This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json) Hash identifier: YfKduiYTewq3DisQR8JV4h1JfhzeFZwZpHMdc/7tYgs= Subject key identifier: FB:1B:48:97:8B:75:D7:9C:8D:43:5C:70:D4:38:91:B8:84:AF:98:06 Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15 Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015 Certificate serial: 019B3A911F5A44D1B0C196B705323D37B4A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft Manifest number: 1350 Signing time: Sat 20 Dec 2025 07:02:27 +0000 Manifest this update: Sat 20 Dec 2025 07:02:27 +0000 Manifest next update: Sun 21 Dec 2025 07:02:27 +0000 Files and hashes: 1: CGPoOJknrvd8SI5T8ORU1Iqt9Hc.roa (hash: hep1Wj/UUlgL43jUgR9ytYwV+6+e7lZrxraYcWtC/JE=) 2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: X/1AiojAg7G4jslHsgbph8qfT0ijIdPfErRe5w7Yvdk=) 3: pA69kigPY-rHAuVsRrW13R0aZeM.roa (hash: pYVfBq1JCxgc3lobgl41dLccuxJHZgCaSlieF8Jm/Tc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:1f:5a:44:d1:b0:c1:96:b7:05:32:3d:37:b4:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015 Validity Not Before: Dec 20 07:02:27 2025 GMT Not After : Dec 21 07:02:27 2025 GMT Subject: CN=fb1b48978b75d79c8d435c70d43891b884af9806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7f:c0:7c:b4:9d:af:60:21:a9:ae:f4:cf:90: 32:ff:eb:9a:00:f4:8c:c5:37:e4:ab:0d:da:2a:5f: 94:9f:f1:df:46:e4:c7:64:39:cb:26:77:90:65:6a: c7:b2:94:71:76:1d:63:fe:be:d8:3e:d3:f6:25:ba: c1:09:12:97:d2:34:af:41:93:8e:5a:e6:06:b5:e6: be:6d:e6:98:d2:18:fc:b4:0b:b6:e5:d3:b7:95:4d: 85:d6:7b:8d:3e:21:47:2b:cd:74:e7:db:23:78:2f: 05:26:09:f3:82:e0:ae:88:a5:ff:2c:cb:9a:3b:98: 73:42:26:b7:fa:f0:62:1c:09:6f:2c:39:1c:ab:9c: ef:cb:05:af:b7:fd:ea:be:4b:2a:df:c1:cb:e1:d6: 35:cd:a7:4e:d8:40:36:86:fc:5f:1a:be:32:da:7c: fe:38:27:2b:9d:50:9f:05:36:ff:03:61:1d:5d:71: 5e:4c:d5:a5:22:33:68:8d:da:70:15:07:86:13:c5: fe:23:c7:e2:1b:f4:cd:70:aa:6e:98:1c:32:06:c7: 6c:6c:80:14:52:51:c4:f3:9b:51:93:ed:4c:04:72: 6d:3d:82:cd:9f:93:3d:9a:53:a0:09:3e:77:53:3d: e6:a1:7e:ca:1c:64:5e:2f:ba:ad:ee:6c:93:8a:d2: 28:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1B:48:97:8B:75:D7:9C:8D:43:5C:70:D4:38:91:B8:84:AF:98:06 X509v3 Authority Key Identifier: keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:b8:de:55:e5:88:1a:b0:14:55:b3:d0:37:3d:7d:3f:4d:2b: 73:60:52:f7:ce:15:e6:ea:18:4a:e8:8d:d5:72:c3:f0:fd:19: 6b:28:b2:72:d1:58:2d:18:0d:71:e0:2f:f0:81:88:c6:60:8a: d7:3d:ea:70:56:3a:fe:6d:7f:2d:45:72:a1:22:5e:be:33:52: 7d:5f:91:de:f8:9a:59:78:8b:f4:c9:6c:8b:37:1b:ff:a1:c1: c4:88:1b:3c:54:3c:5d:a2:d7:16:69:d1:5e:e1:4b:f5:ed:74: b4:a0:aa:71:83:0e:96:e3:17:4e:0d:56:86:53:08:72:c1:67: f4:f4:88:23:9e:ec:9e:09:d6:ad:55:b2:22:58:57:c0:31:5f: 0a:90:ef:23:60:cd:bf:93:08:03:db:88:7d:96:81:1e:ce:cf: e0:e2:a1:38:10:d7:3b:a3:95:1b:16:50:24:93:7d:e4:22:e2: 79:7c:75:61:f2:78:46:68:13:bc:52:79:b8:7a:36:89:10:db: b3:ed:3a:19:8a:1d:f9:9d:2b:49:e2:d4:51:42:82:ab:0c:61: 49:52:2f:61:6b:59:48:c6:1d:3c:c8:09:e4:26:98:cb:89:1a: b6:65:e7:e6:c6:a6:5a:d0:3d:28:99:fc:c7:5e:ed:37:33:a8: c2:f1:81:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kR9aRNGwwZa3BTI9N7SlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YjIyZWVhNGE0YTNiODE2NTRhMjI3ZWRhOTRlMGU3NTkz N2IwMTUwHhcNMjUxMjIwMDcwMjI3WhcNMjUxMjIxMDcwMjI3WjAzMTEwLwYDVQQD EyhmYjFiNDg5NzhiNzVkNzljOGQ0MzVjNzBkNDM4OTFiODg0YWY5ODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4n/AfLSdr2Ahqa70z5Ay/+uaAPSM xTfkqw3aKl+Un/HfRuTHZDnLJneQZWrHspRxdh1j/r7YPtP2JbrBCRKX0jSvQZOO WuYGtea+beaY0hj8tAu25dO3lU2F1nuNPiFHK81059sjeC8FJgnzguCuiKX/LMua O5hzQia3+vBiHAlvLDkcq5zvywWvt/3qvksq38HL4dY1zadO2EA2hvxfGr4y2nz+ OCcrnVCfBTb/A2EdXXFeTNWlIjNojdpwFQeGE8X+I8fiG/TNcKpumBwyBsdsbIAU UlHE85tRk+1MBHJtPYLNn5M9mlOgCT53Uz3moX7KHGReL7qt7myTitIoJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsbSJeLddecjUNccNQ4kbiEr5gGMB8GA1UdIwQY MBaAFGiyLupKSjuBZUoiftqU4OdZN7AVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2It MmI2NWE3YThiZThjLzEvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2ItMmI2NWE3YThiZThj LzEvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLjeVeWI GrAUVbPQNz19P00rc2BS984V5uoYSuiN1XLD8P0ZayiyctFYLRgNceAv8IGIxmCK 1z3qcFY6/m1/LUVyoSJevjNSfV+R3viaWXiL9Mlsizcb/6HBxIgbPFQ8XaLXFmnR XuFL9e10tKCqcYMOluMXTg1WhlMIcsFn9PSII57sngnWrVWyIlhXwDFfCpDvI2DN v5MIA9uIfZaBHs7P4OKhOBDXO6OVGxZQJJN95CLieXx1YfJ4RmgTvFJ5uHo2iRDb s+06GYod+Z0rSeLUUUKCqwxhSVIvYWtZSMYdPMgJ5CaYy4katmXn5samWtA9KJn8 x17tNzOowvGBbg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:07:46 2025 by rpki-client