This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft File: a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft (raw, json) Hash identifier: 8czOjj3w0rHt72EEnHYKd6IXcvLXh6CAcj9+GdJtjY8= Subject key identifier: 0A:E6:34:ED:22:BD:0B:47:12:08:07:8E:6D:98:62:91:EA:99:54:22 Authority key identifier: 6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D Certificate issuer: /CN=6b60412823a0224a5d00e4963d6b23d22504997d Certificate serial: 019B3CEC760E0D2D881F26D48765F626EEFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft Manifest number: 1263 Signing time: Sat 20 Dec 2025 18:01:28 +0000 Manifest this update: Sat 20 Dec 2025 18:01:28 +0000 Manifest next update: Sun 21 Dec 2025 18:01:28 +0000 Files and hashes: 1: a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl (hash: CQid4Pftj4CqJZRIHjh5dZYU34FPa3c6kSGJVmRBe1M=) 2: hnsA4cHOijPoNwlf0ddWoTOuP4M.roa (hash: VpkjEz6V4+QhZq7fIhlT9s7HZODrWhTnFk36Jz3+dtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:76:0e:0d:2d:88:1f:26:d4:87:65:f6:26:ee:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b60412823a0224a5d00e4963d6b23d22504997d Validity Not Before: Dec 20 18:01:28 2025 GMT Not After : Dec 21 18:01:28 2025 GMT Subject: CN=0ae634ed22bd0b471208078e6d986291ea995422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:17:be:5f:76:8e:df:f0:9e:29:22:40:99:f4: 2e:6c:38:ea:e9:fa:82:33:5b:0f:bd:7e:b8:03:a9: be:a9:13:c7:3b:65:3f:06:e5:d2:ab:b7:88:9a:9a: 30:f9:e5:87:31:2c:b6:4d:f2:55:5d:45:13:82:86: 67:4a:b6:0c:c5:a7:eb:7a:37:1a:74:ad:c1:f2:3a: 45:10:6b:c7:cd:96:c8:21:fb:81:6b:7b:51:50:2c: 23:25:98:43:a4:fc:c0:2e:b1:00:88:04:87:19:dc: 6c:d4:ed:e2:67:c5:c1:3f:24:d2:61:d0:05:81:a3: db:9f:a8:a3:30:a4:6e:97:e9:90:d4:b7:3e:29:13: 94:23:ad:3c:94:0f:f0:d5:fb:82:29:41:f3:bf:fe: e7:04:1d:e2:db:e8:7f:9f:57:2d:f3:22:b6:c3:3c: 07:ef:11:27:3d:d6:75:b3:7b:9b:8b:fd:5f:f9:98: 32:98:05:1f:d3:74:69:53:df:33:0a:5c:1e:16:82: f5:c5:2d:d4:35:85:6d:84:70:ee:3a:3e:16:59:3e: 78:35:8a:c1:6f:f0:8a:f6:3a:b3:46:87:c6:f9:72: 03:24:05:0d:2e:fb:b3:00:40:a6:be:77:30:9f:83: a5:15:75:11:06:a5:17:b6:12:04:f4:dd:ec:35:7e: f6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E6:34:ED:22:BD:0B:47:12:08:07:8E:6D:98:62:91:EA:99:54:22 X509v3 Authority Key Identifier: keyid:6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:68:31:03:ce:03:10:31:5a:5e:14:36:b1:5d:c5:ef:9b:60: 