This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json) Hash identifier: Teq7U0SfC0B7Cp0NLM1yyKm1t2UfcUkgMEGJBkrbV3E= Subject key identifier: CD:E9:77:41:ED:12:E5:A3:D1:09:F4:51:BB:B9:3A:4C:BD:75:CE:49 Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef Certificate serial: 019B2B1DC059198F07237F48CAAFB54B9630 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft Manifest number: 177D Signing time: Wed 17 Dec 2025 07:02:08 +0000 Manifest this update: Wed 17 Dec 2025 07:02:08 +0000 Manifest next update: Thu 18 Dec 2025 07:02:08 +0000 Files and hashes: 1: KG5vfN5Uvfai8ejvP2GF9IZcxGI.roa (hash: tUW+ah0ofkg4/88FsRUE5OcUfQMkD6Zq0UYxy47va9A=) 2: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: LvzbOwru3FXPg/abWl9/oqZ6qmhZ35MxJ8/X2O75rPY=) 3: z4qOlf0RFKvmrLipGybi9vRSQo8.roa (hash: ekx6TWWmFCXsO4PnzGvIUJMQy90Loghm7Y0vzWHJWE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:c0:59:19:8f:07:23:7f:48:ca:af:b5:4b:96:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6954e90899ff25644520724cde8c211613600bef Validity Not Before: Dec 17 07:02:08 2025 GMT Not After : Dec 18 07:02:08 2025 GMT Subject: CN=cde97741ed12e5a3d109f451bbb93a4cbd75ce49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:ef:9e:31:73:43:6c:2f:97:d7:3b:3f:93: d0:be:32:10:f1:4a:e4:e9:fd:8c:f4:a6:65:0c:a4: 27:90:1d:b5:3a:ae:ba:e9:2a:b8:aa:f7:3b:96:bb: 24:d5:47:fa:d4:da:18:3f:f8:4c:65:9d:83:34:68: ab:3b:25:1c:15:b2:13:d3:6b:48:d0:41:60:6b:f9: 4f:03:a2:49:7b:5d:26:d8:c8:5d:5e:6e:78:3b:9d: cc:00:5c:ce:81:c1:b2:d3:2e:52:99:96:b7:36:fd: ba:42:d6:a4:1b:f3:2c:fb:82:b1:6e:53:21:40:06: c5:4a:e3:4e:85:d2:84:68:33:d0:00:8b:0d:6c:52: 02:25:fd:c0:69:e6:3f:0e:39:4c:48:b9:66:20:b7: 6f:9a:88:1b:78:79:ff:97:54:58:9a:4e:de:31:21: 17:5c:ce:92:b7:0e:aa:94:a3:d6:21:85:22:1b:c1: 2d:83:35:ee:5c:af:e2:a5:ff:05:86:4f:58:77:e8: 79:e8:d5:42:e0:6b:a6:61:65:64:df:2d:da:dc:07: 44:c2:87:b5:3d:34:05:94:81:d4:f4:a5:5e:89:56: c5:6e:e3:08:d5:bf:ad:92:94:05:97:ea:e2:4c:df: 48:90:1b:65:2f:7f:67:02:99:67:44:fd:fd:dc:c8: c6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E9:77:41:ED:12:E5:A3:D1:09:F4:51:BB:B9:3A:4C:BD:75:CE:49 X509v3 Authority Key Identifier: keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:7a:a7:20:fe:2c:f0:d4:72:ba:1d:47:18:b1:58:3d:40:9c: 34:f9:77:1a:5f:7d:5a:1b:be:6a:8b:47:16:9d:e8:03:95:da: 5f:cc:12:db:65:a2:18:50:8c:67:cb:db:20:9a:6e:5a:ef:8a: 5d:26:8a:f4:6d:ff:f1:f8:3b:56:d6:9e:ba:e6:fa:1d:be:ee: 48:58:45:4b:93:67:16:43:e1:11:43:d8:a4:fb:09:d7:6b:f2: 81:d8:0d:dd:dc:64:bf:5e:77:17:5b:39:53:2a:37:cd:63:e5: ed:19:ae:b6:bb:b9:16:31:ce:6a:5f:6a:07:19:bc:96:5d:1b: 7d:db:f4:b5:8f:b8:57:46:f1:23:86:96:fc:b6:c3:41:02:4e: 31:25:49:8e:9a:32:f7:fc:cf:41:f8:77:fe:d4:ca:7c:6c:3c: ad:3b:2f:68:9d:d0:1d:43:19:45:3c:3b:79:c2:f6:59:0a:57: 8f:91:db:ac:a5:68:c0:a0:62:ad:f9:eb:6a:d6:42:cd:c7:8d: ce:74:c2:6d:ca:65:ef:ac:74:66:94:34:db:5a:3a:fa:bf:86: e2:ab:88:27:35:70:4b:b7:60:a9:58:65:13:bf:39:6f:25:8a: 80:6b:59:41:f3:9e:05:be:f1:31:aa:58:03:bd:fd:01:ef:1b: d5:cb:36:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHcBZGY8HI39Iyq+1S5YwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTRlOTA4OTlmZjI1NjQ0NTIwNzI0Y2RlOGMyMTE2MTM2 MDBiZWYwHhcNMjUxMjE3MDcwMjA4WhcNMjUxMjE4MDcwMjA4WjAzMTEwLwYDVQQD EyhjZGU5Nzc0MWVkMTJlNWEzZDEwOWY0NTFiYmI5M2E0Y2JkNzVjZTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum3vnjFzQ2wvl9c7P5PQvjIQ8Urk 6f2M9KZlDKQnkB21Oq666Sq4qvc7lrsk1Uf61NoYP/hMZZ2DNGirOyUcFbIT02tI 0EFga/lPA6JJe10m2MhdXm54O53MAFzOgcGy0y5SmZa3Nv26QtakG/Ms+4KxblMh QAbFSuNOhdKEaDPQAIsNbFICJf3AaeY/DjlMSLlmILdvmogbeHn/l1RYmk7eMSEX XM6Stw6qlKPWIYUiG8EtgzXuXK/ipf8Fhk9Yd+h56NVC4GumYWVk3y3a3AdEwoe1 PTQFlIHU9KVeiVbFbuMI1b+tkpQFl+riTN9IkBtlL39nAplnRP393MjGIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3pd0HtEuWj0Qn0Ubu5Oky9dc5JMB8GA1UdIwQY MBaAFGlU6QiZ/yVkRSByTN6MIRYTYAvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xY2I5MTEtNWU3Zi00OWU4LWI0ZjAt M2Y2ZWU3MDU5MTViLzEvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8xY2I5MTEtNWU3Zi00OWU4LWI0ZjAtM2Y2ZWU3MDU5MTVi LzEvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnqnIP4s 8NRyuh1HGLFYPUCcNPl3Gl99Whu+aotHFp3oA5XaX8wS22WiGFCMZ8vbIJpuWu+K XSaK9G3/8fg7Vtaeuub6Hb7uSFhFS5NnFkPhEUPYpPsJ12vygdgN3dxkv153F1s5 Uyo3zWPl7Rmutru5FjHOal9qBxm8ll0bfdv0tY+4V0bxI4aW/LbDQQJOMSVJjpoy 9/zPQfh3/tTKfGw8rTsvaJ3QHUMZRTw7ecL2WQpXj5HbrKVowKBirfnratZCzceN znTCbcpl76x0ZpQ021o6+r+G4quIJzVwS7dgqVhlE785byWKgGtZQfOeBb7xMapY A739Ae8b1cs2jQ== -----END CERTIFICATE-----Generated at Wed Dec 17 13:26:10 2025 by rpki-client