:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac Validity Not Before: Dec 20 07:01:52 2025 GMT Not After : Dec 21 07:01:52 2025 GMT Subject: CN=b47f1bdd3dabb8925b5e731aa4e50575f874d741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:45:2b:0b:9d:69:a3:9d:30:5b:fc:ab:f8:8b: 5a:c2:8d:f4:e8:16:8f:55:81:0d:de:ba:50:4f:b8: a0:b3:3f:31:0e:06:1c:b7:d7:3a:10:29:66:e6:d2: d2:67:77:34:13:b2:15:2b:90:14:76:68:d4:cf:13: d9:a1:03:85:9f:51:49:82:c4:f8:ca:cf:ca:0c:69: de:38:c0:e9:8d:f4:dd:d9:77:c0:42:7d:2f:03:df: 30:07:11:f8:bc:2e:7a:50:5c:6d:e8:02:6e:bd:9a: 61:2e:15:ef:48:23:b7:23:a1:53:e2:ed:3b:96:fb: 60:61:45:d5:1c:35:9a:52:3e:a0:7b:dd:eb:92:18: 14:5e:0f:0b:0a:86:9a:ae:5d:7e:7b:03:a7:43:57: b3:b8:44:94:f5:4f:29:9a:e9:96:be:23:ab:3e:b0: 1f:38:3c:40:70:47:93:c7:89:85:3f:bf:4d:5e:d6: ed:10:74:da:35:b8:ab:0a:49:81:d0:41:0c:cd:15: 73:6a:f5:69:a9:eb:75:a7:c3:d9:67:01:31:15:b1: 88:8a:52:eb:68:1f:cc:31:44:38:c6:9d:e7:a5:3f: 38:b9:30:ec:38:b1:85:f4:0a:07:63:1f:f2:3d:40: d4:02:20:c2:90:18:03:c0:e2:20:43:9e:2a:61:42: 3c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7F:1B:DD:3D:AB:B8:92:5B:5E:73:1A:A4:E5:05:75:F8:74:D7:41 X509v3 Authority Key Identifier: keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:79:87:12:23:a5:f7:f3:16:2d:1f:d4:02:af:43:5b:e3:b0: a0:fa:6a:07:80:3f:3e:63:d7:63:cf:98:91:a0:45:68:ef:58: 9e:b6:c3:35:70:e8:9f:b5:7c:fc:c0:37:bd:93:1d:aa:7a:91: 6c:63:5a:5d:f9:15:e5:f5:14:5a:12:3f:28:5f:01:85:8e:6a: 46:b3:a0:80:ee:6d:e7:12:59:5c:2d:2d:47:08:1c:6f:8e:ac: 88:1d:d1:2d:bc:5c:93:67:40:eb:13:cc:4f:ac:f1:11:a7:94: 2b:c6:8d:e3:98:0d:41:81:e7:87:b6:a0:65:63:df:46:14:ce: 6d:71:83:e9:21:c1:28:b0:f9:e5:90:a1:39:3b:d7:4a:2c:8a: 01:5a:6c:d3:71:98:67:a8:e8:bf:18:44:a6:a0:01:fa:21:75: fd:25:9c:c3:0e:58:14:1b:28:c4:71:7c:23:bd:59:d6:29:09: c8:e5:a9:94:be:2b:fc:66:5d:f5:35:17:78:e8:67:e6:c2:b0: 83:cc:46:c5:4f:d1:70:43:4d:47:09:14:1b:ab:06:67:cb:36: f2:0d:19:c1:88:e2:07:9c:8e:1d:e6:34:18:f4:98:17:a8:f3: 60:8f:04:08:54:aa:f6:3b:78:91:2e:02:99:21:f5:25:ec:1b: 7d:a6:57:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kJQFnUiQOcRuHqp4H2BSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYThmYTc1YzUwMjBjZDYyMThjZjdmMTA5ZGU0MjAyNjUy MDRiYWMwHhcNMjUxMjIwMDcwMTUyWhcNMjUxMjIxMDcwMTUyWjAzMTEwLwYDVQQD EyhiNDdmMWJkZDNkYWJiODkyNWI1ZTczMWFhNGU1MDU3NWY4NzRkNzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10UrC51po50wW/yr+Itawo306BaP VYEN3rpQT7igsz8xDgYct9c6EClm5tLSZ3c0E7IVK5AUdmjUzxPZoQOFn1FJgsT4 ys/KDGneOMDpjfTd2XfAQn0vA98wBxH4vC56UFxt6AJuvZphLhXvSCO3I6FT4u07 lvtgYUXVHDWaUj6ge93rkhgUXg8LCoaarl1+ewOnQ1ezuESU9U8pmumWviOrPrAf ODxAcEeTx4mFP79NXtbtEHTaNbirCkmB0EEMzRVzavVpqet1p8PZZwExFbGIilLr aB/MMUQ4xp3npT84uTDsOLGF9AoHYx/yPUDUAiDCkBgDwOIgQ54qYUI8wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLR/G909q7iSW15zGqTlBXX4dNdBMB8GA1UdIwQY MBaAFGqo+nXFAgzWIYz38QneQgJlIEusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAt MzVjNjNmYTc2NWEyLzEvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAtMzVjNjNmYTc2NWEy LzEvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnmHEiOl 9/MWLR/UAq9DW+OwoPpqB4A/PmPXY8+YkaBFaO9YnrbDNXDon7V8/MA3vZMdqnqR bGNaXfkV5fUUWhI/KF8BhY5qRrOggO5t5xJZXC0tRwgcb46siB3RLbxck2dA6xPM T6zxEaeUK8aN45gNQYHnh7agZWPfRhTObXGD6SHBKLD55ZChOTvXSiyKAVps03GY Z6jovxhEpqAB+iF1/SWcww5YFBsoxHF8I71Z1ikJyOWplL4r/GZd9TUXeOhn5sKw g8xGxU/RcENNRwkUG6sGZ8s28g0ZwYjiB5yOHeY0GPSYF6jzYI8ECFSq9jt4kS4C mSH1JewbfaZXvg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:31:50 2025 by rpki-client