73:1c:c5:b4:a6:67:4d:46:26:12:2d:dd:a3:a1:e4:48:ee:e5: 6d:9d:cf:87:a5:fd:6a:23:74:a2:d3:5d:18:fa:f3:44:b9:fa: d4:a0:d6:94:5b:4b:7d:ce:e0:14:a6:7f:ff:a4:e9:6c:8a:95: 82:1c:1a:7d:a6:a5:09:0d:f5:0c:c0:5d:bf:78:6c:dc:98:d2: 80:ce:52:3d:d9:b3:ac:86:1b:9e:c1:ab:9a:d6:b6:f2:d3:1f: 72:72:b9:00:d5:1f:98:e2:6a:79:53:d3:91:15:a6:80:d5:67: c7:e4:af:3b:4f:97:47:49:d0:6c:3b:21:07:2b:ba:1e:f3:1f: 88:cd:2e:2b:05:eb:84:e4:9f:a2:ea:fd:90:d0:65:bd:89:3d: 51:15:0f:a2:7a:9c:18:16:d7:a0:0d:f3:7b:96:1f:3c:fe:98: 38:ca:5c:03:66:69:2a:d9:f7:4a:e9:56:95:fb:7f:66:2d:6f: 62:22:2f:29:26:64:d9:b9:a2:6f:4c:1a:b5:c8:72:81:4a:b5: 63:b8:0f:29:60:59:71:cb:f6:8d:90:92:56:3d:27:2b:6a:70: 72:b7:e4:ff:b8:c7:52:c6:00:21:af:3c:ec:c1:d8:59:fa:ce: b1:d6:dd:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87HYODS2IHybUh2X2Ju7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNjA0MTI4MjNhMDIyNGE1ZDAwZTQ5NjNkNmIyM2QyMjUw NDk5N2QwHhcNMjUxMjIwMTgwMTI4WhcNMjUxMjIxMTgwMTI4WjAzMTEwLwYDVQQD EygwYWU2MzRlZDIyYmQwYjQ3MTIwODA3OGU2ZDk4NjI5MWVhOTk1NDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBe+X3aO3/CeKSJAmfQubDjq6fqC M1sPvX64A6m+qRPHO2U/BuXSq7eImpow+eWHMSy2TfJVXUUTgoZnSrYMxafrejca dK3B8jpFEGvHzZbIIfuBa3tRUCwjJZhDpPzALrEAiASHGdxs1O3iZ8XBPyTSYdAF gaPbn6ijMKRul+mQ1Lc+KROUI608lA/w1fuCKUHzv/7nBB3i2+h/n1ct8yK2wzwH 7xEnPdZ1s3ubi/1f+ZgymAUf03RpU98zClweFoL1xS3UNYVthHDuOj4WWT54NYrB b/CK9jqzRofG+XIDJAUNLvuzAECmvncwn4OlFXURBqUXthIE9N3sNX72nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArmNO0ivQtHEggHjm2YYpHqmVQiMB8GA1UdIwQY MBaAFGtgQSgjoCJKXQDklj1rI9IlBJl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTJCQktDT2dJa3BkQU9TV1BXc2owaVVFbVgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yNzVhNzQtYjNlZi00NGNmLTgyMjAt NmEzMzQyYjk1YWYxLzEvYTJCQktDT2dJa3BkQU9TV1BXc2owaVVFbVgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yNzVhNzQtYjNlZi00NGNmLTgyMjAtNmEzMzQyYjk1YWYx LzEvYTJCQktDT2dJa3BkQU9TV1BXc2owaVVFbVgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWgxA84D EDFaXhQ2sV3F75tgcxzFtKZnTUYmEi3do6HkSO7lbZ3Ph6X9aiN0otNdGPrzRLn6 1KDWlFtLfc7gFKZ//6TpbIqVghwafaalCQ31DMBdv3hs3JjSgM5SPdmzrIYbnsGr mta28tMfcnK5ANUfmOJqeVPTkRWmgNVnx+SvO0+XR0nQbDshByu6HvMfiM0uKwXr hOSfour9kNBlvYk9URUPonqcGBbXoA3ze5YfPP6YOMpcA2ZpKtn3SulWlft/Zi1v YiIvKSZk2bmib0watchygUq1Y7gPKWBZccv2jZCSVj0nK2pwcrfk/7jHUsYAIa88 7MHYWfrOsdbd5w== -----END CERTIFICATE-----Generated at Sun Dec 21 02:57:05 2025 by rpki-client