This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json) Hash identifier: JIn+8Fvl6q/br+lBr8n2cUqRIGvmlbMbemrFUKV/Wh4= Subject key identifier: 92:4B:67:55:C7:3D:38:86:4B:57:25:B6:AD:BB:F3:B6:3F:71:CF:DC Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce Certificate serial: 019B3D90B11A8D3C9B9A2A8CF52C3EA1080D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 21:00:51 +0000 Manifest this update: Sat 20 Dec 2025 21:00:51 +0000 Manifest next update: Sun 21 Dec 2025 21:00:51 +0000 Files and hashes: 1: 5dz9Tw4bpiGr43q4HQtTf_7BsP0.roa (hash: 0VcdjRI2LyeRRm3QIQdFN5UYWsj35tdfOvua8dhZWaw=) 2: C-j834veFsj1jsTX7J6_TWAlAyM.roa (hash: 1/vufO4pJcMpVCQ6/N50OfHCZoID4FXv7ykneVDspNU=) 3: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: n89Yn5Pb9tOK7Wnwdn9bvbtl9FtOQGooGhBBZBZ2zmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:b1:1a:8d:3c:9b:9a:2a:8c:f5:2c:3e:a1:08:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce Validity Not Before: Dec 20 21:00:51 2025 GMT Not After : Dec 21 21:00:51 2025 GMT Subject: CN=924b6755c73d38864b5725b6adbbf3b63f71cfdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:06:39:70:c4:83:31:ae:f2:2a:7c:27:a4:2d: 0b:db:68:93:7b:7c:2b:f7:54:fc:89:83:73:4f:d5: 42:39:4e:41:cf:a3:bb:25:13:c6:5a:b3:4b:7b:04: f2:63:0f:12:75:6b:f2:cc:b8:48:10:81:6e:a7:2d: 9f:94:94:ed:33:20:3e:05:57:73:23:08:fb:19:05: 76:0a:fe:d5:e7:4f:99:46:0e:ed:f5:e3:e5:7a:09: b4:ad:98:7b:7a:2e:e7:f5:75:00:46:52:c2:f3:fe: 41:f3:81:e0:ad:64:5f:f4:6f:ff:42:01:bf:5a:f9: 96:7f:09:bd:42:42:d2:44:a6:4d:88:20:fe:3f:a8: 3a:6b:a4:e8:83:47:34:f5:b8:e9:e6:27:42:98:ef: 03:7a:3e:33:71:63:d8:f7:1c:2c:d9:a8:66:5d:74: 59:26:c2:f7:0a:bf:06:c1:ee:ca:28:de:ba:55:e8: 51:b1:c0:f6:6e:30:01:1e:81:0f:62:b1:e3:fb:fd: 07:fe:ef:20:01:92:cb:3b:b9:9b:a6:c4:41:20:33: 75:2d:23:c4:87:d0:d7:8d:1a:a7:29:63:77:c6:3c: ad:37:0b:2d:75:31:72:5f:40:e3:01:cc:72:a5:37: 50:ef:8a:54:e3:58:d3:ca:cf:a0:d1:c7:80:78:17: 78:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4B:67:55:C7:3D:38:86:4B:57:25:B6:AD:BB:F3:B6:3F:71:CF:DC X509v3 Authority Key Identifier: keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f2:fd:51:e5:44:28:46:ff:ee:dc:ed:c5:28:c1:cc:ae:72: 21:f7:1c:40:d0:ac:5d:71:a3:cc:18:6f:24:2c:8b:a6:e9:bf: 67:91:23:8a:0b:7f:f9:94:a4:4a:eb:91:40:51:3e:9a:5b:f9: 0d:41:de:a2:e4:67:f7:c5:e2:c3:9a:c6:de:86:b2:50:4c:41: 44:2c:87:23:10:75:58:2d:1a:cf:24:4f:65:b2:2e:37:3a:58: df:fa:ce:b1:43:87:70:36:a4:a1:14:1d:2e:07:f3:18:a6:56: 3d:aa:2f:c1:2a:fe:85:7a:4c:09:34:02:f4:64:66:ff:27:37: 32:50:44:9b:be:49:61:4e:e3:43:20:d2:31:62:92:57:b2:30: 49:b6:c9:84:d9:17:13:1c:7c:16:0f:c1:11:86:f9:aa:15:cd: 4e:3f:6d:56:65:a4:41:40:ed:88:7d:a4:0b:8e:f3:62:b2:f1: c9:7a:df:a9:17:16:b8:69:89:62:72:71:84:c7:54:c0:a3:b2: af:01:d4:ab:14:d9:51:90:12:94:a0:46:01:07:dc:6a:68:cb: 36:c1:f8:ba:46:fe:bd:05:2d:bc:ac:88:c1:a7:40:98:52:06: 21:82:ad:f9:36:a2:e3:76:9a:a9:d2:c9:ab:ff:c0:b9:91:b5: 66:60:63:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kLEajTybmiqM9Sw+oQgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWM1ODFhZmYzZDBhOTAxNzhjZmFiNTY1YTM4OGNjZDli YzAxY2UwHhcNMjUxMjIwMjEwMDUxWhcNMjUxMjIxMjEwMDUxWjAzMTEwLwYDVQQD Eyg5MjRiNjc1NWM3M2QzODg2NGI1NzI1YjZhZGJiZjNiNjNmNzFjZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gY5cMSDMa7yKnwnpC0L22iTe3wr 91T8iYNzT9VCOU5Bz6O7JRPGWrNLewTyYw8SdWvyzLhIEIFupy2flJTtMyA+BVdz Iwj7GQV2Cv7V50+ZRg7t9ePlegm0rZh7ei7n9XUARlLC8/5B84HgrWRf9G//QgG/ WvmWfwm9QkLSRKZNiCD+P6g6a6Tog0c09bjp5idCmO8Dej4zcWPY9xws2ahmXXRZ JsL3Cr8Gwe7KKN66VehRscD2bjABHoEPYrHj+/0H/u8gAZLLO7mbpsRBIDN1LSPE h9DXjRqnKWN3xjytNwstdTFyX0DjAcxypTdQ74pU41jTys+g0ceAeBd4aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJLZ1XHPTiGS1cltq2787Y/cc/cMB8GA1UdIwQY MBaAFGmcWBr/PQqQF4z6tWWjiMzZvAHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mYjlkNWUtYTYyOC00ZjIzLTg4YTUt ZTVkZGQyYmI1MWM1LzEvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mYjlkNWUtYTYyOC00ZjIzLTg4YTUtZTVkZGQyYmI1MWM1 LzEvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPL9UeVE KEb/7tztxSjBzK5yIfccQNCsXXGjzBhvJCyLpum/Z5Ejigt/+ZSkSuuRQFE+mlv5 DUHeouRn98Xiw5rG3oayUExBRCyHIxB1WC0azyRPZbIuNzpY3/rOsUOHcDakoRQd LgfzGKZWPaovwSr+hXpMCTQC9GRm/yc3MlBEm75JYU7jQyDSMWKSV7IwSbbJhNkX Exx8Fg/BEYb5qhXNTj9tVmWkQUDtiH2kC47zYrLxyXrfqRcWuGmJYnJxhMdUwKOy rwHUqxTZUZASlKBGAQfcamjLNsH4ukb+vQUtvKyIwadAmFIGIYKt+Tai43aaqdLJ q//AuZG1ZmBjeg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:04:57 2025 by rpki-client