This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json) Hash identifier: uK/d1/ytwQefGtFoRhyP+yLabStfJVyJSmzTAjENrtc= Subject key identifier: 50:83:B8:C5:00:27:E2:A7:9A:97:39:BE:B9:D8:FD:7E:4C:E4:8F:1D Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89 Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89 Certificate serial: 019B51BC9DBC4EB610FC6863C6922B0EEFA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft Manifest number: 159F Signing time: Wed 24 Dec 2025 19:01:14 +0000 Manifest this update: Wed 24 Dec 2025 19:01:14 +0000 Manifest next update: Thu 25 Dec 2025 19:01:14 +0000 Files and hashes: 1: A95nvExRv6jB5eSZJpOw7UhU9Cs.roa (hash: 377020JWmLx/vMoWlq0LLQD0jueSe9bNRdwFbBb8JvY=) 2: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: hCSeLzFEu7IQ8xunc0MG5jbPb7TOovaX6qIOvHd/F50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:9d:bc:4e:b6:10:fc:68:63:c6:92:2b:0e:ef:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89 Validity Not Before: Dec 24 19:01:14 2025 GMT Not After : Dec 25 19:01:14 2025 GMT Subject: CN=5083b8c50027e2a79a9739beb9d8fd7e4ce48f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:38:bd:00:27:9a:4d:e4:33:87:42:d3:fe:33: 6f:e8:f9:29:08:cb:4e:e0:31:ed:5a:26:43:56:f6: 2e:ce:33:24:85:aa:6c:b6:28:99:10:c0:03:d5:7a: 57:43:98:ee:d6:61:8a:3b:89:11:82:dc:75:bb:fa: c4:61:f4:be:45:c5:c5:4f:7a:66:37:2c:cc:c1:9f: 02:50:16:ae:2e:f8:f1:1b:32:71:4f:c7:8e:b3:da: df:9e:bd:1f:9f:b9:eb:46:b5:3d:1a:c7:38:94:7f: f9:3f:d6:f7:c2:28:54:9f:c7:13:30:2a:31:8d:f8: 48:70:28:fc:f5:c2:fd:ba:f6:6b:89:15:e2:71:32: 52:9e:bf:6c:95:d6:f2:c8:a8:b4:cf:08:86:09:3d: 58:e6:c1:5e:53:f1:96:0f:e3:3e:48:d5:79:91:95: 7c:93:12:e0:43:94:92:c3:99:75:69:ba:af:38:29: 76:69:b3:cf:b0:8e:51:53:72:0b:a9:46:fa:a6:6f: 6b:6f:4b:09:26:f3:f5:ea:57:d3:ed:bc:0f:fa:2c: c4:af:fd:21:07:fb:01:e4:73:de:1c:01:6a:7e:35: db:2e:4d:41:f6:e8:8f:b7:7b:3f:9f:87:e6:15:56: 65:70:d8:eb:97:53:d4:55:84:9c:3b:54:4a:f7:54: 5b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:83:B8:C5:00:27:E2:A7:9A:97:39:BE:B9:D8:FD:7E:4C:E4:8F:1D X509v3 Authority Key Identifier: keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b6:5e:a8:e0:37:45:58:09:bb:b7:3b:8a:6f:de:33:0a:3d: 6a:bc:9d:cd:94:13:88:9e:0f:13:fa:1c:41:b1:78:0f:8d:4d: 82:24:15:8c:ed:a8:53:57:b2:e4:c3:85:3c:f2:5d:80:e8:35: 69:ee:f7:f1:e6:28:91:93:d2:c2:b2:cd:e0:57:6d:da:d0:d9: 89:ad:65:46:6b:53:fa:f3:bd:80:01:a5:65:4a:ed:fd:b6:77: 31:e1:80:4a:a3:86:08:a8:39:f4:88:fb:c3:c9:d8:77:fc:42: 04:bb:d5:93:9d:2a:20:b2:19:bb:e6:96:09:ed:15:36:c0:ac: 1c:01:0e:a1:23:4e:77:5a:ba:c5:59:c0:4c:38:a5:5d:19:20: a9:27:46:3f:58:4e:29:93:40:ed:37:68:68:10:1a:31:cc:56: c0:60:b9:4d:17:0c:6b:23:5c:88:db:42:e8:42:1a:ec:ff:e4: fb:ff:1c:9c:b6:5b:76:6f:a4:30:90:b4:62:c7:b0:3f:4f:18: 63:38:cd:39:73:c1:6e:f4:a0:93:dc:2e:2e:0a:fb:2c:60:98: 01:d1:c1:91:37:f3:f4:fd:d9:f0:e8:8d:00:44:56:22:40:b9: e0:67:69:30:14:06:02:08:ee:1f:0c:a9:99:6e:52:38:a7:f8: 45:1b:e5:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvJ28TrYQ/GhjxpIrDu+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZDFlZjE2M2E2NjFjY2U1YmM2MjExN2VjNzYzNzU4YjFi NWJiODkwHhcNMjUxMjI0MTkwMTE0WhcNMjUxMjI1MTkwMTE0WjAzMTEwLwYDVQQD Eyg1MDgzYjhjNTAwMjdlMmE3OWE5NzM5YmViOWQ4ZmQ3ZTRjZTQ4ZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTi9ACeaTeQzh0LT/jNv6PkpCMtO 4DHtWiZDVvYuzjMkhapstiiZEMAD1XpXQ5ju1mGKO4kRgtx1u/rEYfS+RcXFT3pm NyzMwZ8CUBauLvjxGzJxT8eOs9rfnr0fn7nrRrU9Gsc4lH/5P9b3wihUn8cTMCox jfhIcCj89cL9uvZriRXicTJSnr9sldbyyKi0zwiGCT1Y5sFeU/GWD+M+SNV5kZV8 kxLgQ5SSw5l1abqvOCl2abPPsI5RU3ILqUb6pm9rb0sJJvP16lfT7bwP+izEr/0h B/sB5HPeHAFqfjXbLk1B9uiPt3s/n4fmFVZlcNjrl1PUVYScO1RK91Rb8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCDuMUAJ+Knmpc5vrnY/X5M5I8dMB8GA1UdIwQY MBaAFGjR7xY6ZhzOW8YhF+x2N1ixtbuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YWEwMTctMmZlOC00Y2Q4LThhN2Qt M2E4YTYxMDA2YTRmLzEvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82YWEwMTctMmZlOC00Y2Q4LThhN2QtM2E4YTYxMDA2YTRm LzEvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrZeqOA3 RVgJu7c7im/eMwo9arydzZQTiJ4PE/ocQbF4D41NgiQVjO2oU1ey5MOFPPJdgOg1 ae738eYokZPSwrLN4Fdt2tDZia1lRmtT+vO9gAGlZUrt/bZ3MeGASqOGCKg59Ij7 w8nYd/xCBLvVk50qILIZu+aWCe0VNsCsHAEOoSNOd1q6xVnATDilXRkgqSdGP1hO KZNA7TdoaBAaMcxWwGC5TRcMayNciNtC6EIa7P/k+/8cnLZbdm+kMJC0YsewP08Y YzjNOXPBbvSgk9wuLgr7LGCYAdHBkTfz9P3Z8OiNAERWIkC54GdpMBQGAgjuHwyp mW5SOKf4RRvlvA== -----END CERTIFICATE-----Generated at Thu Dec 25 02:48:35 2025 by rpki-client