This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft File: aZHFbxGnFxxhUyOXafVXvroQGC0.mft (raw, json) Hash identifier: yR/tGePUEsGkSiU1HLnr+oOa2ruxbMUlz8lnaXvxg0g= Subject key identifier: EF:44:62:3D:5D:85:03:E7:06:27:CF:70:F3:97:AE:B7:CF:4D:E0:79 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B3D238FAE71E83E0A8868B195BDBC5702 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft Manifest number: 0B02 Signing time: Sat 20 Dec 2025 19:01:39 +0000 Manifest this update: Sat 20 Dec 2025 19:01:39 +0000 Manifest next update: Sun 21 Dec 2025 19:01:39 +0000 Files and hashes: 1: 0ZnUbFz494YaFYXrrvpst6o3vps.roa (hash: OVgxGJmRNj8L4Akc46yjqXSfo2J2UzOCk6rafbqc2OA=) 2: 1gMhaWTt9SatCtzXb2x3evmqFAM.roa (hash: 6Y9a57NqqkLkQqCohM5S0/g04HJqvciLd/hsGJkposA=) 3: 2R9OObFNaEDkANSZ-coBJRfRpcg.roa (hash: PuD3VMT0jUQBkYxsd7Ldnl6ZWhsJPerlMMUp2zMDWgw=) 4: 3B48XSzrqRQbODZNf87x_kjUhNo.roa (hash: y14T24Ofee6GJVa1mI4/7qxhdq0jl8KEydSAoin8Qhg=) 5: 4Big0S_3eVdxzCi9Q5-ZazqY78k.roa (hash: MZj2ZauIX6SjNg/AhkH3xRZrKv7KoBeknyWj0YQB2/w=) 6: 5KCmcBzgBtGKXXIdhXDGwgQX-Nc.roa (hash: 3MBj03+qouTWcvDDud6sW23ZkQ0DtRDfsHdVwPfcmzA=) 7: Ge-sdc_RhsJevkQCq5DXSj7W5SM.roa (hash: cppMW1hN3HemsqcEnmgRLycbL6rv3c6Bv6GxyK4Dr7I=) 8: GzbjpWWbs-1PqotRsV09E9K9Lz4.roa (hash: DPdOn5R31znLhVjpEt/89hnY5IoUTo1sHiV7ubrKX6Q=) 9: IR0N93wyt194hpjTT9eshHBGwCY.roa (hash: hm8stnovqLivJRd1Zt72YsNy0Lv8colWOGD8fUtYhVw=) 10: Ipr3KewOoeNwtKcMjwWhhMZ4XGk.roa (hash: 3JCwXXZ0yyhMNw7g8hWZGcEbqAf0RiAf0XwSMEKW1/k=) 11: LiReZTb5eM73wM_EtDaxcTNj4Uc.roa (hash: VxzmF2kcB0hEh+Og8NMqll1d/dM5T/PwiOdBSWMF9+w=) 12: NdAX7Rrn7y-KonnG7TF23wCnJFU.roa (hash: 1r3koUbwGBNgbjNaxMGO8L4AUL4EQ4uI3dkO8TUFqEA=) 13: NxKKuEIzsEe5p3RwQBZ8j63Lsc4.roa (hash: mOT2nWmKWDEZ1VeM86bS3Qx+tjUuZhaB/QcxGF5t7y4=) 14: OxLywK9-WD8ykiaZCQkg8aVcCjY.roa (hash: iXcObwE6BigOurV7fYooDfgc8zyVyQ+nTBGFkUMqd08=) 15: Qjyx-VfeYJzhQ64OO3GeexbDjpo.roa (hash: rj+IOmmZrJFH/pGr6IiDQ9M39qURzS3Ek11UjeILldM=) 16: TvRgaW9-CsNjYomAsfORBTmW3OU.roa (hash: E1pW1tBEDD4gp+efpV/wAMGMYES5LCvHxLW4UcIoHuI=) 17: US4urt8SGYSwI0nrEmSfY23OtMo.roa (hash: WGkLaX+bRS10FeqEfnkw5XXJQ/dEDlUw6wG2fIeU7p0=) 18: UbTczMXH1DXAp6Y4rzAMo0-vjMY.roa (hash: /5fKT3FRRFYWFa0s/Qas8JVmnywA6hIsUQs3iIAfCSc=) 19: V9MunteQeVICf2ICr71lxQH0Fho.roa (hash: eyd5tdJUMOhtnb51XXGrnbSnVth9KptYyQQSksmwF/U=) 20: Xk5tmPIosW8yWOoBE4vC97DKTmI.roa (hash: n+WSuCldCqJF0J/zIrAAsy8W1NaktFT44ojEQwTF8/A=) 21: Y8kVBgTTg77JqceZAx8eeOkuigc.roa (hash: IFdbCND0Hr2WHlrHfsppyOn82/Cdt+j+/f3Y4nRrJM0=) 22: a0il1xPCzL5RX2zRZ16C5yrKQN0.roa (hash: jNHlYD8MG49p1qoIK36TKFr01Lgirahfew8083hVbhQ=) 23: a75rOpjpaPa3RoX99f00xHpyQQk.roa (hash: pBUN5kZ0kemGdrUfIg4JmP66bIvq4vhJcqUtu9xb4uk=) 24: aZHFbxGnFxxhUyOXafVXvroQGC0.crl (hash: KW7nfeohx8HNtsIdV12op594mNqGV31ZRcpQEKZXjUk=) 25: eSDGXftwPU-DhjYptcEbu97gSEU.roa (hash: 298/MebJAxJVNu0RXxXXDu+aRB+xIjmk2sL/OavJmSI=) 26: gt8flTD_zJibygdA8dyeuF1l6X4.roa (hash: aubI8iptMgWbWF9zUBH11nChoCQulzBZponMqronaCU=) 27: h8jROV5bQoENdkPdOHcG_4qWdVY.roa (hash: glJfimln9Noz47bXSrY5ZJrPDNDjmCoZp6sAhb5XR58=) 28: hd5E-IfEq2TxeShk5Gaec24hUKw.roa (hash: gaGe3UUy/HO5uK3mGo4Jfk2cwdMRK/X0E0rPiNSPI88=) 29: mqFZ_6poK042LnYArfefb64YNZQ.roa (hash: z+bsA4ZcDvX2JPMlTZwVkKpOQPowKJ3wnhxnQ/pVUXU=) 30: qjt96n4RyTnwKt8f25Hzr4YOzU4.roa (hash: c+NeV173DV29fxhrcPqvFfp6/xCLnBsKjYjqezsWpbo=) 31: r72MZC6TP9HFp69hVblH2z8aLDw.roa (hash: 60a58tQ14AuL0odo9HIWNyGRLIp51J3Om0fY3oCEnBg=) 32: uuETfDd2MFEUFL6j7oWk0rsVxng.roa (hash: gq3xyqmM/tiK/h2Lc/3S6cQaZW777XfzMoLElI6p2tY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:8f:ae:71:e8:3e:0a:88:68:b1:95:bd:bc:57:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Dec 20 19:01:39 2025 GMT Not After : Dec 21 19:01:39 2025 GMT Subject: CN=ef44623d5d8503e70627cf70f397aeb7cf4de079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3b:f4:68:5f:1b:2f:6a:03:25:a5:9e:16:ab: d3:44:40:16:9e:ea:cd:30:62:07:9d:34:eb:2b:42: 1e:dc:69:a4:aa:84:3d:96:3c:78:84:eb:47:4c:c1: 91:35:41:50:b9:37:70:b2:01:f7:06:0f:1d:35:df: 60:09:3f:fd:b1:ef:06:ad:83:eb:f9:8f:73:a4:e8: fd:0e:88:73:d0:4e:a9:d1:b8:f1:e3:34:39:b5:32: de:f5:66:dd:d7:75:a0:7c:22:df:a8:de:20:5a:cf: fe:79:4a:f5:c3:05:79:8f:65:4b:40:35:4b:31:4b: 73:7a:2c:5c:89:b9:e2:44:11:be:6f:c7:63:dd:6d: 79:ee:d3:2f:4d:80:01:0e:d5:4a:7d:ab:ec:e2:5d: 71:5e:cf:b4:88:1d:23:2d:b3:27:15:88:6b:4d:0a: 9c:04:71:44:eb:cc:1e:30:9e:b3:96:fa:30:32:f7: d6:8b:92:f7:1f:3d:69:4b:98:62:3a:b4:1c:2b:a2: 16:1e:d1:45:ef:8c:8e:ba:16:9e:60:66:08:cb:2a: 56:ab:d1:38:1b:a6:13:ea:64:67:aa:50:97:80:b6: