This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft File: aVJaNi6HcFoewCLRZWDydtWc7h0.mft (raw, json) Hash identifier: eBxyKqJkpcy5+bpGO4l9iJScwynexfpI+zL++6eJV3o= Subject key identifier: 97:E1:3D:52:39:CB:2B:C1:06:9B:3E:FB:03:11:97:90:C5:DB:F5:93 Authority key identifier: 69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D Certificate issuer: /CN=69525a362e87705a1ec022d16560f276d59cee1d Certificate serial: 019B76A4156AA142637395F90B2EFF2003A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft Manifest number: 097F Signing time: Wed 31 Dec 2025 23:00:23 +0000 Manifest this update: Wed 31 Dec 2025 23:00:23 +0000 Manifest next update: Thu 01 Jan 2026 23:00:23 +0000 Files and hashes: 1: aHJU3TtGM9M9L2c33hiqaeAD6-M.roa (hash: Jnk6c3GJ5E4y6b+inckEyRoPVADxMl1TsyYlid/Y0Y0=) 2: aVJaNi6HcFoewCLRZWDydtWc7h0.crl (hash: 8f/mU9C47k6fgDAq3seje9C6RMtGGM3wLE8z6zhG7gc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:a4:15:6a:a1:42:63:73:95:f9:0b:2e:ff:20:03:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69525a362e87705a1ec022d16560f276d59cee1d Validity Not Before: Dec 31 23:00:23 2025 GMT Not After : Jan 1 23:00:23 2026 GMT Subject: CN=97e13d5239cb2bc1069b3efb03119790c5dbf593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5d:73:3d:c7:1b:48:7e:f8:32:1a:2c:b9:d9: 8f:09:9c:6a:2a:49:06:5a:1a:af:0b:7a:50:b2:bc: 03:48:89:c2:18:8f:11:6a:74:10:95:d9:f0:52:e7: 64:dd:d8:7d:0a:50:57:11:95:47:5f:6e:ee:24:75: cc:cd:df:1d:57:4f:30:81:ab:8f:21:02:2b:1d:d2: 75:be:09:72:e1:26:d3:48:13:8d:e5:3b:bb:30:a6: b0:c5:0f:c6:40:96:41:79:dc:ef:cb:5b:a6:9e:7e: e1:fd:08:11:b9:86:78:a1:ef:e2:48:98:eb:9a:e1: 43:c3:9f:e1:5a:05:1d:46:2c:44:ba:3e:13:68:6a: a7:14:8e:46:24:2f:99:3b:54:df:50:93:c3:7a:3c: 98:c8:77:cc:15:9f:1e:f7:95:01:ea:72:7a:5e:44: 95:87:8c:e9:fc:3b:14:53:b9:94:aa:f6:dc:85:f4: 10:ca:31:ac:0a:6a:ba:e2:48:cc:d3:09:1b:ba:46: f8:65:ad:5a:08:8f:c0:fc:65:df:4e:bb:13:dc:88: 96:af:f9:67:61:7c:c2:43:ef:09:16:4f:5b:9d:1c: 98:b3:f3:49:a0:de:9f:00:e2:22:b8:6e:00:12:2e: 7d:94:0b:8b:50:e9:58:18:72:3b:aa:bd:42:eb:d4: 3f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E1:3D:52:39:CB:2B:C1:06:9B:3E:FB:03:11:97:90:C5:DB:F5:93 X509v3 Authority Key Identifier: keyid:69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:20:7c:89:04:5c:39:69:87:c9:0b:05:02:28:12:58:d9:c9: 