This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft File: aG1vVpUAwlBwthJPG4b2CVJnepM.mft (raw, json) Hash identifier: hf/PZhDw4G6YtUhexcls5K7fVaKeinfcLcfQP3B0leA= Subject key identifier: 75:EC:79:80:0C:5B:95:E2:C3:C7:75:11:64:F3:25:66:03:CF:C9:4A Authority key identifier: 68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93 Certificate issuer: /CN=686d6f569500c25070b6124f1b86f60952677a93 Certificate serial: 019B2B1CEBA73EB15B06BDDB5D756968316A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft Manifest number: 0B20 Signing time: Wed 17 Dec 2025 07:01:14 +0000 Manifest this update: Wed 17 Dec 2025 07:01:14 +0000 Manifest next update: Thu 18 Dec 2025 07:01:14 +0000 Files and hashes: 1: aG1vVpUAwlBwthJPG4b2CVJnepM.crl (hash: kh4lv2TATq+qYSk3Hpj2bKQ/lWV99WHksxMmS3DtTQQ=) 2: fUaeEEckRfBNE0XG7eTK1gjPW_w.roa (hash: sw5+wxsLZVOQhkR/KheuEdoMzOUAkFrmAKd0BU+FbcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:eb:a7:3e:b1:5b:06:bd:db:5d:75:69:68:31:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=686d6f569500c25070b6124f1b86f60952677a93 Validity Not Before: Dec 17 07:01:14 2025 GMT Not After : Dec 18 07:01:14 2025 GMT Subject: CN=75ec79800c5b95e2c3c7751164f3256603cfc94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5a:48:88:1e:12:db:e3:9a:89:2e:db:f9:9e: 6f:cb:92:dc:91:82:05:0a:f7:07:69:44:19:a6:3e: 7e:a2:ec:19:42:8e:93:de:8b:f2:a9:82:3b:84:25: 0c:f2:0a:a1:33:f8:9a:65:9b:8c:12:d2:36:26:80: 9e:ba:aa:cc:8d:38:9a:fa:6c:ad:63:6c:9b:b8:f0: 3c:1d:f1:82:82:4a:42:8d:29:56:ce:81:ab:c0:93: fe:00:9e:08:48:91:2b:a8:f0:3e:94:e3:f2:07:4b: ea:3a:16:c3:76:f8:42:fb:5f:23:d2:df:2d:e5:9c: 19:70:a5:60:7e:00:52:a4:b4:44:1a:b9:4f:56:d7: 6e:e1:38:66:86:a1:1d:58:ec:06:5f:49:f4:07:c9: b0:ff:c5:93:eb:85:6e:ad:0f:84:8e:30:ab:0e:9e: 49:dc:91:8c:d0:39:8e:75:a9:8f:55:e8:c4:d0:e6: 52:d0:69:e0:77:63:ed:3d:5e:86:6a:60:23:63:19: 64:78:9d:3d:89:55:55:d7:92:b7:ff:f8:35:83:7a: 30:99:a9:4a:d8:20:de:ef:07:8e:5b:3c:60:f6:89: 57:92:c4:7c:40:5a:f3:d3:1d:cf:23:13:5e:c2:7c: b5:89:45:8e:69:fd:81:6a:75:82:82:7a:81:7d:17: f8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EC:79:80:0C:5B:95:E2:C3:C7:75:11:64:F3:25:66:03:CF:C9:4A X509v3 Authority Key Identifier: keyid:68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:bb:2e:4b:88:22:a5:b6:7f:16:b1:7c:62:60:43:6a:25:57: d8:21:ac:72:53:3e:2d:c0:ba:5f:6e:64:7b:38:b8:3c:8d:e3: