This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json) Hash identifier: 3jdsNkB+dmPymhRw216MZlxqBkUNE0MhDj2MHKceZWU= Subject key identifier: D0:7C:0C:9B:3C:41:9D:B5:AC:ED:A5:E9:DD:58:B4:3D:9A:64:8D:18 Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Certificate serial: 019B3A58933EB2491F7D1FBF3C134517007A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft Manifest number: 1671 Signing time: Sat 20 Dec 2025 06:00:41 +0000 Manifest this update: Sat 20 Dec 2025 06:00:41 +0000 Manifest next update: Sun 21 Dec 2025 06:00:41 +0000 Files and hashes: 1: 2fpFEHBfghYTNwqTBl9TJR5nCzQ.roa (hash: GvNSmymW/APULsatcVc+5sOWx6SGb1lbz9qr0ZBM25g=) 2: 8VdcsA_3vthxkHxEE3soQq3GWlI.roa (hash: HdKeApcjuEVfcpxPnJmOBirClzl00oaS7vYtCcsBZUE=) 3: AxMCzGQBfkdUPjF75_FQYgBKyKk.roa (hash: Q4uzKxO1D3wkqVE3S1h7jCMzrLyzlo8Fuw91HVMqqb4=) 4: GBH94I9dnJeJP-cDtrZrjQV60Xo.roa (hash: y6nZi/uewPtAISPvzpzs2QyOXFXhWR2PVFDixGJRcS4=) 5: H2VZSmbjuhR3ac6MIKzeglyIYks.roa (hash: UIjSJcyc/E8JLENuCv3vqPJa+7OOm7xS/YMDmRv22Kw=) 6: HF4WzxoDXgbg5yBxSS03tW9aru8.roa (hash: PWduzoTmZRp313sGCyiMmvYNM3baM7nUGFf5SyjiJn0=) 7: J77jo9bOLCQlRa9jZXP7dkS-vsc.roa (hash: BkSOP5B+rRmnn+pH6eFEIdlnuALStZNG5jHgh2jmArM=) 8: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: y29LXN9KfOmML89SiK5mDq/u3msTkMkSpGLtJsz6sIc=) 9: udc46mgp-szqkgSRcIGKFCbr4JI.roa (hash: JhRkQnx4Eha9Xs6OT104V9KWisTA96XNNv0iCMA2cQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:93:3e:b2:49:1f:7d:1f:bf:3c:13:45:17:00:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Validity Not Before: Dec 20 06:00:41 2025 GMT Not After : Dec 21 06:00:41 2025 GMT Subject: CN=d07c0c9b3c419db5aceda5e9dd58b43d9a648d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:19:f5:66:51:91:53:d8:e1:cf:76:7a:16:06: ee:c7:d0:72:43:18:d2:67:ff:c5:72:30:a8:59:15: f6:5e:b3:be:d3:f9:b4:ce:4c:a5:e7:e6:5d:29:f4: e1:f9:58:b2:d6:3b:89:23:86:b1:f8:ce:d7:05:5c: 7d:21:7b:de:73:16:8a:7f:09:52:ba:0f:64:76:70: 96:67:7d:f5:c3:63:1f:c5:f8:b0:d9:f1:d3:4e:df: ea:bb:ef:1d:17:50:bd:4d:a8:d4:04:35:fd:00:16: fd:ab:07:ea:ee:d6:cb:2e:ec:0a:1f:de:8c:0f:21: 09:7c:67:27:6c:4e:7a:a7:82:1f:3e:5c:0f:e0:5b: b0:de:b9:23:1c:8a:36:22:79:12:87:37:5c:51:bb: e8:c0:b5:89:76:34:59:e1:65:9e:f9:80:2f:8c:8c: 3f:52:d8:48:58:38:99:00:d5:06:ee:4d:44:00:10: ab:68:d0:99:46:3c:29:ff:7a:32:cd:e6:a2:32:8e: 66:40:b0:ae:4e:9b:5c:0c:de:70:ac:8f:7d:81:84: 64:fd:f2:0d:d8:f2:48:e8:10:af:91:56:9f:a3:bc: 