This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft File: aZISXj1TzEgTNhBUg_z_cB_aG7M.mft (raw, json) Hash identifier: LXcf/Bky3MtO9FMZMUzZN3Xj3j1u5Li3CzEnmouHLuc= Subject key identifier: 36:A3:1E:B8:38:44:4A:1B:10:D9:14:FA:F4:61:30:27:D4:B9:EF:FE Authority key identifier: 69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3 Certificate issuer: /CN=6992125e3d53cc481336105483fcff701fda1bb3 Certificate serial: 019B40FFF513F5A8980AA0FE95E4FD05AEB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 13:01:14 +0000 Manifest this update: Sun 21 Dec 2025 13:01:14 +0000 Manifest next update: Mon 22 Dec 2025 13:01:14 +0000 Files and hashes: 1: Al5XA-JtcwQZgxg8lrEchelWFKc.roa (hash: awq0OKEpSlRcquvq5uS+1UqeIOS4jFcQD5+W9s9X3Ag=) 2: aZISXj1TzEgTNhBUg_z_cB_aG7M.crl (hash: Mez1sg9qNCystFfZ5WHRA6eV1CASAuS6hgpv7EBHnbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:f5:13:f5:a8:98:0a:a0:fe:95:e4:fd:05:ae:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6992125e3d53cc481336105483fcff701fda1bb3 Validity Not Before: Dec 21 13:01:14 2025 GMT Not After : Dec 22 13:01:14 2025 GMT Subject: CN=36a31eb838444a1b10d914faf4613027d4b9effe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:12:3f:09:9e:1f:38:bf:25:b1:06:91:a7:c8: 03:e4:1b:46:d3:4d:6c:45:9a:35:b7:60:6e:8c:75: ea:46:95:58:0d:47:6a:d4:fc:3c:ba:6e:ca:f0:b3: 09:c9:5c:07:5f:08:d9:a1:e4:34:23:fa:75:0e:6f: 66:1d:1e:e7:8d:4f:2e:71:02:a3:5f:bb:4c:ef:d2: cd:7d:03:7b:51:26:50:23:dd:bd:83:a0:9f:2c:ac: d6:0f:a0:28:2b:19:c6:a0:15:ce:10:64:2a:00:d2: 97:92:52:fa:d7:96:2f:1c:ab:a1:cc:97:29:b6:bf: 54:9c:42:8b:ca:3b:56:ed:15:56:80:41:ab:5d:30: 26:92:c2:07:b5:ed:b5:e5:99:1d:0f:8e:17:f2:c1: 15:5d:cd:4e:f3:b7:0d:5a:c1:d1:85:2c:13:87:40: 36:b9:51:8a:21:6e:3a:7e:e4:51:7b:6b:9b:8c:10: 78:81:c4:ff:28:08:c5:81:b6:d4:15:a6:20:1c:83: 41:44:9b:88:17:4f:74:f7:b6:90:17:57:4e:7a:73: fb:d5:e7:98:a9:7a:da:91:78:cd:f5:a7:d3:53:cb: 27:be:eb:9c:14:0c:ec:5d:34:43:7d:5a:6a:16:5a: 09:9c:95:7a:b2:97:86:ce:f4:11:8d:9d:07:31:1a: fa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A3:1E:B8:38:44:4A:1B:10:D9:14:FA:F4:61:30:27:D4:B9:EF:FE X509v3 Authority Key Identifier: keyid:69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:1d:9b:ea:3b:ab:2f:35:71:5c:45:ad:29:5f:6c:93:8d:a1: 6f:9b:27:43:fc:e3:cc:77:bd:29:f9:19:ef:6d:57:9e:dd:19: b0:a2:eb:60:2f:53:a8:e2:e8:cf:06:34:f7:54:ea:24:14:1b: 77:20:af:8a:6c:38:68:5b:63:8a:31:c2:e1:a7:62:ae:cf:b2: c0:f8:9d:11:3c:70:13:94:d4:3d:93:bf:d0:e8:f0:57:14:a7: a6:49:01:2a:42:f9:c7:87:be:98:b1:56:fd:dc:9f:92:84:ee: c5:30:9d:53:94:15:17:d5:f2:2e:d0:7f:28:5b:f5:cd:6a:cf: 59:d6:17:eb:42:05:a4:21:b9:a2:d1:73:3f:d3:2f:92:44:07: 0b:8c:b4:10:68:ff:a3:3e:c4:14:04:77:18:a5:7a:5e:0f:6c: d7:51:53:c6:74:f7:4b:65:76:aa:f5:6d:ed:58:48:2e:b7:34: 20:e2:b9:8a:10:e0:41:b0:51:a2:31:4e:b4:2c:b6:ab:bf:fb: 4e:2a:6c:76:e0:a8:c8:0d:83:66:b0:f3:b0:4c:59:05:72:ef: 0b:36:62:6a:d6:41:d8:22:56:9d:d0:2e:1b:32:b9:ea:5b:db: 8c:09:3b:9d:4f:9f:e4:0b:71:6b:df:69:43:e6:83:fe:f6:b3: 87:f7:58:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA//UT9aiYCqD+leT9Ba6yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTIxMjVlM2Q1M2NjNDgxMzM2MTA1NDgzZmNmZjcwMWZk YTFiYjMwHhcNMjUxMjIxMTMwMTE0WhcNMjUxMjIyMTMwMTE0WjAzMTEwLwYDVQQD EygzNmEzMWViODM4NDQ0YTFiMTBkOTE0ZmFmNDYxMzAyN2Q0YjllZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBI/CZ4fOL8lsQaRp8gD5BtG001s RZo1t2BujHXqRpVYDUdq1Pw8um7K8LMJyVwHXwjZoeQ0I/p1Dm9mHR7njU8ucQKj X7tM79LNfQN7USZQI929g6CfLKzWD6AoKxnGoBXOEGQqANKXklL615YvHKuhzJcp tr9UnEKLyjtW7RVWgEGrXTAmksIHte215ZkdD44X8sEVXc1O87cNWsHRhSwTh0A2 uVGKIW46fuRRe2ubjBB4gcT/KAjFgbbUFaYgHINBRJuIF09097aQF1dOenP71eeY qXrakXjN9afTU8snvuucFAzsXTRDfVpqFloJnJV6speGzvQRjZ0HMRr6LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDajHrg4REobENkU+vRhMCfUue/+MB8GA1UdIwQY MBaAFGmSEl49U8xIEzYQVIP8/3Af2huzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YWM5NTctNDE4My00OWYzLWJmYmUt ODM3YzVlMTJiZDA0LzEvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy80YWM5NTctNDE4My00OWYzLWJmYmUtODM3YzVlMTJiZDA0 LzEvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHx2b6jur LzVxXEWtKV9sk42hb5snQ/zjzHe9KfkZ721Xnt0ZsKLrYC9TqOLozwY091TqJBQb dyCvimw4aFtjijHC4adirs+ywPidETxwE5TUPZO/0OjwVxSnpkkBKkL5x4e+mLFW /dyfkoTuxTCdU5QVF9XyLtB/KFv1zWrPWdYX60IFpCG5otFzP9MvkkQHC4y0EGj/ oz7EFAR3GKV6Xg9s11FTxnT3S2V2qvVt7VhILrc0IOK5ihDgQbBRojFOtCy2q7/7 TipsduCoyA2DZrDzsExZBXLvCzZiatZB2CJWndAuGzK56lvbjAk7nU+f5Atxa99p Q+aD/vazh/dYfw== -----END CERTIFICATE-----Generated at Sun Dec 21 21:11:15 2025 by rpki-client