This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json) Hash identifier: lmVTwQklrTIkx/8w/3lLUSwGhijqcwfH4ujEwtrCwh4= Subject key identifier: 61:3D:D5:DC:DE:AA:78:6E:8A:E3:70:8A:58:AA:0B:49:E1:94:3B:90 Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e Certificate serial: 019B5607051ADB8AED25E6202E32DBDCA37B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft Manifest number: 1798 Signing time: Thu 25 Dec 2025 15:00:59 +0000 Manifest this update: Thu 25 Dec 2025 15:00:59 +0000 Manifest next update: Fri 26 Dec 2025 15:00:59 +0000 Files and hashes: 1: P1en3sohe2DbyNzA71GiPNHyPMA.roa (hash: V8PIuABmlXR/9zmJ4CmVSW6y4BQ+AXThzkLiJ6dRREE=) 2: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: g3zYRwBWCvOD5gxjhRpLZANBGe3r4/VIuJgoX04WMzw=) 3: jXfDa-UQ8MNojbhvL1jcAxZ-2LA.roa (hash: 2Itp3B8O+5dmTKgGLY+BCEZM9Sy2Ho8d4oe+RtL2s4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:07:05:1a:db:8a:ed:25:e6:20:2e:32:db:dc:a3:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e Validity Not Before: Dec 25 15:00:59 2025 GMT Not After : Dec 26 15:00:59 2025 GMT Subject: CN=613dd5dcdeaa786e8ae3708a58aa0b49e1943b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:de:a7:db:b5:c4:c5:35:57:ae:dd:64:44:fa: c2:13:d0:af:53:f1:4c:54:ae:bb:02:3a:23:a2:d2: d9:7a:30:a0:50:65:72:37:70:2c:d4:f2:2b:cf:07: fe:54:29:4e:ca:05:d8:b1:53:0a:9e:db:24:fb:01: 82:ce:24:ea:bb:dd:35:b1:97:dd:bc:65:99:70:02: 90:c5:88:c5:1d:1f:a8:ea:c0:5b:b3:19:ca:6e:a2: eb:39:eb:fb:1b:8f:59:fb:e5:27:32:a3:ac:94:e6: 70:c2:aa:47:a6:4d:ed:a8:dd:78:f8:43:f2:a9:8b: d6:60:78:67:2b:7f:b6:2b:45:73:11:49:99:61:eb: 16:ee:15:3e:b1:00:b5:73:09:25:65:8a:bc:61:89: 2d:b8:8e:75:66:28:46:3e:73:68:81:05:ea:9c:59: 5e:1f:db:77:f6:40:c7:f0:04:76:58:6f:e6:88:8f: 13:04:c6:50:82:fd:9d:70:2b:59:30:f1:33:3f:55: e7:d9:a1:92:42:66:5d:b8:e8:c9:98:5c:4a:13:da: c1:e1:f7:78:d3:c5:09:82:ce:0c:9c:7f:90:2b:7c: 32:9d:4e:9c:8d:1c:43:48:ec:79:97:36:42:7e:54: ea:66:ae:ad:a0:77:20:69:91:79:65:b6:59:2a:16: 00:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3D:D5:DC:DE:AA:78:6E:8A:E3:70:8A:58:AA:0B:49:E1:94:3B:90 X509v3 Authority Key Identifier: keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:28:e9:99:13:55:ae:a1:c7:a2:4b:46:4e:47:45:23:40:92: 79:1e:54:16:78:6f:f7:61:44:55:87:e6:00:18:87:c4:d3:4e: ee:de:3d:07:d6:df:20:ae:0c:b3:6e:3d:a5:00:bf:81:36:5c: 55:6b:03:81:68:9a:6a:8a:39:9d:b1:10:35:3b:a9:d5:f4:8e: cf:66:e9:10:5a:4d:ae:5d:1e:72:a4:ad:11:26:88:39:6b:28: 7b:07:d5:a6:b7:e0:af:57:b8:ec:ae:35:f1:0a:a1:5e:ed:ee: 74:bd:5d:65:f3:7d:6b:84:a8:25:07:3b:fa:d0:28:c1:14:21: 54:73:f8:3d:f9:ae:33:bd:38:0a:ae:de:de:6e:68:82:8b:99: 8c:69:75:1c:62:30:5f:0f:e9:35:53:07:94:0e:ad:44:74:5a: 62:63:26:e7:fa:3f:e7:c4:f5:3c:79:e4:0f:27:b6:0f:0c:30: c2:b8:d5:9d:12:36:59:4c:46:7b:e0:8e:a1:62:32:b4:ba:2d: 23:a3:ae:e8:46:7a:c7:3e:3f:ad:9a:3b:01:05:fc:76:41:94: c4:a6:2d:27:d5:de:25:98:32:f6:8d:42:c9:8c:f5:46:45:58: 50:68:4c:64:a4:a1:e4:de:43:db:26:e0:cc:71:fb:de:e1:fb: 54:1c:f4:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWBwUa24rtJeYgLjLb3KN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NjIyYTFhYWRmNzllNzExZDFlN2U0MzE5ZjczMmMwYjJk YTgwMWUwHhcNMjUxMjI1MTUwMDU5WhcNMjUxMjI2MTUwMDU5WjAzMTEwLwYDVQQD Eyg2MTNkZDVkY2RlYWE3ODZlOGFlMzcwOGE1OGFhMGI0OWUxOTQzYjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz96n27XExTVXrt1kRPrCE9CvU/FM VK67AjojotLZejCgUGVyN3As1PIrzwf+VClOygXYsVMKntsk+wGCziTqu901sZfd vGWZcAKQxYjFHR+o6sBbsxnKbqLrOev7G49Z++UnMqOslOZwwqpHpk3tqN14+EPy qYvWYHhnK3+2K0VzEUmZYesW7hU+sQC1cwklZYq8YYktuI51ZihGPnNogQXqnFle H9t39kDH8AR2WG/miI8TBMZQgv2dcCtZMPEzP1Xn2aGSQmZduOjJmFxKE9rB4fd4 08UJgs4MnH+QK3wynU6cjRxDSOx5lzZCflTqZq6toHcgaZF5ZbZZKhYAlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGE91dzeqnhuiuNwiliqC0nhlDuQMB8GA1UdIwQY MBaAFGliKhqt955xHR5+Qxn3MsCy2oAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMt Y2MyMGY0MTcyY2VkLzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMtY2MyMGY0MTcyY2Vk LzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyjpmRNV rqHHoktGTkdFI0CSeR5UFnhv92FEVYfmABiHxNNO7t49B9bfIK4Ms249pQC/gTZc VWsDgWiaaoo5nbEQNTup1fSOz2bpEFpNrl0ecqStESaIOWsoewfVprfgr1e47K41 8QqhXu3udL1dZfN9a4SoJQc7+tAowRQhVHP4PfmuM704Cq7e3m5ogouZjGl1HGIw Xw/pNVMHlA6tRHRaYmMm5/o/58T1PHnkDye2DwwwwrjVnRI2WUxGe+COoWIytLot I6Ou6EZ6xz4/rZo7AQX8dkGUxKYtJ9XeJZgy9o1CyYz1RkVYUGhMZKSh5N5D2ybg zHH73uH7VBz01w== -----END CERTIFICATE-----Generated at Thu Dec 25 23:04:11 2025 by rpki-client