This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft File: aZhQBALIIVz1cQc6SVzcgMdC8sw.mft (raw, json) Hash identifier: R4KfUVtwZ8I0mnQvO3JwUaPyTnTU5rupyuQJylDqJJg= Subject key identifier: A7:B6:73:35:FA:26:97:52:B4:25:93:29:46:59:89:F2:DC:C0:5F:78 Authority key identifier: 69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC Certificate issuer: /CN=6998500402c8215cf571073a495cdc80c742f2cc Certificate serial: 019B3B6BF944994E3244E82F61EB87238EF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 11:01:30 +0000 Manifest this update: Sat 20 Dec 2025 11:01:30 +0000 Manifest next update: Sun 21 Dec 2025 11:01:30 +0000 Files and hashes: 1: Pnnishmz6mmH1kDhubH1FM1N764.roa (hash: JeO+A8KCko5cL5TRf164ytYgaJ9iXP1K2ZTbCsQa/GY=) 2: aZhQBALIIVz1cQc6SVzcgMdC8sw.crl (hash: DVBHWj9U2s1pcvFMAKEMyQb/H8c4PXSd919WwQasNtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:f9:44:99:4e:32:44:e8:2f:61:eb:87:23:8e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6998500402c8215cf571073a495cdc80c742f2cc Validity Not Before: Dec 20 11:01:30 2025 GMT Not After : Dec 21 11:01:30 2025 GMT Subject: CN=a7b67335fa269752b4259329465989f2dcc05f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:94:31:2b:e4:c8:fa:b9:71:fb:89:5b:ae:85: a8:c1:02:5c:80:33:55:3b:45:bc:2f:ab:47:35:e6: 24:f7:e4:a0:36:a6:f3:ce:4f:9f:75:6b:e1:c7:09: 2f:70:c0:6c:b9:6c:82:0e:6c:db:c1:10:f2:05:ac: 46:6e:08:2a:84:b1:88:b7:57:0d:bc:7d:72:c6:05: 2a:8d:f8:a3:cb:91:88:56:61:d6:d7:5f:94:65:fd: 1b:40:f8:3f:c7:0c:aa:90:25:08:d6:68:bc:34:75: b5:db:c5:c4:1c:3e:ce:fb:6c:f6:f2:2b:3f:cb:a6: d6:07:75:30:47:f7:94:ac:7b:b3:c4:80:99:cf:f9: 97:9d:7e:73:39:f2:29:e9:81:5b:87:02:cc:ab:05: 40:7b:9e:ca:2a:1b:33:ec:d3:f9:2b:6d:a4:92:8e: bf:35:5a:cc:df:56:1a:4b:78:57:10:80:76:53:2c: a5:ba:93:f6:62:0e:75:f7:da:0b:85:a2:8a:d3:ea: 88:90:e6:93:8b:24:81:03:1b:54:e6:f7:41:67:0c: 84:e4:7e:be:e2:eb:2b:62:89:51:62:b7:a7:d9:15: fa:b1:87:52:e3:da:7d:b5:9b:ec:9b:58:f6:dd:d9: 31:80:76:3d:ab:12:92:ce:ee:f6:e7:66:ec:26:68: 24:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B6:73:35:FA:26:97:52:B4:25:93:29:46:59:89:F2:DC:C0:5F:78 X509v3 Authority Key Identifier: keyid:69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f3:0c:38:76:fe:96:02:85:ca:a8:1c:32:3f:30:7f:17:ff: a3:b5:5a:13:40:6a:f4:22:79:50:ba:fa:42:0b:02:19:96:c9: 