This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft File: aspx8tn-K0nGdi89mg6L8zLf3tE.mft (raw, json) Hash identifier: fZsaZCv4aI7z/RSB7U0yFPkzkP8JOEEGNGQdPWDORuE= Subject key identifier: 74:BB:67:1D:F0:29:AC:C0:01:E1:37:BA:53:A1:06:7A:AB:15:1C:F3 Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1 Certificate issuer: /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1 Certificate serial: 019B9C32234E768F97E7E9A41F86D4510179 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft Manifest number: 11AB Signing time: Thu 08 Jan 2026 06:01:29 +0000 Manifest this update: Thu 08 Jan 2026 06:01:29 +0000 Manifest next update: Fri 09 Jan 2026 06:01:29 +0000 Files and hashes: 1: EgV1knG2q0851YdjwI9ZnxFusW8.roa (hash: TpL3ZZSNUe8HCulV7DZciQFP376Z50w7pD7Ztv0vOQ0=) 2: aspx8tn-K0nGdi89mg6L8zLf3tE.crl (hash: nI3yWZClk3mtuf5JSDee2F+KTNjD/8imZnWGCV4b9P0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 06:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:32:23:4e:76:8f:97:e7:e9:a4:1f:86:d4:51:01:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1 Validity Not Before: Jan 8 06:01:29 2026 GMT Not After : Jan 9 06:01:29 2026 GMT Subject: CN=74bb671df029acc001e137ba53a1067aab151cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fd:86:61:ff:e5:6e:f4:cb:ec:33:2b:41:41: 16:55:a7:5f:2a:ff:b9:ba:e3:15:1c:b2:10:04:bf: 79:e1:6c:ae:d0:ea:04:02:29:f3:14:eb:82:e5:ab: d8:e1:ba:63:49:ee:df:83:e2:23:5c:c8:8e:77:43: 3d:c8:2c:bd:a3:c8:22:00:23:39:21:93:80:07:36: d7:49:7d:f7:e6:8a:d5:f9:85:1c:2d:79:9a:35:50: 66:ad:73:e1:16:7f:f5:0b:78:9a:bc:ca:a7:9d:c7: 08:a2:c2:73:5c:58:e8:bd:e3:5e:99:44:80:00:a3: cf:ec:2f:db:ec:f7:63:9f:45:08:25:76:b2:b8:82: 31:4e:bc:b0:25:d7:a8:d8:5c:59:59:db:34:c8:09: f2:bd:d3:89:56:1e:94:af:e5:29:3a:cc:53:af:0b: f2:a1:7d:93:ce:be:5a:fd:7e:e4:2a:d6:9f:01:80: 26:26:b3:03:32:45:8d:cf:eb:81:77:9f:8c:c8:18: 07:5b:ab:16:c9:f7:9b:e8:28:b8:77:9e:62:d0:2f: b8:54:a4:82:89:5f:01:ae:26:1d:d5:dd:df:8c:21: 82:d5:d0:6a:aa:54:0d:50:7e:dc:28:52:e4:d9:34: 04:8b:72:dc:b9:ab:09:50:3e:6d:d7:da:f6:4b:6a: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BB:67:1D:F0:29:AC:C0:01:E1:37:BA:53:A1:06:7A:AB:15:1C:F3 X509v3 Authority Key Identifier: keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:99:9c:28:eb:e0:ea:d1:87:04:87:78:1a:97:b6:83:99:7f: 7f:2e:bc:85:b4:d6:76:20:38:f6:03:7e:30:2f:ce:42:61:57: 