This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json) Hash identifier: d+VjfbzeOHeR1I+CHtWnrCPOo5HXxRDlpZjuiurVOdQ= Subject key identifier: 71:C7:36:DD:42:33:0B:73:60:CA:A3:4C:E0:17:0E:96:47:59:DC:F3 Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff Certificate serial: 019B4F29C55DDD9C186F34E56EEFF593080F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft Manifest number: 0BFE Signing time: Wed 24 Dec 2025 07:01:36 +0000 Manifest this update: Wed 24 Dec 2025 07:01:36 +0000 Manifest next update: Thu 25 Dec 2025 07:01:36 +0000 Files and hashes: 1: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: vgcB7Q0lGb0yZUJegmcX4y1rN5dtJTfiJe1HVcUi8Gc=) 2: sO327XoAur1DplfvgQUPrjYRerA.roa (hash: Y49ly/oM+VJ0V39d5VwjbL8ksFq63YJHHzGwktv4Jrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:c5:5d:dd:9c:18:6f:34:e5:6e:ef:f5:93:08:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff Validity Not Before: Dec 24 07:01:36 2025 GMT Not After : Dec 25 07:01:36 2025 GMT Subject: CN=71c736dd42330b7360caa34ce0170e964759dcf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:84:88:7f:9c:32:e3:dd:fb:db:a7:86:53:8d: 11:48:8c:20:50:18:a2:1d:40:0c:38:50:d3:34:5d: dd:d9:f8:50:a5:e6:4a:f8:ac:05:88:51:68:13:9b: 33:e8:3b:1b:c2:f1:7f:70:2c:15:4e:d8:1e:38:2e: e9:c4:5e:65:5b:67:c3:35:9c:68:9b:a9:83:f6:76: 3d:cb:d8:b7:11:93:e1:a8:64:3f:d4:63:2e:39:b8: c5:98:15:19:3d:7f:aa:79:10:9c:7f:4b:bf:2f:4e: 3d:bd:c4:44:4a:b2:82:df:de:f1:78:90:c2:49:4d: 3b:a7:60:b7:6a:c4:0b:f2:bc:65:7a:e1:e8:13:eb: af:07:88:11:3a:94:a8:71:94:f2:76:9a:20:0d:85: 27:0d:ca:a0:b5:e7:c6:97:0e:d7:ad:43:c8:96:c8: fd:f1:73:a3:0c:ab:68:cc:74:f7:09:8f:41:dc:bf: 7c:e0:f0:31:19:4b:d6:83:41:ee:a7:6d:c7:bd:2a: e8:a0:31:6f:30:8a:9b:40:74:6b:19:c8:9a:f5:2b: 81:8a:55:80:52:49:e7:27:aa:cf:d1:23:d4:cf:2b: e0:1b:b0:cb:a3:84:30:c1:e4:09:88:3e:23:cb:15: 53:de:c4:dc:8a:a3:13:24:b4:a5:5f:65:21:bd:c2: 54:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C7:36:DD:42:33:0B:73:60:CA:A3:4C:E0:17:0E:96:47:59:DC:F3 X509v3 Authority Key Identifier: keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d3:ad:b9:bb:5c:5c:9b:5e:02:6a:78:1b:38:66:c9:5c:97: ef:9d:1d:b8:e8:b6:e5:72:95:e6:16:91:34:f4:bf:9f:35:68: 73:45:e5:73:52:5e:7f:08:ee:35:f5:9b:3e:8d:75:fa:a3:1b: 3d:d8:97:16:3b:ac:a3:eb:d3:84:30:06:ec:89:ab:4f:ce:99: 97:80:20:9f:9f:18:d4:62:2e:2b:e3:83:56:19:a9:19:0e:c5: ab:9e:94:c3:30:d6:cb:59:89:64:e2:b2:b4:fe:07:e1:60:8e: b0:7b:17:eb:13:48:4c:ce:2e:a9:4b:d8:24:00:40:8b:ae:03: c9:3c:d8:84:a6:0e:de:f7:4c:d5:76:3a:6c:f3:e3:03:7f:5d: 60:2c:3f:a1:4b:6e:36:6f:c8:35:8f:88:24:0f:ca:06:33:3c: 19:0d:f0:ab:d7:77:d4:fd:29:05:98:bc:9f:16:87:7c:e7:92: e9:b0:4a:ee:3e:37:4f:d0:0e:55:e3:f1:16:ce:2e:56:f3:72: 2a:61:0c:3b:ce:44:57:a1:45:3e:b1:9f:72:c7:f6:5e:41:37: e0:5d:fd:2a:d8:7d:41:96:1f:2b:32:51:e1:df:2a:dd:5f:a2: f6:bf:7e:67:b6:e2:a3:7e:7b:12:a7:7a:9b:28:1d:1a:a5:1d: d3:e4:33:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKcVd3ZwYbzTlbu/1kwgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NjU5NmIzM2I0OGMyOTM1ZGQxMjlmYWM2ZTYxZGJjMDA4 MTkzZmYwHhcNMjUxMjI0MDcwMTM2WhcNMjUxMjI1MDcwMTM2WjAzMTEwLwYDVQQD Eyg3MWM3MzZkZDQyMzMwYjczNjBjYWEzNGNlMDE3MGU5NjQ3NTlkY2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoSIf5wy493726eGU40RSIwgUBii HUAMOFDTNF3d2fhQpeZK+KwFiFFoE5sz6DsbwvF/cCwVTtgeOC7pxF5lW2fDNZxo m6mD9nY9y9i3EZPhqGQ/1GMuObjFmBUZPX+qeRCcf0u/L049vcRESrKC397xeJDC SU07p2C3asQL8rxleuHoE+uvB4gROpSocZTydpogDYUnDcqgtefGlw7XrUPIlsj9 8XOjDKtozHT3CY9B3L984PAxGUvWg0Hup23HvSrooDFvMIqbQHRrGcia9SuBilWA UknnJ6rP0SPUzyvgG7DLo4QwweQJiD4jyxVT3sTciqMTJLSlX2UhvcJUkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHHNt1CMwtzYMqjTOAXDpZHWdzzMB8GA1UdIwQY MBaAFGhllrM7SMKTXdEp+sbmHbwAgZP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jMDY5ZjEtOWY4Mi00ZDVhLTg2MzEt NDUxY2RhMDc3ZDg2LzEvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9jMDY5ZjEtOWY4Mi00ZDVhLTg2MzEtNDUxY2RhMDc3ZDg2 LzEvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNOtubtc XJteAmp4GzhmyVyX750duOi25XKV5haRNPS/nzVoc0Xlc1JefwjuNfWbPo11+qMb PdiXFjuso+vThDAG7ImrT86Zl4Agn58Y1GIuK+ODVhmpGQ7Fq56UwzDWy1mJZOKy tP4H4WCOsHsX6xNITM4uqUvYJABAi64DyTzYhKYO3vdM1XY6bPPjA39dYCw/oUtu Nm/INY+IJA/KBjM8GQ3wq9d31P0pBZi8nxaHfOeS6bBK7j43T9AOVePxFs4uVvNy KmEMO85EV6FFPrGfcsf2XkE34F39Kth9QZYfKzJR4d8q3V+i9r9+Z7bio357Eqd6 mygdGqUd0+QzPg== -----END CERTIFICATE-----Generated at Wed Dec 24 16:17:13 2025 by rpki-client