This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft File: aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json) Hash identifier: NOtCJccpCqFnS42U5EnAQGkuwcGP1wV+w4pnuEh+kbk= Subject key identifier: EF:7B:E3:73:DD:A8:21:65:0A:39:20:B0:8F:0D:E1:FA:5E:DF:DB:A0 Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3 Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3 Certificate serial: 019B3D5A23164385DE15C35DD9456F5AC8AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 20:01:15 +0000 Manifest this update: Sat 20 Dec 2025 20:01:15 +0000 Manifest next update: Sun 21 Dec 2025 20:01:15 +0000 Files and hashes: 1: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: MPUVEiY7YSClGQ/M/HvNn/UciRDWE1PtzTWLaiwstEw=) 2: lwjpFv3HgemxBJqe9gi4ArggD88.roa (hash: 7p7Zr7Ya8mUheMjW/Ww4B8S5/Cc2CZ+iZfLnhmKVtRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:23:16:43:85:de:15:c3:5d:d9:45:6f:5a:c8:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3 Validity Not Before: Dec 20 20:01:15 2025 GMT Not After : Dec 21 20:01:15 2025 GMT Subject: CN=ef7be373dda821650a3920b08f0de1fa5edfdba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:21:2c:fc:36:70:3f:52:99:67:b5:09:75:be: ab:13:e4:0a:c5:59:4b:fd:f2:e6:a5:8a:d3:60:c9: 1a:4b:e7:8c:8b:66:bd:f8:56:0f:90:78:82:af:3d: d8:9b:db:7b:b3:01:5a:25:58:08:e1:f3:e4:69:c7: 4e:26:b4:d8:93:3b:e9:21:7e:1d:3b:d2:fc:f8:46: 21:00:38:34:4f:29:70:5c:d2:a6:41:bd:8d:c1:a4: e8:c5:28:54:ff:10:f3:2c:19:42:14:b7:5c:bb:12: 53:24:b5:28:99:d4:29:56:68:92:f8:e1:16:d0:70: 0e:21:f1:91:e7:60:59:4f:0a:ba:1b:4d:f7:2f:2f: 35:d1:c6:16:26:c2:bf:b4:c9:ac:51:81:43:b9:76: b8:6e:78:0e:49:46:d6:0f:54:e4:5d:77:2d:af:01: 91:05:e6:1d:aa:61:e3:b4:45:26:c0:d9:87:47:b0: 84:cf:40:98:fa:78:ee:bb:37:17:32:b6:b3:4c:01: 61:b8:5e:9d:41:dd:55:3a:4d:96:f4:38:d6:64:68: ae:06:56:f1:d0:35:2b:15:33:5e:99:a9:95:0c:40: 85:4a:36:b2:86:cd:1e:fa:c0:3b:e8:a4:f9:13:45: c9:fc:c5:86:83:08:06:b6:82:a4:38:ba:39:69:e2: 08:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7B:E3:73:DD:A8:21:65:0A:39:20:B0:8F:0D:E1:FA:5E:DF:DB:A0 X509v3 Authority Key Identifier: keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:4c:a6:24:6f:fa:f4:86:10:a4:46:c0:e0:d0:05:0b:3c:05: 8f:a1:4e:fb:b5:36:92:64:0a:e7:c1:80:9f:fd:05:45:8e:c1: 70:dd:b0:c1:07:cb:1c:77:70:66:f5:ee:a7:96:4a:01:2a:34: d2:18:c1:e8:e5:48:be:ca:08:8c:1d:1b:65:af:c2:05:39:3e: 63:31:30:88:3e:12:82:65:79:af:d7:5e:15:71:e0:41:12:e5: 93:80:59:81:0a:e0:f8:05:fb:06:44:7e:78:6e:48:04:50:56: 62:90:35:a5:b2:a1:7c:b6:53:62:0b:1a:27:7f:d6:c0:ba:3e: 7b:52:8e:56:66:56:03:96:af:90:ea:05:69:a6:29:20:1c:52: e6:74:3d:c9:0f:0e:44:49:f2:4e:f0:cd:42:75:6a:fc:6c:5f: db:1e:be:63:d5:eb:06:bb:1a:51:2f:06:26:5e:43:f5:15:45: 5a:64:0d:26:fb:5c:0d:df:d1:27:42:f3:8e:d3:6a:e6:42:45: 96:ed:4e:40:1c:48:3e:e8:de:c1:b1:59:86:52:ce:c1:41:2c: 13:4c:eb:05:c4:79:a4:31:b9:2e:18:cf:cb:da:7f:38:28:21: a5:20:3d:55:f4:3c:ca:a7:a1:2a:92:4a:b1:ce:ed:d2:e2:56: c5:a8:eb:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WiMWQ4XeFcNd2UVvWsiuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4N2Q5YjU2MmJhNDcyNjE4ZjkzOThlMjY1Y2EwZTcxMDhm Njg3YTMwHhcNMjUxMjIwMjAwMTE1WhcNMjUxMjIxMjAwMTE1WjAzMTEwLwYDVQQD EyhlZjdiZTM3M2RkYTgyMTY1MGEzOTIwYjA4ZjBkZTFmYTVlZGZkYmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyEs/DZwP1KZZ7UJdb6rE+QKxVlL /fLmpYrTYMkaS+eMi2a9+FYPkHiCrz3Ym9t7swFaJVgI4fPkacdOJrTYkzvpIX4d O9L8+EYhADg0TylwXNKmQb2NwaToxShU/xDzLBlCFLdcuxJTJLUomdQpVmiS+OEW 0HAOIfGR52BZTwq6G033Ly810cYWJsK/tMmsUYFDuXa4bngOSUbWD1TkXXctrwGR BeYdqmHjtEUmwNmHR7CEz0CY+njuuzcXMrazTAFhuF6dQd1VOk2W9DjWZGiuBlbx 0DUrFTNemamVDECFSjayhs0e+sA76KT5E0XJ/MWGgwgGtoKkOLo5aeIIOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9743PdqCFlCjkgsI8N4fpe39ugMB8GA1UdIwQY MBaAFGh9m1YrpHJhj5OY4mXKDnEI9oejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQt NjA1ZDEzNTEzNmY3LzEvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQtNjA1ZDEzNTEzNmY3 LzEvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0ymJG/6 9IYQpEbA4NAFCzwFj6FO+7U2kmQK58GAn/0FRY7BcN2wwQfLHHdwZvXup5ZKASo0 0hjB6OVIvsoIjB0bZa/CBTk+YzEwiD4SgmV5r9deFXHgQRLlk4BZgQrg+AX7BkR+ eG5IBFBWYpA1pbKhfLZTYgsaJ3/WwLo+e1KOVmZWA5avkOoFaaYpIBxS5nQ9yQ8O REnyTvDNQnVq/Gxf2x6+Y9XrBrsaUS8GJl5D9RVFWmQNJvtcDd/RJ0LzjtNq5kJF lu1OQBxIPujewbFZhlLOwUEsE0zrBcR5pDG5LhjPy9p/OCghpSA9VfQ8yqehKpJK sc7t0uJWxajrUg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:02:36 2025 by rpki-client