This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json) Hash identifier: utE/BTqKSXLQ2BVQIYPrXDBJt8AnpDvlwG8+phs8bpA= Subject key identifier: 2E:32:7E:9A:5D:4B:FF:C9:F6:E4:A8:77:CB:17:5A:4F:B2:4C:CA:02 Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95 Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95 Certificate serial: 019B3BA23FF3B6509B5BCADE623891BBCF5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 12:00:47 +0000 Manifest this update: Sat 20 Dec 2025 12:00:47 +0000 Manifest next update: Sun 21 Dec 2025 12:00:47 +0000 Files and hashes: 1: VNzG3ccHyaf-Ofv5con_nysGgHU.roa (hash: 2VzIYqdKT2jmdmX+vgJ//7c0c5nGJoT0dOFUmm0WlfQ=) 2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: bxXjEkk2Y/jgeqkI2x1AfDxsFA/4pUi5B1NiLQ/es94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:3f:f3:b6:50:9b:5b:ca:de:62:38:91:bb:cf:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95 Validity Not Before: Dec 20 12:00:47 2025 GMT Not After : Dec 21 12:00:47 2025 GMT Subject: CN=2e327e9a5d4bffc9f6e4a877cb175a4fb24cca02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:f4:63:47:92:3b:d9:aa:dd:f9:f2:5a:d7: 77:2d:97:52:1b:8b:b8:7a:ff:e4:f0:57:32:bf:92: 71:10:84:bf:41:63:10:fa:c0:0a:67:e0:73:3a:5d: b2:3c:7a:70:1d:03:f4:4e:c7:c2:ca:d9:43:8a:d7: 94:81:17:a4:21:04:8f:cc:ed:6c:ab:26:e8:77:a5: 01:79:df:d3:69:34:29:37:3b:d8:6c:fb:d3:e2:e0: b8:00:f9:c3:51:67:80:91:6f:99:c1:7d:93:fa:3f: 83:28:6a:24:e0:f2:18:19:76:4a:d0:c9:31:96:90: 0f:b2:06:c5:4e:e5:2c:22:6e:16:53:34:ee:cf:d1: b8:11:5c:b4:e6:cf:17:a1:b3:2b:a4:fd:e0:d3:5b: 63:58:2b:90:69:75:13:d1:d5:a9:59:6b:b2:35:f5: b9:90:2d:14:ff:98:ee:26:e9:3f:8d:9a:ab:62:77: 77:57:97:cf:dc:64:3e:6e:e3:9d:38:39:5b:7b:68: f5:6d:70:c9:87:63:c0:26:08:09:f6:73:22:d0:e4: 92:e3:86:a9:53:dc:fc:f5:44:d0:f1:82:b2:30:5e: 38:ca:51:bf:76:7e:34:b1:32:c5:50:af:46:f2:38: 54:a1:38:10:bd:ba:1c:21:f9:1c:bb:4f:66:12:52: 1f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:32:7E:9A:5D:4B:FF:C9:F6:E4:A8:77:CB:17:5A:4F:B2:4C:CA:02 X509v3 Authority Key Identifier: keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:77:9c:60:5d:dc:95:f6:a1:51:36:b1:fc:36:94:a7:9a:d7: 4c:68:e6:cb:17:2e:32:40:3c:49:3f:53:fc:95:cf:5f:bd:8e: 0a:f8:81:64:ea:dd:88:7f:61:82:f5:64:fd:49:b4:49:12:81: 36:a8:e8:e1:1f:1f:a2:db:6b:ca:d5:57:32:1a:c7:c1:db:02: a7:4c:49:e8:54:8f:80:6a:00:d6:b6:76:aa:6f:67:f7:d2:eb: 02:3c:5b:56:9b:4d:ed:43:f8:e7:a2:52:a2:41:ab:a2:93:c7: d8:76:10:93:c2:88:68:a5:4a:9d:6a:e9:9f:63:8c:ef:9b:57: d4:dd:0e:c9:d8:76:39:13:a4:db:38:36:07:66:ac:09:87:3a: 1d:10:a7:f5:f3:44:f3:f8:1f:28:76:38:f8:ca:18:6c:78:11: 5f:71:45:f3:f7:32:d4:8e:e0:14:4c:bf:60:86:00:41:42:00: aa:c4:73:1e:a8:31:c1:4b:ea:f3:e5:38:b6:59:e2:80:36:c4: fc:83:6a:a3:33:b3:49:d9:05:33:3a:b7:2f:7d:9f:2e:95:96: ff:8f:9f:22:f6:9b:af:8c:ae:bb:14:81:b1:66:4f:75:3d:26: d3:cf:b4:17:d2:02:70:ac:f1:dc:e3:5f:d6:95:78:de:d5:5f: 0c:68:e1:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oj/ztlCbW8reYjiRu89eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNTAxODI3MTQ0YTMxODhiZWExY2NlZTU4NjU2ZmQ2NDI5 ZDhmOTUwHhcNMjUxMjIwMTIwMDQ3WhcNMjUxMjIxMTIwMDQ3WjAzMTEwLwYDVQQD EygyZTMyN2U5YTVkNGJmZmM5ZjZlNGE4NzdjYjE3NWE0ZmIyNGNjYTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOD0Y0eSO9mq3fnyWtd3LZdSG4u4 ev/k8Fcyv5JxEIS/QWMQ+sAKZ+BzOl2yPHpwHQP0TsfCytlDiteUgRekIQSPzO1s qybod6UBed/TaTQpNzvYbPvT4uC4APnDUWeAkW+ZwX2T+j+DKGok4PIYGXZK0Mkx lpAPsgbFTuUsIm4WUzTuz9G4EVy05s8XobMrpP3g01tjWCuQaXUT0dWpWWuyNfW5 kC0U/5juJuk/jZqrYnd3V5fP3GQ+buOdODlbe2j1bXDJh2PAJggJ9nMi0OSS44ap U9z89UTQ8YKyMF44ylG/dn40sTLFUK9G8jhUoTgQvbocIfkcu09mElIfyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4yfppdS//J9uSod8sXWk+yTMoCMB8GA1UdIwQY MBaAFK5QGCcUSjGIvqHM7lhlb9ZCnY+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZjU2YWYtZWJmYi00Yzg4LWEwODIt MDk4NmQ4YjBjNmQ5LzEvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC81ZjU2YWYtZWJmYi00Yzg4LWEwODItMDk4NmQ4YjBjNmQ5 LzEvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnecYF3c lfahUTax/DaUp5rXTGjmyxcuMkA8ST9T/JXPX72OCviBZOrdiH9hgvVk/Um0SRKB Nqjo4R8fottrytVXMhrHwdsCp0xJ6FSPgGoA1rZ2qm9n99LrAjxbVptN7UP456JS okGropPH2HYQk8KIaKVKnWrpn2OM75tX1N0Oydh2OROk2zg2B2asCYc6HRCn9fNE 8/gfKHY4+MoYbHgRX3FF8/cy1I7gFEy/YIYAQUIAqsRzHqgxwUvq8+U4tlnigDbE /INqozOzSdkFMzq3L32fLpWW/4+fIvabr4yuuxSBsWZPdT0m08+0F9ICcKzx3ONf 1pV43tVfDGjhWg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:07:50 2025 by rpki-client