88:3b:66:80:40:99:f9:ce:7c:33:0c:5c:11:fc:37: c0:bb:f4:5f:22:7c:c1:13:e3:d4:e3:6b:65:77:aa: aa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7C:0C:9B:3C:41:9D:B5:AC:ED:A5:E9:DD:58:B4:3D:9A:64:8D:18 X509v3 Authority Key Identifier: keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8f:1e:1c:8b:2a:42:85:35:1c:50:1c:0e:29:c5:1f:85:ea: 0b:46:5c:b5:3b:22:e6:4d:9c:6e:c4:18:9f:27:d9:15:02:ba: d0:56:ff:d3:dd:95:51:21:4e:79:e7:eb:e8:69:74:87:4c:41: e5:63:15:0f:a7:a5:0a:68:d6:72:56:6c:4f:9d:e6:56:93:a4: 99:ab:70:b6:bc:31:50:bf:9b:9e:cf:ba:b7:53:85:9f:82:31: fb:da:43:77:bf:62:94:71:05:5c:71:da:35:da:a6:23:af:79: 53:a6:55:c4:a9:93:dd:59:ff:30:f0:3e:6c:35:91:ef:23:b1: 81:84:10:d2:fd:0a:84:0e:c7:e4:57:d6:80:b6:2d:e2:63:63: 62:b5:97:62:3a:a2:b4:e1:37:05:4e:5f:ac:4c:cd:23:43:c1: ff:ae:37:1e:f3:fb:50:12:e1:96:03:90:a8:02:f6:7a:c8:bd: 7e:bf:51:c9:d6:a9:9d:da:eb:1e:37:97:15:38:2c:5a:38:70: 59:cc:bd:2e:8f:ac:ea:3c:73:ac:58:21:c3:89:d0:ed:77:7d: 0f:64:91:47:30:4b:81:5c:ce:fe:bb:ec:74:37:56:0f:5e:06: 40:81:18:b5:25:3d:b1:33:90:39:64:cc:19:ee:58:c3:8f:b1: 40:dc:3d:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WJM+skkffR+/PBNFFwB6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw NmE0YjgwHhcNMjUxMjIwMDYwMDQxWhcNMjUxMjIxMDYwMDQxWjAzMTEwLwYDVQQD EyhkMDdjMGM5YjNjNDE5ZGI1YWNlZGE1ZTlkZDU4YjQzZDlhNjQ4ZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxn1ZlGRU9jhz3Z6Fgbux9ByQxjS Z//FcjCoWRX2XrO+0/m0zkyl5+ZdKfTh+Viy1juJI4ax+M7XBVx9IXvecxaKfwlS ug9kdnCWZ331w2Mfxfiw2fHTTt/qu+8dF1C9TajUBDX9ABb9qwfq7tbLLuwKH96M DyEJfGcnbE56p4IfPlwP4Fuw3rkjHIo2InkShzdcUbvowLWJdjRZ4WWe+YAvjIw/ UthIWDiZANUG7k1EABCraNCZRjwp/3oyzeaiMo5mQLCuTptcDN5wrI99gYRk/fIN 2PJI6BCvkVafo7yIO2aAQJn5znwzDFwR/DfAu/RfInzBE+PU42tld6qqsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNB8DJs8QZ21rO2l6d1YtD2aZI0YMB8GA1UdIwQY MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt MzYyZmZlOGVlMjcwLzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjY8eHIsq QoU1HFAcDinFH4XqC0ZctTsi5k2cbsQYnyfZFQK60Fb/092VUSFOeefr6Gl0h0xB 5WMVD6elCmjWclZsT53mVpOkmatwtrwxUL+bns+6t1OFn4Ix+9pDd79ilHEFXHHa NdqmI695U6ZVxKmT3Vn/MPA+bDWR7yOxgYQQ0v0KhA7H5FfWgLYt4mNjYrWXYjqi tOE3BU5frEzNI0PB/643HvP7UBLhlgOQqAL2esi9fr9RydapndrrHjeXFTgsWjhw Wcy9Lo+s6jxzrFghw4nQ7Xd9D2SRRzBLgVzO/rvsdDdWD14GQIEYtSU9sTOQOWTM Ge5Yw4+xQNw9hA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:49:48 2025 by rpki-client