This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json) Hash identifier: MsxnNzdvJGL1uDxwBYUWg+efRDohXGUqD5cR5Y1jDuU= Subject key identifier: 2E:DD:D8:90:5D:90:AD:BA:F1:B3:1E:D8:CC:91:CB:B1:5E:2B:09:14 Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c Certificate serial: 019B41369CA6C67B28161210290E2D29DC73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft Manifest number: 1214 Signing time: Sun 21 Dec 2025 14:00:56 +0000 Manifest this update: Sun 21 Dec 2025 14:00:56 +0000 Manifest next update: Mon 22 Dec 2025 14:00:56 +0000 Files and hashes: 1: MMauTW5D41slq5n1_BTnfOz6WE4.roa (hash: zl6G2mjQ4rc9XSYZwIr7CUlAN9TUYdueAC1o97DjnkU=) 2: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: agnbTKOOv/hP+ofj/5eQr9uDqSnw+NDh4eXa+UhOGek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:9c:a6:c6:7b:28:16:12:10:29:0e:2d:29:dc:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c Validity Not Before: Dec 21 14:00:56 2025 GMT Not After : Dec 22 14:00:56 2025 GMT Subject: CN=2eddd8905d90adbaf1b31ed8cc91cbb15e2b0914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:82:34:4e:d0:f6:5e:7c:02:fa:10:3d:99: c1:9f:7d:67:ab:61:4a:60:2b:92:64:d3:59:2a:b2: 43:cb:01:41:be:c1:c1:55:62:1f:fd:e9:ba:21:d3: 13:12:a8:69:49:64:e9:7a:09:49:bc:e9:49:3b:e3: 01:e0:a6:7f:77:87:1d:4d:34:5d:cf:33:d3:04:3a: 09:6f:68:ff:18:29:38:50:03:d2:a5:d3:d2:12:a3: c7:54:be:fc:d7:8e:40:f0:6b:5f:99:62:3d:69:f0: 43:1e:0b:c9:ab:07:66:63:f7:48:ff:cb:3d:06:7f: 4d:a9:57:c4:e5:c5:1d:6c:ff:c1:47:aa:9f:5f:a8: 5c:34:11:e8:26:f3:77:85:9e:d9:32:4e:4a:a7:2d: 02:dd:89:b9:b9:93:6f:74:48:96:fe:1b:2f:3d:7a: 30:77:56:c9:72:e3:c7:eb:1a:fa:6a:67:15:fa:16: 58:6d:a0:1b:94:4a:74:f8:57:5e:c8:e7:8c:98:c1: 1b:a7:fe:0b:e7:55:5b:d0:85:52:64:f7:73:c9:d8: f3:bf:10:43:76:57:0b:8e:d1:8d:f7:3c:64:7f:09: d8:64:20:44:c9:24:80:95:5b:90:90:d2:70:28:63: 50:f8:14:ca:15:23:f1:91:f4:f8:13:b6:55:33:d3: 34:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DD:D8:90:5D:90:AD:BA:F1:B3:1E:D8:CC:91:CB:B1:5E:2B:09:14 X509v3 Authority Key Identifier: keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:85:ab:d0:53:01:3a:24:c6:7f:c1:95:a9:34:82:93:1a:00: b2:e7:c5:bc:91:82:83:54:5c:c7:c7:24:e2:a9:11:0d:64:aa: 5a:c8:6b:b4:c6:23:28:48:64:75:06:3c:ca:8d:79:f0:ef:cd: 4f:f4:7c:5d:61:31:6d:94:e1:a7:4a:ea:67:91:c6:fc:94:2d: 0a:eb:2e:46:28:44:ff:f5:95:26:a8:05:95:9a:05:f5:ac:9a: 60:29:8d:97:78:2e:55:5a:52:54:62:01:47:48:74:a0:83:09: 53:98:17:33:da:33:a1:94:e8:9e:ce:e9:57:ce:34:3a:65:a0: 72:f1:5d:bc:df:18:2c:56:87:da:33:41:40:b3:6e:fc:5e:d7: 57:65:bf:fd:aa:80:4c:f5:54:f9:eb:bd:0b:87:cf:8a:bf:cb: 0c:9b:68:49:1b:9c:ec:6a:ab:cf:50:97:99:4d:b3:1a:84:73: ac:99:7e:8d:0e:89:76:66:ba:6d:1e:f5:62:2e:a5:cc:f8:ee: 2a:a7:4c:2c:67:e2:d6:07:2f:90:20:58:a5:79:af:f5:37:ed: 57:a2:fa:ff:89:56:75:77:21:ae:86:46:50:1c:91:f9:a9:5b: 23:01:82:4c:98:69:52:5f:2c:6c:cd:23:f7:45:b5:52:32:2d: 1e:f7:3c:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNpymxnsoFhIQKQ4tKdxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OTZkOWMxNGE4YWI1ZDhiMGI0MDgxODdlY2UxNWEwZDIz Y2VlMWMwHhcNMjUxMjIxMTQwMDU2WhcNMjUxMjIyMTQwMDU2WjAzMTEwLwYDVQQD EygyZWRkZDg5MDVkOTBhZGJhZjFiMzFlZDhjYzkxY2JiMTVlMmIwOTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgGCNE7Q9l58AvoQPZnBn31nq2FK YCuSZNNZKrJDywFBvsHBVWIf/em6IdMTEqhpSWTpeglJvOlJO+MB4KZ/d4cdTTRd zzPTBDoJb2j/GCk4UAPSpdPSEqPHVL78145A8GtfmWI9afBDHgvJqwdmY/dI/8s9 Bn9NqVfE5cUdbP/BR6qfX6hcNBHoJvN3hZ7ZMk5Kpy0C3Ym5uZNvdEiW/hsvPXow d1bJcuPH6xr6amcV+hZYbaAblEp0+FdeyOeMmMEbp/4L51Vb0IVSZPdzydjzvxBD dlcLjtGN9zxkfwnYZCBEySSAlVuQkNJwKGNQ+BTKFSPxkfT4E7ZVM9M0sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7d2JBdkK268bMe2MyRy7FeKwkUMB8GA1UdIwQY MBaAFGiW2cFKirXYsLQIGH7OFaDSPO4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQt Zjg1ZTMzZGQ4OTQ2LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQtZjg1ZTMzZGQ4OTQ2 LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoWr0FMB OiTGf8GVqTSCkxoAsufFvJGCg1Rcx8ck4qkRDWSqWshrtMYjKEhkdQY8yo158O/N T/R8XWExbZThp0rqZ5HG/JQtCusuRihE//WVJqgFlZoF9ayaYCmNl3guVVpSVGIB R0h0oIMJU5gXM9ozoZTons7pV840OmWgcvFdvN8YLFaH2jNBQLNu/F7XV2W//aqA TPVU+eu9C4fPir/LDJtoSRuc7Gqrz1CXmU2zGoRzrJl+jQ6Jdma6bR71Yi6lzPju KqdMLGfi1gcvkCBYpXmv9TftV6L6/4lWdXchroZGUByR+albIwGCTJhpUl8sbM0j 90W1UjItHvc80Q== -----END CERTIFICATE-----Generated at Sun Dec 21 17:16:02 2025 by rpki-client