43:58:62:d6:3b:11:91:92:17:b8:a3:6d:a0:96:fe:20:85:70: 3a:8b:a8:06:e7:1d:d3:89:61:81:99:7f:d3:75:ea:a6:12:8f: 88:01:77:f8:e7:23:aa:46:e1:1b:df:68:da:9e:3e:64:bc:5d: 4f:ac:76:17:22:ef:dd:05:4c:a9:cd:30:fe:6a:33:1f:65:4a: fd:e9:4e:50:0e:63:53:51:60:24:53:bd:a7:b1:d3:fa:40:10: 8d:63:42:7d:31:79:0c:74:8c:2b:32:69:1e:2d:d1:f9:63:c7: 80:48:3f:98:e8:6b:a0:d2:a0:02:1d:f0:b5:db:62:b9:d2:aa: 4f:2c:15:e2:e2:b0:15:ea:78:58:da:2d:45:ea:00:07:61:87: 8c:ad:09:ca:c5:ad:53:b5:a5:44:83:ea:ed:63:0b:3c:19:53: 12:4d:12:1b:5f:03:9d:97:74:d7:81:66:3f:88:63:5a:58:86: 78:0b:ee:40:56:7e:4e:1e:5c:ae:cd:c1:f1:6f:0e:70:d2:2c: f4:f2:0c:87:cf:43:c1:17:50:3c:a3:07:00:1f:d5:3a:2c:31: 46:40:60:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZucMiNOdo+X5+mkH4bUUQF5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhY2E3MWYyZDlmZTJiNDljNjc2MmYzZDlhMGU4YmYzMzJk ZmRlZDEwHhcNMjYwMTA4MDYwMTI5WhcNMjYwMTA5MDYwMTI5WjAzMTEwLwYDVQQD Eyg3NGJiNjcxZGYwMjlhY2MwMDFlMTM3YmE1M2ExMDY3YWFiMTUxY2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP2GYf/lbvTL7DMrQUEWVadfKv+5 uuMVHLIQBL954Wyu0OoEAinzFOuC5avY4bpjSe7fg+IjXMiOd0M9yCy9o8giACM5 IZOABzbXSX335orV+YUcLXmaNVBmrXPhFn/1C3iavMqnnccIosJzXFjoveNemUSA AKPP7C/b7Pdjn0UIJXayuIIxTrywJdeo2FxZWds0yAnyvdOJVh6Ur+UpOsxTrwvy oX2Tzr5a/X7kKtafAYAmJrMDMkWNz+uBd5+MyBgHW6sWyfeb6Ci4d55i0C+4VKSC iV8BriYd1d3fjCGC1dBqqlQNUH7cKFLk2TQEi3LcuasJUD5t19r2S2pH7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHS7Zx3wKazAAeE3ulOhBnqrFRzzMB8GA1UdIwQY MBaAFGrKcfLZ/itJxnYvPZoOi/My397RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXNweDh0bi1LMG5HZGk4OW1nNkw4ekxmM3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8xYjAyODktMzFmZi00MzFmLTk0ODkt OWE4ZDJiZjAwMzIwLzEvYXNweDh0bi1LMG5HZGk4OW1nNkw4ekxmM3RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8xYjAyODktMzFmZi00MzFmLTk0ODktOWE4ZDJiZjAwMzIw LzEvYXNweDh0bi1LMG5HZGk4OW1nNkw4ekxmM3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpmcKOvg 6tGHBId4Gpe2g5l/fy68hbTWdiA49gN+MC/OQmFXQ1hi1jsRkZIXuKNtoJb+IIVw OouoBucd04lhgZl/03XqphKPiAF3+OcjqkbhG99o2p4+ZLxdT6x2FyLv3QVMqc0w /mozH2VK/elOUA5jU1FgJFO9p7HT+kAQjWNCfTF5DHSMKzJpHi3R+WPHgEg/mOhr oNKgAh3wtdtiudKqTywV4uKwFep4WNotReoAB2GHjK0JysWtU7WlRIPq7WMLPBlT Ek0SG18DnZd014FmP4hjWliGeAvuQFZ+Th5crs3B8W8OcNIs9PIMh89DwRdQPKMH AB/VOiwxRkBgCw== -----END CERTIFICATE-----Generated at Thu Jan 8 13:36:17 2026 by rpki-client