This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft File: aDei-kt4dzpmIA_qTFhQepLzEgM.mft (raw, json) Hash identifier: 9B6fPtPYjFQ0US8hfAJ40jdWdT1DFYJ8niSp2aCt5Ww= Subject key identifier: 62:B5:40:B8:F8:9B:8E:EE:62:4A:A1:77:28:9C:E0:5A:9D:5A:C1:40 Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03 Certificate issuer: /CN=6837a2fa4b78773a66200fea4c58507a92f31203 Certificate serial: 019B3BD9BFC63E3FB45F0045EE3D624D4315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft Manifest number: 04D9 Signing time: Sat 20 Dec 2025 13:01:24 +0000 Manifest this update: Sat 20 Dec 2025 13:01:24 +0000 Manifest next update: Sun 21 Dec 2025 13:01:24 +0000 Files and hashes: 1: TeI7S8OZx8mbZ1CT76zicAPWzfI.roa (hash: i/HXyRHpcSf9pln1mzWKzux0Q76zSD8sVny0yg1+Z14=) 2: aDei-kt4dzpmIA_qTFhQepLzEgM.crl (hash: t9pehnMsqUmCrMq9X0j4XibCvDtZQU5upyBy1Mtj5HY=) 3: lTJh8IlgtKxtTsHbl0PqQi9XedY.roa (hash: WDZ9b3f2N4SwaPm559/K0k771yOilnYto8OW0s+oHSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:bf:c6:3e:3f:b4:5f:00:45:ee:3d:62:4d:43:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203 Validity Not Before: Dec 20 13:01:24 2025 GMT Not After : Dec 21 13:01:24 2025 GMT Subject: CN=62b540b8f89b8eee624aa177289ce05a9d5ac140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cd:04:1e:36:ea:a4:7b:33:d6:6d:e8:08:40: 2b:3e:25:bc:4f:30:2d:e2:c8:ae:7f:5c:3a:a9:57: be:a7:59:57:ce:61:ae:0a:9d:f4:c6:6b:30:fd:3b: 8f:bb:01:b2:d5:42:d4:fc:be:ea:08:08:e8:dc:91: 27:3f:e3:3f:db:73:e3:f0:bb:c6:66:9a:b4:09:93: a3:9b:a6:ff:fd:3b:16:96:53:e6:eb:6a:b6:58:22: 9a:1c:81:60:b1:b6:4c:ba:66:b8:39:08:ef:3c:d8: 0f:77:0e:cd:6d:b2:5e:d7:02:2f:ee:72:cd:a2:b1: 3d:35:ec:63:e9:8b:12:c1:37:ff:20:af:ac:d3:bc: 01:45:5c:87:fb:a2:a7:d7:3e:0b:e8:2d:8b:a3:aa: d9:d7:88:3c:f0:10:70:a3:a8:ce:23:af:56:83:31: 13:bb:cd:35:8d:d7:bc:a1:bc:fc:22:ae:89:ba:3f: ae:a3:8d:c1:ab:34:23:21:93:75:7d:50:50:fb:99: 65:34:a5:54:82:ce:d4:30:0d:35:a2:4c:30:f5:be: f6:9d:2c:89:9d:cf:18:97:96:ec:56:b1:54:dc:3a: 8a:39:3e:5f:f0:93:92:89:c3:1b:84:29:b0:d1:0b: 51:17:70:8d:79:6d:13:e9:27:94:9a:54:ae:13:60: b1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B5:40:B8:F8:9B:8E:EE:62:4A:A1:77:28:9C:E0:5A:9D:5A:C1:40 X509v3 Authority Key Identifier: keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:1f:54:74:91:16:2c:a9:ea:0d:99:7c:4c:8d:d0:16:a3:3c: a3:c6:66:f0:d2:b8:6a:b0:aa:e3:64:f0:6a:b5:1d:c1:a3:d7: 