This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json) Hash identifier: FOz1cGEnYBCoPfwihUX9MolWJEobeSUFFW2dmy3LMZc= Subject key identifier: BB:80:36:9C:85:87:8B:7D:5D:C6:76:5C:9E:2B:B4:72:FB:F0:00:FD Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d Certificate serial: 019B4248F290F815DE6C6BBA60A9442AFD03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft Manifest number: 13D1 Signing time: Sun 21 Dec 2025 19:00:35 +0000 Manifest this update: Sun 21 Dec 2025 19:00:35 +0000 Manifest next update: Mon 22 Dec 2025 19:00:35 +0000 Files and hashes: 1: RLYdgFJvn-SCdRlbujqXRDojg9w.roa (hash: YgjAw3s158Hv/sBNq0Uj9//CRqxP6bn0sO/g49znFhw=) 2: _mq-Iedkuxj7G2-f6lHJz5Cp1pY.roa (hash: iMmq6hmw4oHjx4r8r/0Qs7tCaSPdyiDBIM5hIG283pc=) 3: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: Fp7n7C3SPjW5/2NulQBVawlzt0BREDiFXPQHF8HMJb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:48:f2:90:f8:15:de:6c:6b:ba:60:a9:44:2a:fd:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d Validity Not Before: Dec 21 19:00:35 2025 GMT Not After : Dec 22 19:00:35 2025 GMT Subject: CN=bb80369c85878b7d5dc6765c9e2bb472fbf000fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:2e:ee:18:2e:17:5a:48:8c:89:82:d8:ae: 57:f5:e4:ef:3d:11:34:27:9d:af:de:0e:22:1b:f8: b1:dd:1e:06:1e:3c:8a:8e:b5:f1:04:58:cf:69:69: c1:f3:4f:13:ad:27:a2:d3:2c:41:84:53:71:c5:90: 77:b8:54:8a:a6:0a:76:a6:00:d6:b2:3c:50:fe:92: af:74:6c:9e:40:73:41:1f:31:2b:a8:5b:e6:5c:fe: 30:bb:6c:80:3d:2a:9f:44:33:26:be:5c:a8:e1:ea: 86:8b:bf:ae:ac:86:02:43:62:c2:83:11:95:78:c6: f2:a6:20:7e:9e:05:4f:42:50:d5:84:08:7a:b1:09: 66:81:4d:44:f1:18:d4:d6:8c:0b:cc:99:ee:dd:1b: d0:b1:c8:c0:22:a7:50:94:0b:bb:8b:66:78:6f:df: 5f:18:34:02:64:65:64:c9:e0:75:d7:c9:68:fb:11: 7c:25:f1:9c:d2:75:88:29:ef:b3:53:b8:e4:c5:85: 12:9c:70:81:66:c2:8e:62:53:2d:fb:68:da:74:38: 85:37:8a:2d:73:87:ec:bc:70:dc:6d:42:4d:66:99: 48:a5:20:4f:79:27:20:ef:3f:d5:ce:f7:bf:be:5d: fa:d5:49:a6:e4:d6:1e:91:60:2c:3c:54:6a:70:f4: 79:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:80:36:9C:85:87:8B:7D:5D:C6:76:5C:9E:2B:B4:72:FB:F0:00:FD X509v3 Authority Key Identifier: keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f4:6a:2e:37:f7:1d:5b:6e:fa:b7:ce:82:0d:66:d8:40:99: d2:5a:c8:2e:54:11:5a:08:6d:ab:90:56:fd:2c:83:7b:fa:25: c7:0d:50:73:91:2d:5c:16:45:8d:9f:30:5f:34:73:ed:e4:e8: e7:f1:a5:72:b7:34:6a:7f:ee:9b:11:a9:a9:50:6e:68:c8:94: 60:70:e0:6c:f4:23:9a:11:de:db:03:aa:0f:fb:33:61:a7:03: b1:1f:b4:97:3f:0f:9b:0c:b1:42:7f:5d:13:da:46:7a:09:a2: 38:54:af:a3:0f:7b:e1:ba:4a:94:aa:82:fd:ef:a3:5c:7c:4f: ba:74:f4:41:52:ea:c0:a4:ec:77:60:7f:bb:11:6e:b2:7d:0f: 57:33:2d:02:dc:01:42:d4:b1:fa:30:c1:34:6a:19:a1:61:af: cc:b5:24:ae:4d:e4:bd:c9:07:9c:8e:6e:a3:33:5e:28:f8:dd: c5:35:6d:91:fa:b8:59:aa:d0:40:a3:b8:f9:02:46:1d:f2:ae: e7:7f:9b:d9:b5:e6:c8:cb:47:f3:aa:fb:18:ba:a3:88:d9:02: be:4a:5d:53:09:c3:57:2c:df:c1:87:d1:ea:04:7f:35:ad:e5: c8:a5:5f:f5:4a:98:cf:9a:95:24:f9:37:64:f1:d7:8d:1c:5b: c2:2d:fd:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSPKQ+BXebGu6YKlEKv0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MDRkYWY4NThiN2IwMGI1MWNiYjk0YWZiMjhmMDNlYTIx ZTQxMWQwHhcNMjUxMjIxMTkwMDM1WhcNMjUxMjIyMTkwMDM1WjAzMTEwLwYDVQQD EyhiYjgwMzY5Yzg1ODc4YjdkNWRjNjc2NWM5ZTJiYjQ3MmZiZjAwMGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWIu7hguF1pIjImC2K5X9eTvPRE0 J52v3g4iG/ix3R4GHjyKjrXxBFjPaWnB808TrSei0yxBhFNxxZB3uFSKpgp2pgDW sjxQ/pKvdGyeQHNBHzErqFvmXP4wu2yAPSqfRDMmvlyo4eqGi7+urIYCQ2LCgxGV eMbypiB+ngVPQlDVhAh6sQlmgU1E8RjU1owLzJnu3RvQscjAIqdQlAu7i2Z4b99f GDQCZGVkyeB118lo+xF8JfGc0nWIKe+zU7jkxYUSnHCBZsKOYlMt+2jadDiFN4ot c4fsvHDcbUJNZplIpSBPeScg7z/Vzve/vl361Umm5NYekWAsPFRqcPR5BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuANpyFh4t9XcZ2XJ4rtHL78AD9MB8GA1UdIwQY MBaAFGkE2vhYt7ALUcu5Svso8D6iHkEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVFUYS1GaTNzQXRSeTdsSy15andQcUllUVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xODM2NTYtMGRjNS00YTk0LWFlNmQt OGFkMWQwZjgwMjE3LzEvYVFUYS1GaTNzQXRSeTdsSy15andQcUllUVIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8xODM2NTYtMGRjNS00YTk0LWFlNmQtOGFkMWQwZjgwMjE3 LzEvYVFUYS1GaTNzQXRSeTdsSy15andQcUllUVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvRqLjf3 HVtu+rfOgg1m2ECZ0lrILlQRWghtq5BW/SyDe/olxw1Qc5EtXBZFjZ8wXzRz7eTo 5/Glcrc0an/umxGpqVBuaMiUYHDgbPQjmhHe2wOqD/szYacDsR+0lz8PmwyxQn9d E9pGegmiOFSvow974bpKlKqC/e+jXHxPunT0QVLqwKTsd2B/uxFusn0PVzMtAtwB QtSx+jDBNGoZoWGvzLUkrk3kvckHnI5uozNeKPjdxTVtkfq4WarQQKO4+QJGHfKu 53+b2bXmyMtH86r7GLqjiNkCvkpdUwnDVyzfwYfR6gR/Na3lyKVf9UqYz5qVJPk3 ZPHXjRxbwi39Qg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:43:54 2025 by rpki-client