This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json) Hash identifier: iflRj++rEj0g4+SPRTQWWyuKmzv0AGTz1WrjIHZ8xu4= Subject key identifier: EA:2E:D6:29:F8:0D:6B:3F:71:25:9D:73:5A:4C:86:3E:E9:AA:ED:CA Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09 Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209 Certificate serial: 019B41A48E50478DF8BAE551A7D0FFB7D3AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 16:01:01 +0000 Manifest this update: Sun 21 Dec 2025 16:01:01 +0000 Manifest next update: Mon 22 Dec 2025 16:01:01 +0000 Files and hashes: 1: 5uzu_v5gS3ug0oMvGUm8-v7KY5E.roa (hash: ZuCvDvn0y3TKVlnUg7+MwjLLh4Hpu3o4dv6iNubePz8=) 2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: y0ENOWnoXUT/okxZCDVdfTsY3+7kzALKvdBjT0vMlyU=) 3: MR8dTdhjmaYLwS5_RZWgeGpHZAs.roa (hash: uHa1AqEKqp9fMO1EIg5qvgkndRdXUoq9xzHg1+rgjtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:8e:50:47:8d:f8:ba:e5:51:a7:d0:ff:b7:d3:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209 Validity Not Before: Dec 21 16:01:01 2025 GMT Not After : Dec 22 16:01:01 2025 GMT Subject: CN=ea2ed629f80d6b3f71259d735a4c863ee9aaedca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:32:93:fd:bd:6d:f0:fa:12:59:dc:f2:69:5c: 4c:ab:5b:55:0d:9d:ae:64:ab:56:04:2a:4b:d9:89: 21:cf:ef:24:c4:b4:61:21:13:4a:50:10:55:9a:67: 15:60:4d:2b:0d:15:d0:34:4f:17:ca:94:ec:40:90: 29:77:34:bb:f1:41:e7:8b:92:4a:2d:0a:68:d9:b8: 38:dc:24:22:34:39:00:27:43:17:7b:38:26:f2:ba: e7:7b:18:6c:51:11:1a:50:93:11:e0:f8:76:e6:58: d0:68:18:fe:04:cb:db:13:3b:e5:d9:4a:ec:94:9d: 17:88:f1:cd:59:c5:c8:cc:5d:92:59:cb:1a:02:8a: 95:a9:74:41:e7:32:69:c0:cd:32:c4:cd:c2:d3:3d: 67:e5:72:03:c8:68:24:4d:63:d6:65:37:a3:bb:76: 25:87:8c:24:d4:10:2d:aa:35:3a:df:11:84:f0:49: 88:a5:21:a2:8b:92:d5:7a:d4:ce:5c:58:a9:7a:fa: ac:98:5c:56:6f:22:a5:62:54:c9:92:db:e8:42:69: aa:e4:7a:04:45:57:60:8f:f3:e1:a0:cf:f2:ac:70: 5c:7e:92:f1:ed:29:0f:f7:2e:2b:b1:ac:2c:01:f3: 69:86:cd:a0:76:7e:ac:b1:83:58:43:cb:66:a4:ec: 94:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2E:D6:29:F8:0D:6B:3F:71:25:9D:73:5A:4C:86:3E:E9:AA:ED:CA X509v3 Authority Key Identifier: keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:12:c9:49:a4:a2:8b:af:6a:1b:a9:a7:6c:37:da:55:16:ec: e1:31:4e:6b:99:ab:d5:9a:19:a8:c9:79:eb:86:15:56:5b:f8: 93:4b:0b:ac:fb:70:d1:5d:8e:2c:f8:af:61:b4:46:b4:87:13: 6a:ca:4c:0d:7b:f3:4f:8f:81:1f:03:a5:c8:d0:e8:d8:12:55: ae:1e:95:95:33:ef:b5:cb:d0:f5:6c:a2:09:83:5e:fc:03:83: 97:fa:4c:f4:45:28:27:3c:32:c6:19:de:68:5e:b6:3d:2e:05: 07:fe:9e:13:af:f6:93:a6:a5:6a:a7:5d:a0:78:76:9a:bf:0d: e9:9f:61:a7:39:b8:7f:27:ad:ac:07:f7:39:7b:36:c3:f5:29: bf:28:ab:0f:6b:8c:0f:35:38:45:63:52:7b:22:c1:a5:9e:e8: 88:73:41:18:fa:c8:6a:75:78:33:b3:30:1e:8c:00:da:83:d1: 29:43:6f:a5:83:b7:6a:80:97:5c:1c:ce:a3:98:a8:64:e4:36: 4a:24:0f:f5:0c:b7:3d:37:27:86:95:f3:45:e2:25:c0:d9:f7: 39:31:ff:9d:60:87:cd:2a:17:32:db:e8:27:38:a8:63:8d:13: 85:44:25:51:6f:ba:d8:90:f8:79:18:73:43:55:50:5a:bc:fe: 39:22:d7:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpI5QR434uuVRp9D/t9OqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYWIwMTBjZjVjMTFjMWIzMDY5M2QxMTQxN2I2MGNmNDVm YjEyMDkwHhcNMjUxMjIxMTYwMTAxWhcNMjUxMjIyMTYwMTAxWjAzMTEwLwYDVQQD EyhlYTJlZDYyOWY4MGQ2YjNmNzEyNTlkNzM1YTRjODYzZWU5YWFlZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDKT/b1t8PoSWdzyaVxMq1tVDZ2u ZKtWBCpL2Ykhz+8kxLRhIRNKUBBVmmcVYE0rDRXQNE8XypTsQJApdzS78UHni5JK LQpo2bg43CQiNDkAJ0MXezgm8rrnexhsUREaUJMR4Ph25ljQaBj+BMvbEzvl2Urs lJ0XiPHNWcXIzF2SWcsaAoqVqXRB5zJpwM0yxM3C0z1n5XIDyGgkTWPWZTeju3Yl h4wk1BAtqjU63xGE8EmIpSGii5LVetTOXFipevqsmFxWbyKlYlTJktvoQmmq5HoE RVdgj/PhoM/yrHBcfpLx7SkP9y4rsawsAfNphs2gdn6ssYNYQ8tmpOyUlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOou1in4DWs/cSWdc1pMhj7pqu3KMB8GA1UdIwQY MBaAFAKrAQz1wRwbMGk9EUF7YM9F+xIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2Yt MGI4YjA3NWU4NmRiLzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2YtMGI4YjA3NWU4NmRi LzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABLJSaSi i69qG6mnbDfaVRbs4TFOa5mr1ZoZqMl564YVVlv4k0sLrPtw0V2OLPivYbRGtIcT aspMDXvzT4+BHwOlyNDo2BJVrh6VlTPvtcvQ9WyiCYNe/AODl/pM9EUoJzwyxhne aF62PS4FB/6eE6/2k6alaqddoHh2mr8N6Z9hpzm4fyetrAf3OXs2w/UpvyirD2uM DzU4RWNSeyLBpZ7oiHNBGPrIanV4M7MwHowA2oPRKUNvpYO3aoCXXBzOo5ioZOQ2 SiQP9Qy3PTcnhpXzReIlwNn3OTH/nWCHzSoXMtvoJzioY40ThUQlUW+62JD4eRhz Q1VQWrz+OSLXhQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:16:11 2025 by rpki-client