b3:99:31:36:6e:27:37:9a:cb:83:61:00:0e:2b:a8:b9:d7:d0: a9:bf:79:0f:ec:9a:e0:dd:c6:75:da:a4:24:0e:7f:63:74:d9: 87:42:f3:29:57:04:d9:fd:ec:eb:ec:bb:eb:0c:c7:f4:64:a3: 83:a3:b6:ad:2e:b8:a5:83:0f:83:2e:2d:1a:71:e5:ac:42:e6: 3d:39:d0:45:52:44:6c:c2:39:62:9f:cf:7d:a4:96:e8:3a:c4: ff:74:9f:f5:3a:d7:70:e3:ef:3c:33:ff:ce:04:a0:30:f0:24: 61:3d:d2:c0:dd:56:4f:d9:d0:b2:e8:08:47:0f:2f:15:82:b5: cd:e6:e7:10:90:1b:24:4e:ab:84:85:84:6f:b9:48:43:98:fb: 0d:24:56:b8:be:b7:6c:06:1d:e3:b7:dc:e1:01:95:e2:7e:3d: 61:09:8e:a0:1d:df:41:5b:4f:7e:91:fe:92:1f:f3:97:37:c1: 9a:52:31:f3:7f:0d:d2:02:4a:b5:a4:17:53:80:f2:d5:8f:e6: 04:85:5f:63:65:98:45:8d:b5:2f:12:07:2e:dc:09:89:7d:7b: 3e:c3:27:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHOunPrFbBr3bXXVpaDFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NmQ2ZjU2OTUwMGMyNTA3MGI2MTI0ZjFiODZmNjA5NTI2 NzdhOTMwHhcNMjUxMjE3MDcwMTE0WhcNMjUxMjE4MDcwMTE0WjAzMTEwLwYDVQQD Eyg3NWVjNzk4MDBjNWI5NWUyYzNjNzc1MTE2NGYzMjU2NjAzY2ZjOTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1pIiB4S2+OaiS7b+Z5vy5LckYIF CvcHaUQZpj5+ouwZQo6T3ovyqYI7hCUM8gqhM/iaZZuMEtI2JoCeuqrMjTia+myt Y2ybuPA8HfGCgkpCjSlWzoGrwJP+AJ4ISJErqPA+lOPyB0vqOhbDdvhC+18j0t8t 5ZwZcKVgfgBSpLREGrlPVtdu4ThmhqEdWOwGX0n0B8mw/8WT64VurQ+EjjCrDp5J 3JGM0DmOdamPVejE0OZS0Gngd2PtPV6GamAjYxlkeJ09iVVV15K3//g1g3owmalK 2CDe7weOWzxg9olXksR8QFrz0x3PIxNewny1iUWOaf2BanWCgnqBfRf4BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXseYAMW5Xiw8d1EWTzJWYDz8lKMB8GA1UdIwQY MBaAFGhtb1aVAMJQcLYSTxuG9glSZ3qTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUcxdlZwVUF3bEJ3dGhKUEc0YjJDVkpuZXBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8yZjUyNjktZDQzMy00N2VkLWJmMWIt YWI2ZmM0ZTBmMWUwLzEvYUcxdlZwVUF3bEJ3dGhKUEc0YjJDVkpuZXBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8yZjUyNjktZDQzMy00N2VkLWJmMWItYWI2ZmM0ZTBmMWUw LzEvYUcxdlZwVUF3bEJ3dGhKUEc0YjJDVkpuZXBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7suS4gi pbZ/FrF8YmBDaiVX2CGsclM+LcC6X25kezi4PI3js5kxNm4nN5rLg2EADiuoudfQ qb95D+ya4N3GddqkJA5/Y3TZh0LzKVcE2f3s6+y76wzH9GSjg6O2rS64pYMPgy4t GnHlrELmPTnQRVJEbMI5Yp/PfaSW6DrE/3Sf9TrXcOPvPDP/zgSgMPAkYT3SwN1W T9nQsugIRw8vFYK1zebnEJAbJE6rhIWEb7lIQ5j7DSRWuL63bAYd47fc4QGV4n49 YQmOoB3fQVtPfpH+kh/zlzfBmlIx838N0gJKtaQXU4Dy1Y/mBIVfY2WYRY21LxIH LtwJiX17PsMnUg== -----END CERTIFICATE-----Generated at Wed Dec 17 16:47:18 2025 by rpki-client