This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft File: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft (raw, json) Hash identifier: vHS4slHgwqFKLz3PWShgshTJ4VFqIMzVgtCRhD234RA= Subject key identifier: 45:C2:2F:27:C9:12:64:75:BB:B2:31:D8:CE:A4:AF:44:2F:61:8C:65 Authority key identifier: 68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD Certificate issuer: /CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd Certificate serial: 019B74ED48D930A2BC41EBBCD17AA6294CD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft Manifest number: 01B5 Signing time: Wed 31 Dec 2025 15:01:06 +0000 Manifest this update: Wed 31 Dec 2025 15:01:06 +0000 Manifest next update: Thu 01 Jan 2026 15:01:06 +0000 Files and hashes: 1: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl (hash: S6tlWlvhMb4ri3hw/SVhuHb8bFG7HAY+CQFqPLDFClk=) 2: kvtNOhaPDDcYSNhoNOrRM4T-fmM.roa (hash: Z6M9k5kPeExTY6hgAM3xRd+EQBgJ9P/v9dQD7xXO8UM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:ed:48:d9:30:a2:bc:41:eb:bc:d1:7a:a6:29:4c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd Validity Not Before: Dec 31 15:01:06 2025 GMT Not After : Jan 1 15:01:06 2026 GMT Subject: CN=45c22f27c9126475bbb231d8cea4af442f618c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:24:fb:3a:44:dc:dc:79:e5:27:15:50:f1: 1c:fa:44:24:99:a4:0d:09:c3:4f:7a:3d:f3:99:08: fd:d3:0e:d7:a4:b0:b2:fc:e4:1b:ae:a9:2d:7c:96: c4:58:86:b9:55:c2:06:a2:48:61:2f:0c:6e:df:23: ac:8d:6c:18:da:d4:62:78:53:24:25:52:ee:b0:4e: e9:79:fd:d7:3b:cd:69:4f:e3:68:ba:96:5a:9c:7b: 71:b9:af:46:16:0e:d9:27:0e:eb:41:d0:67:e0:66: fb:ca:aa:96:8c:d0:fc:f5:d7:d6:03:01:27:79:d2: 49:6d:e7:00:6c:34:e1:8a:c3:bd:9b:af:94:9b:07: 4a:d0:28:93:e7:57:8f:d7:cb:a2:d0:3f:5b:f5:8f: 02:92:3f:3c:d8:cf:1d:82:02:c5:9b:1e:9d:07:2f: 3a:b0:0a:5e:93:dc:4d:2a:20:ee:70:e7:d3:83:87: 10:9b:0c:93:f0:5a:16:39:52:4c:09:1c:dd:21:8e: f4:97:90:84:20:0b:b2:3a:a4:1d:06:3a:23:2a:e6: 65:ce:c8:92:68:ca:18:6e:a0:4c:cf:22:3b:b5:ea: 1b:ee:73:9d:c5:34:7f:fa:f8:0d:90:05:a0:f3:34: 49:1a:6a:01:c0:b2:e8:cd:c0:c9:fe:70:2c:2c:20: 90:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C2:2F:27:C9:12:64:75:BB:B2:31:D8:CE:A4:AF:44:2F:61:8C:65 X509v3 Authority Key Identifier: keyid:68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:cd:c6:65:f0:20:bc:fe:ec:6d:f2:2e:64:ff:21:4f:d6:32: 7f:c8:f8:90:1d:6a:e8:27:bb:f1:a0:ad:f9:d5:43:7a:a0:28: ee:4c:6a:dc:a2:eb:c3:2a:86:00:72:74:cd:7d:f7:56:04:29: 82:ac:04:f0:2c:8d:f1:0d:d9:0e:dd:c7:03:bf:79:b2:5c:98: a7:56:c3:46:ef:2c:35:be:5b:a3:1b:73:65:78:2c:4e:26:8e: 45:69:dc:73:5b:9b:06:c1:90:e7:53:cd:b7:b2:2f:6b:37:9c: d2:77:68:50:34:ab:95:c6:d2:1c:bb:86:14:33:61:8f:36:b0: d4:8c:91:e5:f0:63:9f:9c:f5:80:62:6b:6f:88:10:f3:4b:0f: ce:c2:43:1b:f5:b6:73:31:0b:8d:1a:4a:f0:0b:6c:ce:80:00: 7f:f8:2b:29:77:a7:5f:63:99:b9:bc:de:78:d0:b1:b4:a0:5c: c4:bf:ee:e9:6b:f0:56:13:dc:e0:b6:4a:a0:c7:c7:0d:05:5a: 88:4a:8a:cc:59:a8:13:ac:d4:cb:4c:fb:1d:af:e7:e2:6a:e4: 78:5f:8b:a0:43:21:24:50:ba:f3:0c:d2:3f:ef:29:80:e3:d2: d0:61:a6:87:24:84:66:2f:96:11:d5:01:a7:fe:66:63:17:18: c5:66:3a:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt07UjZMKK8Qeu80XqmKUzRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YTZkMmVkNDZmOWQ4OWIxZGQ2MjE3NzViZDlmYjU1MzZi ZjQ0Y2QwHhcNMjUxMjMxMTUwMTA2WhcNMjYwMTAxMTUwMTA2WjAzMTEwLwYDVQQD Eyg0NWMyMmYyN2M5MTI2NDc1YmJiMjMxZDhjZWE0YWY0NDJmNjE4YzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjEk+zpE3Nx55ScVUPEc+kQkmaQN CcNPej3zmQj90w7XpLCy/OQbrqktfJbEWIa5VcIGokhhLwxu3yOsjWwY2tRieFMk JVLusE7pef3XO81pT+NoupZanHtxua9GFg7ZJw7rQdBn4Gb7yqqWjND89dfWAwEn edJJbecAbDThisO9m6+UmwdK0CiT51eP18ui0D9b9Y8Ckj882M8dggLFmx6dBy86 sApek9xNKiDucOfTg4cQmwyT8FoWOVJMCRzdIY70l5CEIAuyOqQdBjojKuZlzsiS aMoYbqBMzyI7teob7nOdxTR/+vgNkAWg8zRJGmoBwLLozcDJ/nAsLCCQgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXCLyfJEmR1u7Ix2M6kr0QvYYxlMB8GA1UdIwQY MBaAFGim0u1G+dibHdYhd1vZ+1U2v0TNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUtiUzdVYjUySnNkMWlGM1c5bjdWVGFfUk0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83MzY5MTUtMDc4Zi00NGZhLThkZWEt MDhhMjJkZTc3ZTViLzEvYUtiUzdVYjUySnNkMWlGM1c5bjdWVGFfUk0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC83MzY5MTUtMDc4Zi00NGZhLThkZWEtMDhhMjJkZTc3ZTVi LzEvYUtiUzdVYjUySnNkMWlGM1c5bjdWVGFfUk0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABc3GZfAg vP7sbfIuZP8hT9Yyf8j4kB1q6Ce78aCt+dVDeqAo7kxq3KLrwyqGAHJ0zX33VgQp gqwE8CyN8Q3ZDt3HA795slyYp1bDRu8sNb5boxtzZXgsTiaORWncc1ubBsGQ51PN t7Ivazec0ndoUDSrlcbSHLuGFDNhjzaw1IyR5fBjn5z1gGJrb4gQ80sPzsJDG/W2 czELjRpK8AtszoAAf/grKXenX2OZubzeeNCxtKBcxL/u6WvwVhPc4LZKoMfHDQVa iEqKzFmoE6zUy0z7Ha/n4mrkeF+LoEMhJFC68wzSP+8pgOPS0GGmhySEZi+WEdUB p/5mYxcYxWY6Aw== -----END CERTIFICATE-----Generated at Wed Dec 31 18:06:34 2025 by rpki-client