This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json) Hash identifier: JaxpUFQCZxjDjmLzCPTWlYL4rzJi3hUXBCrq4AumF84= Subject key identifier: 58:D1:D9:6B:76:B9:91:2E:2E:2A:C4:46:44:B0:0D:35:1B:60:24:62 Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6 Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6 Certificate serial: 019B2C2F6A8142507F65CB017693620F90CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft Manifest number: 1049 Signing time: Wed 17 Dec 2025 12:01:03 +0000 Manifest this update: Wed 17 Dec 2025 12:01:03 +0000 Manifest next update: Thu 18 Dec 2025 12:01:03 +0000 Files and hashes: 1: 0XAsS9JxHUdvax1K7_fLGVXaRlc.roa (hash: Og5mtIgEa7Wu+4+Cbt7l5y3X6d9YBgIumgqPXgh/sFY=) 2: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: 18YG2fNiEEzh94JrjjTvmgBAOGirSCHzcDYvV3Z8wOg=) 3: lLAkb6pUNfNtZoIu1JXuT6kYgr0.roa (hash: V0zSt5aI8VF1NHmDxyjc0WLd9N/L37RndKkVSMmK+5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:6a:81:42:50:7f:65:cb:01:76:93:62:0f:90:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6 Validity Not Before: Dec 17 12:01:03 2025 GMT Not After : Dec 18 12:01:03 2025 GMT Subject: CN=58d1d96b76b9912e2e2ac44644b00d351b602462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f8:b6:13:d4:22:19:9b:9c:8e:b8:5f:de:1b: f8:be:3f:d3:a7:72:98:61:b6:77:96:50:48:bb:f3: e9:ad:2a:fd:a4:02:d0:15:18:f2:da:5d:77:b5:a9: b4:64:14:6f:2c:3b:34:73:93:bc:f2:7a:7f:3f:eb: 11:92:a9:d6:af:ec:4b:b2:50:e9:cb:f2:25:af:98: 36:1c:76:7f:a6:ee:55:44:c0:49:db:af:1f:1d:a3: 27:73:ce:ed:fb:37:17:23:4b:6f:62:61:06:c5:01: 2c:0f:db:c1:e3:da:ba:9e:19:02:fc:6b:0e:6e:32: b5:61:fd:5c:69:42:2d:fe:3f:50:e3:d2:2a:4c:a0: 80:af:bf:5b:93:a1:06:72:f5:23:8a:d3:06:bb:96: 55:6e:ea:80:d5:fb:a9:43:df:db:37:7b:9f:99:b0: 56:f7:47:ec:40:8f:7d:91:3b:77:de:ce:38:ae:6b: 7e:f8:cf:4d:4e:8d:df:e0:65:c0:83:05:d9:c0:8b: 7c:e8:2d:dd:e9:52:7d:da:3d:2d:c0:7c:ea:08:0d: 3a:1e:30:20:2e:6d:5f:24:3a:b7:5a:b5:83:d2:15: 28:ed:91:7d:0f:ff:17:86:60:47:f9:34:bf:d5:ac: e8:c0:09:b1:f7:d4:0a:c5:25:45:bc:7c:7a:8d:d6: 8e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D1:D9:6B:76:B9:91:2E:2E:2A:C4:46:44:B0:0D:35:1B:60:24:62 X509v3 Authority Key Identifier: keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e8:49:70:99:a9:67:38:24:ac:2c:09:f9:80:3c:d8:0d:71: 28:47:9d:d3:4f:0b:4d:61:bf:48:7c:33:f3:ad:f1:10:e1:ac: f1:4f:ff:17:9b:c8:cc:30:fa:f0:e4:09:62:41:66:e4:bf:05: 6d:c8:6f:47:dd:11:d6:49:36:b8:08:c6:3e:be:c4:90:f5:7e: cc:5b:d0:92:d8:bc:7e:e9:3c:20:4c:f7:39:3c:e3:b3:87:22: b7:9f:56:8a:f7:2c:fb:f5:63:31:eb:c1:52:43:f8:bd:1b:33: 00:aa:97:ef:55:1c:89:83:c8:32:6e:c2:4d:06:12:4e:33:2e: c1:0c:e0:42:98:27:72:d8:9f:bf:ac:d1:e1:9d:52:20:2b:a5: 9a:a9:6a:ac:7c:c3:48:00:3b:3a:26:4b:b6:03:6c:40:1a:b1: 07:03:e8:28:d4:2d:8f:10:45:b2:bf:34:5e:c9:70:83:7f:63: 00:03:dd:f7:6c:29:a2:6c:7b:70:35:6c:84:36:08:e8:e8:e2: 66:eb:cb:68:68:ce:e6:2e:9b:bc:6f:18:a3:12:39:76:0c:50: 53:35:7f:bf:04:e0:1d:dc:56:b8:c7:b3:70:f2:3d:22:69:43: 46:58:6c:ac:fd:26:df:8c:72:da:78:c1:34:84:7e:a6:64:fd: 9a:61:a5:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL2qBQlB/ZcsBdpNiD5DKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MDQyYzFmMjdhN2Q3ODYyNDc1MDg3MDIzZGM5N2MzMzMw ZjczYzYwHhcNMjUxMjE3MTIwMTAzWhcNMjUxMjE4MTIwMTAzWjAzMTEwLwYDVQQD Eyg1OGQxZDk2Yjc2Yjk5MTJlMmUyYWM0NDY0NGIwMGQzNTFiNjAyNDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfi2E9QiGZucjrhf3hv4vj/Tp3KY YbZ3llBIu/PprSr9pALQFRjy2l13tam0ZBRvLDs0c5O88np/P+sRkqnWr+xLslDp y/Ilr5g2HHZ/pu5VRMBJ268fHaMnc87t+zcXI0tvYmEGxQEsD9vB49q6nhkC/GsO bjK1Yf1caUIt/j9Q49IqTKCAr79bk6EGcvUjitMGu5ZVbuqA1fupQ9/bN3ufmbBW 90fsQI99kTt33s44rmt++M9NTo3f4GXAgwXZwIt86C3d6VJ92j0twHzqCA06HjAg Lm1fJDq3WrWD0hUo7ZF9D/8XhmBH+TS/1azowAmx99QKxSVFvHx6jdaOdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjR2Wt2uZEuLirERkSwDTUbYCRiMB8GA1UdIwQY MBaAFGkELB8np9eGJHUIcCPcl8MzD3PGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgt Y2JiM2Q2MzVkODJmLzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgtY2JiM2Q2MzVkODJm LzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPuhJcJmp ZzgkrCwJ+YA82A1xKEed008LTWG/SHwz863xEOGs8U//F5vIzDD68OQJYkFm5L8F bchvR90R1kk2uAjGPr7EkPV+zFvQkti8fuk8IEz3OTzjs4cit59Wivcs+/VjMevB UkP4vRszAKqX71UciYPIMm7CTQYSTjMuwQzgQpgnctifv6zR4Z1SICulmqlqrHzD SAA7OiZLtgNsQBqxBwPoKNQtjxBFsr80Xslwg39jAAPd92wpomx7cDVshDYI6Oji ZuvLaGjO5i6bvG8YoxI5dgxQUzV/vwTgHdxWuMezcPI9ImlDRlhsrP0m34xy2njB NIR+pmT9mmGltg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:26:36 2025 by rpki-client