This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft File: aaKML4THXo0DiGlDVRUt0rcx8kk.mft (raw, json) Hash identifier: u68BLNhANgzPwFtP/JKpTcCvBBi09DTNBtY+trQcWhU= Subject key identifier: 18:8E:A3:8D:3E:8C:9C:FC:6B:87:D3:67:CB:8B:8B:D5:F9:2D:D0:C6 Authority key identifier: 69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49 Certificate issuer: /CN=69a28c2f84c75e8d0388694355152dd2b731f249 Certificate serial: 019B39EB5800D4075D922AF7ED97F47D3CAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 04:01:23 +0000 Manifest this update: Sat 20 Dec 2025 04:01:23 +0000 Manifest next update: Sun 21 Dec 2025 04:01:23 +0000 Files and hashes: 1: WdYc6wSLVkfUe7irxf4uyXxEIsM.roa (hash: dpYwLA3RR3eH0lZ7/JtVVQoaXF1Y2bKy7GfyH86APlE=) 2: aaKML4THXo0DiGlDVRUt0rcx8kk.crl (hash: wN7WrHkgwBjGef7/kJvGGcw4hHJ2lnmjQaNIpHdPplY=) 3: tUMiGCgmsKV0vxqojlEA4oJxpRM.roa (hash: UydNeJbpnz/tc0fGV+RmvBf+BwmLoVjaXgDPrRLbpVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:58:00:d4:07:5d:92:2a:f7:ed:97:f4:7d:3c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a28c2f84c75e8d0388694355152dd2b731f249 Validity Not Before: Dec 20 04:01:23 2025 GMT Not After : Dec 21 04:01:23 2025 GMT Subject: CN=188ea38d3e8c9cfc6b87d367cb8b8bd5f92dd0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:02:91:d5:7f:13:2c:3b:a6:f1:c0:42:5a:c9: cd:b9:9b:60:7e:0b:f2:24:ab:b3:b1:82:26:a9:5d: 14:76:85:06:eb:dc:7d:5c:ac:73:7e:8e:e0:01:37: 25:3c:8d:07:d9:2b:b8:00:0f:0b:6b:5e:6c:22:e2: 27:f0:78:69:3b:81:62:44:61:5c:ce:71:94:73:3f: a5:1f:41:a4:91:49:f8:b9:ef:b4:66:11:db:66:4a: 08:a1:fb:7d:9c:f4:fa:46:ad:d9:cc:a8:c2:31:19: 83:0f:83:6b:e5:ee:94:42:59:59:11:26:ad:e8:ed: 7c:41:40:a8:7b:f6:bd:b5:b5:64:c3:0d:54:c8:e5: 13:81:61:34:21:aa:ff:59:4e:f5:7a:5c:09:ec:36: 02:93:fa:02:78:50:fb:74:5f:e8:3c:00:1f:ca:ce: a2:07:f2:4b:57:b2:45:ad:d2:e1:31:08:f9:52:29: 29:2d:0d:79:87:9b:b1:0c:45:95:a5:c4:f1:f1:16: 12:dc:fd:32:9a:81:c9:4f:55:c3:0b:45:51:f7:8e: e9:8a:7b:53:d4:d9:64:b7:8e:b1:87:fa:e0:85:b3: 87:cd:48:d4:8e:70:8c:12:5e:b0:e4:46:e8:13:38: e7:75:e9:88:9e:82:fc:bb:36:a5:e6:c6:8d:e1:39: fb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8E:A3:8D:3E:8C:9C:FC:6B:87:D3:67:CB:8B:8B:D5:F9:2D:D0:C6 X509v3 Authority Key Identifier: keyid:69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7b:e0:d9:41:b9:21:1c:3c:02:5e:f6:33:4c:56:0b:5a:6c: 0a:69:41:8f:f2:a7:cd:b0:16:b8:e6:7a:3b:9e:37:3b:a2:a5: e6:99:ed:d5:da:c7:50:e4:75:20:02:c5:89:47:dc:46:c2:17: b0:55:a2:67:c0:a2:ff:3e:35:76:a3:f7:c9:66:77:96:cb:f6: fd:13:fb:b2:2c:cd:dd:57:9a:98:b8:64:ac:7c:2c:77:07:6d: e6:e7:33:48:57:9a:fa:ee:7a:eb:05:2c:2f:77:f1:e5:34:1e: 97:b0:48:b1:7b:22:b4:a8:24:07:72:55:40:03:70:bb:d9:e5: a5:9c:e1:c6:f8:48:2c:8c:56:42:0d:94:95:eb:85:2c:6f:63: f4:e7:e1:54:c3:fc:7b:7f:6b:51:36:af:c9:cc:5e:1b:e2:9d: 17:ff:a7:94:db:c5:58:cd:cc:3f:20:9a:de:3a:d7:54:4c:fc: f5:9c:ec:b3:ac:92:cf:86:4c:6b:0c:91:27:26:58:8b:6d:f3: 40:7c:d3:2f:0b:04:e6:60:a1:4f:79:9c:ba:98:16:ab:46:ce: d8:88:ea:50:da:29:57:9d:ba:d6:5b:ee:62:a8:84:e4:05:7f: 0a:32:42:c9:bb:7f:b5:e3:91:fa:87:8d:6e:b0:01:78:a3:b9: 2d:55:6e:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs561gA1Addkir37Zf0fTysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YTI4YzJmODRjNzVlOGQwMzg4Njk0MzU1MTUyZGQyYjcz MWYyNDkwHhcNMjUxMjIwMDQwMTIzWhcNMjUxMjIxMDQwMTIzWjAzMTEwLwYDVQQD EygxODhlYTM4ZDNlOGM5Y2ZjNmI4N2QzNjdjYjhiOGJkNWY5MmRkMGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAKR1X8TLDum8cBCWsnNuZtgfgvy JKuzsYImqV0UdoUG69x9XKxzfo7gATclPI0H2Su4AA8La15sIuIn8HhpO4FiRGFc znGUcz+lH0GkkUn4ue+0ZhHbZkoIoft9nPT6Rq3ZzKjCMRmDD4Nr5e6UQllZESat 6O18QUCoe/a9tbVkww1UyOUTgWE0Iar/WU71elwJ7DYCk/oCeFD7dF/oPAAfys6i B/JLV7JFrdLhMQj5UikpLQ15h5uxDEWVpcTx8RYS3P0ymoHJT1XDC0VR947pintT 1Nlkt46xh/rghbOHzUjUjnCMEl6w5EboEzjndemInoL8uzal5saN4Tn7LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiOo40+jJz8a4fTZ8uLi9X5LdDGMB8GA1UdIwQY MBaAFGmijC+Ex16NA4hpQ1UVLdK3MfJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYt MmNiZDU1ZjlhOGVlLzEvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYtMmNiZDU1ZjlhOGVl LzEvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenvg2UG5 IRw8Al72M0xWC1psCmlBj/KnzbAWuOZ6O543O6Kl5pnt1drHUOR1IALFiUfcRsIX sFWiZ8Ci/z41dqP3yWZ3lsv2/RP7sizN3VeamLhkrHwsdwdt5uczSFea+u566wUs L3fx5TQel7BIsXsitKgkB3JVQANwu9nlpZzhxvhILIxWQg2UleuFLG9j9OfhVMP8 e39rUTavycxeG+KdF/+nlNvFWM3MPyCa3jrXVEz89Zzss6ySz4ZMawyRJyZYi23z QHzTLwsE5mChT3mcupgWq0bO2IjqUNopV5261lvuYqiE5AV/CjJCybt/teOR+oeN brABeKO5LVVugA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:06:56 2025 by rpki-client