This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json) Hash identifier: d+BGfnwSNXZ9Yvt0nacJiecEs+cVnZcRllqoTZKTswc= Subject key identifier: F5:6D:A0:76:76:C3:C8:9D:C6:4F:85:A1:4E:CE:22:24:6E:3C:16:78 Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89 Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89 Certificate serial: 019B443861040648A82DF739CA26B14236E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft Manifest number: 1598 Signing time: Mon 22 Dec 2025 04:01:44 +0000 Manifest this update: Mon 22 Dec 2025 04:01:44 +0000 Manifest next update: Tue 23 Dec 2025 04:01:44 +0000 Files and hashes: 1: A95nvExRv6jB5eSZJpOw7UhU9Cs.roa (hash: 377020JWmLx/vMoWlq0LLQD0jueSe9bNRdwFbBb8JvY=) 2: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: icVdKavivCloqN+Nm09EyUEopm0/VV/Azc+IW4JQ2OY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:61:04:06:48:a8:2d:f7:39:ca:26:b1:42:36:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89 Validity Not Before: Dec 22 04:01:44 2025 GMT Not After : Dec 23 04:01:44 2025 GMT Subject: CN=f56da07676c3c89dc64f85a14ece22246e3c1678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c9:e6:80:13:32:73:5b:a4:c4:ea:bd:7a:6c: 8e:c0:cf:bb:4c:82:39:95:98:fd:dc:fd:55:7a:35: cc:07:96:7d:cd:e6:50:73:5c:b2:30:81:4b:5e:38: cc:5b:30:35:e7:2e:50:fb:a6:9a:f5:ab:00:ee:79: bf:cf:83:d5:2c:cc:69:98:4f:7e:eb:bc:41:8a:fd: 93:45:6c:c3:3e:0e:c5:88:27:94:b6:3f:67:31:6c: 71:eb:ab:96:87:1d:0c:45:d0:14:48:8e:c2:ec:29: 1b:03:3c:da:8b:37:a4:a3:00:48:08:03:d6:67:11: ca:5b:1f:2b:25:b3:9c:8c:ef:da:51:bc:cd:0f:53: 33:ba:08:d0:d3:87:43:fc:34:e4:fb:ce:35:76:b2: 29:f4:1d:fb:79:bc:04:cc:10:70:ff:1c:72:15:68: cf:55:72:d0:a0:31:1b:00:66:4f:96:27:d8:97:0f: 08:73:81:d0:1c:3d:bc:7b:60:a1:31:98:76:c6:a2: 85:50:cf:21:6b:0b:12:d2:fe:1b:38:f7:1b:f9:f1: 67:32:57:d9:f8:5f:77:f4:19:0c:5f:0f:b1:cf:11: e7:f2:e7:f9:01:81:3c:f6:fa:c7:f5:36:c5:72:34: 84:fb:26:0b:a8:21:42:ce:19:89:27:51:4d:5e:7a: 52:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6D:A0:76:76:C3:C8:9D:C6:4F:85:A1:4E:CE:22:24:6E:3C:16:78 X509v3 Authority Key Identifier: keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:29:45:f4:15:36:64:ca:40:db:72:e9:cd:cf:42:82:a8:67: c5:9f:e3:77:7f:49:02:d6:7b:97:64:c6:26:98:c5:69:ee:0f: d5:2b:b2:61:9c:53:59:24:46:99:80:49:2f:43:94:32:70:ee: 99:db:a3:dd:e3:43:7c:d3:d3:33:97:00:a7:95:7c:96:e1:7a: 02:8b:19:f4:ff:06:c1:4b:e1:fd:31:5c:22:c8:a6:98:05:b4: ae:82:6f:8e:ca:f1:c6:bf:ed:0e:6b:1d:60:ee:83:53:d0:39: ba:7e:18:e3:1b:71:98:85:5d:2a:5b:70:db:69:1c:84:67:2b: c9:b0:2f:0b:ab:34:0d:99:81:27:3a:c8:08:1d:c8:8d:7a:7c: 06:e8:fb:4b:e2:b7:e3:66:9e:53:bd:f4:86:c5:c5:d5:1a:7e: 30:2d:1d:8a:8d:e1:9a:b9:e9:b3:9e:98:34:9f:f4:87:a7:50: 76:40:d5:0b:5e:ce:86:c1:5c:0b:c8:95:e7:b5:7e:81:c1:f7: 1b:6a:a8:66:c4:28:3c:ab:10:0f:0b:01:0c:a9:11:34:be:c1: 6b:f3:1a:01:46:6f:1f:af:6a:83:3f:1d:03:05:f0:a4:0d:7d: 84:d0:ee:5d:f4:67:ba:4a:c2:f2:f9:40:d1:30:b0:0b:c2:5b: bb:ae:6f:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOGEEBkioLfc5yiaxQjbhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZDFlZjE2M2E2NjFjY2U1YmM2MjExN2VjNzYzNzU4YjFi NWJiODkwHhcNMjUxMjIyMDQwMTQ0WhcNMjUxMjIzMDQwMTQ0WjAzMTEwLwYDVQQD EyhmNTZkYTA3Njc2YzNjODlkYzY0Zjg1YTE0ZWNlMjIyNDZlM2MxNjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78nmgBMyc1ukxOq9emyOwM+7TII5 lZj93P1VejXMB5Z9zeZQc1yyMIFLXjjMWzA15y5Q+6aa9asA7nm/z4PVLMxpmE9+ 67xBiv2TRWzDPg7FiCeUtj9nMWxx66uWhx0MRdAUSI7C7CkbAzzaizekowBICAPW ZxHKWx8rJbOcjO/aUbzND1MzugjQ04dD/DTk+841drIp9B37ebwEzBBw/xxyFWjP VXLQoDEbAGZPlifYlw8Ic4HQHD28e2ChMZh2xqKFUM8hawsS0v4bOPcb+fFnMlfZ +F939BkMXw+xzxHn8uf5AYE89vrH9TbFcjSE+yYLqCFCzhmJJ1FNXnpSuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVtoHZ2w8idxk+FoU7OIiRuPBZ4MB8GA1UdIwQY MBaAFGjR7xY6ZhzOW8YhF+x2N1ixtbuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YWEwMTctMmZlOC00Y2Q4LThhN2Qt M2E4YTYxMDA2YTRmLzEvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82YWEwMTctMmZlOC00Y2Q4LThhN2QtM2E4YTYxMDA2YTRm LzEvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIClF9BU2 ZMpA23Lpzc9CgqhnxZ/jd39JAtZ7l2TGJpjFae4P1SuyYZxTWSRGmYBJL0OUMnDu mduj3eNDfNPTM5cAp5V8luF6AosZ9P8GwUvh/TFcIsimmAW0roJvjsrxxr/tDmsd YO6DU9A5un4Y4xtxmIVdKltw22kchGcrybAvC6s0DZmBJzrICB3IjXp8Buj7S+K3 42aeU730hsXF1Rp+MC0dio3hmrnps56YNJ/0h6dQdkDVC17OhsFcC8iV57V+gcH3 G2qoZsQoPKsQDwsBDKkRNL7Ba/MaAUZvH69qgz8dAwXwpA19hNDuXfRnukrC8vlA 0TCwC8Jbu65v5Q== -----END CERTIFICATE-----Generated at Mon Dec 22 13:20:29 2025 by rpki-client