This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft File: aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json) Hash identifier: qhH5oTFJOBTnzCyeWi6gxm665bIinAcEabVghfAVIfY= Subject key identifier: 97:0D:0B:81:74:DD:0D:2F:D8:90:D9:6D:BB:4F:C4:B6:C8:DB:A4:D8 Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03 Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03 Certificate serial: 019B503BFB72935EB187751C9E6AD6D44BE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 12:01:06 +0000 Manifest this update: Wed 24 Dec 2025 12:01:06 +0000 Manifest next update: Thu 25 Dec 2025 12:01:06 +0000 Files and hashes: 1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: c2TUS81XmjSNgmayvqSjh6Ph1x5sxReMCRhrAhvS/pw=) 2: eKt0iVcZQR9s-wKnsCaLnRBWxb0.roa (hash: r1viPmPOoL4VlPRT69GWy0bXH2hVoJ6TviDvQ+6ZdW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3b:fb:72:93:5e:b1:87:75:1c:9e:6a:d6:d4:4b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03 Validity Not Before: Dec 24 12:01:06 2025 GMT Not After : Dec 25 12:01:06 2025 GMT Subject: CN=970d0b8174dd0d2fd890d96dbb4fc4b6c8dba4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:75:de:38:c0:3e:53:67:5c:1f:b9:24:e5: 5a:13:57:30:0a:81:a5:34:3c:ad:41:2b:0d:7c:55: 20:b6:85:b3:59:c6:85:56:a1:49:6c:4f:98:81:ea: cf:2d:5b:b8:a6:bc:29:fa:c7:60:35:69:6d:f4:85: 75:93:14:96:39:8f:26:41:5a:ac:e8:48:ca:0c:a2: ab:a5:ec:f2:cd:a0:36:bd:78:42:5f:d6:0a:79:b4: 66:e6:cf:1d:6f:9f:ac:05:8e:4e:08:fe:09:b5:2f: d9:a7:f4:9c:e4:4d:b3:c6:fc:ce:c7:6b:5d:46:e1: aa:52:1d:51:6a:40:ec:f1:3a:6a:f4:bd:17:5e:c0: 8e:bd:41:25:06:b5:53:ae:2a:44:04:38:cd:f3:f4: bf:e9:37:26:64:cd:43:1b:4c:9c:08:c8:d6:d0:0b: da:0f:1a:1e:b7:99:d3:ff:f6:0f:15:d1:36:6b:db: 69:8d:6a:e5:52:09:6b:f5:57:41:d7:f4:af:78:9a: 78:64:80:33:b7:1f:17:ed:6b:ff:f1:71:49:4c:82: ea:84:43:1d:6b:a4:e6:47:80:9a:3a:e3:f8:59:ab: f3:b6:c7:fd:e6:0b:e6:bb:88:36:e7:4d:5f:51:54: f6:16:24:17:e5:59:d2:94:b6:49:19:49:8b:a8:0b: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0D:0B:81:74:DD:0D:2F:D8:90:D9:6D:BB:4F:C4:B6:C8:DB:A4:D8 X509v3 Authority Key Identifier: keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:b3:8b:56:95:e8:33:f0:e7:ba:79:6f:32:12:51:e4:a7:b6: 10:69:9a:97:97:0d:ea:c7:ac:70:41:9c:eb:a0:11:a2:50:a8: c0:7b:55:52:d6:0a:19:51:20:e3:58:b6:13:af:ea:71:62:d3: 46:e6:5f:04:8e:5a:0e:33:9b:1d:45:a7:00:2e:70:51:0e:ff: 61:93:55:16:10:15:48:05:46:3d:f5:d9:e5:32:ff:17:64:cf: 2f:6e:c5:0d:dc:f9:3f:68:1f:57:d3:20:9c:93:ae:7b:eb:53: 0c:aa:de:d5:43:09:52:3a:16:a6:97:18:84:2b:44:24:c3:af: 23:2a:fb:94:6f:37:c4:a2:b5:22:ea:65:e7:b0:86:ea:37:b9: 0b:f4:75:ac:9b:f9:6c:bf:2f:ad:e6:bf:ee:df:b5:48:a8:b7: b0:f2:ca:da:9d:1a:c0:f1:cd:c7:4b:08:00:67:9e:33:b0:d8: 54:82:29:4c:bd:ce:8c:51:ff:4c:61:99:49:79:4d:94:9a:ae: 4e:6c:d8:cf:e8:47:1c:3e:29:57:5c:75:29:75:d0:8c:42:97: d6:e8:20:1f:3e:90:26:51:0c:8e:95:3a:e9:f4:06:59:33:60: b1:a0:fd:34:08:01:df:6c:ba:3b:88:58:7a:05:4c:f1:e7:91: 17:2f:78:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQO/tyk16xh3UcnmrW1EvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OGU3MTNiMDdjNzlmOTdiNDdlOWYwMzIxNzY4YjA5NDg4 YjdhMDMwHhcNMjUxMjI0MTIwMTA2WhcNMjUxMjI1MTIwMTA2WjAzMTEwLwYDVQQD Eyg5NzBkMGI4MTc0ZGQwZDJmZDg5MGQ5NmRiYjRmYzRiNmM4ZGJhNGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbx13jjAPlNnXB+5JOVaE1cwCoGl NDytQSsNfFUgtoWzWcaFVqFJbE+YgerPLVu4prwp+sdgNWlt9IV1kxSWOY8mQVqs 6EjKDKKrpezyzaA2vXhCX9YKebRm5s8db5+sBY5OCP4JtS/Zp/Sc5E2zxvzOx2td RuGqUh1RakDs8Tpq9L0XXsCOvUElBrVTripEBDjN8/S/6TcmZM1DG0ycCMjW0Ava Dxoet5nT//YPFdE2a9tpjWrlUglr9VdB1/SveJp4ZIAztx8X7Wv/8XFJTILqhEMd a6TmR4CaOuP4Wavztsf95gvmu4g2501fUVT2FiQX5VnSlLZJGUmLqAvIYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcNC4F03Q0v2JDZbbtPxLbI26TYMB8GA1UdIwQY MBaAFGiOcTsHx5+XtH6fAyF2iwlIi3oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wZWJlYjktMzFhOC00NTUwLTgzOTYt Njk1ZjRhOTI3NjEwLzEvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wZWJlYjktMzFhOC00NTUwLTgzOTYtNjk1ZjRhOTI3NjEw LzEvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLOLVpXo M/DnunlvMhJR5Ke2EGmal5cN6sescEGc66ARolCowHtVUtYKGVEg41i2E6/qcWLT RuZfBI5aDjObHUWnAC5wUQ7/YZNVFhAVSAVGPfXZ5TL/F2TPL27FDdz5P2gfV9Mg nJOue+tTDKre1UMJUjoWppcYhCtEJMOvIyr7lG83xKK1Iupl57CG6je5C/R1rJv5 bL8vrea/7t+1SKi3sPLK2p0awPHNx0sIAGeeM7DYVIIpTL3OjFH/TGGZSXlNlJqu TmzYz+hHHD4pV1x1KXXQjEKX1uggHz6QJlEMjpU66fQGWTNgsaD9NAgB32y6O4hY egVM8eeRFy94eg== -----END CERTIFICATE-----Generated at Wed Dec 24 19:59:36 2025 by rpki-client