This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json) Hash identifier: 9FAad3xlFy+xy7Tuwp3Y7rGzveovh0FpePyZ/Cxueuc= Subject key identifier: 95:41:AB:ED:64:4C:B9:1E:4E:9F:E3:3C:20:4A:5E:E0:29:7C:D8:47 Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd Certificate serial: 019B3D22E96D9CEFC640EB4C406C8BB5C144 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft Manifest number: 01F0 Signing time: Sat 20 Dec 2025 19:00:56 +0000 Manifest this update: Sat 20 Dec 2025 19:00:56 +0000 Manifest next update: Sun 21 Dec 2025 19:00:56 +0000 Files and hashes: 1: _ih0IDGdtVSv2B7pineBzs1nKB4.roa (hash: fb9kU4b5LG0UVoJvGOy+jPoLLrOl+4P8QNYdunyPUFs=) 2: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: 6dHZZNw5oc5oJ+I3RGTkl7cj0Tlp39nLy6iuQ5fO2eQ=) 3: zORT1METPqqNBfYdoSZVGl7banI.roa (hash: T3hSGGgcSf2JLTfvFrJkJFTgNqevdB8ftoBAmirWbTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:e9:6d:9c:ef:c6:40:eb:4c:40:6c:8b:b5:c1:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd Validity Not Before: Dec 20 19:00:56 2025 GMT Not After : Dec 21 19:00:56 2025 GMT Subject: CN=9541abed644cb91e4e9fe33c204a5ee0297cd847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:8d:e1:bc:a4:e2:5d:eb:82:24:f3:f0:57: ed:51:83:3d:56:e6:37:32:1f:d6:31:c3:b8:50:af: 6e:5c:88:4f:3e:1c:1b:1b:c6:fd:7e:1e:11:73:9c: b2:35:74:88:d8:28:1d:ce:43:f9:95:d5:75:03:87: 0a:85:52:e6:e4:cf:33:6a:b8:49:7c:03:59:bd:b4: 8d:a9:ee:66:64:fc:8c:63:4d:46:61:c5:4b:27:06: 63:d7:fd:2f:24:5f:79:9b:13:06:cd:b9:2a:6d:38: f9:cc:0a:45:f4:ac:6f:e1:01:87:f2:e9:c9:e6:16: d6:f0:dd:27:06:63:a4:71:e3:2e:c3:4e:1f:0c:2e: a6:1c:33:88:29:cd:85:b3:7a:a0:06:46:8e:15:68: 8a:be:81:61:e1:8b:b4:35:5c:d7:78:9c:b4:14:b7: 2c:33:17:5e:94:8e:70:17:cb:56:c4:06:2d:2f:c1: 49:4e:d1:6b:27:d2:71:37:ef:5e:6f:4e:15:7b:89: 42:56:cc:8d:c9:9f:b1:d3:2a:2f:09:63:4a:fe:cc: 82:89:7e:68:e2:80:22:8e:e0:50:b7:a5:25:99:49: 60:21:db:6d:61:b1:a9:86:c8:a4:97:b8:c3:41:90: b3:a0:e2:75:62:7a:f6:c3:58:a5:5e:78:32:89:d3: e2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:41:AB:ED:64:4C:B9:1E:4E:9F:E3:3C:20:4A:5E:E0:29:7C:D8:47 X509v3 Authority Key Identifier: keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f6:3b:d6:a7:83:80:78:31:4a:2a:a7:05:c3:2d:35:b4:cf: f1:b5:6e:78:d3:68:1d:bd:72:a2:61:49:36:5e:fe:bc:b8:38: f3:01:e2:10:43:0b:15:3f:67:8b:51:ca:55:d0:3e:c4:50:71: ba:10:cf:51:ce:5a:de:c0:22:34:c4:9b:df:dd:52:0e:c7:cc: 4e:cb:c7:fa:49:95:87:c6:57:3a:46:9b:1f:64:32:92:6b:f8: 85:70:c1:c9:21:e6:f3:85:ff:c0:46:16:4e:c2:62:b5:f6:61: 1a:71:93:71:17:d9:55:7d:1f:30:c6:bd:02:fb:6e:9f:22:d6: 71:e3:57:14:7b:7c:df:6c:6b:46:72:fe:7a:8f:01:ef:5d:62: 5d:89:79:7c:32:11:4a:e5:ee:df:61:58:6c:f8:1d:36:5b:f2: b0:d4:60:12:8a:05:45:dc:ee:a6:69:7c:55:cd:45:f9:f7:fb: 88:25:88:b0:c7:52:35:dd:ce:de:94:02:e1:7a:d2:b0:1a:a3: 09:32:5a:86:d3:7a:f7:fa:0b:1c:fa:e3:ea:73:1d:68:d6:52: 53:01:70:24:85:e8:3c:7e:52:20:59:04:6f:b3:86:91:2c:03: c9:31:9b:74:78:7f:49:43:a1:04:97:76:43:e5:72:4b:a3:a3: 9e:e7:f1:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IultnO/GQOtMQGyLtcFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NDU1YTM5MzliYWNiYWE1OTE4YzdlZGQ1NDY0ZTExYmEx YzhjZGQwHhcNMjUxMjIwMTkwMDU2WhcNMjUxMjIxMTkwMDU2WjAzMTEwLwYDVQQD Eyg5NTQxYWJlZDY0NGNiOTFlNGU5ZmUzM2MyMDRhNWVlMDI5N2NkODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzKN4byk4l3rgiTz8FftUYM9VuY3 Mh/WMcO4UK9uXIhPPhwbG8b9fh4Rc5yyNXSI2CgdzkP5ldV1A4cKhVLm5M8zarhJ fANZvbSNqe5mZPyMY01GYcVLJwZj1/0vJF95mxMGzbkqbTj5zApF9Kxv4QGH8unJ 5hbW8N0nBmOkceMuw04fDC6mHDOIKc2Fs3qgBkaOFWiKvoFh4Yu0NVzXeJy0FLcs MxdelI5wF8tWxAYtL8FJTtFrJ9JxN+9eb04Ve4lCVsyNyZ+x0yovCWNK/syCiX5o 4oAijuBQt6UlmUlgIdttYbGphsikl7jDQZCzoOJ1Ynr2w1ilXngyidPicQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVBq+1kTLkeTp/jPCBKXuApfNhHMB8GA1UdIwQY MBaAFGhFWjk5usuqWRjH7dVGThG6HIzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAt YTI2Y2I2NDI5NDg2LzEvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAtYTI2Y2I2NDI5NDg2 LzEvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfY71qeD gHgxSiqnBcMtNbTP8bVueNNoHb1yomFJNl7+vLg48wHiEEMLFT9ni1HKVdA+xFBx uhDPUc5a3sAiNMSb391SDsfMTsvH+kmVh8ZXOkabH2Qykmv4hXDBySHm84X/wEYW TsJitfZhGnGTcRfZVX0fMMa9AvtunyLWceNXFHt832xrRnL+eo8B711iXYl5fDIR SuXu32FYbPgdNlvysNRgEooFRdzupml8Vc1F+ff7iCWIsMdSNd3O3pQC4XrSsBqj CTJahtN69/oLHPrj6nMdaNZSUwFwJIXoPH5SIFkEb7OGkSwDyTGbdHh/SUOhBJd2 Q+VyS6OjnufxEA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:56:04 2025 by rpki-client