This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft File: aXhsF41lvnmuUNNVhX2hOtdKvqA.mft (raw, json) Hash identifier: 0Oeao1eiBEUQmCjv0jItmWPMLAc0oWbZSoQ+i3uZDiU= Subject key identifier: 94:57:0A:22:5E:E2:AC:C8:2F:0C:80:09:89:AE:C9:07:FD:08:8D:A7 Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0 Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0 Certificate serial: 019B4E84721BB302A3C3020D6CE933324B75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft Manifest number: 1428 Signing time: Wed 24 Dec 2025 04:01:01 +0000 Manifest this update: Wed 24 Dec 2025 04:01:01 +0000 Manifest next update: Thu 25 Dec 2025 04:01:01 +0000 Files and hashes: 1: YDBhxXo_8mcnmdLJfhI-a4ewFQg.roa (hash: fapwqKa9k7WRCqDD9O9AyPX9HW1fh2SdIIC/a8oskdc=) 2: aXhsF41lvnmuUNNVhX2hOtdKvqA.crl (hash: e47+8Y183FWETFzkVdB4sq8UKEu8uJuqtdIczlyi12s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:72:1b:b3:02:a3:c3:02:0d:6c:e9:33:32:4b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0 Validity Not Before: Dec 24 04:01:01 2025 GMT Not After : Dec 25 04:01:01 2025 GMT Subject: CN=94570a225ee2acc82f0c800989aec907fd088da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e8:08:8d:51:75:02:2c:0d:03:35:be:ee:b0: 9d:d3:07:7d:91:48:1b:a5:8e:ee:66:c1:40:e5:0f: 1e:c3:ac:a0:fd:5f:fb:77:8f:26:e2:20:8c:6f:bd: 88:75:5f:23:d0:d7:01:c5:70:7e:83:b2:95:fd:d1: 0c:bd:ae:27:74:8e:b4:c9:7e:17:33:69:b7:25:77: de:8c:df:c4:32:a7:00:81:dc:a1:39:bc:93:96:63: 91:35:af:68:94:a1:7c:9d:28:4f:a9:12:68:fc:4c: a2:4b:72:bc:d1:a8:4a:5a:12:50:93:53:48:4d:9f: 0b:a3:54:e8:51:12:fb:97:22:84:29:df:66:75:62: 5b:e0:29:a9:6f:93:50:f8:15:62:38:16:ad:39:53: fb:5f:a6:8a:43:02:25:ae:fb:b5:c7:c8:60:ab:c5: 18:6a:0f:c8:57:eb:44:6c:f8:f2:3f:30:a1:69:7d: 56:18:d2:5f:00:25:4c:d0:32:a7:f3:06:04:d7:8f: 12:d4:e9:24:ce:a9:6b:5b:60:55:63:59:aa:8d:42: 84:5d:ec:1f:6b:90:55:aa:74:1b:c7:d3:e4:1c:40: 96:53:e0:03:a3:78:e7:e0:b3:3d:00:2a:78:f6:84: 4d:1c:3f:ba:ca:0a:a9:01:35:b5:45:11:63:64:f0: 1c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:57:0A:22:5E:E2:AC:C8:2F:0C:80:09:89:AE:C9:07:FD:08:8D:A7 X509v3 Authority Key Identifier: keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:66:62:d0:50:8e:df:96:aa:c8:37:16:b7:2a:27:5a:d3:ee: a4:09:f3:e9:b9:0b:b0:cf:94:21:a6:23:f4:ae:6c:0b:a5:15: 5a:f7:c4:b5:1d:2d:b2:0f:ff:63:6a:88:0b:7b:98:84:52:17: af:e9:9d:07:2a:bb:e4:7f:b3:a0:76:25:62:13:5d:13:09:41: 6f:12:b9:d4:b6:a6:55:32:7b:7d:f9:80:20:98:84:41:f2:7c: df:b8:d9:a2:eb:e3:46:c9:fa:ed:1c:e6:ce:b1:02:81:77:3a: b4:97:d4:70:b6:56:e5:dd:58:9c:61:12:61:df:7a:f6:fe:b8: 8f:91:f6:0c:65:c5:6d:00:dc:38:47:f1:7e:56:71:c6:c7:8a: 23:9b:cd:97:49:82:15:25:43:4b:8c:66:4f:4d:5f:10:d1:6a: d2:b7:85:f4:9f:a5:09:b9:e0:ee:fb:8a:53:d9:39:4f:14:d6: b7:1a:4c:10:4c:c3:d4:59:9b:56:75:63:74:c4:81:88:d2:6e: 41:89:b1:05:1b:24:f4:fa:20:0b:3c:7a:44:a8:31:ba:7e:0b: d9:f9:33:c4:c4:cb:6f:42:8a:1b:32:01:e1:e3:14:0b:ec:59: 01:2a:0b:63:ef:3e:62:16:77:cd:3c:5c:08:27:0b:ac:0d:de: 1c:d0:4d:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhHIbswKjwwINbOkzMkt1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5Nzg2YzE3OGQ2NWJlNzlhZTUwZDM1NTg1N2RhMTNhZDc0 YWJlYTAwHhcNMjUxMjI0MDQwMTAxWhcNMjUxMjI1MDQwMTAxWjAzMTEwLwYDVQQD Eyg5NDU3MGEyMjVlZTJhY2M4MmYwYzgwMDk4OWFlYzkwN2ZkMDg4ZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+gIjVF1AiwNAzW+7rCd0wd9kUgb pY7uZsFA5Q8ew6yg/V/7d48m4iCMb72IdV8j0NcBxXB+g7KV/dEMva4ndI60yX4X M2m3JXfejN/EMqcAgdyhObyTlmORNa9olKF8nShPqRJo/EyiS3K80ahKWhJQk1NI TZ8Lo1ToURL7lyKEKd9mdWJb4Cmpb5NQ+BViOBatOVP7X6aKQwIlrvu1x8hgq8UY ag/IV+tEbPjyPzChaX1WGNJfACVM0DKn8wYE148S1OkkzqlrW2BVY1mqjUKEXewf a5BVqnQbx9PkHECWU+ADo3jn4LM9ACp49oRNHD+6ygqpATW1RRFjZPAcqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRXCiJe4qzILwyACYmuyQf9CI2nMB8GA1UdIwQY MBaAFGl4bBeNZb55rlDTVYV9oTrXSr6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wMzRhZGMtYzRkMy00NDg0LTg4ZjIt OGI4ZWVjMTg2OTM0LzEvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wMzRhZGMtYzRkMy00NDg0LTg4ZjItOGI4ZWVjMTg2OTM0 LzEvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWZi0FCO 35aqyDcWtyonWtPupAnz6bkLsM+UIaYj9K5sC6UVWvfEtR0tsg//Y2qIC3uYhFIX r+mdByq75H+zoHYlYhNdEwlBbxK51LamVTJ7ffmAIJiEQfJ837jZouvjRsn67Rzm zrECgXc6tJfUcLZW5d1YnGESYd969v64j5H2DGXFbQDcOEfxflZxxseKI5vNl0mC FSVDS4xmT01fENFq0reF9J+lCbng7vuKU9k5TxTWtxpMEEzD1FmbVnVjdMSBiNJu QYmxBRsk9PogCzx6RKgxun4L2fkzxMTLb0KKGzIB4eMUC+xZASoLY+8+YhZ3zTxc CCcLrA3eHNBNXA== -----END CERTIFICATE-----Generated at Wed Dec 24 08:48:10 2025 by rpki-client