This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json) Hash identifier: mrvI0SO6h6768SZpdOsyEImPTZNhGeDgnOiGm/dLHRs= Subject key identifier: 93:E0:9C:AF:60:1D:A8:62:B9:11:6F:8A:11:DA:96:F4:E6:8A:8F:59 Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a Certificate serial: 019B6CC63D7E73742D2960FFFE3F3C14C2C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft Manifest number: 0CCC Signing time: Tue 30 Dec 2025 01:01:29 +0000 Manifest this update: Tue 30 Dec 2025 01:01:29 +0000 Manifest next update: Wed 31 Dec 2025 01:01:29 +0000 Files and hashes: 1: 5uljjHiNNOaac26tRfDYMvtnMkY.roa (hash: Q7M6Bp79D6O8dYm6M5ML2nLIMBbVb2sxR0r3nfKEu6U=) 2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: E52pGAutgrJ99t7P963LtvQL16DqOl55Efc0i2jC4bE=) 3: v48Lr2EX71CfbBZZKT-B2CDMZWI.roa (hash: FbcS7Loz8XtWLz+emLVfELqvfvzTkNt/9jQwmw4FZhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:3d:7e:73:74:2d:29:60:ff:fe:3f:3c:14:c2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a Validity Not Before: Dec 30 01:01:29 2025 GMT Not After : Dec 31 01:01:29 2025 GMT Subject: CN=93e09caf601da862b9116f8a11da96f4e68a8f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2f:fa:bd:e3:ef:df:e9:fe:36:26:3e:53:e6: eb:43:c6:d7:f3:51:19:b3:97:a1:15:0b:6d:75:b5: 13:6a:2a:3d:2f:4d:90:00:f1:8f:4c:51:b7:79:e9: 30:f2:1c:f7:e5:33:be:f8:ea:84:c1:42:ba:02:a6: 82:7a:35:fb:e9:ba:d6:13:39:f8:0a:7b:8d:21:9d: ab:d4:cb:64:fa:e6:c6:d3:af:a3:6a:fc:c6:93:57: db:e9:35:de:b6:bb:d8:c3:23:4e:b5:03:d8:46:b3: b2:99:9c:58:86:16:9a:6c:e7:5e:ad:d1:76:ae:ff: 9d:df:b6:33:d7:e8:bb:64:43:34:b4:7d:26:1a:6b: 7e:20:0f:ac:11:95:49:81:e6:ca:6d:9a:9a:47:90: 59:7b:13:4a:23:97:7b:ea:71:90:5e:64:02:7e:b8: 77:aa:a5:45:b5:82:d4:8b:38:02:b5:7f:e3:72:8b: 9d:99:8a:11:6a:f9:ab:6e:f9:aa:09:12:a2:04:cc: 73:62:ea:f1:06:d5:51:98:33:2f:2d:3f:e7:f1:19: 9f:16:1d:f1:e6:eb:8a:23:fb:ca:89:63:39:2c:cb: e6:47:69:5c:48:d5:48:73:95:9c:d6:c6:5f:2e:48: 3a:b1:af:f9:5b:23:c5:b4:53:31:c3:a7:39:35:af: 31:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E0:9C:AF:60:1D:A8:62:B9:11:6F:8A:11:DA:96:F4:E6:8A:8F:59 X509v3 Authority Key Identifier: keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:72:b4:3f:75:28:d8:c9:2e:a1:ae:03:90:b2:ed:dd:e9:df: 3a:18:21:00:09:12:95:0e:dd:a5:a4:50:ae:79:14:e2:97:86: eb:a6:46:00:67:02:bc:79:00:4f:58:c8:fb:e2:95:f2:56:af: 4b:7a:9b:67:91:6b:f7:66:73:93:ba:49:a5:43:65:8b:ba:ef: ea:bc:45:13:2d:6b:4c:fb:90:7a:86:0c:d3:37:79:62:22:8c: 74:61:47:06:cc:65:54:1f:4d:e9:c3:7c:da:6b:f8:d8:30:0c: 87:31:b2:77:f9:4d:0b:45:89:aa:4c:ed:32:e3:22:ad:8e:57: fa:c8:ee:b6:eb:76:0f:d7:69:fa:94:68:c6:55:f6:f1:61:3b: 56:53:d9:76:e2:32:b6:c3:f2:81:b1:ce:eb:d1:f8:bb:20:96: 15:0f:37:85:7d:3d:7a:33:3e:a3:72:bd:5b:82:11:28:f8:51: f7:92:d2:fd:6f:e9:5f:47:f2:cf:ad:ad:16:f8:76:1f:29:f8: d9:36:0d:6f:3e:fe:cc:f6:87:b1:31:33:e9:0b:d7:01:6f:43: bc:ec:96:d7:ea:67:fd:74:50:a5:8b:0e:b7:5c:17:ae:49:cb: a5:b5:a0:01:7d:58:93:ca:86:d8:28:87:6c:0e:0b:e6:3a:4b: cd:a2:c7:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxj1+c3QtKWD//j88FMLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YmQxMGYxYjE0YmJiMjc2N2ZmZGNhZWM0YjQxNzI4ODBi YTQ2MWEwHhcNMjUxMjMwMDEwMTI5WhcNMjUxMjMxMDEwMTI5WjAzMTEwLwYDVQQD Eyg5M2UwOWNhZjYwMWRhODYyYjkxMTZmOGExMWRhOTZmNGU2OGE4ZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy/6vePv3+n+NiY+U+brQ8bX81EZ s5ehFQttdbUTaio9L02QAPGPTFG3eekw8hz35TO++OqEwUK6AqaCejX76brWEzn4 CnuNIZ2r1Mtk+ubG06+javzGk1fb6TXetrvYwyNOtQPYRrOymZxYhhaabOderdF2 rv+d37Yz1+i7ZEM0tH0mGmt+IA+sEZVJgebKbZqaR5BZexNKI5d76nGQXmQCfrh3 qqVFtYLUizgCtX/jcoudmYoRavmrbvmqCRKiBMxzYurxBtVRmDMvLT/n8RmfFh3x 5uuKI/vKiWM5LMvmR2lcSNVIc5Wc1sZfLkg6sa/5WyPFtFMxw6c5Na8xdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPgnK9gHahiuRFvihHalvTmio9ZMB8GA1UdIwQY MBaAFGi9EPGxS7snZ//crsS0FyiAukYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYt OWZlN2Q5MjhkOWJlLzEvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYtOWZlN2Q5MjhkOWJl LzEvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3K0P3Uo 2Mkuoa4DkLLt3enfOhghAAkSlQ7dpaRQrnkU4peG66ZGAGcCvHkAT1jI++KV8lav S3qbZ5Fr92Zzk7pJpUNli7rv6rxFEy1rTPuQeoYM0zd5YiKMdGFHBsxlVB9N6cN8 2mv42DAMhzGyd/lNC0WJqkztMuMirY5X+sjutut2D9dp+pRoxlX28WE7VlPZduIy tsPygbHO69H4uyCWFQ83hX09ejM+o3K9W4IRKPhR95LS/W/pX0fyz62tFvh2Hyn4 2TYNbz7+zPaHsTEz6QvXAW9DvOyW1+pn/XRQpYsOt1wXrknLpbWgAX1Yk8qG2CiH bA4L5jpLzaLHUA== -----END CERTIFICATE-----Generated at Tue Dec 30 09:41:59 2025 by rpki-client