This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft File: aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft (raw, json) Hash identifier: i5J+bcGda1BXVT4uZYIU7q+/JCamvYbqbJYq8gEK0zg= Subject key identifier: 8D:F4:B0:30:EE:2C:35:80:BA:60:6B:2B:E4:32:E6:91:46:FA:5C:C6 Authority key identifier: 68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2 Certificate issuer: /CN=68c16663692f6c684574f6460aace6257fb792a2 Certificate serial: 019B2B1DAB80BB8BE448D65949F6B88C750B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft Manifest number: 02C7 Signing time: Wed 17 Dec 2025 07:02:03 +0000 Manifest this update: Wed 17 Dec 2025 07:02:03 +0000 Manifest next update: Thu 18 Dec 2025 07:02:03 +0000 Files and hashes: 1: D4h91o5D5LpRFiTgm7RzTo2LaNw.roa (hash: Zr6sYgO/qCLvQUpUT/a9F1ZpmzMHKgAzXVdmByDQ8A4=) 2: aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl (hash: En64aPTFtmNPqKjUTMbin/24nsBw0R8cd9VF3gleFEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:ab:80:bb:8b:e4:48:d6:59:49:f6:b8:8c:75:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c16663692f6c684574f6460aace6257fb792a2 Validity Not Before: Dec 17 07:02:03 2025 GMT Not After : Dec 18 07:02:03 2025 GMT Subject: CN=8df4b030ee2c3580ba606b2be432e69146fa5cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6d:9a:94:53:17:68:7f:80:a9:7c:85:70:c6: b0:f6:f4:3d:71:9e:94:7a:01:0a:28:c5:79:27:dc: 92:db:80:9b:aa:90:b2:ea:66:c7:df:9a:b5:49:7a: 39:6b:57:02:60:66:8a:d0:20:5d:8b:f7:e2:d8:1c: 0b:8c:c7:16:41:e6:6d:4b:b0:1b:38:52:7c:96:10: f3:9b:14:14:a8:8a:2d:0a:16:10:4c:cd:39:ae:5f: 10:ed:81:e9:08:6e:44:6f:c6:78:03:64:15:f7:23: 32:3c:bb:62:c3:e6:73:52:37:d5:53:66:ab:66:cb: 60:1d:9b:16:f4:d8:81:f5:c3:7d:da:f3:f9:7a:21: d2:9e:17:16:b6:74:d4:89:ea:5f:13:05:c4:80:5f: 1f:ad:3f:ba:45:96:b5:f6:ef:87:5e:c3:4d:26:81: cc:f0:07:00:fc:bd:7d:99:7d:f9:b8:d5:b6:07:e1: d3:e0:bb:aa:83:22:92:9d:ed:d2:28:3a:9a:4e:9c: de:1a:1c:69:da:1a:e4:1b:ce:8d:5a:e8:4e:0a:93: 32:b1:df:bd:3f:c7:a8:2d:62:8e:aa:ea:01:a1:57: e8:7a:80:dc:e9:89:df:7d:34:fd:40:2c:ab:6d:bb: 85:80:f4:e8:5b:6e:99:a1:6f:0d:bb:1c:da:7a:58: e7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F4:B0:30:EE:2C:35:80:BA:60:6B:2B:E4:32:E6:91:46:FA:5C:C6 X509v3 Authority Key Identifier: keyid:68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ca:6a:ee:58:f2:f9:70:e8:20:ae:64:c6:0d:02:f4:1b:ca: b4:0e:b1:ec:2e:84:3a:df:56:72:09:35:a6:24:e7:9b:4a:e6: 6b:40:b0:13:dd:0c:93:cc:06:12:fb:f9:d1:c8:de:67:c7:53: e1:64:4d:cd:17:ea:ab:49:02:03:44:a4:88:36:f7:7a:41:0d: d5:d1:c3:b9:44:46:4b:70:e0:51:48:3c:4e:9b:e4:f6:f2:e8: 5e:5e:9e:2f:07:79:28:31:df:bc:f0:3a:78:e3:76:93:78:5e: ed:ed:e7:43:88:19:f8:17:ec:44:9c:2a:22:5d:49:32:a3:93: 4a:29:36:81:e3:27:35:a7:e4:2b:f0:7e:49:03:9a:66:17:a5: 25:d0:b6:19:a0:25:24:54:9b:4a:30:0b:63:48:b6:6d:dd:e5: c0:c3:8a:c3:f6:1a:1e:65:11:db:e5:57:71:0f:b7:ba:c2:d8: 74:04:f2:34:3d:70:d6:d3:b5:5d:21:23:f4:67:55:37:24:5e: dd:e7:f9:95:f5:37:34:0c:de:cf:96:63:ad:e5:d1:73:42:ad: 5d:d3:84:85:95:c1:f9:a7:b2:1b:20:62:0d:d7:a5:0f:10:50: 8a:35:de:4a:42:df:e6:13:6e:56:1c:e3:5b:73:fc:b2:87:af: 12:f9:c5:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHauAu4vkSNZZSfa4jHULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzE2NjYzNjkyZjZjNjg0NTc0ZjY0NjBhYWNlNjI1N2Zi NzkyYTIwHhcNMjUxMjE3MDcwMjAzWhcNMjUxMjE4MDcwMjAzWjAzMTEwLwYDVQQD Eyg4ZGY0YjAzMGVlMmMzNTgwYmE2MDZiMmJlNDMyZTY5MTQ2ZmE1Y2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm2alFMXaH+AqXyFcMaw9vQ9cZ6U egEKKMV5J9yS24CbqpCy6mbH35q1SXo5a1cCYGaK0CBdi/fi2BwLjMcWQeZtS7Ab OFJ8lhDzmxQUqIotChYQTM05rl8Q7YHpCG5Eb8Z4A2QV9yMyPLtiw+ZzUjfVU2ar ZstgHZsW9NiB9cN92vP5eiHSnhcWtnTUiepfEwXEgF8frT+6RZa19u+HXsNNJoHM 8AcA/L19mX35uNW2B+HT4LuqgyKSne3SKDqaTpzeGhxp2hrkG86NWuhOCpMysd+9 P8eoLWKOquoBoVfoeoDc6YnffTT9QCyrbbuFgPToW26ZoW8NuxzaeljnewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI30sDDuLDWAumBrK+Qy5pFG+lzGMB8GA1UdIwQY MBaAFGjBZmNpL2xoRXT2Rgqs5iV/t5KiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1GbVkya3ZiR2hGZFBaR0Nxem1KWC0za3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81N2M2ZWEtMWJiNS00MmEwLTg2Nzkt ZDA3ZmEzZTZiM2QzLzEvYU1GbVkya3ZiR2hGZFBaR0Nxem1KWC0za3FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi81N2M2ZWEtMWJiNS00MmEwLTg2NzktZDA3ZmEzZTZiM2Qz LzEvYU1GbVkya3ZiR2hGZFBaR0Nxem1KWC0za3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApspq7ljy +XDoIK5kxg0C9BvKtA6x7C6EOt9Wcgk1piTnm0rma0CwE90Mk8wGEvv50cjeZ8dT 4WRNzRfqq0kCA0SkiDb3ekEN1dHDuURGS3DgUUg8Tpvk9vLoXl6eLwd5KDHfvPA6 eON2k3he7e3nQ4gZ+BfsRJwqIl1JMqOTSik2geMnNafkK/B+SQOaZhelJdC2GaAl JFSbSjALY0i2bd3lwMOKw/YaHmUR2+VXcQ+3usLYdATyND1w1tO1XSEj9GdVNyRe 3ef5lfU3NAzez5ZjreXRc0KtXdOEhZXB+aeyGyBiDdelDxBQijXeSkLf5hNuVhzj W3P8soevEvnFug== -----END CERTIFICATE-----Generated at Wed Dec 17 12:53:38 2025 by rpki-client