6f:92:5a:5e:f3:23:3f:c7:89:14:20:52:d5:7c:27:25:2e:c2: 67:eb:9a:e1:3b:5f:dc:9b:73:05:44:1a:9e:92:f2:d3:5b:f6: 9a:79:32:87:af:f3:6d:dc:3b:77:23:42:d9:db:2f:de:08:e0: 3e:76:11:fa:97:5b:29:3c:19:dc:ac:21:9f:67:73:94:34:c3: 18:d5:53:e7:cc:82:cc:c7:48:98:7f:41:c0:89:e8:cd:a8:82: c5:13:98:9d:d7:62:6f:20:76:8c:83:08:29:f1:5f:a6:08:ad: 0a:01:00:67:97:8c:d6:80:31:5b:b7:4b:7c:fc:21:de:9d:d1: 0c:ef:15:b5:ae:6e:67:ec:d1:b4:85:80:5c:2e:a4:45:93:8e: 23:c8:3c:e8:23:20:79:7c:14:d8:bd:33:30:37:7e:46:d9:b8: 73:4b:fe:0e:da:0f:ad:c1:c6:c6:63:f1:68:4e:ff:2d:96:58: e2:1e:46:64:7f:3a:0e:82:ed:4e:63:ef:8d:d6:54:05:f6:0b: ab:ba:ff:3d:cc:d1:92:b7:02:25:1e:a5:48:4b:b1:c2:72:18: 2e:90:12:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a/lEmU4yROgvYeuHI470MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTg1MDA0MDJjODIxNWNmNTcxMDczYTQ5NWNkYzgwYzc0 MmYyY2MwHhcNMjUxMjIwMTEwMTMwWhcNMjUxMjIxMTEwMTMwWjAzMTEwLwYDVQQD EyhhN2I2NzMzNWZhMjY5NzUyYjQyNTkzMjk0NjU5ODlmMmRjYzA1Zjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJQxK+TI+rlx+4lbroWowQJcgDNV O0W8L6tHNeYk9+SgNqbzzk+fdWvhxwkvcMBsuWyCDmzbwRDyBaxGbggqhLGIt1cN vH1yxgUqjfijy5GIVmHW11+UZf0bQPg/xwyqkCUI1mi8NHW128XEHD7O+2z28is/ y6bWB3UwR/eUrHuzxICZz/mXnX5zOfIp6YFbhwLMqwVAe57KKhsz7NP5K22kko6/ NVrM31YaS3hXEIB2UyylupP2Yg5199oLhaKK0+qIkOaTiySBAxtU5vdBZwyE5H6+ 4usrYolRYren2RX6sYdS49p9tZvsm1j23dkxgHY9qxKSzu7252bsJmgkzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKe2czX6JpdStCWTKUZZifLcwF94MB8GA1UdIwQY MBaAFGmYUAQCyCFc9XEHOklc3IDHQvLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpoUUJBTElJVnoxY1FjNlNWemNnTWRDOHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wNTdhZTgtMGNiNy00ZTE0LThhNWIt MTg5MDI4ZjMzOTZjLzEvYVpoUUJBTElJVnoxY1FjNlNWemNnTWRDOHN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8wNTdhZTgtMGNiNy00ZTE0LThhNWItMTg5MDI4ZjMzOTZj LzEvYVpoUUJBTElJVnoxY1FjNlNWemNnTWRDOHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfMMOHb+ lgKFyqgcMj8wfxf/o7VaE0Bq9CJ5ULr6QgsCGZbJb5JaXvMjP8eJFCBS1XwnJS7C Z+ua4Ttf3JtzBUQanpLy01v2mnkyh6/zbdw7dyNC2dsv3gjgPnYR+pdbKTwZ3Kwh n2dzlDTDGNVT58yCzMdImH9BwInozaiCxROYnddibyB2jIMIKfFfpgitCgEAZ5eM 1oAxW7dLfPwh3p3RDO8Vta5uZ+zRtIWAXC6kRZOOI8g86CMgeXwU2L0zMDd+Rtm4 c0v+DtoPrcHGxmPxaE7/LZZY4h5GZH86DoLtTmPvjdZUBfYLq7r/PczRkrcCJR6l SEuxwnIYLpASdg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:11:00 2025 by rpki-client