This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json) Hash identifier: RdOep8eEouck+1/5Er4hJGKHqcn9TPFMxFhB5AeVHxU= Subject key identifier: 00:4C:B6:A9:31:7E:14:EB:04:D7:96:FA:7D:2C:17:38:A4:80:A2:7A Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c Certificate serial: 019B717E05603352C11BE61D9A205C7E4857 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft Manifest number: 122D Signing time: Tue 30 Dec 2025 23:00:42 +0000 Manifest this update: Tue 30 Dec 2025 23:00:42 +0000 Manifest next update: Wed 31 Dec 2025 23:00:42 +0000 Files and hashes: 1: MMauTW5D41slq5n1_BTnfOz6WE4.roa (hash: zl6G2mjQ4rc9XSYZwIr7CUlAN9TUYdueAC1o97DjnkU=) 2: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: vuLepeXkLVymmgv07PT/vpV4ForJT6oJrYZQyFi/hm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7e:05:60:33:52:c1:1b:e6:1d:9a:20:5c:7e:48:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c Validity Not Before: Dec 30 23:00:42 2025 GMT Not After : Dec 31 23:00:42 2025 GMT Subject: CN=004cb6a9317e14eb04d796fa7d2c1738a480a27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:85:8a:32:04:cf:40:7d:05:fc:e4:eb:f5:b4: ed:37:0a:1f:67:82:61:e1:31:fb:32:bd:fb:16:22: 3b:1c:5f:4b:0d:9f:f7:f5:80:f3:22:67:3a:41:ed: f8:82:1c:12:40:33:aa:a5:42:86:97:36:3c:ef:0b: b0:4d:5b:c4:33:be:82:6c:75:c9:77:40:3c:6c:45: 0c:3f:0f:c1:25:a4:4a:20:c7:32:ee:56:fc:7a:0b: 95:2b:f4:e0:cb:c5:46:63:88:07:b2:ce:9c:3e:1b: ee:15:bb:7c:63:cf:e7:9f:b0:96:a2:41:e9:2d:22: 5e:90:f3:b4:50:bd:1a:23:86:35:4d:b4:3c:dc:64: a5:8e:3b:77:a9:0e:c9:f8:85:25:0e:0f:3d:bb:19: 79:f3:88:38:9c:56:c2:11:79:45:19:e7:1b:90:be: 51:4b:b9:49:3c:62:0e:a4:5c:40:8d:27:f0:23:e6: ec:b8:ae:08:3f:a6:ce:e0:5e:6c:5a:ee:26:c9:7d: 0e:b3:7c:a3:c5:13:32:2e:e1:2a:09:df:48:86:e4: bd:d0:80:16:6b:21:2a:f1:6a:f9:91:60:d7:a6:a6: ee:57:5f:2f:6f:4c:56:23:d4:04:f0:fc:96:c4:e9: 0d:46:74:73:67:a1:04:3e:e7:68:b1:7f:ea:49:fa: 02:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4C:B6:A9:31:7E:14:EB:04:D7:96:FA:7D:2C:17:38:A4:80:A2:7A X509v3 Authority Key Identifier: keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:65:26:63:65:79:ab:07:dd:ea:c7:cb:9d:5e:61:80:7b:08: 79:f7:55:fd:a9:0f:cf:06:2b:4f:01:03:48:e5:31:e1:ea:d2: d7:50:2b:fa:35:e2:85:6b:cd:32:0e:b2:b2:46:19:1f:54:ba: f4:49:23:12:cb:f8:fe:6f:35:d9:90:02:9b:94:d9:b3:ac:e4: 53:3b:0d:40:4f:0f:c5:42:a3:f0:a4:06:c1:d9:1b:46:1e:38: fe:5d:1b:2d:c0:21:78:95:f5:7d:6d:60:ec:ff:d4:6a:b3:10: 88:65:18:15:0a:27:91:fa:0b:81:9d:4a:b7:ac:88:ad:e0:db: da:40:93:cb:9d:55:74:b1:22:5d:1d:28:47:4c:78:37:1c:1e: 6f:89:f1:bd:97:6a:84:44:b2:bd:ae:89:d3:ca:35:5a:76:90: 53:04:bf:e2:d8:e7:13:60:75:30:1c:6d:6f:8a:d6:a8:44:4d: 0d:eb:bf:f9:fc:64:01:a6:e2:99:5f:45:54:4c:00:41:73:29: d3:42:69:f9:5f:ce:49:e1:7b:f4:9a:a7:5b:a6:72:39:03:4a: 5f:2d:c8:1c:7c:8a:c2:18:95:48:72:dd:b5:8a:13:88:c5:64: 73:4a:59:7e:48:b5:80:e0:cf:88:9c:bb:ad:10:bd:5b:81:8a: e1:d1:8d:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfgVgM1LBG+YdmiBcfkhXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OTZkOWMxNGE4YWI1ZDhiMGI0MDgxODdlY2UxNWEwZDIz Y2VlMWMwHhcNMjUxMjMwMjMwMDQyWhcNMjUxMjMxMjMwMDQyWjAzMTEwLwYDVQQD EygwMDRjYjZhOTMxN2UxNGViMDRkNzk2ZmE3ZDJjMTczOGE0ODBhMjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oWKMgTPQH0F/OTr9bTtNwofZ4Jh 4TH7Mr37FiI7HF9LDZ/39YDzImc6Qe34ghwSQDOqpUKGlzY87wuwTVvEM76CbHXJ d0A8bEUMPw/BJaRKIMcy7lb8eguVK/Tgy8VGY4gHss6cPhvuFbt8Y8/nn7CWokHp LSJekPO0UL0aI4Y1TbQ83GSljjt3qQ7J+IUlDg89uxl584g4nFbCEXlFGecbkL5R S7lJPGIOpFxAjSfwI+bsuK4IP6bO4F5sWu4myX0Os3yjxRMyLuEqCd9IhuS90IAW ayEq8Wr5kWDXpqbuV18vb0xWI9QE8PyWxOkNRnRzZ6EEPudosX/qSfoC5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABMtqkxfhTrBNeW+n0sFzikgKJ6MB8GA1UdIwQY MBaAFGiW2cFKirXYsLQIGH7OFaDSPO4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQt Zjg1ZTMzZGQ4OTQ2LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQtZjg1ZTMzZGQ4OTQ2 LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2UmY2V5 qwfd6sfLnV5hgHsIefdV/akPzwYrTwEDSOUx4erS11Ar+jXihWvNMg6yskYZH1S6 9EkjEsv4/m812ZACm5TZs6zkUzsNQE8PxUKj8KQGwdkbRh44/l0bLcAheJX1fW1g 7P/UarMQiGUYFQonkfoLgZ1Kt6yIreDb2kCTy51VdLEiXR0oR0x4Nxweb4nxvZdq hESyva6J08o1WnaQUwS/4tjnE2B1MBxtb4rWqERNDeu/+fxkAabimV9FVEwAQXMp 00Jp+V/OSeF79JqnW6ZyOQNKXy3IHHyKwhiVSHLdtYoTiMVkc0pZfki1gODPiJy7 rRC9W4GK4dGN4g== -----END CERTIFICATE-----Generated at Wed Dec 31 07:59:47 2025 by rpki-client