This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json) Hash identifier: AmzKNs0LjRSGTJxwBh2dlC3RMVl5aZiNVKfJlpyVm/k= Subject key identifier: 5F:82:70:C6:57:5F:8D:05:D7:2E:F7:FD:DF:20:26:25:12:F3:45:81 Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3 Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3 Certificate serial: 019B3F48D9FB064F0E4CC0174E1B5E61506D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft Manifest number: 03DD Signing time: Sun 21 Dec 2025 05:01:37 +0000 Manifest this update: Sun 21 Dec 2025 05:01:37 +0000 Manifest next update: Mon 22 Dec 2025 05:01:37 +0000 Files and hashes: 1: Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa (hash: B1k+alzkgyWX1Dzf52yEQFBGvjvNE4DrGgKVq+glwN0=) 2: YtxtGxzAFTD7VGg0PFEmZBNLElA.roa (hash: y8ZPyeZ/AYX6lgVWKnXOB87kBExgdYaVeX1AwaOBKoc=) 3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: c/DrhTT5cK5osKUmrcUNkAV3NSmudaBx7ta2OPys5Tk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:d9:fb:06:4f:0e:4c:c0:17:4e:1b:5e:61:50:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3 Validity Not Before: Dec 21 05:01:37 2025 GMT Not After : Dec 22 05:01:37 2025 GMT Subject: CN=5f8270c6575f8d05d72ef7fddf20262512f34581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7e:2f:e1:6c:bf:6d:1c:56:49:cb:30:be:aa: 4b:d5:8f:63:1f:d0:9f:88:b9:d5:99:11:56:4a:e7: 6e:d4:b0:47:13:aa:e2:21:89:2b:00:52:4c:d4:89: 7e:81:89:bb:69:00:9a:0a:83:79:e5:77:b2:69:04: 28:7b:23:5d:df:73:b8:60:e0:4b:49:c9:4f:0b:19: 65:07:45:fc:98:50:04:54:14:ef:ed:1d:f5:12:94: 18:98:59:07:15:c4:24:5e:10:13:a7:a2:c9:bb:f7: 60:30:15:78:31:31:53:a7:0e:db:1f:b2:0f:af:de: 39:c8:7a:a3:b6:de:13:0e:e9:b7:53:55:32:1c:87: 48:74:ee:1a:61:c4:19:04:13:f9:c5:05:e9:fa:c4: 12:3b:f6:05:61:1a:0d:35:6b:6b:b0:e7:df:68:e9: 3c:73:6e:b3:f0:66:5d:2d:48:24:af:fc:43:30:f7: 87:cc:bc:54:13:f4:a3:24:4f:6c:44:98:db:67:4c: 26:5b:6c:8d:4d:20:4d:38:86:1d:56:15:7a:70:52: 69:90:93:b7:49:ac:2c:da:2b:a2:4f:6d:c8:ae:46: c7:2f:da:4f:0d:f7:37:37:d9:49:f3:bd:8c:fa:2e: 1a:5b:3d:59:5e:ff:cf:5f:48:23:d8:b2:6a:14:34: c2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:82:70:C6:57:5F:8D:05:D7:2E:F7:FD:DF:20:26:25:12:F3:45:81 X509v3 Authority Key Identifier: keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:7e:1a:1a:71:da:80:f5:f5:0f:72:88:ec:4a:3c:ce:9e:a2: ba:a3:aa:50:ec:17:c3:c8:f6:b2:85:50:5f:7a:85:90:51:a3: 71:c7:a7:c5:ca:26:00:d3:11:ac:ee:9d:68:0c:1c:3d:2b:9a: b3:bf:38:31:9b:74:63:d4:27:2d:99:29:49:4d:19:3f:24:45: 5c:2e:8b:d0:fb:69:1b:6e:2b:70:c9:fd:c9:44:09:c1:43:04: b2:05:2c:2a:bd:9c:9b:3f:87:44:03:4b:c1:32:f5:06:1f:f6: 5d:a2:9f:d5:93:aa:35:5a:3a:5b:fb:3e:e2:08:22:a7:c8:1a: 54:70:78:01:44:68:36:f6:84:36:79:ab:75:5d:ec:86:cc:d8: 9a:8e:b2:62:80:ca:9d:3e:5d:20:a4:4c:bc:c9:73:bf:ee:13: 6b:82:1b:02:39:60:bf:d3:7d:12:39:51:dd:ad:87:6b:21:7c: c1:dc:0c:d5:e7:6e:5e:4d:bc:96:ff:2f:4d:d2:1b:80:e1:6e: 01:cc:6b:bc:91:59:e2:f3:94:9b:1a:73:de:fe:b9:e5:fd:a7: b3:a9:83:1c:ef:da:c4:03:a1:49:a5:f4:7d:a2:23:69:b6:71: a8:b7:a8:d6:cd:fc:e1:5a:d2:ae:ac:f3:f8:72:bb:20:01:35: 88:b0:21:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SNn7Bk8OTMAXThteYVBtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZDY2MDRjODhjMmUwNGU2MTY3MjQxMzE1Yjc0YTc1OGNl NjQ4YzMwHhcNMjUxMjIxMDUwMTM3WhcNMjUxMjIyMDUwMTM3WjAzMTEwLwYDVQQD Eyg1ZjgyNzBjNjU3NWY4ZDA1ZDcyZWY3ZmRkZjIwMjYyNTEyZjM0NTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt34v4Wy/bRxWScswvqpL1Y9jH9Cf iLnVmRFWSudu1LBHE6riIYkrAFJM1Il+gYm7aQCaCoN55XeyaQQoeyNd33O4YOBL SclPCxllB0X8mFAEVBTv7R31EpQYmFkHFcQkXhATp6LJu/dgMBV4MTFTpw7bH7IP r945yHqjtt4TDum3U1UyHIdIdO4aYcQZBBP5xQXp+sQSO/YFYRoNNWtrsOffaOk8 c26z8GZdLUgkr/xDMPeHzLxUE/SjJE9sRJjbZ0wmW2yNTSBNOIYdVhV6cFJpkJO3 Saws2iuiT23IrkbHL9pPDfc3N9lJ872M+i4aWz1ZXv/PX0gj2LJqFDTChwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+CcMZXX40F1y73/d8gJiUS80WBMB8GA1UdIwQY MBaAFGjWYEyIwuBOYWckExW3SnWM5kjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wMDYyMjUtOWJmZi00NTgzLThhMTUt N2NjMjk0NWYyY2E2LzEvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8wMDYyMjUtOWJmZi00NTgzLThhMTUtN2NjMjk0NWYyY2E2 LzEvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp34aGnHa gPX1D3KI7Eo8zp6iuqOqUOwXw8j2soVQX3qFkFGjccenxcomANMRrO6daAwcPSua s784MZt0Y9QnLZkpSU0ZPyRFXC6L0PtpG24rcMn9yUQJwUMEsgUsKr2cmz+HRANL wTL1Bh/2XaKf1ZOqNVo6W/s+4ggip8gaVHB4AURoNvaENnmrdV3shszYmo6yYoDK nT5dIKRMvMlzv+4Ta4IbAjlgv9N9EjlR3a2HayF8wdwM1eduXk28lv8vTdIbgOFu AcxrvJFZ4vOUmxpz3v655f2ns6mDHO/axAOhSaX0faIjabZxqLeo1s384VrSrqzz +HK7IAE1iLAh/w== -----END CERTIFICATE-----Generated at Sun Dec 21 08:20:37 2025 by rpki-client