This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft File: aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json) Hash identifier: 4+1mUB/gSO2xxg4cZzcQ2AT7NP9I1TdMOG7tnUogl6g= Subject key identifier: 31:90:69:75:AF:15:FD:1C:F8:58:E6:50:E0:D9:A8:C3:CF:54:B6:02 Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24 Certificate issuer: /CN=6977a3116ecc9d7a429f13651613e8ad149ff324 Certificate serial: 019B3B6BB043C82F3710385EB2575A52E9F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft Manifest number: 03D9 Signing time: Sat 20 Dec 2025 11:01:11 +0000 Manifest this update: Sat 20 Dec 2025 11:01:11 +0000 Manifest next update: Sun 21 Dec 2025 11:01:11 +0000 Files and hashes: 1: 29C_AMtyAdy5xz9nR5IWFhFiIiY.roa (hash: FBVen/Q/sLzdQJw+zYeV1QYNWCu1/gvix8MLvUf426M=) 2: SOOUfYeqqZHuoh2Gony2KLPyjUg.roa (hash: 3qFCFMkMfnTPWsf6Qhr45sO5P402Ny67zVPmMEC99q8=) 3: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: yAY42BL6gkRoVuR8jruc76NJuqM7mZHaUEr9kDfACGY=) 4: ub1kPDAxllR0WFP6iXd1W5UcG_k.roa (hash: 8WBQDzQQjZxzhaXE+nFlYVRYm6wxvzqPDNkDDz5P6H0=) 5: y6CjvWQerUp0Mv77KMhz5spMEWA.roa (hash: BRh0sxRN6LJqe+S+C32b8EMbRfEqAVHqJDsn1Jnu7HU=) 6: z2qHkp8Ova3H-EIkw2NTnRO7gkI.roa (hash: Fn5hALb1mtYFrLnSFaezik3eBlSVyODyp/ngNt1Q1jU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:b0:43:c8:2f:37:10:38:5e:b2:57:5a:52:e9:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324 Validity Not Before: Dec 20 11:01:11 2025 GMT Not After : Dec 21 11:01:11 2025 GMT Subject: CN=31906975af15fd1cf858e650e0d9a8c3cf54b602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:ff:f2:42:f8:6c:17:62:29:33:df:76:14: c3:0c:8d:7b:25:77:14:0b:9c:f7:ce:b2:82:ea:c3: bc:59:32:53:29:db:0b:ad:44:2c:93:ba:5e:65:92: 6f:e0:18:f5:a0:35:b8:80:54:f1:61:e5:53:97:3d: 83:8b:c3:c8:82:fb:49:df:75:6c:c2:66:3b:75:38: 99:59:5e:99:07:e7:5e:25:5b:c7:4c:04:ce:6a:1c: 33:2d:1c:bb:eb:23:ef:5a:1d:9c:75:8b:ed:86:57: 5b:ee:26:1c:1a:c9:ea:08:00:f1:c3:ca:71:af:a2: 29:fc:f2:5c:29:14:18:58:3b:0f:78:86:f9:18:93: 54:78:8a:18:5a:58:f3:06:dc:5c:e2:01:db:51:45: 4f:e7:ee:12:de:f3:d9:65:59:d9:0e:2b:fa:ff:6a: 03:bb:06:3f:1e:31:bc:93:02:10:df:f7:76:32:c1: ae:3f:28:58:a7:72:6f:49:8e:82:48:70:6d:7d:bf: ae:3c:5c:09:2e:c9:1b:31:49:e6:0e:d1:16:9a:dd: 10:e7:df:37:75:c5:df:5d:95:bd:44:de:37:74:5a: c1:4a:14:55:cf:af:38:4f:2a:ab:52:1e:2a:ed:4b: 03:4a:8f:c6:02:76:3e:c1:16:94:c7:3a:2c:e0:67: