This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft File: aZISXj1TzEgTNhBUg_z_cB_aG7M.mft (raw, json) Hash identifier: ILvKJ2NVSILoYZUWjxBLl7cV0JpXDK7qmZiryLX6mCI= Subject key identifier: F0:84:FB:7D:7E:CC:6C:C3:F6:F9:2D:D1:A3:25:4D:62:B2:92:F6:9F Authority key identifier: 69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3 Certificate issuer: /CN=6992125e3d53cc481336105483fcff701fda1bb3 Certificate serial: 019B37580AED7D0D380671ECF879FE5A06BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 16:01:15 +0000 Manifest this update: Fri 19 Dec 2025 16:01:15 +0000 Manifest next update: Sat 20 Dec 2025 16:01:15 +0000 Files and hashes: 1: Al5XA-JtcwQZgxg8lrEchelWFKc.roa (hash: awq0OKEpSlRcquvq5uS+1UqeIOS4jFcQD5+W9s9X3Ag=) 2: aZISXj1TzEgTNhBUg_z_cB_aG7M.crl (hash: 2iWntUTjL2ziwIW7UjEee9p2Qv7qNcWh8dyxP7bQLPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:0a:ed:7d:0d:38:06:71:ec:f8:79:fe:5a:06:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6992125e3d53cc481336105483fcff701fda1bb3 Validity Not Before: Dec 19 16:01:15 2025 GMT Not After : Dec 20 16:01:15 2025 GMT Subject: CN=f084fb7d7ecc6cc3f6f92dd1a3254d62b292f69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:da:05:d5:62:26:03:c6:0c:10:e0:02:5f:36: 1b:62:aa:85:9a:94:5c:0f:0d:c0:44:25:27:ca:6f: b8:2f:b0:d5:aa:6b:a2:dc:67:8a:dd:5f:46:52:c9: af:f9:a5:b6:cd:33:53:ee:a5:f0:b0:ab:9d:da:35: bc:ba:56:4f:09:c8:fb:29:12:58:7f:05:5f:f5:5c: 10:00:71:11:1b:2b:5f:c3:fd:2e:01:32:3a:ab:a4: 1e:3d:b2:c5:c4:62:e4:62:63:ca:6a:fb:9a:6c:c0: 4b:f8:f4:c9:96:d4:77:00:77:7d:6f:ce:9d:13:ba: 31:52:5a:8e:a7:3b:e0:46:db:d5:b0:75:e3:37:66: 91:e4:76:b8:47:74:64:77:e7:92:4f:aa:4a:c8:e9: 83:0d:b1:61:df:7a:b2:e2:ca:e6:62:3b:80:7b:0c: 9e:a1:b4:d0:2a:fe:d4:76:a5:eb:46:9f:e1:96:59: 1d:88:12:7b:48:8b:d6:23:b7:22:5c:0e:4d:ec:8b: db:5f:7f:4b:df:16:ca:cd:b6:b7:3b:17:6a:fb:d2: a1:3b:88:c8:18:43:a7:0f:8f:34:38:5a:2a:f7:aa: f5:74:4c:d7:8a:47:fa:c9:9b:22:70:dc:72:6a:c6: 73:27:28:a5:f4:ee:ac:cf:95:cb:cc:5f:cd:b9:8b: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:84:FB:7D:7E:CC:6C:C3:F6:F9:2D:D1:A3:25:4D:62:B2:92:F6:9F X509v3 Authority Key Identifier: keyid:69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:8a:56:9e:76:49:c0:f2:26:31:14:71:a5:1d:56:fd:b5:98: 11:f4:4f:7b:0d:9f:94:8a:0a:be:97:f9:28:ce:8e:9f:77:ae: aa:7c:3c:3c:f9:f1:72:76:e3:9f:69:a8:af:e0:43:4c:ea:e3: f3:5d:9a:69:ef:a4:35:c0:03:ba:23:90:d4:5b:31:84:e6:c0: d0:d3:3b:56:9a:35:df:99:56:f1:68:7d:a6:f0:6f:9f:d8:9b: cf:0c:d6:6c:24:a2:05:25:08:5a:69:86:ed:df:97:f9:61:09: 33:e5:f3:7b:59:42:3c:a5:07:fb:ed:97:c3:b7:74:63:55:72: 91:01:13:e6:41:39:eb:63:18:f0:14:08:0d:dc:9a:9c:da:21: 9b:73:b7:4f:fd:aa:09:e2:18:83:b5:f6:7c:7b:d8:63:ef:ea: f0:36:67:d2:08:3a:e9:7b:c9:4f:0c:91:68:b7:f2:a2:c8:1b: 95:fb:34:7b:9c:f7:8d:f7:45:32:1c:32:b3:68:9a:aa:6b:8a: b3:ba:4a:d4:88:7b:38:0e:80:f5:4b:80:72:09:b6:95:76:ce: ed:b7:e1:07:5f:23:01:b6:fb:d7:a0:f8:8e:4d:87:4a:e5:4e: 1d:22:cc:68:91:6a:54:f4:f0:5b:3e:55:f1:30:27:4c:22:56: cb:a5:6e:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WArtfQ04BnHs+Hn+Wga6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTIxMjVlM2Q1M2NjNDgxMzM2MTA1NDgzZmNmZjcwMWZk YTFiYjMwHhcNMjUxMjE5MTYwMTE1WhcNMjUxMjIwMTYwMTE1WjAzMTEwLwYDVQQD EyhmMDg0ZmI3ZDdlY2M2Y2MzZjZmOTJkZDFhMzI1NGQ2MmIyOTJmNjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29oF1WImA8YMEOACXzYbYqqFmpRc Dw3ARCUnym+4L7DVqmui3GeK3V9GUsmv+aW2zTNT7qXwsKud2jW8ulZPCcj7KRJY fwVf9VwQAHERGytfw/0uATI6q6QePbLFxGLkYmPKavuabMBL+PTJltR3AHd9b86d E7oxUlqOpzvgRtvVsHXjN2aR5Ha4R3Rkd+eST6pKyOmDDbFh33qy4srmYjuAewye obTQKv7UdqXrRp/hllkdiBJ7SIvWI7ciXA5N7IvbX39L3xbKzba3Oxdq+9KhO4jI GEOnD480OFoq96r1dEzXikf6yZsicNxyasZzJyil9O6sz5XLzF/NuYsZnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCE+31+zGzD9vkt0aMlTWKykvafMB8GA1UdIwQY MBaAFGmSEl49U8xIEzYQVIP8/3Af2huzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YWM5NTctNDE4My00OWYzLWJmYmUt ODM3YzVlMTJiZDA0LzEvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy80YWM5NTctNDE4My00OWYzLWJmYmUtODM3YzVlMTJiZDA0 LzEvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4pWnnZJ wPImMRRxpR1W/bWYEfRPew2flIoKvpf5KM6On3euqnw8PPnxcnbjn2mor+BDTOrj 812aae+kNcADuiOQ1FsxhObA0NM7Vpo135lW8Wh9pvBvn9ibzwzWbCSiBSUIWmmG 7d+X+WEJM+Xze1lCPKUH++2Xw7d0Y1VykQET5kE562MY8BQIDdyanNohm3O3T/2q CeIYg7X2fHvYY+/q8DZn0gg66XvJTwyRaLfyosgblfs0e5z3jfdFMhwys2iaqmuK s7pK1Ih7OA6A9UuAcgm2lXbO7bfhB18jAbb716D4jk2HSuVOHSLMaJFqVPTwWz5V 8TAnTCJWy6Vuyw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:59:08 2025 by rpki-client