This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft File: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft (raw, json) Hash identifier: Ej6wSYwIslPvnxogmP+T5wSRw8GgAo+UsMjnEYADo7Y= Subject key identifier: E9:80:0A:25:38:C5:A4:72:C7:69:30:76:9D:A4:4E:CC:7B:FD:3E:8C Authority key identifier: 69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04 Certificate issuer: /CN=69226ceb40c671f30acf11fa36b8d7d1c6754704 Certificate serial: 019B41DB8EF9692B83525B4306E28B686A93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft Manifest number: 1792 Signing time: Sun 21 Dec 2025 17:01:06 +0000 Manifest this update: Sun 21 Dec 2025 17:01:06 +0000 Manifest next update: Mon 22 Dec 2025 17:01:06 +0000 Files and hashes: 1: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl (hash: 2fZAxOv+ZqYn4xOlXAix5gONuyDvZTXoi/+PwxiWmGA=) 2: haMdABaXVysRqHMnxwzwnxPmy3c.roa (hash: qOyf4cvYsbSBRT8OdzzVWfnIBaN7hD9KoD7F7avNbKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:8e:f9:69:2b:83:52:5b:43:06:e2:8b:68:6a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69226ceb40c671f30acf11fa36b8d7d1c6754704 Validity Not Before: Dec 21 17:01:06 2025 GMT Not After : Dec 22 17:01:06 2025 GMT Subject: CN=e9800a2538c5a472c76930769da44ecc7bfd3e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:06:80:a7:ce:fb:ff:5e:96:67:cc:50:d4:9c: e5:ed:39:87:87:f6:4f:46:cb:9d:c2:26:b8:37:c6: 76:87:71:f2:0a:af:f3:87:be:d7:d2:01:55:18:cd: d1:4d:33:4b:9a:cf:89:17:10:70:48:7e:c4:ea:22: 50:c7:45:55:dd:c5:c3:8e:3d:2d:4a:ae:c4:b0:72: 68:18:83:17:93:c0:1b:30:a3:99:95:83:f8:69:8f: 89:be:4a:46:f3:a1:3f:12:c6:66:b7:94:19:94:c5: a7:35:d5:92:ac:3a:7d:06:a2:9f:42:07:23:1d:2e: 40:c5:49:63:8f:3d:6f:b6:c1:8d:9f:31:8f:21:7e: d2:37:05:27:f9:b1:ca:38:30:1a:e3:04:8b:f0:7e: 46:54:42:d4:99:01:fc:a8:de:18:56:54:74:d1:fd: bd:bc:6e:56:79:36:5c:88:a9:41:9e:2c:b0:aa:4b: 27:ec:e7:2b:01:c2:f4:f4:a1:c5:7f:e2:58:2b:fe: 98:f0:e7:00:89:97:a4:fb:df:61:81:92:50:af:54: e7:05:7d:2c:d1:c9:96:49:b2:cd:26:40:b1:e3:f8: c9:58:b0:11:de:ed:9c:29:a5:b0:fc:22:0e:6e:88: d4:d9:c9:62:f8:01:91:1d:f2:81:ed:7f:8f:98:f9: b8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:80:0A:25:38:C5:A4:72:C7:69:30:76:9D:A4:4E:CC:7B:FD:3E:8C X509v3 Authority Key Identifier: keyid:69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ba:94:12:56:4f:0b:ff:54:87:1d:a3:9c:19:cb:bb:01:72: c1:b3:ab:2b:c5:cf:c9:ce:c0:ca:9a:63:c4:6b:36:61:4e:05: 2d:3a:02:00:45:1f:ee:d7:fa:2a:6e:83:0b:94:f8:d2:ac:28: 1d:47:85:18:19:5e:bb:0a:27:a2:a7:be:84:fd:13:69:21:c9: 3e:36:72:2d:d1:24:71:47:e3:fa:e2:03:30:f2:df:fe:bb:9b: 49:15:6c:a2:4a:59:79:9f:6d:61:b6:da:a9:f4:35:0f:5d:af: 49:6b:c6:44:e4:4e:aa:7b:1f:bc:49:68:fc:fc:16:b5:ab:eb: c9:20:57:83:ca:72:b4:eb:e2:68:58:dd:01:d5:88:13:fa:7b: 5c:2b:ff:88:b6:ca:3e:3b:f9:6b:da:da:8b:3b:70:51:03:5e: 50:35:18:c4:30:89:74:49:b5:39:f6:83:ed:d6:fc:2d:9d:d9: 1d:e0:d3:92:ba:b0:18:91:44:4e:40:7f:42:29:4e:3e:39:23: 65:4b:4f:df:1e:07:df:f3:56:92:6c:e0:8a:42:06:ea:c2:3c: fc:66:b0:ec:38:f1:a2:8c:75:ee:9c:24:08:3c:70:32:9f:35: bf:07:68:76:ff:37:61:76:98:3e:b9:52:98:19:cf:99:64:f9: 5b:db:b0:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2475aSuDUltDBuKLaGqTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MjI2Y2ViNDBjNjcxZjMwYWNmMTFmYTM2YjhkN2QxYzY3 NTQ3MDQwHhcNMjUxMjIxMTcwMTA2WhcNMjUxMjIyMTcwMTA2WjAzMTEwLwYDVQQD EyhlOTgwMGEyNTM4YzVhNDcyYzc2OTMwNzY5ZGE0NGVjYzdiZmQzZThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAaAp877/16WZ8xQ1Jzl7TmHh/ZP Rsudwia4N8Z2h3HyCq/zh77X0gFVGM3RTTNLms+JFxBwSH7E6iJQx0VV3cXDjj0t Sq7EsHJoGIMXk8AbMKOZlYP4aY+JvkpG86E/EsZmt5QZlMWnNdWSrDp9BqKfQgcj HS5AxUljjz1vtsGNnzGPIX7SNwUn+bHKODAa4wSL8H5GVELUmQH8qN4YVlR00f29 vG5WeTZciKlBniywqksn7OcrAcL09KHFf+JYK/6Y8OcAiZek+99hgZJQr1TnBX0s 0cmWSbLNJkCx4/jJWLAR3u2cKaWw/CIObojU2cli+AGRHfKB7X+PmPm4/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmACiU4xaRyx2kwdp2kTsx7/T6MMB8GA1UdIwQY MBaAFGkibOtAxnHzCs8R+ja419HGdUcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mZmYxYzctY2VlMS00ZmE2LWE5OWIt YzljOGFiMTg4ODUzLzEvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9mZmYxYzctY2VlMS00ZmE2LWE5OWItYzljOGFiMTg4ODUz LzEvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7qUElZP C/9Uhx2jnBnLuwFywbOrK8XPyc7AyppjxGs2YU4FLToCAEUf7tf6Km6DC5T40qwo HUeFGBleuwonoqe+hP0TaSHJPjZyLdEkcUfj+uIDMPLf/rubSRVsokpZeZ9tYbba qfQ1D12vSWvGROROqnsfvElo/PwWtavrySBXg8pytOviaFjdAdWIE/p7XCv/iLbK Pjv5a9raiztwUQNeUDUYxDCJdEm1OfaD7db8LZ3ZHeDTkrqwGJFETkB/QilOPjkj ZUtP3x4H3/NWkmzgikIG6sI8/Gaw7Djxoox17pwkCDxwMp81vwdodv83YXaYPrlS mBnPmWT5W9uw8g== -----END CERTIFICATE-----Generated at Sun Dec 21 22:32:47 2025 by rpki-client