This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft File: aiEWQxh--SWKEyXN_B0b9zg76Fs.mft (raw, json) Hash identifier: cTOwfFv5IOLsZ0OV5dHoG7NMlROvslSGwER0PikM848= Subject key identifier: 23:85:A6:7B:C5:0B:0F:72:80:22:01:4D:27:FA:D2:F2:CA:EB:52:E3 Authority key identifier: 6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B Certificate issuer: /CN=6a211643187ef9258a1325cdfc1d1bf7383be85b Certificate serial: 019B299BF38C90701DE4BB5B94481E31A749 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 00:00:44 +0000 Manifest this update: Wed 17 Dec 2025 00:00:44 +0000 Manifest next update: Thu 18 Dec 2025 00:00:44 +0000 Files and hashes: 1: aiEWQxh--SWKEyXN_B0b9zg76Fs.crl (hash: +rjtwx8uJrKgQnT2TEswkg7nH9kDnMdvD8TAuHIJPg8=) 2: g6TmhqoG_IADwsC-GEbQq9xKePg.roa (hash: L2BybzQCICOxY6zkJoh+UHB/hV65BYdz7sNC8RSFIvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:9b:f3:8c:90:70:1d:e4:bb:5b:94:48:1e:31:a7:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a211643187ef9258a1325cdfc1d1bf7383be85b Validity Not Before: Dec 17 00:00:44 2025 GMT Not After : Dec 18 00:00:44 2025 GMT Subject: CN=2385a67bc50b0f728022014d27fad2f2caeb52e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9f:f3:06:0e:bc:66:4e:46:10:86:ab:f2:24: 72:21:83:11:80:29:36:56:cf:64:71:bf:48:b0:f8: d6:95:30:5a:a4:68:c8:ba:a5:07:2a:db:10:04:49: 37:d4:2d:d6:a1:ab:9b:0a:4e:de:6b:95:d5:a5:29: 62:85:db:13:93:c8:34:5a:89:00:ed:a7:c2:02:98: c6:00:64:3d:0c:26:37:93:0d:8a:4b:06:db:5d:4c: f2:b9:58:f8:3c:b1:be:de:fb:17:b0:9d:73:81:95: 46:5b:6e:a9:48:53:9d:bf:45:c9:ce:2c:0f:cd:88: 1d:54:49:07:b4:70:37:3d:9c:4f:7e:6a:6b:87:15: 80:d4:da:a9:b1:d3:66:e8:1d:f8:7c:c1:ff:a1:28: 1d:1b:a5:6f:a2:49:d1:48:ed:14:63:24:54:15:b9: 9f:31:fb:0e:a1:7e:5b:b8:99:e4:8d:f6:c3:80:d5: e9:22:b5:f2:42:e1:b0:72:c8:57:eb:91:45:be:6b: bf:b8:e7:5a:f3:43:45:fe:25:66:6b:51:da:d7:66: 55:ea:fe:a3:30:9c:00:32:bb:9d:5a:1c:3a:b9:c0: 03:e7:1c:ff:1b:94:2a:a1:be:f9:49:71:fe:13:a5: 61:c4:2c:78:61:b9:2b:12:ce:5e:69:f8:d8:67:7b: b7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:85:A6:7B:C5:0B:0F:72:80:22:01:4D:27:FA:D2:F2:CA:EB:52:E3 X509v3 Authority Key Identifier: keyid:6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5c:95:ed:0d:bf:6e:fb:98:ce:75:bf:3c:f9:63:eb:6a:a8: 3b:bb:37:e2:c6:d4:a7:d0:ba:8e:76:be:ac:c3:3f:17:69:4d: 