This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft File: aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft (raw, json) Hash identifier: N1sCob4AEu/bzK9HrcJZLDg3cNtigQZ+ST5L/flN9aY= Subject key identifier: D4:D9:50:5D:D1:A2:65:DF:37:3C:69:99:5C:14:A4:C9:9C:FD:64:2C Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74 Certificate issuer: /CN=69737c6e0602be3804e277580bab7e21e6e33474 Certificate serial: 019B3A910874D63D477BED7383894688577A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft Manifest number: 07E8 Signing time: Sat 20 Dec 2025 07:02:21 +0000 Manifest this update: Sat 20 Dec 2025 07:02:21 +0000 Manifest next update: Sun 21 Dec 2025 07:02:21 +0000 Files and hashes: 1: 86oammqkU0TE8AzqwBVv1FmzBYc.roa (hash: H3QOeQw7Wu4vQlfZwSufbLTx40TDb5RrgWASWL9m9b8=) 2: VRgzvsIGyVGSMvCfEEXMwDue8MA.roa (hash: PsTu4TZ4HzWVeuIcWadKHbXlWOA/8zFocM48RCXa9/k=) 3: aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl (hash: V23Jfa+Cb/rAFBeuovvtq51mBJKX0TEbe2KnHy3QyCs=) 4: jjkZ2yb-jO_dwKLdx8H317IXScQ.roa (hash: HCz04W3HLqaOC0rvZdH98CWQlK6DEnW7DscRc2ODf9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:08:74:d6:3d:47:7b:ed:73:83:89:46:88:57:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474 Validity Not Before: Dec 20 07:02:21 2025 GMT Not After : Dec 21 07:02:21 2025 GMT Subject: CN=d4d9505dd1a265df373c69995c14a4c99cfd642c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cc:0b:63:4c:d9:b9:b1:be:cf:5e:9a:c9:3c: f4:43:c0:29:50:b6:0d:06:14:c3:d8:8e:e4:16:38: 79:d9:7b:9f:10:e6:fe:a7:18:fc:75:46:01:99:ad: cc:0b:ae:60:43:ba:2a:97:33:96:b9:e0:35:78:ce: 7b:35:ec:49:01:3b:b1:09:9a:18:8f:50:ab:a2:10: c1:b1:89:b2:71:73:05:fe:6e:ee:ed:ba:f9:3b:50: 9c:be:1c:d1:18:1e:08:39:dc:0f:90:66:e2:84:77: ff:7e:e3:39:69:5f:7d:6f:1b:b1:7f:0b:37:5c:4b: 37:1b:57:52:03:a2:39:8c:d4:c8:00:37:c1:01:0e: e3:05:5f:a2:04:1e:bf:26:06:b6:cd:88:7f:46:a5: 7d:33:78:46:f5:54:bd:cb:d1:01:52:59:10:92:12: 68:ed:a5:e0:40:1c:c6:5c:90:0f:6c:37:dd:e6:21: 9d:db:fc:b9:47:b6:99:9b:1e:7c:53:d2:06:1c:c9: a3:a5:fd:58:14:9d:da:83:5a:67:f7:6c:16:5f:e9: e8:c3:fc:f6:8c:b4:93:3d:d8:55:22:74:ec:26:de: 60:78:66:47:59:2d:d0:75:11:bd:a7:b0:a8:09:4e: 73:9d:2d:5c:be:16:de:a3:77:79:f5:4d:1c:f9:e3: b9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D9:50:5D:D1:A2:65:DF:37:3C:69:99:5C:14:A4:C9:9C:FD:64:2C X509v3 Authority Key Identifier: keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:33:88:06:b8:86:b9:55:2f:5f:5a:7f:76:73:a9:f9:c3:55: