This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft File: aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft (raw, json) Hash identifier: 9WK9SY9dHE6hiSMKnqYO8aZ+JWZqzF6MRYcLLM+EeD4= Subject key identifier: 41:F3:08:FC:6E:8B:1E:BF:A0:D4:74:4F:DE:DB:36:02:7A:FA:55:36 Authority key identifier: 68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5 Certificate issuer: /CN=68b0ba75fce55721c30637589be3d34fa259c2b5 Certificate serial: 019B72920792D11D22CB16CAF3AA0499190D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft Manifest number: 068D Signing time: Wed 31 Dec 2025 04:02:11 +0000 Manifest this update: Wed 31 Dec 2025 04:02:11 +0000 Manifest next update: Thu 01 Jan 2026 04:02:11 +0000 Files and hashes: 1: A2QEf71RdaTv7-Rw5IFhLuGQC4U.roa (hash: Z1OLFVFoQ+NSvR47C8hJwPMxNvIVBkBVq/jOlyMfUUc=) 2: aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl (hash: Sh4I2+i5oTCQXsL0dy6PmkSCMrDBbxpTyiUupxil1Gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:92:07:92:d1:1d:22:cb:16:ca:f3:aa:04:99:19:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b0ba75fce55721c30637589be3d34fa259c2b5 Validity Not Before: Dec 31 04:02:11 2025 GMT Not After : Jan 1 04:02:11 2026 GMT Subject: CN=41f308fc6e8b1ebfa0d4744fdedb36027afa5536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c2:4d:d0:02:db:f3:a4:dd:3a:40:4e:2d:af: 9c:50:54:72:11:38:27:43:77:ac:eb:5c:de:71:da: 56:07:45:bd:25:f7:4b:8d:b0:18:a9:6a:1f:18:7c: 8a:a2:91:9c:21:70:6c:52:83:de:51:62:42:79:27: fd:7e:bb:3e:19:b7:cf:82:31:9b:e2:40:26:16:b9: 0e:9c:72:04:45:c9:9e:c1:dc:21:5e:08:16:9f:35: 51:66:53:4e:ec:e9:95:bf:6e:85:b2:95:d3:4e:88: 30:6b:c5:e2:83:00:8a:79:e4:b2:db:11:90:a1:c9: c8:24:a1:2b:1e:68:ff:8a:e9:9d:63:16:a9:d1:e3: d0:9b:0d:33:c1:7c:f1:d3:a2:cb:60:15:d7:d0:18: 80:e4:73:5c:fd:c3:98:6a:3e:5a:38:4b:94:b4:7c: 11:0b:53:96:e2:8a:fa:f6:41:e3:0f:fa:00:be:ba: 5a:14:25:64:b4:99:3b:8a:d6:18:a6:10:89:34:6b: 4f:87:67:8e:1b:5a:c0:80:6b:5c:4b:8c:8c:92:10: 5a:cc:1c:24:d4:f8:df:7a:83:21:57:db:3b:d8:60: 6e:c4:a1:11:3f:3e:5f:2d:6e:f1:7c:c4:e7:ac:9a: 8e:c8:99:ce:55:f2:19:0f:66:65:42:0f:d4:11:60: 14:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F3:08:FC:6E:8B:1E:BF:A0:D4:74:4F:DE:DB:36:02:7A:FA:55:36 X509v3 Authority Key Identifier: keyid:68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:49:56:c0:16:95:4a:1f:dc:14:27:df:15:4c:fd:d5:22:fd: a4:c2:8b:7e:1c:a3:14:e8:25:24:49:ff:3e:93:48:cb:b2:75: 27:92:28:aa:54:4c:2d:99:c0:33:8f:78:90:49:29:ae:8e:ca: 6e:44:e6:9b:9e:44:8f:37:3f:05:ab:fb:5d:71:58:0e:4b:73: 52:f2:61:01:db:b1:d5:19:0f:1a:50:ad:1b:6e:ac:7e:59:0b: 37:f1:27:7f:56:63:0f:92:32:ce:a5:09:bd:52:b3:c9:dc:26: 9b:42:6b:b0:b8:c0:58:b6:8f:1f:05:d1:6d:68:3f:95:92:85: 35:cb:65:98:02:0e:6d:53:11:90:6f:df:02:cb:6e:03:52:8f: 27:5b:93:69:eb:1e:eb:d1:de:27:0a:d9:64:9f:95:22:3b:7c: 14:06:2a:61:7d:fe:86:7a:f1:42:90:67:56:17:7c:ce:73:e2: 66:93:25:29:07:62:d5:c0:96:ed:3d:63:f4:c5:78:c5:aa:ed: d3:dc:26:6f:cd:34:fb:aa:c5:d9:e2:d3:08:d4:c3:8f:f0:e2: 0f:d9:c8:d9:e5:45:19:04:da:80:a9:41:4e:7a:17:62:18:d5: ba:ec:3e:74:4a:5f:f8:f1:d3:41:1f:39:e6:17:3c:2a:61:74: 05:e3:8f:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykgeS0R0iyxbK86oEmRkNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YjBiYTc1ZmNlNTU3MjFjMzA2Mzc1ODliZTNkMzRmYTI1 OWMyYjUwHhcNMjUxMjMxMDQwMjExWhcNMjYwMTAxMDQwMjExWjAzMTEwLwYDVQQD Eyg0MWYzMDhmYzZlOGIxZWJmYTBkNDc0NGZkZWRiMzYwMjdhZmE1NTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMJN0ALb86TdOkBOLa+cUFRyETgn Q3es61zecdpWB0W9JfdLjbAYqWofGHyKopGcIXBsUoPeUWJCeSf9frs+GbfPgjGb 4kAmFrkOnHIERcmewdwhXggWnzVRZlNO7OmVv26FspXTTogwa8XigwCKeeSy2xGQ ocnIJKErHmj/iumdYxap0ePQmw0zwXzx06LLYBXX0BiA5HNc/cOYaj5aOEuUtHwR C1OW4or69kHjD/oAvrpaFCVktJk7itYYphCJNGtPh2eOG1rAgGtcS4yMkhBazBwk 1PjfeoMhV9s72GBuxKERPz5fLW7xfMTnrJqOyJnOVfIZD2ZlQg/UEWAUwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHzCPxuix6/oNR0T97bNgJ6+lU2MB8GA1UdIwQY MBaAFGiwunX85VchwwY3WJvj00+iWcK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MDhhOTQtZGFhOC00YzZiLWFiMjQt NDk5ZWYxNmUyMDgyLzEvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MDhhOTQtZGFhOC00YzZiLWFiMjQtNDk5ZWYxNmUyMDgy LzEvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0lWwBaV Sh/cFCffFUz91SL9pMKLfhyjFOglJEn/PpNIy7J1J5IoqlRMLZnAM494kEkpro7K bkTmm55Ejzc/Bav7XXFYDktzUvJhAdux1RkPGlCtG26sflkLN/Enf1ZjD5IyzqUJ vVKzydwmm0JrsLjAWLaPHwXRbWg/lZKFNctlmAIObVMRkG/fAstuA1KPJ1uTaese 69HeJwrZZJ+VIjt8FAYqYX3+hnrxQpBnVhd8znPiZpMlKQdi1cCW7T1j9MV4xart 09wmb800+6rF2eLTCNTDj/DiD9nI2eVFGQTagKlBTnoXYhjVuuw+dEpf+PHTQR85 5hc8KmF0BeOPqg== -----END CERTIFICATE-----Generated at Wed Dec 31 05:07:04 2025 by rpki-client