This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft File: aVJaNi6HcFoewCLRZWDydtWc7h0.mft (raw, json) Hash identifier: VMnOMMORdu6OzEpXnY7CgawuLFBik5PTolA4yPDcBLI= Subject key identifier: 0E:33:54:7F:D4:8D:E2:3E:AA:CA:A8:70:E7:9F:2B:64:40:02:BE:33 Authority key identifier: 69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D Certificate issuer: /CN=69525a362e87705a1ec022d16560f276d59cee1d Certificate serial: 019B3CB54AF5C36B923D0686904515C6D608 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft Manifest number: 0961 Signing time: Sat 20 Dec 2025 17:01:12 +0000 Manifest this update: Sat 20 Dec 2025 17:01:12 +0000 Manifest next update: Sun 21 Dec 2025 17:01:12 +0000 Files and hashes: 1: aHJU3TtGM9M9L2c33hiqaeAD6-M.roa (hash: Jnk6c3GJ5E4y6b+inckEyRoPVADxMl1TsyYlid/Y0Y0=) 2: aVJaNi6HcFoewCLRZWDydtWc7h0.crl (hash: kx9OBmFxbkxSBgq5/97X5CJ6f9hX83GV2TByWyJueH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:4a:f5:c3:6b:92:3d:06:86:90:45:15:c6:d6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69525a362e87705a1ec022d16560f276d59cee1d Validity Not Before: Dec 20 17:01:12 2025 GMT Not After : Dec 21 17:01:12 2025 GMT Subject: CN=0e33547fd48de23eaacaa870e79f2b644002be33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:aa:f1:b2:a7:2c:cc:a0:cf:21:17:b0:21:7e: 31:42:ab:2e:bd:64:20:8e:c7:8e:f9:81:3e:b7:6f: c4:0b:24:5a:dc:aa:c7:c4:24:55:8a:a4:23:2c:7e: a0:ac:e5:89:a0:87:8d:5a:11:bb:ea:0e:f6:5f:fb: 7b:90:0a:52:51:f5:5f:93:23:d0:80:56:56:ad:10: 91:b3:9f:25:18:bf:a7:d5:a1:15:00:28:e8:66:c0: 33:a6:38:18:0f:d8:4a:6c:43:94:b0:5a:ed:d2:d0: 3a:fe:2b:42:3b:df:d5:8d:a9:ee:31:67:6b:a9:6c: 70:75:13:8c:d6:70:ee:df:eb:d0:d7:a2:93:3c:3d: f8:72:ea:65:e9:3c:17:9e:d9:91:83:2d:50:74:f9: ce:e5:58:85:d6:a9:40:e6:26:7a:0e:f4:19:33:ed: 28:5a:23:ab:62:4e:56:bc:eb:bc:9c:c4:b8:6f:ad: 51:0a:f0:5a:bb:f6:7f:be:77:7c:62:c3:1f:a0:96: da:36:b8:a4:f5:45:5f:70:53:76:75:d9:a0:7d:fa: 04:02:e5:f3:e5:87:3b:14:72:f8:cb:07:60:ee:bb: 1c:d2:92:21:82:88:9a:c5:27:04:d0:e3:4c:52:79: d8:e9:35:88:81:c5:58:27:be:e8:5b:4d:ed:7f:86: 25:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:33:54:7F:D4:8D:E2:3E:AA:CA:A8:70:E7:9F:2B:64:40:02:BE:33 X509v3 Authority Key Identifier: keyid:69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:42:94:80:77:46:d1:3c:fc:63:9f:09:c3:2b:57:1b:85:f9: 72:1f:8d:1c:48:7c:bc:c4:d6:24:a4:d8:59:21:2b:85:5b:ca: 2e:de:0a:b7:44:c7:07:ff:6f:d2:f4:6f:f5:51:bb:ba:82:95: a0:86:cc:61:ca:0e:f7:d9:f6:cb:f6:26:64:7f:5a:a9:b2:57: db:97:ee:c3:55:36:95:95:91:95:ed:e9:72:a2:de:95:19:6e: 73:13:b1:87:9b:35:ad:d3:b4:a9:83:ae:5d:7c:cd:ce:2d:1d: de:35:2f:55:f2:d8:fd:2c:09:59:84:14:d0:3b:04:a0:cd:29: 74:cf:41:3b:ce:bc:4b:6f:37:8f:1f:73:03:97:d1:3e:11:23: 31:fb:de:17:58:03:4c:2a:d0:1b:7e:57:cd:5c:f4:3c:4f:c1: 08:49:40:2d:c0:4c:63:29:9c:38:73:28:17:74:a7:ca:16:11: 4d:c4:dd:95:bd:e6:40:7a:48:15:ff:d6:8c:da:80:4e:dc:74: ad:72:ba:21:30:c7:e4:09:1f:89:0e:63:15:68:4d:b8:fb:7b: 03:59:49:a9:45:5a:1a:04:61:5f:d3:40:11:dc:f7:04:24:c6: a2:c8:a6:1b:2b:f0:a1:47:57:ee:ba:f6:58:98:d7:e9:67:db: 79:e1:76:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tUr1w2uSPQaGkEUVxtYIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTI1YTM2MmU4NzcwNWExZWMwMjJkMTY1NjBmMjc2ZDU5 Y2VlMWQwHhcNMjUxMjIwMTcwMTEyWhcNMjUxMjIxMTcwMTEyWjAzMTEwLwYDVQQD EygwZTMzNTQ3ZmQ0OGRlMjNlYWFjYWE4NzBlNzlmMmI2NDQwMDJiZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAparxsqcszKDPIRewIX4xQqsuvWQg jseO+YE+t2/ECyRa3KrHxCRViqQjLH6grOWJoIeNWhG76g72X/t7kApSUfVfkyPQ gFZWrRCRs58lGL+n1aEVACjoZsAzpjgYD9hKbEOUsFrt0tA6/itCO9/VjanuMWdr qWxwdROM1nDu3+vQ16KTPD34cupl6TwXntmRgy1QdPnO5ViF1qlA5iZ6DvQZM+0o WiOrYk5WvOu8nMS4b61RCvBau/Z/vnd8YsMfoJbaNrik9UVfcFN2ddmgffoEAuXz 5Yc7FHL4ywdg7rsc0pIhgoiaxScE0ONMUnnY6TWIgcVYJ77oW03tf4YlMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4zVH/UjeI+qsqocOefK2RAAr4zMB8GA1UdIwQY MBaAFGlSWjYuh3BaHsAi0WVg8nbVnO4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zMGNkODctZjM3NS00YjkzLThkMzkt NjVkNmNhM2Y0OWQ4LzEvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8zMGNkODctZjM3NS00YjkzLThkMzktNjVkNmNhM2Y0OWQ4 LzEvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEKUgHdG 0Tz8Y58JwytXG4X5ch+NHEh8vMTWJKTYWSErhVvKLt4Kt0THB/9v0vRv9VG7uoKV oIbMYcoO99n2y/YmZH9aqbJX25fuw1U2lZWRle3pcqLelRlucxOxh5s1rdO0qYOu XXzNzi0d3jUvVfLY/SwJWYQU0DsEoM0pdM9BO868S283jx9zA5fRPhEjMfveF1gD TCrQG35XzVz0PE/BCElALcBMYymcOHMoF3SnyhYRTcTdlb3mQHpIFf/WjNqATtx0 rXK6ITDH5AkfiQ5jFWhNuPt7A1lJqUVaGgRhX9NAEdz3BCTGosimGyvwoUdX7rr2 WJjX6WfbeeF2Hg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:19 2025 by rpki-client