This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft File: 10AeAklBizV1RyaIJPYkSSXY2zk.mft (raw, json) Hash identifier: L/IBS9uluZ8ZFwuUZgOqQCprmQnbo0kWQ+LwxRHrayM= Subject key identifier: 90:9D:D9:A5:6D:53:D5:DD:77:DF:A6:93:97:E9:E2:F2:36:F2:1F:1E Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39 Certificate issuer: /CN=d7401e0249418b357547268824f6244925d8db39 Certificate serial: 019B3FB6484C86D5A2DDC4F224EEFF9BFE04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft Manifest number: 090A Signing time: Sun 21 Dec 2025 07:01:09 +0000 Manifest this update: Sun 21 Dec 2025 07:01:09 +0000 Manifest next update: Mon 22 Dec 2025 07:01:09 +0000 Files and hashes: 1: 10AeAklBizV1RyaIJPYkSSXY2zk.crl (hash: /H0tuPrwq4LrIzY0xqEeqD8311/LF/5zfn+Bbv+Ek6c=) 2: RjYX-V2efI1Zqu_dPnOuCSQqr1I.roa (hash: +pG1/ZRTZezQr6XfSyRunIJDq4WCFmSkYW6ipsa40Rw=) 3: cBlGJ5bNODNILYzK1oNt3QzAw7M.roa (hash: 7wWvEWZaVuq+kybNFqA4kbf75m0LmBkO8WIx9pDUDFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:48:4c:86:d5:a2:dd:c4:f2:24:ee:ff:9b:fe:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7401e0249418b357547268824f6244925d8db39 Validity Not Before: Dec 21 07:01:09 2025 GMT Not After : Dec 22 07:01:09 2025 GMT Subject: CN=909dd9a56d53d5dd77dfa69397e9e2f236f21f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4a:98:47:08:e0:d1:e1:21:f8:92:2c:dd:7a: fe:85:a7:24:2e:10:52:5f:16:51:93:eb:58:7d:5d: b1:ce:53:4a:62:24:09:fc:02:f8:55:14:2c:18:8a: 43:5e:0b:36:b1:50:43:5c:6a:ab:1b:eb:84:eb:c1: f7:a0:da:c3:1e:ed:06:f0:1b:12:d3:2a:e6:9f:fa: c2:65:62:3a:94:03:f2:0a:71:c7:0e:f8:1b:d0:5f: 82:8a:05:84:17:8c:b0:ae:e7:25:05:9d:cb:f1:3f: f0:77:ac:3f:7e:fa:25:91:8c:7d:ea:83:75:a3:26: b9:0f:4a:7d:a6:62:17:3e:83:b4:0d:23:46:67:f5: 80:13:f1:5c:23:10:5d:27:2d:37:89:db:34:ab:a5: 91:e0:6a:f4:1e:e3:02:23:17:84:00:b1:ee:c3:d6: 1b:d2:d8:0f:64:1b:59:ec:7f:f4:eb:32:d6:c4:55: 32:6b:ee:8d:64:90:e5:1c:70:15:02:49:b7:c7:f2: c7:a8:95:03:e2:24:ba:0e:e2:8c:8c:88:a3:4e:da: 19:51:66:82:78:8a:5b:e4:7d:7b:92:1a:4e:e4:7e: c3:42:bc:56:1d:2a:1f:6a:07:b8:18:ec:40:79:b1: b2:c5:0f:64:8b:75:c9:f0:7f:ed:64:db:f8:86:cc: 36:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9D:D9:A5:6D:53:D5:DD:77:DF:A6:93:97:E9:E2:F2:36:F2:1F:1E X509v3 Authority Key Identifier: keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a4:9f:1f:65:5f:16:97:b5:ce:db:38:18:13:f1:52:fa:52: 3c:00:7a:2a:2f:a9:28:b0:b2:a1:ba:d9:69:4d:7c:64:82:12: 7c:3a:09:d9:d5:c2:1d:e5:71:1a:36:81:f4:7b:4a:07:bc:7e: fb:81:c7:58:f6:c3:ec:6b:fb:3a:d5:f8:0d:26:e1:d2:61:60: c3:74:66:e1:8b:11:82:cc:54:a1:9b:d9:b4:43:ed:59:4f:ff: 04:63:94:df:55:f1:a1:d6:4e:4a:8b:a0:8e:1f:19:18:f9:99: 14:10:11:91:a6:26:e9:9d:fb:4c:27:59:66:da:b9:6f:05:a2: 2d:9f:ff:2b:cf:cb:d5:88:23:86:65:8e:e8:57:0f:99:d7:82: b1:5f:cf:49:d2:26:e1:45:75:c7:eb:ff:e8:8c:a1:6e:29:c6: ed:64:e0:b7:c7:13:97:07:08:f7:0a:17:df:00:c2:62:2d:cc: 9c:cf:51:7d:82:95:75:48:da:df:a2:71:6d:a6:f4:f2:b0:76: 38:da:de:48:12:0e:78:27:d7:31:3f:4c:4e:b1:f4:e2:d5:70: 1e:f9:53:14:c7:04:1f:5d:ec:b8:31:1f:4a:60:1f:71:be:60: 93:26:bb:0b:5a:0b:96:cb:d4:e3:7b:c8:84:41:cb:88:b0:cc: b4:f3:a5:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tkhMhtWi3cTyJO7/m/4EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDAxZTAyNDk0MThiMzU3NTQ3MjY4ODI0ZjYyNDQ5MjVk OGRiMzkwHhcNMjUxMjIxMDcwMTA5WhcNMjUxMjIyMDcwMTA5WjAzMTEwLwYDVQQD Eyg5MDlkZDlhNTZkNTNkNWRkNzdkZmE2OTM5N2U5ZTJmMjM2ZjIxZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUqYRwjg0eEh+JIs3Xr+hackLhBS XxZRk+tYfV2xzlNKYiQJ/AL4VRQsGIpDXgs2sVBDXGqrG+uE68H3oNrDHu0G8BsS 0yrmn/rCZWI6lAPyCnHHDvgb0F+CigWEF4ywruclBZ3L8T/wd6w/fvolkYx96oN1 oya5D0p9pmIXPoO0DSNGZ/WAE/FcIxBdJy03ids0q6WR4Gr0HuMCIxeEALHuw9Yb 0tgPZBtZ7H/06zLWxFUya+6NZJDlHHAVAkm3x/LHqJUD4iS6DuKMjIijTtoZUWaC eIpb5H17khpO5H7DQrxWHSofage4GOxAebGyxQ9ki3XJ8H/tZNv4hsw2HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCd2aVtU9Xdd9+mk5fp4vI28h8eMB8GA1UdIwQY MBaAFNdAHgJJQYs1dUcmiCT2JEkl2Ns5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kNzMxMzctYjA4OS00ZGI0LWI2YjIt NTA3ODkxMzk1NDE3LzEvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9kNzMxMzctYjA4OS00ZGI0LWI2YjItNTA3ODkxMzk1NDE3 LzEvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKSfH2Vf Fpe1zts4GBPxUvpSPAB6Ki+pKLCyobrZaU18ZIISfDoJ2dXCHeVxGjaB9HtKB7x+ +4HHWPbD7Gv7OtX4DSbh0mFgw3Rm4YsRgsxUoZvZtEPtWU//BGOU31XxodZOSoug jh8ZGPmZFBARkaYm6Z37TCdZZtq5bwWiLZ//K8/L1YgjhmWO6FcPmdeCsV/PSdIm 4UV1x+v/6IyhbinG7WTgt8cTlwcI9woX3wDCYi3MnM9RfYKVdUja36Jxbab08rB2 ONreSBIOeCfXMT9MTrH04tVwHvlTFMcEH13suDEfSmAfcb5gkya7C1oLlsvU43vI hEHLiLDMtPOlMA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:03:19 2025 by rpki-client