ec:af:a8:c1:9c:2c:0b:b5:a0:cf:fe:fe:80:28:de: 1c:b3:77:0f:a4:6d:aa:ac:7f:3e:5a:fd:49:d7:b1: 78:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:44:62:3D:5D:85:03:E7:06:27:CF:70:F3:97:AE:B7:CF:4D:E0:79 X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:53:09:a7:30:d9:e3:29:24:ea:d2:da:4c:94:af:1d:5e:94: 2d:74:7d:05:13:29:52:78:30:d4:b6:61:af:6b:4e:78:d8:04: 5c:ed:35:cb:a0:74:39:96:df:fb:ad:37:9b:2a:01:63:b3:49: 01:d3:d1:90:32:69:a1:c2:67:ac:57:90:1f:8c:64:87:79:61: db:e6:77:84:22:72:53:db:cc:ce:c5:4c:25:b5:bd:d2:70:75: 9c:dd:b1:34:4e:bd:2b:96:27:d6:b1:c9:cf:15:2c:68:d3:7c: 0c:9d:9c:c2:5f:f4:e0:68:ce:c0:88:ed:08:0b:09:39:52:a0: 5d:01:66:69:89:50:d8:48:69:7b:37:d9:7a:4a:5e:a1:a4:b6: b0:6d:3f:62:55:f1:f2:8d:2d:18:42:25:e9:a4:b1:bc:38:a5: fd:01:db:c2:74:a2:3f:96:9b:81:f6:a3:d5:74:28:ff:c9:8e: 38:7f:2f:b0:22:ed:aa:56:c2:28:31:06:1a:4c:74:4f:19:c1: f1:82:ad:ea:b0:cd:f7:0d:ab:29:6d:78:1c:da:bb:6c:72:cc: a7:af:04:84:20:53:c3:cd:9e:ce:6c:3a:39:49:fa:1c:d3:0e: 0f:7f:3e:ef:9a:3f:3e:09:22:9c:04:15:65:15:58:2e:28:8d: 39:c8:79:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I4+uceg+CohosZW9vFcCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjUxMjIwMTkwMTM5WhcNMjUxMjIxMTkwMTM5WjAzMTEwLwYDVQQD EyhlZjQ0NjIzZDVkODUwM2U3MDYyN2NmNzBmMzk3YWViN2NmNGRlMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzv0aF8bL2oDJaWeFqvTREAWnurN MGIHnTTrK0Ie3GmkqoQ9ljx4hOtHTMGRNUFQuTdwsgH3Bg8dNd9gCT/9se8GrYPr +Y9zpOj9Dohz0E6p0bjx4zQ5tTLe9Wbd13WgfCLfqN4gWs/+eUr1wwV5j2VLQDVL MUtzeixcibniRBG+b8dj3W157tMvTYABDtVKfavs4l1xXs+0iB0jLbMnFYhrTQqc BHFE68weMJ6zlvowMvfWi5L3Hz1pS5hiOrQcK6IWHtFF74yOuhaeYGYIyypWq9E4 G6YT6mRnqlCXgLbsr6jBnCwLtaDP/v6AKN4cs3cPpG2qrH8+Wv1J17F4RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9EYj1dhQPnBifPcPOXrrfPTeB5MB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1MJpzDZ 4ykk6tLaTJSvHV6ULXR9BRMpUngw1LZhr2tOeNgEXO01y6B0OZbf+603myoBY7NJ AdPRkDJpocJnrFeQH4xkh3lh2+Z3hCJyU9vMzsVMJbW90nB1nN2xNE69K5Yn1rHJ zxUsaNN8DJ2cwl/04GjOwIjtCAsJOVKgXQFmaYlQ2EhpezfZekpeoaS2sG0/YlXx 8o0tGEIl6aSxvDil/QHbwnSiP5abgfaj1XQo/8mOOH8vsCLtqlbCKDEGGkx0TxnB 8YKt6rDN9w2rKW14HNq7bHLMp68EhCBTw82ezmw6OUn6HNMOD38+75o/PgkinAQV ZRVYLiiNOch5Xw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:32:18 2025 by rpki-client