b6:33:7c:4d:f6:ca:db:1d:36:7e:11:47:f3:a3:ea:e0:a6:fc: 69:ba:d3:ea:3f:f5:16:3c:2d:5e:09:af:3b:cb:49:4c:b4:d6: 42:5b:ab:e2:35:7c:b8:d0:24:04:da:d7:23:4a:3e:6a:63:b8: de:c7:9d:af:ae:03:ac:e9:aa:e8:76:b3:67:fc:c4:01:48:9d: 13:05:0f:5d:cd:da:94:c6:56:b0:34:79:af:29:37:25:c8:c6: 4c:db:1d:ad:ee:1f:6e:a0:88:eb:00:f5:3e:a5:6d:ff:67:84: b7:9c:01:fb:27:41:e2:0b:4f:6e:39:7f:4b:d1:eb:e2:6c:b9: 19:98:6d:2a:e6:99:43:15:58:08:0c:30:19:a0:93:6a:4e:7f: c8:06:c9:b0:6d:5b:f1:d1:a7:3b:e8:8a:59:b7:07:02:9f:ba: 2a:87:57:4c:05:23:93:cc:38:10:ba:2b:2c:e2:24:70:31:02: 42:63:01:3d:67:77:61:5b:d4:5a:2d:a8:e0:a6:18:dd:8e:b2: fd:ee:6f:0c:e3:7a:c9:4f:ca:d0:47:6d:f0:c1:48:bc:6f:77: ae:11:2a:80:4d:5c:d2:67:4d:a1:2c:58:a3:65:a0:e6:06:cc: 70:ff:bf:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kQh01j1He+1zg4lGiFd6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NzM3YzZlMDYwMmJlMzgwNGUyNzc1ODBiYWI3ZTIxZTZl MzM0NzQwHhcNMjUxMjIwMDcwMjIxWhcNMjUxMjIxMDcwMjIxWjAzMTEwLwYDVQQD EyhkNGQ5NTA1ZGQxYTI2NWRmMzczYzY5OTk1YzE0YTRjOTljZmQ2NDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMwLY0zZubG+z16ayTz0Q8ApULYN BhTD2I7kFjh52XufEOb+pxj8dUYBma3MC65gQ7oqlzOWueA1eM57NexJATuxCZoY j1CrohDBsYmycXMF/m7u7br5O1CcvhzRGB4IOdwPkGbihHf/fuM5aV99bxuxfws3 XEs3G1dSA6I5jNTIADfBAQ7jBV+iBB6/Jga2zYh/RqV9M3hG9VS9y9EBUlkQkhJo 7aXgQBzGXJAPbDfd5iGd2/y5R7aZmx58U9IGHMmjpf1YFJ3ag1pn92wWX+now/z2 jLSTPdhVInTsJt5geGZHWS3QdRG9p7CoCU5znS1cvhbeo3d59U0c+eO5GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTZUF3RomXfNzxpmVwUpMmc/WQsMB8GA1UdIwQY MBaAFGlzfG4GAr44BOJ3WAurfiHm4zR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhOOGJnWUN2amdFNG5kWUM2dC1JZWJqTkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9iNmFmOWQtNDdiYS00YjkyLWI0MWEt ODM4YTQ1MDU3MzVhLzEvYVhOOGJnWUN2amdFNG5kWUM2dC1JZWJqTkhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9iNmFmOWQtNDdiYS00YjkyLWI0MWEtODM4YTQ1MDU3MzVh LzEvYVhOOGJnWUN2amdFNG5kWUM2dC1JZWJqTkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACzOIBriG uVUvX1p/dnOp+cNVtjN8TfbK2x02fhFH86Pq4Kb8abrT6j/1FjwtXgmvO8tJTLTW Qlur4jV8uNAkBNrXI0o+amO43sedr64DrOmq6HazZ/zEAUidEwUPXc3alMZWsDR5 ryk3JcjGTNsdre4fbqCI6wD1PqVt/2eEt5wB+ydB4gtPbjl/S9Hr4my5GZhtKuaZ QxVYCAwwGaCTak5/yAbJsG1b8dGnO+iKWbcHAp+6KodXTAUjk8w4ELorLOIkcDEC QmMBPWd3YVvUWi2o4KYY3Y6y/e5vDON6yU/K0Edt8MFIvG93rhEqgE1c0mdNoSxY o2Wg5gbMcP+/kA== -----END CERTIFICATE-----Generated at Sat Dec 20 14:09:36 2025 by rpki-client