This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft File: aZuxClVyF1sDo8fL--k4t7FEGsA.mft (raw, json) Hash identifier: IW9AOCIlhWikpg31u7Di90MMCv5+GI39yFOuZJSViAw= Subject key identifier: 99:02:54:CE:30:0C:20:63:E2:B8:6B:0B:03:5D:C8:ED:EB:E4:44:CE Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0 Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0 Certificate serial: 019B638C013473D9FBA9C061121A67EE5766 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft Manifest number: 08F6 Signing time: Sun 28 Dec 2025 06:01:18 +0000 Manifest this update: Sun 28 Dec 2025 06:01:18 +0000 Manifest next update: Mon 29 Dec 2025 06:01:18 +0000 Files and hashes: 1: N5yHtSmIzjdux70VxbibkigJnPs.roa (hash: 9gzwKXozjeocMD7/cGK25SjjWM/umahL9QM8Kbeipak=) 2: aZuxClVyF1sDo8fL--k4t7FEGsA.crl (hash: p+lrISrm6gcajB0Bh2buZcW+16BXlX2TRCbPhNEu01Y=) 3: ha1GFGgyrmpD4R8KeDnEZpxuKqs.roa (hash: nTt2LcLEhACSb9mIP1F5UH8NEmx1EFCAvtQLB71m5zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:8c:01:34:73:d9:fb:a9:c0:61:12:1a:67:ee:57:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0 Validity Not Before: Dec 28 06:01:18 2025 GMT Not After : Dec 29 06:01:18 2025 GMT Subject: CN=990254ce300c2063e2b86b0b035dc8edebe444ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:a3:c0:8f:04:29:ea:bd:4c:0e:94:2f:56: 10:93:69:ec:66:fc:a8:41:66:bf:87:41:a5:3f:65: 66:08:8a:45:21:80:6e:fa:08:da:29:cb:04:2f:91: 7b:e4:3d:4a:2c:1a:da:69:eb:1a:c5:a8:c9:1f:b3: f2:d4:de:56:ae:a2:c1:7f:35:57:92:39:8d:aa:19: 74:f8:8d:a1:4e:91:6b:09:10:0b:a2:87:b2:1b:2d: ec:24:23:9c:3b:e9:55:ee:69:35:ae:c6:aa:dd:05: 85:1f:1b:7f:37:fe:27:e2:ca:14:79:a1:65:e9:e7: 52:0a:e4:3c:dc:d5:15:99:98:d5:92:51:bd:db:6b: fa:a7:86:00:be:f6:05:3d:9f:21:03:07:33:e5:0b: fa:2b:38:fa:57:85:1e:ab:19:44:96:a7:9e:b2:d0: 4a:ee:ff:10:c3:4f:e1:46:b0:13:91:b6:eb:40:02: 09:b2:21:e6:42:b0:d9:e4:47:93:f4:69:91:d7:4c: 62:51:58:bc:dc:77:d0:8a:42:62:f9:fb:65:81:ea: 18:82:a9:bf:74:12:2e:e1:72:bf:e6:b9:64:75:0e: c6:4a:5f:c9:ac:a2:d4:96:ef:a3:68:7d:37:47:6b: 83:8b:a1:e7:0c:90:8c:b6:e8:4a:c4:a1:f1:79:e1: 5f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:02:54:CE:30:0C:20:63:E2:B8:6B:0B:03:5D:C8:ED:EB:E4:44:CE X509v3 Authority Key Identifier: keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a5:82:cb:6d:66:80:20:e7:30:cd:06:16:23:d3:f3:72:b1: be:4d:be:c8:52:2a:ff:f2:0b:93:ac:3e:b5:e9:68:54:6c:2d: c3:4d:1f:ed:34:fb:d4:58:42:97:80:b2:22:1e:91:a6:1c:77: 4f:70:5f:5c:53:32:cd:7a:d1:dc:31:03:95:13:8a:92:fb:6c: 20:88:3b:c9:89:1b:d5:5e:20:25:e3:38:34:17:d3:ef:0c:5f: 28:6e:af:53:95:9e:72:18:4a:22:d2:4e:c3:08:40:af:f8:3e: 3d:6d:ed:74:e6:92:c9:bc:d1:45:b6:b6:18:4b:f8:78:01:47: 14:8c:dd:5a:f8:de:8a:c5:a4:1d:bc:8b:66:e5:de:c0:28:95: 9c:42:a0:f6:43:92:11:61:cb:af:b5:c8:17:d6:3a:7e:1b:98: f9:71:fb:bb:5f:d7:a9:d9:cc:76:08:ff:f3:7f:89:96:87:22: 76:6f:75:84:75:e3:b0:fa:f7:b1:9b:d5:0c:96:97:ab:8e:10: 8f:f1:14:1d:e5:52:23:d7:91:19:0d:1c:53:75:df:89:09:8c: b4:58:8d:d0:6a:4b:80:5b:66:09:8d:5c:de:de:f9:7d:cc:ab: bb:bd:af:bd:b1:89:ce:8b:be:69:e7:69:e1:77:95:d4:20:f6: 56:91:b7:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjjAE0c9n7qcBhEhpn7ldmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWJiMTBhNTU3MjE3NWIwM2EzYzdjYmZiZTkzOGI3YjE0 NDFhYzAwHhcNMjUxMjI4MDYwMTE4WhcNMjUxMjI5MDYwMTE4WjAzMTEwLwYDVQQD Eyg5OTAyNTRjZTMwMGMyMDYzZTJiODZiMGIwMzVkYzhlZGViZTQ0NGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXqjwI8EKeq9TA6UL1YQk2nsZvyo QWa/h0GlP2VmCIpFIYBu+gjaKcsEL5F75D1KLBraaesaxajJH7Py1N5WrqLBfzVX kjmNqhl0+I2hTpFrCRALooeyGy3sJCOcO+lV7mk1rsaq3QWFHxt/N/4n4soUeaFl 6edSCuQ83NUVmZjVklG922v6p4YAvvYFPZ8hAwcz5Qv6Kzj6V4UeqxlElqeestBK 7v8Qw0/hRrATkbbrQAIJsiHmQrDZ5EeT9GmR10xiUVi83HfQikJi+ftlgeoYgqm/ dBIu4XK/5rlkdQ7GSl/JrKLUlu+jaH03R2uDi6HnDJCMtuhKxKHxeeFf0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkCVM4wDCBj4rhrCwNdyO3r5ETOMB8GA1UdIwQY MBaAFGmbsQpVchdbA6PHy/vpOLexRBrAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iZmEwN2ItODdjMi00NTJhLWJkMGMt OGFhZTQzMDYzYmNhLzEvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9iZmEwN2ItODdjMi00NTJhLWJkMGMtOGFhZTQzMDYzYmNh LzEvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6WCy21m gCDnMM0GFiPT83Kxvk2+yFIq//ILk6w+teloVGwtw00f7TT71FhCl4CyIh6Rphx3 T3BfXFMyzXrR3DEDlROKkvtsIIg7yYkb1V4gJeM4NBfT7wxfKG6vU5WechhKItJO wwhAr/g+PW3tdOaSybzRRba2GEv4eAFHFIzdWvjeisWkHbyLZuXewCiVnEKg9kOS EWHLr7XIF9Y6fhuY+XH7u1/XqdnMdgj/83+Jlocidm91hHXjsPr3sZvVDJaXq44Q j/EUHeVSI9eRGQ0cU3XfiQmMtFiN0GpLgFtmCY1c3t75fcyru72vvbGJzou+aedp 4XeV1CD2VpG3Bw== -----END CERTIFICATE-----Generated at Sun Dec 28 09:42:14 2025 by rpki-client