2a:47:6c:b0:e7:a5:45:d1:c7:16:0d:b4:d1:01:26:0b:67:77: 5c:8a:e7:32:2a:e6:a3:aa:a8:ec:d5:93:39:e1:0c:16:21:2e: 99:88:69:f2:69:81:2d:21:50:97:da:c1:7b:76:f8:14:10:20: 39:f2:50:ee:ee:8d:d3:f5:0e:13:c1:1e:68:1f:cf:43:0f:5a: 74:f9:c4:6a:f9:c0:75:19:fb:f4:bc:6e:34:07:ad:0b:00:b2: 69:e5:b5:05:c8:9c:9e:9f:f0:5c:d6:db:40:3c:5b:a1:09:f0: c7:2e:a8:3f:6d:5c:1f:06:52:7d:14:49:7c:f0:ee:51:cc:2f: 1e:fd:7d:12:da:d6:0d:78:a1:f2:66:3c:b9:e0:80:b0:95:9d: a1:7c:88:27:56:58:c5:73:13:59:e0:02:ff:6a:26:03:4e:fc: d3:ff:2b:1a:4a:64:78:83:d6:09:21:1d:cb:fc:d6:a8:32:a8: 53:43:1a:de:39:bf:73:cc:65:35:db:12:63:41:6f:77:fc:22: 4d:4b:c4:05:20:84:ef:2b:db:b0:5f:49:08:da:ba:dd:1c:d2: 11:d2:bb:ff:1f:c8:52:03:7c:1f:23:bf:14:b6:70:cb:8f:88: 47:d2:32:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2pBVqoUJjc5X5Cy7/IAOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTI1YTM2MmU4NzcwNWExZWMwMjJkMTY1NjBmMjc2ZDU5 Y2VlMWQwHhcNMjUxMjMxMjMwMDIzWhcNMjYwMTAxMjMwMDIzWjAzMTEwLwYDVQQD Eyg5N2UxM2Q1MjM5Y2IyYmMxMDY5YjNlZmIwMzExOTc5MGM1ZGJmNTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv11zPccbSH74MhosudmPCZxqKkkG WhqvC3pQsrwDSInCGI8RanQQldnwUudk3dh9ClBXEZVHX27uJHXMzd8dV08wgauP IQIrHdJ1vgly4SbTSBON5Tu7MKawxQ/GQJZBedzvy1umnn7h/QgRuYZ4oe/iSJjr muFDw5/hWgUdRixEuj4TaGqnFI5GJC+ZO1TfUJPDejyYyHfMFZ8e95UB6nJ6XkSV h4zp/DsUU7mUqvbchfQQyjGsCmq64kjM0wkbukb4Za1aCI/A/GXfTrsT3IiWr/ln YXzCQ+8JFk9bnRyYs/NJoN6fAOIiuG4AEi59lAuLUOlYGHI7qr1C69Q/8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfhPVI5yyvBBps++wMRl5DF2/WTMB8GA1UdIwQY MBaAFGlSWjYuh3BaHsAi0WVg8nbVnO4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zMGNkODctZjM3NS00YjkzLThkMzkt NjVkNmNhM2Y0OWQ4LzEvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8zMGNkODctZjM3NS00YjkzLThkMzktNjVkNmNhM2Y0OWQ4 LzEvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiB8iQRc OWmHyQsFAigSWNnJKkdssOelRdHHFg200QEmC2d3XIrnMirmo6qo7NWTOeEMFiEu mYhp8mmBLSFQl9rBe3b4FBAgOfJQ7u6N0/UOE8EeaB/PQw9adPnEavnAdRn79Lxu NAetCwCyaeW1Bcicnp/wXNbbQDxboQnwxy6oP21cHwZSfRRJfPDuUcwvHv19EtrW DXih8mY8ueCAsJWdoXyIJ1ZYxXMTWeAC/2omA0780/8rGkpkeIPWCSEdy/zWqDKo U0Ma3jm/c8xlNdsSY0Fvd/wiTUvEBSCE7yvbsF9JCNq63RzSEdK7/x/IUgN8HyO/ FLZwy4+IR9IyXQ== -----END CERTIFICATE-----Generated at Thu Jan 1 09:06:45 2026 by rpki-client