e6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:90:69:75:AF:15:FD:1C:F8:58:E6:50:E0:D9:A8:C3:CF:54:B6:02 X509v3 Authority Key Identifier: keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ba:dd:d4:66:1b:db:8a:6c:91:50:e2:da:21:36:2b:9d:73: e5:a1:fe:d6:71:58:92:be:8b:55:30:f0:2a:a8:6b:fe:af:01: 52:ed:26:05:68:6d:44:9a:3f:7c:36:42:36:29:51:1a:06:11: bd:81:25:c6:13:a1:f0:72:37:27:7c:7e:01:b3:a4:7e:aa:11: a7:62:f2:6d:48:fd:f1:3d:07:0a:45:b8:69:05:c9:19:0c:19: b6:ce:62:88:a3:55:c5:01:11:cf:62:8d:2e:1f:cf:f0:dd:5a: e8:f9:b8:d0:d2:f2:e8:8d:fa:52:ce:a5:a4:0d:43:1e:4b:93: 48:77:71:d8:35:cc:d5:ca:8d:9a:4f:33:0f:d4:73:34:cb:c0: cb:63:d6:86:c8:a4:c7:50:c9:3e:b8:8e:72:34:cc:9e:24:0d: 3a:77:41:1b:53:e2:0d:6d:2b:73:69:ef:e3:9c:38:28:dd:58: ad:cd:8b:05:6e:16:72:d3:4a:1a:63:c1:57:a0:b7:71:b5:86: 1a:84:c2:ab:f8:f4:3f:36:0b:99:bd:19:a4:0a:16:42:3b:d4: 95:63:5b:71:8f:47:2d:f2:bf:0c:e1:70:04:55:c3:8a:00:e2: 6e:24:25:1c:76:a3:be:70:74:1f:a6:2c:c2:2e:62:9e:7d:c0: 68:b0:ab:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a7BDyC83EDhesldaUunxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NzdhMzExNmVjYzlkN2E0MjlmMTM2NTE2MTNlOGFkMTQ5 ZmYzMjQwHhcNMjUxMjIwMTEwMTExWhcNMjUxMjIxMTEwMTExWjAzMTEwLwYDVQQD EygzMTkwNjk3NWFmMTVmZDFjZjg1OGU2NTBlMGQ5YThjM2NmNTRiNjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYz/8kL4bBdiKTPfdhTDDI17JXcU C5z3zrKC6sO8WTJTKdsLrUQsk7peZZJv4Bj1oDW4gFTxYeVTlz2Di8PIgvtJ33Vs wmY7dTiZWV6ZB+deJVvHTATOahwzLRy76yPvWh2cdYvthldb7iYcGsnqCADxw8px r6Ip/PJcKRQYWDsPeIb5GJNUeIoYWljzBtxc4gHbUUVP5+4S3vPZZVnZDiv6/2oD uwY/HjG8kwIQ3/d2MsGuPyhYp3JvSY6CSHBtfb+uPFwJLskbMUnmDtEWmt0Q5983 dcXfXZW9RN43dFrBShRVz684TyqrUh4q7UsDSo/GAnY+wRaUxzos4Gfm+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGQaXWvFf0c+FjmUODZqMPPVLYCMB8GA1UdIwQY MBaAFGl3oxFuzJ16Qp8TZRYT6K0Un/MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTkt ZjRiN2IzOThjNjM0LzEvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTktZjRiN2IzOThjNjM0 LzEvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrrd1GYb 24pskVDi2iE2K51z5aH+1nFYkr6LVTDwKqhr/q8BUu0mBWhtRJo/fDZCNilRGgYR vYElxhOh8HI3J3x+AbOkfqoRp2LybUj98T0HCkW4aQXJGQwZts5iiKNVxQERz2KN Lh/P8N1a6Pm40NLy6I36Us6lpA1DHkuTSHdx2DXM1cqNmk8zD9RzNMvAy2PWhsik x1DJPriOcjTMniQNOndBG1PiDW0rc2nv45w4KN1Yrc2LBW4WctNKGmPBV6C3cbWG GoTCq/j0PzYLmb0ZpAoWQjvUlWNbcY9HLfK/DOFwBFXDigDibiQlHHajvnB0H6Ys wi5inn3AaLCrHA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:06 2025 by rpki-client