84:f5:7f:af:97:13:33:62:78:f4:ca:d1:89:44:dd:60:78:49: e9:9f:78:89:e0:eb:e7:3b:23:f5:50:fa:dd:ec:64:7c:dc:4f: fc:c0:96:ba:22:f1:f6:98:8e:53:84:7a:b3:44:5d:38:f4:25: 36:b7:4f:87:c6:bb:64:33:ca:8f:5e:80:d4:81:17:59:c0:c4: 66:b1:24:b8:f3:2a:29:a8:c3:04:c6:43:91:e2:6b:1a:ed:49: e9:87:9e:e6:98:49:68:36:30:0a:db:86:a7:c2:c5:16:de:a9: bf:2b:eb:3a:c3:de:58:28:25:ed:c0:40:e3:30:ac:fc:cb:8e: 8e:79:e7:b0:f0:40:a1:d5:5e:b6:4c:07:60:b3:ca:19:56:ad: 67:8a:6c:0b:2e:2c:04:fa:51:5b:ad:da:ef:b1:3d:84:1e:3a: a7:08:02:af:76:9b:55:4e:46:d1:ca:22:e6:46:32:fc:81:10: f0:6d:20:49:4a:cd:09:fa:13:f5:74:02:00:e6:76:96:aa:da: dc:1f:15:b9:bb:7f:eb:d0:12:e9:d2:a5:c3:e2:9f:59:81:34: 60:76:7e:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72b/GPj+0XwBF7j1iTUMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzdhMmZhNGI3ODc3M2E2NjIwMGZlYTRjNTg1MDdhOTJm MzEyMDMwHhcNMjUxMjIwMTMwMTI0WhcNMjUxMjIxMTMwMTI0WjAzMTEwLwYDVQQD Eyg2MmI1NDBiOGY4OWI4ZWVlNjI0YWExNzcyODljZTA1YTlkNWFjMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s0EHjbqpHsz1m3oCEArPiW8TzAt 4siuf1w6qVe+p1lXzmGuCp30xmsw/TuPuwGy1ULU/L7qCAjo3JEnP+M/23Pj8LvG Zpq0CZOjm6b//TsWllPm62q2WCKaHIFgsbZMuma4OQjvPNgPdw7NbbJe1wIv7nLN orE9Nexj6YsSwTf/IK+s07wBRVyH+6Kn1z4L6C2Lo6rZ14g88BBwo6jOI69WgzET u801jde8obz8Iq6Juj+uo43BqzQjIZN1fVBQ+5llNKVUgs7UMA01okww9b72nSyJ nc8Yl5bsVrFU3DqKOT5f8JOSicMbhCmw0QtRF3CNeW0T6SeUmlSuE2Cx4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGK1QLj4m47uYkqhdyic4FqdWsFAMB8GA1UdIwQY MBaAFGg3ovpLeHc6ZiAP6kxYUHqS8xIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURlaS1rdDRkenBtSUFfcVRGaFFlcEx6RWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iNzY5ZTMtZTIxNS00NGE1LThhMmUt MGU5ZGY5OWQ5MzM5LzEvYURlaS1rdDRkenBtSUFfcVRGaFFlcEx6RWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9iNzY5ZTMtZTIxNS00NGE1LThhMmUtMGU5ZGY5OWQ5MzM5 LzEvYURlaS1rdDRkenBtSUFfcVRGaFFlcEx6RWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVh9UdJEW LKnqDZl8TI3QFqM8o8Zm8NK4arCq42TwarUdwaPXhPV/r5cTM2J49MrRiUTdYHhJ 6Z94ieDr5zsj9VD63exkfNxP/MCWuiLx9piOU4R6s0RdOPQlNrdPh8a7ZDPKj16A 1IEXWcDEZrEkuPMqKajDBMZDkeJrGu1J6Yee5phJaDYwCtuGp8LFFt6pvyvrOsPe WCgl7cBA4zCs/MuOjnnnsPBAodVetkwHYLPKGVatZ4psCy4sBPpRW63a77E9hB46 pwgCr3abVU5G0coi5kYy/IEQ8G0gSUrNCfoT9XQCAOZ2lqra3B8Vubt/69AS6dKl w+KfWYE0YHZ+hw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:17:50 2025 by rpki-client