This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft File: aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft (raw, json) Hash identifier: o8bhTTTqcqj4LcstTdZ+N2OFMGWC0W0IdhGKLHwHuEc= Subject key identifier: 98:CD:AC:59:DF:A7:A1:86:B8:61:FB:8A:70:48:43:FA:6B:20:06:84 Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b Certificate serial: 019B4438F8E8CF3F08CBB7E425B07824B0A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft Manifest number: 0278 Signing time: Mon 22 Dec 2025 04:02:22 +0000 Manifest this update: Mon 22 Dec 2025 04:02:22 +0000 Manifest next update: Tue 23 Dec 2025 04:02:22 +0000 Files and hashes: 1: JCGWxFZOAT1PTlX2DjX3MLahTGI.roa (hash: reYZrRa8EPjXUGiI4oowhgBkUivqPdhb4h9UUwslPxE=) 2: UwSX5skbnYWCODti--d_CrlRLPQ.roa (hash: /UxS/W2x6BIK1JMEkMqtBl0tDdobykbVlNGkDRtr4R0=) 3: aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl (hash: rbwxcedzZchEuO083A9wvD4kuMnJKDZzvdbgAZIMzVw=) 4: ud9hdz8A9-yuIWSXWqDOgAOBfUQ.roa (hash: B1LppG18R5D0wHDpyfZIdH9KuHVBFC1jhEVgoPDOgNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:f8:e8:cf:3f:08:cb:b7:e4:25:b0:78:24:b0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b Validity Not Before: Dec 22 04:02:22 2025 GMT Not After : Dec 23 04:02:22 2025 GMT Subject: CN=98cdac59dfa7a186b861fb8a704843fa6b200684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:37:92:a0:1a:70:d6:54:21:6d:10:d7:7e: 34:bf:13:89:62:63:bd:ad:6a:a9:85:63:2a:94:61: 9b:93:d0:f6:c4:ed:ef:f9:f7:22:16:67:ee:65:e7: b5:c6:4c:f3:3f:db:16:ba:e1:9a:75:06:4b:f4:91: 8e:77:30:d3:e3:1f:66:f0:4e:30:5d:6f:84:97:6e: b8:87:2a:66:07:47:3c:c1:be:fb:df:1c:5a:84:2a: 5a:3f:c2:a2:7f:28:56:bf:e0:3c:6f:8e:19:05:5a: 21:8c:3e:a0:66:70:44:87:ea:f1:fb:89:84:e7:3a: 4e:3a:c0:64:33:23:cd:f4:a2:d5:69:30:ea:41:24: 64:1b:41:8c:a8:e8:d1:4e:3e:d4:3d:8d:26:20:82: ab:2b:05:69:c2:c4:f6:5e:74:86:63:9c:04:f2:38: b3:c9:af:a4:cf:39:6b:23:17:e8:fa:da:fc:99:f0: 49:44:73:1e:12:3d:6c:51:54:ca:c0:83:ea:15:5b: ee:4c:bf:85:a8:19:a4:20:26:97:65:1b:8c:06:3b: 01:98:37:54:04:22:2a:e0:76:4a:77:ef:05:3b:de: ab:87:73:b2:43:cd:d3:32:f3:fc:3d:20:72:62:a2: 73:ea:6d:b8:64:9c:a8:5b:01:60:91:01:32:28:20: 1a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CD:AC:59:DF:A7:A1:86:B8:61:FB:8A:70:48:43:FA:6B:20:06:84 X509v3 Authority Key Identifier: keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:87:a7:d5:c7:7d:a1:1b:bc:a3:7e:bc:f1:a9:82:92:d4:8f: cf:4d:ec:6b:7f:86:13:d1:83:9a:94:07:8c:4d:5f:74:4b:96: 1c:2a:d9:ef:54:8d:7d:94:15:01:77:a0:98:34:85:db:04:d1: 0a:10:73:06:82:f7:55:dd:8a:99:87:ea:73:24:bf:63:f0:71: a9:1f:dd:1f:77:5b:fe:41:6c:9e:13:3c:39:4e:aa:58:2c:cc: 97:aa:12:9a:86:be:8e:db:8a:0e:fb:c7:fd:f9:79:63:9d:c4: c6:92:01:13:06:68:ae:28:87:f4:d9:25:53:34:e6:7b:65:55: af:5b:74:01:a3:64:ea:82:b3:f1:81:37:13:23:2c:c5:ce:4f: d1:2a:f4:31:e1:20:21:da:b6:bf:16:2f:0c:4f:60:1b:46:a8: ff:73:a5:c3:87:57:29:84:0c:b0:ba:9b:f0:36:27:ca:10:0c: 38:2e:2f:9d:2c:7a:e7:e6:6a:ef:9b:ff:27:92:78:c4:3a:e3: ce:8a:b4:d8:0b:6f:dd:f0:49:e2:3f:ed:c6:75:e9:04:c0:34: 7c:ed:ec:85:1f:2e:fb:36:98:3c:cf:e7:e4:b9:df:04:a7:43: cd:68:0b:a1:8b:30:31:73:69:b6:c6:94:54:5f:67:ce:a2:4f: a3:10:df:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOPjozz8Iy7fkJbB4JLCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MmNmODU3MjM0NGMwYTY3NGE2N2QwZjRiNTFmMTg2ZThh NzFjNGIwHhcNMjUxMjIyMDQwMjIyWhcNMjUxMjIzMDQwMjIyWjAzMTEwLwYDVQQD Eyg5OGNkYWM1OWRmYTdhMTg2Yjg2MWZiOGE3MDQ4NDNmYTZiMjAwNjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnU3kqAacNZUIW0Q1340vxOJYmO9 rWqphWMqlGGbk9D2xO3v+fciFmfuZee1xkzzP9sWuuGadQZL9JGOdzDT4x9m8E4w XW+El264hypmB0c8wb773xxahCpaP8KifyhWv+A8b44ZBVohjD6gZnBEh+rx+4mE 5zpOOsBkMyPN9KLVaTDqQSRkG0GMqOjRTj7UPY0mIIKrKwVpwsT2XnSGY5wE8jiz ya+kzzlrIxfo+tr8mfBJRHMeEj1sUVTKwIPqFVvuTL+FqBmkICaXZRuMBjsBmDdU BCIq4HZKd+8FO96rh3OyQ83TMvP8PSByYqJz6m24ZJyoWwFgkQEyKCAakwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjNrFnfp6GGuGH7inBIQ/prIAaEMB8GA1UdIwQY MBaAFGks+FcjRMCmdKZ9D0tR8YbopxxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgt YWYzOWJiMDMwOTdmLzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgtYWYzOWJiMDMwOTdm LzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYen1cd9 oRu8o3688amCktSPz03sa3+GE9GDmpQHjE1fdEuWHCrZ71SNfZQVAXegmDSF2wTR ChBzBoL3Vd2KmYfqcyS/Y/BxqR/dH3db/kFsnhM8OU6qWCzMl6oSmoa+jtuKDvvH /fl5Y53ExpIBEwZoriiH9NklUzTme2VVr1t0AaNk6oKz8YE3EyMsxc5P0Sr0MeEg Idq2vxYvDE9gG0ao/3Olw4dXKYQMsLqb8DYnyhAMOC4vnSx65+Zq75v/J5J4xDrj zoq02Atv3fBJ4j/txnXpBMA0fO3shR8u+zaYPM/n5LnfBKdDzWgLoYswMXNptsaU VF9nzqJPoxDf8w== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:45 2025 by rpki-client