This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft File: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft (raw, json) Hash identifier: zQzFpkzs1X68AUfC2NnDUu4fyrMbrRpEp9uQI1PcbA0= Subject key identifier: 7D:DF:AA:4C:3C:E5:84:8B:A8:60:D4:81:67:FE:0E:85:18:09:8E:86 Authority key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15 Certificate issuer: /CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15 Certificate serial: 019B3C0FF971B7194B59E8E1AAAE3C73E900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft Manifest number: 0128 Signing time: Sat 20 Dec 2025 14:00:38 +0000 Manifest this update: Sat 20 Dec 2025 14:00:38 +0000 Manifest next update: Sun 21 Dec 2025 14:00:38 +0000 Files and hashes: 1: UdICj6zPcID-7_Hf3d1V7ttrE0M.roa (hash: 1plINgz643oMJ6Sr7Nq6vQNGyijqcXnzXvCmKpTHyIY=) 2: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl (hash: fxTryHcpFA/eZUXdd9QG/PUf2pNa/7EmPHXv31xF91k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:f9:71:b7:19:4b:59:e8:e1:aa:ae:3c:73:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Dec 21 14:00:38 2025 GMT Subject: CN=7ddfaa4c3ce5848ba860d48167fe0e8518098e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a3:4a:b7:5a:25:fa:e4:64:97:9b:c3:14:57: 9b:82:cf:d1:45:89:ef:0a:a4:34:c2:8d:d5:d6:c9: 03:d6:f8:2e:68:de:a9:ea:01:5b:ae:e2:cf:cc:d9: 43:42:3e:bf:ac:f5:aa:11:3a:17:dd:ee:57:07:8d: ba:20:29:ea:2d:17:ce:62:35:8e:bb:ee:9f:a3:e9: 63:86:b9:d2:2b:a8:1c:c1:32:ed:98:0d:94:65:45: af:5e:36:a3:3e:81:f9:7b:6d:0c:0c:b6:1e:bb:90: 0b:c7:0f:10:6f:77:32:04:bb:5d:62:ff:3a:4b:a7: 1d:3e:76:fb:56:50:92:14:d8:80:20:7e:df:db:04: 18:77:71:32:cf:fb:78:c7:18:d5:cd:c5:ce:cf:18: 6a:99:45:f1:9c:6d:b8:9f:90:13:ec:d7:a0:ff:0d: 69:10:40:19:d3:9e:85:f3:27:92:66:d2:5b:51:81: 31:ad:31:10:92:9c:24:82:f3:0a:fc:03:6a:4a:c2: 39:b3:a6:50:37:39:d3:bf:73:a9:a4:50:58:de:a9: b8:3b:44:fe:48:7b:2a:fe:a4:ef:40:12:e5:f5:f6: 6c:62:c1:39:19:f4:e2:00:0a:b7:71:ef:bc:81:0b: ba:6e:c9:3b:f0:07:b0:10:18:0e:02:ee:91:95:85: 83:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DF:AA:4C:3C:E5:84:8B:A8:60:D4:81:67:FE:0E:85:18:09:8E:86 X509v3 Authority Key Identifier: keyid:69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:b9:d3:fd:2e:2d:80:8f:6b:eb:f1:80:4b:e8:6c:bd:4f:aa: e2:41:f2:f7:6f:2e:ff:33:65:7b:78:13:fb:55:9e:ac:6d:85: 84:69:5a:44:f0:0c:ee:87:e2:de:be:a1:f8:71:41:f7:6a:f0: af:a2:37:38:03:85:0b:55:6b:cf:29:b8:86:85:68:1f:d9:6c: 9f:ce:c9:74:72:ca:53:3a:4a:58:71:b9:9b:ab:70:00:ab:9c: 91:75:3d:46:eb:72:dd:86:37:27:b9:b0:be:83:8e:ef:7a:e2: e7:48:4b:6f:29:e6:cd:fc:87:69:44:b0:d5:ce:22:ba:a0:5e: 2c:ea:ec:f8:65:e2:c4:0c:15:fe:af:96:69:52:85:71:63:c6: 21:89:49:ac:50:c0:06:72:04:06:b1:60:18:02:de:55:54:7c: 45:92:a1:f0:2b:25:fb:86:56:46:d3:7f:84:d7:8d:d9:0e:c9: ec:04:b9:84:4e:b1:e1:f7:ea:e2:c4:80:8e:da:a8:cd:11:38: 11:42:d4:e9:43:63:3a:3e:03:fe:fb:e1:f8:cf:ee:12:7f:69: 6e:31:d6:de:22:94:dd:0f:23:89:ff:b3:f6:3e:de:0c:45:59: 19:96:c5:f5:a1:ff:15:36:00:9a:69:2d:4f:d1:eb:96:29:2d: 46:01:ba:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D/lxtxlLWejhqq48c+kAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWVlMDhmZjY3MTYwMGQ0MDM0YTNlMWQ5ZDVhOTAyNDVj YzljMTUwHhcNMjUxMjIwMTQwMDM4WhcNMjUxMjIxMTQwMDM4WjAzMTEwLwYDVQQD Eyg3ZGRmYWE0YzNjZTU4NDhiYTg2MGQ0ODE2N2ZlMGU4NTE4MDk4ZTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaNKt1ol+uRkl5vDFFebgs/RRYnv CqQ0wo3V1skD1vguaN6p6gFbruLPzNlDQj6/rPWqEToX3e5XB426ICnqLRfOYjWO u+6fo+ljhrnSK6gcwTLtmA2UZUWvXjajPoH5e20MDLYeu5ALxw8Qb3cyBLtdYv86 S6cdPnb7VlCSFNiAIH7f2wQYd3Eyz/t4xxjVzcXOzxhqmUXxnG24n5AT7Neg/w1p EEAZ056F8yeSZtJbUYExrTEQkpwkgvMK/ANqSsI5s6ZQNznTv3OppFBY3qm4O0T+ SHsq/qTvQBLl9fZsYsE5GfTiAAq3ce+8gQu6bsk78AewEBgOAu6RlYWDnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3fqkw85YSLqGDUgWf+DoUYCY6GMB8GA1UdIwQY MBaAFGme4I/2cWANQDSj4dnVqQJFzJwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lNjcyN2MtMDgwMy00YTAzLTk3NzEt MWQwOGFkZGNhMjcxLzEvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lNjcyN2MtMDgwMy00YTAzLTk3NzEtMWQwOGFkZGNhMjcx LzEvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7nT/S4t gI9r6/GAS+hsvU+q4kHy928u/zNle3gT+1WerG2FhGlaRPAM7ofi3r6h+HFB92rw r6I3OAOFC1Vrzym4hoVoH9lsn87JdHLKUzpKWHG5m6twAKuckXU9Ruty3YY3J7mw voOO73ri50hLbynmzfyHaUSw1c4iuqBeLOrs+GXixAwV/q+WaVKFcWPGIYlJrFDA BnIEBrFgGALeVVR8RZKh8Csl+4ZWRtN/hNeN2Q7J7AS5hE6x4ffq4sSAjtqozRE4 EULU6UNjOj4D/vvh+M/uEn9pbjHW3iKU3Q8jif+z9j7eDEVZGZbF9aH/FTYAmmkt T9HrliktRgG69g== -----END CERTIFICATE-----Generated at Sat Dec 20 16:17:30 2025 by rpki-client