This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft File: aLReYLH18sssYUoANB6BmW2U0TQ.mft (raw, json) Hash identifier: JQuuWsF91Xk9xuIZLp8ICxjmc5wucUoqfzB7UUUpCrw= Subject key identifier: 73:3D:DB:56:65:F2:27:07:35:44:C5:98:CB:8F:6F:42:53:97:FF:89 Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34 Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134 Certificate serial: 019B6AD72018F2DAFD0908FC852A28EF0DBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft Manifest number: 0480 Signing time: Mon 29 Dec 2025 16:00:41 +0000 Manifest this update: Mon 29 Dec 2025 16:00:41 +0000 Manifest next update: Tue 30 Dec 2025 16:00:41 +0000 Files and hashes: 1: aLReYLH18sssYUoANB6BmW2U0TQ.crl (hash: CmgP0SXwlsVPUThPQPMJK7DXiRL4vBPowL5xaEjXgOw=) 2: gKbl_ApJpltlQyfFare3nEvnPsU.roa (hash: tYvNM/6GmJahHZcQYjEfM07RPZ9Md8r3F+k+Tp4UUys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:20:18:f2:da:fd:09:08:fc:85:2a:28:ef:0d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134 Validity Not Before: Dec 29 16:00:41 2025 GMT Not After : Dec 30 16:00:41 2025 GMT Subject: CN=733ddb5665f227073544c598cb8f6f425397ff89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:91:1e:ee:f1:27:45:ce:f8:b7:e5:43:55:ba: 6f:51:69:c5:92:ee:89:11:ac:22:71:79:32:70:26: e9:3f:52:95:e2:c0:90:4c:79:bd:85:ac:9d:1e:9f: 5f:a5:20:4a:7f:70:5a:f1:af:4c:9e:1f:78:da:44: bf:e8:72:a6:8d:13:6c:28:11:0d:9e:9c:3d:f0:66: 4f:12:ac:27:22:e8:86:85:f4:c1:ed:29:7f:16:6d: 2f:87:e5:a3:b4:73:1c:32:f6:1f:6c:36:ab:f8:1a: 76:f3:d0:da:c1:4a:b6:da:0c:9f:69:0d:8b:a1:df: 0d:ca:78:3f:5c:33:8c:3e:1a:e1:5d:76:5c:c6:72: aa:07:6d:4b:34:8d:61:dd:16:c1:84:7e:1e:ef:6a: 08:39:f4:a7:d5:fc:8b:f1:94:3c:88:3e:28:97:53: 4b:64:c2:13:6c:05:d1:3e:c6:46:f7:a2:35:bf:6e: ea:d0:ef:c6:86:e6:40:d9:65:55:89:bb:7b:53:90: 17:fd:de:55:51:4f:fa:09:38:14:63:62:17:fa:8e: 59:f2:ab:49:3a:82:a7:ad:c7:8e:79:5f:f8:94:68: f6:9d:a4:4f:74:f5:22:b6:ca:b8:62:b8:37:ee:68: 30:1b:5f:b7:2a:98:10:2a:8c:f8:36:2f:fa:55:e4: fe:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3D:DB:56:65:F2:27:07:35:44:C5:98:CB:8F:6F:42:53:97:FF:89 X509v3 Authority Key Identifier: keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:0c:53:cd:e0:e5:d1:38:f6:cd:cb:0c:60:a9:e1:52:cb:9e: 33:9e:b3:2a:c4:4f:db:66:4b:05:1c:9e:65:2c:2a:9f:f3:cf: 5c:4d:0f:fe:b1:20:d6:04:b8:ac:7b:ac:63:65:44:46:68:63: 29:c5:7f:a3:f5:17:9e:21:50:0a:11:e6:f6:9d:05:98:9f:bb: 1a:4c:d8:ec:0e:c4:d6:0a:a7:17:a2:1c:af:a0:b0:83:f4:3e: ca:4b:54:e1:b6:16:ee:92:06:e6:2b:29:7b:bf:38:06:0b:9a: d2:9e:62:54:25:78:d2:25:28:86:a2:82:9b:68:90:27:27:7d: 63:e6:2a:7e:6c:7b:56:cc:c1:29:6d:18:44:f6:ff:4d:07:e3: d6:73:ae:22:e7:dc:2d:ab:cf:c1:45:07:67:94:5d:78:78:82: 56:19:c7:dd:9c:12:f9:dc:ec:e9:2a:01:d5:fe:e9:4b:c7:08: 5b:27:b3:54:1c:5e:d6:ac:ee:03:6e:48:85:50:ff:27:4e:29: 26:3a:22:38:b2:c2:3f:49:86:71:ca:83:31:3f:f5:1e:b0:6d: 67:0f:f5:d0:39:a5:fe:86:2c:61:c1:d5:76:85:5b:ab:27:45: 5d:78:bf:ea:95:f8:00:78:f3:8a:0d:55:e2:19:36:05:ae:93: c3:7c:8e:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq1yAY8tr9CQj8hSoo7w2/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YjQ1ZTYwYjFmNWYyY2IyYzYxNGEwMDM0MWU4MTk5NmQ5 NGQxMzQwHhcNMjUxMjI5MTYwMDQxWhcNMjUxMjMwMTYwMDQxWjAzMTEwLwYDVQQD Eyg3MzNkZGI1NjY1ZjIyNzA3MzU0NGM1OThjYjhmNmY0MjUzOTdmZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJEe7vEnRc74t+VDVbpvUWnFku6J EawicXkycCbpP1KV4sCQTHm9haydHp9fpSBKf3Ba8a9Mnh942kS/6HKmjRNsKBEN npw98GZPEqwnIuiGhfTB7Sl/Fm0vh+WjtHMcMvYfbDar+Bp289DawUq22gyfaQ2L od8Nyng/XDOMPhrhXXZcxnKqB21LNI1h3RbBhH4e72oIOfSn1fyL8ZQ8iD4ol1NL ZMITbAXRPsZG96I1v27q0O/GhuZA2WVVibt7U5AX/d5VUU/6CTgUY2IX+o5Z8qtJ OoKnrceOeV/4lGj2naRPdPUitsq4Yrg37mgwG1+3KpgQKoz4Ni/6VeT+dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHM921Zl8icHNUTFmMuPb0JTl/+JMB8GA1UdIwQY MBaAFGi0XmCx9fLLLGFKADQegZltlNE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMt ZTNjNTViYjc3MjhlLzEvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMtZTNjNTViYjc3Mjhl LzEvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgxTzeDl 0Tj2zcsMYKnhUsueM56zKsRP22ZLBRyeZSwqn/PPXE0P/rEg1gS4rHusY2VERmhj KcV/o/UXniFQChHm9p0FmJ+7GkzY7A7E1gqnF6Icr6Cwg/Q+yktU4bYW7pIG5isp e784Bgua0p5iVCV40iUohqKCm2iQJyd9Y+Yqfmx7VszBKW0YRPb/TQfj1nOuIufc LavPwUUHZ5RdeHiCVhnH3ZwS+dzs6SoB1f7pS8cIWyezVBxe1qzuA25IhVD/J04p JjoiOLLCP0mGccqDMT/1HrBtZw/10Dml/oYsYcHVdoVbqydFXXi/6pX4AHjzig1V 4hk2Ba6Tw3yObQ== -----END CERTIFICATE-----Generated at Mon Dec 29 22:40:41 2025 by rpki-client