47:c1:84:a6:cc:93:af:29:83:96:e6:76:aa:e7:db:50:c5:6d: 0c:4e:cb:56:47:ec:9c:69:2f:b7:13:4f:f0:00:be:d7:e5:10: 4b:6d:f0:20:9b:cf:28:1e:ad:d8:4f:79:c9:6a:26:4c:d1:84: 5f:31:73:7a:de:88:31:cb:6a:62:ae:94:c9:a7:72:de:d5:bb: 90:78:63:e8:00:9f:3c:46:bf:a2:c3:b6:56:43:9b:50:8b:6f: 81:4c:ac:4d:d9:2c:24:9f:85:90:61:5c:25:7a:0e:45:d9:88: b8:9a:dc:fb:8f:d3:77:33:1b:8f:91:7a:9d:48:2e:2d:84:2b: af:42:da:38:b2:3c:ce:66:9f:ce:dd:fe:fc:5f:47:26:33:d5: 87:ff:6b:ef:ed:8c:ce:28:3c:d2:c8:ef:49:08:c9:c1:aa:87: 8d:c6:d8:88:bd:78:df:13:c8:65:f7:6e:19:bd:d7:23:08:a3: 88:24:ab:0b:2a:26:fe:3c:07:89:68:06:3f:a2:67:d0:12:bd: e5:6c:86:68:e6:fb:d9:e4:cf:1d:29:60:cc:80:2f:36:49:c1: 96:5b:f1:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspm/OMkHAd5LtblEgeMadJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMjExNjQzMTg3ZWY5MjU4YTEzMjVjZGZjMWQxYmY3Mzgz YmU4NWIwHhcNMjUxMjE3MDAwMDQ0WhcNMjUxMjE4MDAwMDQ0WjAzMTEwLwYDVQQD EygyMzg1YTY3YmM1MGIwZjcyODAyMjAxNGQyN2ZhZDJmMmNhZWI1MmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J/zBg68Zk5GEIar8iRyIYMRgCk2 Vs9kcb9IsPjWlTBapGjIuqUHKtsQBEk31C3WoaubCk7ea5XVpSlihdsTk8g0WokA 7afCApjGAGQ9DCY3kw2KSwbbXUzyuVj4PLG+3vsXsJ1zgZVGW26pSFOdv0XJziwP zYgdVEkHtHA3PZxPfmprhxWA1NqpsdNm6B34fMH/oSgdG6VvoknRSO0UYyRUFbmf MfsOoX5buJnkjfbDgNXpIrXyQuGwcshX65FFvmu/uOda80NF/iVma1Ha12ZV6v6j MJwAMrudWhw6ucAD5xz/G5Qqob75SXH+E6VhxCx4YbkrEs5eafjYZ3u3hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOFpnvFCw9ygCIBTSf60vLK61LjMB8GA1UdIwQY MBaAFGohFkMYfvklihMlzfwdG/c4O+hbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWlFV1F4aC0tU1dLRXlYTl9CMGI5emc3NkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNmExY2QtNjVhMC00OWQzLTljNWYt ZjA2ZmM0OGM4ZTRjLzEvYWlFV1F4aC0tU1dLRXlYTl9CMGI5emc3NkZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iNmExY2QtNjVhMC00OWQzLTljNWYtZjA2ZmM0OGM4ZTRj LzEvYWlFV1F4aC0tU1dLRXlYTl9CMGI5emc3NkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVyV7Q2/ bvuYznW/PPlj62qoO7s34sbUp9C6jna+rMM/F2lNR8GEpsyTrymDluZ2qufbUMVt DE7LVkfsnGkvtxNP8AC+1+UQS23wIJvPKB6t2E95yWomTNGEXzFzet6IMctqYq6U yady3tW7kHhj6ACfPEa/osO2VkObUItvgUysTdksJJ+FkGFcJXoORdmIuJrc+4/T dzMbj5F6nUguLYQrr0LaOLI8zmafzt3+/F9HJjPVh/9r7+2Mzig80sjvSQjJwaqH jcbYiL143xPIZfduGb3XIwijiCSrCyom/jwHiWgGP6Jn0BK95WyGaOb72eTPHSlg zIAvNknBllvxkw== -----END CERTIFICATE-----Generated at Wed Dec 17 09:46:35 2025 by rpki-client