This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json) Hash identifier: ZK6ZFH4lKyBKwqTf/po5JHkNV1clrMrasIX63UKCQbI= Subject key identifier: 1E:09:39:FE:16:23:11:B9:43:BF:CA:B6:4C:3A:B9:9A:BC:DA:E9:F2 Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d Certificate serial: 019B4A03FC73B3E4B4BBE76D5F8B8A7EDDD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 07:02:13 +0000 Manifest this update: Tue 23 Dec 2025 07:02:13 +0000 Manifest next update: Wed 24 Dec 2025 07:02:13 +0000 Files and hashes: 1: 9peR5n5QXeylxwcwhSYgLjf27HA.roa (hash: mj+nyCVjal6tZvMkRYNWl96UMmHuvQTDEtFMDTf8UoI=) 2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: mYU8zISaZ+5t7Zujg1bVz3+s+cI8dbcNyIEIX+RKZHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:fc:73:b3:e4:b4:bb:e7:6d:5f:8b:8a:7e:dd:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d Validity Not Before: Dec 23 07:02:13 2025 GMT Not After : Dec 24 07:02:13 2025 GMT Subject: CN=1e0939fe162311b943bfcab64c3ab99abcdae9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f6:fd:f9:41:ba:f3:5b:87:98:9c:7e:8f:92: 84:32:fe:79:31:d6:6d:0c:b2:42:11:30:19:10:99: 38:9f:ce:a7:39:70:9a:a8:d1:b8:3e:fd:df:f1:c0: 96:31:0d:35:8f:56:5b:88:01:3a:d8:dc:c6:d2:5a: d9:b7:67:c5:4b:08:d8:37:52:b8:d2:aa:21:d3:67: f8:02:84:a1:dd:9a:f5:48:30:f5:dd:d3:3e:cf:d8: 57:71:ce:c6:07:c8:2e:ca:9a:d9:e4:d3:28:dd:f7: 4b:9f:4a:de:66:df:c2:cb:d8:3b:cc:30:77:c9:93: e0:da:ad:56:48:53:45:a7:b1:ef:50:31:fe:4b:95: 90:3b:34:fa:c1:ab:38:ce:fe:67:ee:44:3d:1c:dd: b3:e6:6f:f8:d8:75:2c:f6:51:4b:f9:2e:82:3b:c5: 2d:38:cb:13:cf:9d:15:5e:9d:88:15:31:fd:46:82: ff:d3:f8:70:38:87:03:bc:16:e0:fc:5d:16:0a:65: e2:eb:14:76:8d:57:2a:f4:55:40:a6:87:53:b9:76: 76:ef:3e:fc:d9:e3:81:ac:96:0e:50:ad:07:b0:40: 65:cb:95:3b:c6:63:5b:2e:92:07:0f:8e:3d:a9:b7: 04:5b:d1:dc:e5:eb:11:76:69:d9:91:d9:20:69:eb: ab:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:09:39:FE:16:23:11:B9:43:BF:CA:B6:4C:3A:B9:9A:BC:DA:E9:F2 X509v3 Authority Key Identifier: keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:4d:88:f5:d6:ba:f3:e1:ed:5c:dd:b1:73:c4:59:cd:4a:da: 32:77:b9:50:f8:6d:0e:e1:e4:65:d2:95:a7:b6:78:a5:e1:f2: 1e:7f:70:ed:9a:bb:b2:a2:24:6d:7f:b0:ab:e3:8b:e5:57:07: 81:41:19:b4:ee:2e:f9:c8:b5:5c:75:77:68:d3:a4:25:86:5b: ba:85:ec:28:e9:d5:9f:30:1b:bc:54:16:39:67:a2:da:f2:df: ab:f7:42:60:cc:e8:f0:9e:8c:36:31:8e:4e:df:37:a5:8c:3b: ba:12:e0:0a:9a:42:fe:ce:0e:48:16:65:38:f3:9c:98:72:5d: 21:66:c0:72:09:d4:a7:6b:50:48:4a:39:40:1f:43:65:e0:70: fa:7c:69:0c:8d:a1:8f:21:fc:32:76:b1:e9:fd:b2:eb:f6:87: d1:8c:b8:d7:92:36:56:10:87:0c:5d:23:c1:a9:9d:cd:57:76: 92:ab:3b:c7:7f:b2:a2:10:38:0a:55:c0:12:c0:6d:bf:1f:f6: 41:7e:fb:23:6a:30:2c:66:d3:f0:41:93:dc:4b:0e:6f:b7:79: 0c:21:6e:0e:52:fe:e9:69:50:cd:f3:c1:36:bd:66:a0:11:e6: 39:60:d6:5e:a0:77:80:34:17:8e:ee:b4:a7:17:12:c1:ac:6e: 2c:f9:e4:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA/xzs+S0u+dtX4uKft3RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5N2VhNjBhY2EwZGRhZTVlZGRmYmMyNjBjYjdkYTI2MTYy NGU5MWQwHhcNMjUxMjIzMDcwMjEzWhcNMjUxMjI0MDcwMjEzWjAzMTEwLwYDVQQD EygxZTA5MzlmZTE2MjMxMWI5NDNiZmNhYjY0YzNhYjk5YWJjZGFlOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/b9+UG681uHmJx+j5KEMv55MdZt DLJCETAZEJk4n86nOXCaqNG4Pv3f8cCWMQ01j1ZbiAE62NzG0lrZt2fFSwjYN1K4 0qoh02f4AoSh3Zr1SDD13dM+z9hXcc7GB8guyprZ5NMo3fdLn0reZt/Cy9g7zDB3 yZPg2q1WSFNFp7HvUDH+S5WQOzT6was4zv5n7kQ9HN2z5m/42HUs9lFL+S6CO8Ut OMsTz50VXp2IFTH9RoL/0/hwOIcDvBbg/F0WCmXi6xR2jVcq9FVApodTuXZ27z78 2eOBrJYOUK0HsEBly5U7xmNbLpIHD449qbcEW9Hc5esRdmnZkdkgaeurmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4JOf4WIxG5Q7/Ktkw6uZq82unyMB8GA1UdIwQY MBaAFGl+pgrKDdrl7d+8Jgy32iYWJOkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVg2bUNzb04ydVh0Mzd3bURMZmFKaFlrNlIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mYjQ5MzQtYTkzNy00MzI0LTlmMTct ZWVhZDNiOGJjY2I5LzEvYVg2bUNzb04ydVh0Mzd3bURMZmFKaFlrNlIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mYjQ5MzQtYTkzNy00MzI0LTlmMTctZWVhZDNiOGJjY2I5 LzEvYVg2bUNzb04ydVh0Mzd3bURMZmFKaFlrNlIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdk2I9da6 8+HtXN2xc8RZzUraMne5UPhtDuHkZdKVp7Z4peHyHn9w7Zq7sqIkbX+wq+OL5VcH gUEZtO4u+ci1XHV3aNOkJYZbuoXsKOnVnzAbvFQWOWei2vLfq/dCYMzo8J6MNjGO Tt83pYw7uhLgCppC/s4OSBZlOPOcmHJdIWbAcgnUp2tQSEo5QB9DZeBw+nxpDI2h jyH8Mnax6f2y6/aH0Yy415I2VhCHDF0jwamdzVd2kqs7x3+yohA4ClXAEsBtvx/2 QX77I2owLGbT8EGT3EsOb7d5DCFuDlL+6WlQzfPBNr1moBHmOWDWXqB3gDQXju60 pxcSwaxuLPnkmw== -----END CERTIFICATE-----Generated at Tue Dec 23 12:37:25 2025 by rpki-client