This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json) Hash identifier: BNM44jhkxEDkeiknT2pQsAHzothixNrGDGL+Yn184wA= Subject key identifier: 29:91:F1:2D:53:3A:B1:1A:17:65:DB:94:D7:3F:F7:25:55:92:28:3C Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45 Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045 Certificate serial: 019B3C7FC95BCD63B700BF757601E1E80D06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 16:02:46 +0000 Manifest this update: Sat 20 Dec 2025 16:02:46 +0000 Manifest next update: Sun 21 Dec 2025 16:02:46 +0000 Files and hashes: 1: 0bhoJ8-ddvBioZtRzgKy-myfB6s.roa (hash: BzGw1+qOUMY/+nu/XThUq8VubujtNGZA+HvkvUvIYPc=) 2: FoYoEZG4yQ-zmia58D3kbXTMFyI.roa (hash: VDgVe2Q/qFZmB+xrtdC5B5lAUUngOslsx2GFlKLDYrg=) 3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: D9PUfMPr+sMn23lLjl0sXfjVQpVXaV/UARbBfmvHN0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:c9:5b:cd:63:b7:00:bf:75:76:01:e1:e8:0d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045 Validity Not Before: Dec 20 16:02:46 2025 GMT Not After : Dec 21 16:02:46 2025 GMT Subject: CN=2991f12d533ab11a1765db94d73ff7255592283c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:de:b9:89:e8:2d:9d:d7:11:3f:c8:c5:97:e4: f7:8c:5f:80:c2:d7:80:bc:2f:e9:46:d6:20:88:b3: c6:37:af:d9:91:1a:06:4b:1a:23:04:05:48:66:16: 80:f4:05:ef:5d:39:f6:d4:c1:b7:34:d8:ac:3f:0c: 0f:8d:b6:ec:ae:ea:99:ee:1a:cb:5b:18:24:49:2a: 5f:2a:73:1f:df:bb:d1:e3:1f:4a:0f:5e:50:3b:6d: e7:de:56:cc:19:94:60:e8:d3:8a:29:a0:26:0d:29: eb:29:f3:e9:87:eb:ce:c1:12:3b:ee:78:c5:ef:6d: d6:e8:6a:80:36:bf:b5:06:fd:a3:a9:37:5d:b7:35: 94:50:0c:10:0f:d1:d1:bf:2c:5e:fe:d4:90:4b:ce: f2:92:65:bd:9e:1a:70:5b:8d:30:03:18:bd:8e:5d: 66:17:62:d1:3d:ae:55:37:af:0c:15:d9:17:66:f8: d0:b2:16:22:93:8b:bc:8c:5f:51:fa:5b:48:4b:a3: e9:cf:87:bc:05:cf:d7:d2:8b:1d:4b:85:98:59:6c: 3a:e2:bf:8e:db:f6:ee:17:9f:e2:89:9f:80:71:bc: 0a:3b:a6:e4:e6:21:49:7e:1f:de:c6:c8:35:62:fd: 9e:1f:b4:27:d6:36:99:0d:44:e3:3d:05:6f:5c:70: c5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:91:F1:2D:53:3A:B1:1A:17:65:DB:94:D7:3F:F7:25:55:92:28:3C X509v3 Authority Key Identifier: keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:1c:e8:9b:54:81:01:07:4d:98:eb:cb:a6:3d:de:6a:2c:7a: 18:11:b1:1f:49:b7:7f:15:34:83:e6:ad:e0:6f:14:99:a5:6a: 98:ca:b0:f7:39:f4:d9:8a:70:32:74:9b:06:61:bf:1b:41:e2: f8:4f:7b:c8:15:fd:54:6d:23:0a:d5:f2:1d:ea:65:1b:32:75: 5d:9c:2f:90:88:48:81:73:21:cd:9b:08:9e:f9:1a:9e:63:c1: 2b:77:8c:52:8b:5c:ea:4b:66:65:69:57:87:b6:45:5c:92:97: d7:bd:d6:ec:c7:76:e7:2e:d8:c2:3a:d7:ef:69:45:16:e2:be: f3:d5:70:68:e3:22:70:27:d5:1e:6c:e7:8f:c9:ab:ae:a6:f0: 86:96:af:6e:c1:c1:32:b6:94:fa:b7:ad:a2:5c:94:ff:cb:85: 55:92:26:97:9c:26:35:6a:11:7a:f0:d5:68:b4:42:ef:21:2c: 8d:cf:b7:77:81:9c:bb:54:8e:d6:95:a8:c6:93:dc:bc:a2:ae: ba:e6:72:93:f9:61:8e:4a:76:ef:8d:c1:5b:ab:b4:db:97:d6: 89:95:0c:d6:f7:92:36:5e:e4:03:8a:a0:50:e8:7b:e7:34:b6: 08:d8:57:98:a0:8e:1a:3b:8e:c8:d7:b6:39:a5:84:76:8d:1b: d2:24:ad:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f8lbzWO3AL91dgHh6A0GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YWY3MGJkYTc3Y2Y4NThlMTY0ZDZiN2M3MDllODc4ZmQx YTYwNDUwHhcNMjUxMjIwMTYwMjQ2WhcNMjUxMjIxMTYwMjQ2WjAzMTEwLwYDVQQD EygyOTkxZjEyZDUzM2FiMTFhMTc2NWRiOTRkNzNmZjcyNTU1OTIyODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4N65iegtndcRP8jFl+T3jF+AwteA vC/pRtYgiLPGN6/ZkRoGSxojBAVIZhaA9AXvXTn21MG3NNisPwwPjbbsruqZ7hrL WxgkSSpfKnMf37vR4x9KD15QO23n3lbMGZRg6NOKKaAmDSnrKfPph+vOwRI77njF 723W6GqANr+1Bv2jqTddtzWUUAwQD9HRvyxe/tSQS87ykmW9nhpwW40wAxi9jl1m F2LRPa5VN68MFdkXZvjQshYik4u8jF9R+ltIS6Ppz4e8Bc/X0osdS4WYWWw64r+O 2/buF5/iiZ+AcbwKO6bk5iFJfh/exsg1Yv2eH7Qn1jaZDUTjPQVvXHDFhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmR8S1TOrEaF2XblNc/9yVVkig8MB8GA1UdIwQY MBaAFGmvcL2nfPhY4WTWt8cJ6Hj9GmBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgt NjI4NzdmZTQ4NjE4LzEvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgtNjI4NzdmZTQ4NjE4 LzEvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhzom1SB AQdNmOvLpj3eaix6GBGxH0m3fxU0g+at4G8UmaVqmMqw9zn02YpwMnSbBmG/G0Hi +E97yBX9VG0jCtXyHeplGzJ1XZwvkIhIgXMhzZsInvkanmPBK3eMUotc6ktmZWlX h7ZFXJKX173W7Md25y7YwjrX72lFFuK+89VwaOMicCfVHmznj8mrrqbwhpavbsHB MraU+retolyU/8uFVZIml5wmNWoRevDVaLRC7yEsjc+3d4Gcu1SO1pWoxpPcvKKu uuZyk/lhjkp2743BW6u025fWiZUM1veSNl7kA4qgUOh75zS2CNhXmKCOGjuOyNe2 OaWEdo0b0iStJg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:24:54 2025 by rpki-client