This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft File: aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json) Hash identifier: RC0gNf7gzywUXJKXrJ2V8vZ9q5plNLX5emm72fU39UI= Subject key identifier: 83:F4:B6:5D:6A:C3:C3:7A:7E:25:BB:3A:BC:FB:6E:60:82:79:FD:74 Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA Certificate issuer: /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa Certificate serial: 019B2664A112D2A408192EB9414970C992E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft Manifest number: 1012 Signing time: Tue 16 Dec 2025 09:01:27 +0000 Manifest this update: Tue 16 Dec 2025 09:01:27 +0000 Manifest next update: Wed 17 Dec 2025 09:01:27 +0000 Files and hashes: 1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: G/GyFMZFJACEOlCZCNoWh+zzf1wnrYSe4zM2ojl3bb8=) 2: uxIFoYaci_ec-DO8z0hezY7ktq4.asa (hash: SDJifCzUIO+4H118O2u0CQ5c1Yer68j64MbpD0n6+XE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:a1:12:d2:a4:08:19:2e:b9:41:49:70:c9:92:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa Validity Not Before: Dec 16 09:01:27 2025 GMT Not After : Dec 17 09:01:27 2025 GMT Subject: CN=83f4b65d6ac3c37a7e25bb3abcfb6e608279fd74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5a:ed:2e:58:99:2b:31:2a:36:03:ed:81:a9: 0c:99:2b:91:3f:dd:2d:b3:b7:7a:84:7e:86:24:ab: ed:c3:7f:35:61:2b:b4:0c:9d:a2:4b:11:95:ce:75: 5c:79:3b:f9:6e:db:34:89:f2:6f:c9:af:1b:88:0f: d9:6f:10:29:f6:eb:0a:76:57:77:6f:c6:cd:6f:13: 15:42:a9:a8:40:15:81:8e:5b:24:4d:32:ff:38:58: 1c:cc:fa:71:45:f0:5b:b8:d2:df:6e:84:b2:13:be: 78:0d:9c:ab:0c:ec:75:f5:34:76:9e:6b:c2:e8:03: 4f:2e:bb:28:43:c4:a2:6c:12:c8:14:c1:59:e0:e3: ac:10:06:60:96:0f:d7:22:c9:4f:d1:ce:f2:08:8f: 5d:dd:be:dd:12:18:f5:aa:67:bb:0d:10:aa:e4:fe: a7:4f:e4:a1:bf:83:5f:bb:3e:00:9d:9b:47:b5:76: b7:ed:0d:da:15:38:64:ac:c8:b3:a7:26:2b:64:65: 91:8c:0a:49:b2:38:91:02:47:0b:a7:56:92:03:cd: c6:c9:c3:cc:45:8a:f1:d0:2e:b1:d4:51:b4:e1:92: 35:bc:f9:be:d9:64:30:d1:eb:09:1e:46:fd:6a:75: 05:0b:08:ba:47:e8:9a:62:f1:af:fb:a2:19:63:c0: cf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F4:B6:5D:6A:C3:C3:7A:7E:25:BB:3A:BC:FB:6E:60:82:79:FD:74 X509v3 Authority Key Identifier: keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:47:37:f3:21:67:b1:ae:d8:26:f8:3c:c0:2e:49:8e:69:3e: 7e:2b:a3:0e:c1:82:28:f5:c2:3d:62:00:7c:af:0a:99:2b:c9: f3:86:f8:e2:40:7e:f5:44:01:d6:99:cd:91:54:0b:4d:2c:5f: d2:b8:0c:f8:c6:de:6c:08:58:8d:34:8b:f5:47:ca:fc:bb:64: a3:3a:85:9d:cb:b3:10:9e:d8:8d:fc:71:33:0d:2f:e5:00:37: 43:17:86:05:1e:02:f0:1d:2c:31:42:6d:c5:53:6d:5b:bf:97: 16:b6:ab:1f:a9:43:91:19:77:33:d6:9c:ea:7f:b0:cb:a4:fe: a9:cd:2d:2e:56:cd:e2:f4:bf:5a:5c:77:37:27:0d:69:13:ed: 5e:67:fc:64:e1:fa:23:5d:ab:a1:d0:3f:7e:25:07:83:85:f8: 7d:d0:1f:cb:06:60:d3:06:98:69:ad:5a:2b:b5:c8:a6:4d:5e: 4d:58:d2:dc:77:b7:7d:29:f7:f1:c7:bf:47:eb:96:d3:65:2f: 8d:e2:29:cb:1d:2f:f6:f0:69:07:a4:2b:cf:83:b0:af:e7:e8: 62:59:9f:f3:2e:7b:47:09:e8:53:c4:aa:7c:b6:57:77:14:62: e7:d7:25:fb:33:ef:ef:3d:d5:0d:fe:3e:50:51:23:4d:51:e3: 76:cc:d0:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZKES0qQIGS65QUlwyZLpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWQ3NTA3ZjlhZTFjOGIzZmRlNDU0MzNhZWU4ZmNmOTg1 YTIxZmEwHhcNMjUxMjE2MDkwMTI3WhcNMjUxMjE3MDkwMTI3WjAzMTEwLwYDVQQD Eyg4M2Y0YjY1ZDZhYzNjMzdhN2UyNWJiM2FiY2ZiNmU2MDgyNzlmZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FrtLliZKzEqNgPtgakMmSuRP90t s7d6hH6GJKvtw381YSu0DJ2iSxGVznVceTv5bts0ifJvya8biA/ZbxAp9usKdld3 b8bNbxMVQqmoQBWBjlskTTL/OFgczPpxRfBbuNLfboSyE754DZyrDOx19TR2nmvC 6ANPLrsoQ8SibBLIFMFZ4OOsEAZglg/XIslP0c7yCI9d3b7dEhj1qme7DRCq5P6n T+Shv4Nfuz4AnZtHtXa37Q3aFThkrMizpyYrZGWRjApJsjiRAkcLp1aSA83GycPM RYrx0C6x1FG04ZI1vPm+2WQw0esJHkb9anUFCwi6R+iaYvGv+6IZY8DPEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIP0tl1qw8N6fiW7Orz7bmCCef10MB8GA1UdIwQY MBaAFGmddQf5rhyLP95FQzruj8+YWiH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjIt MjI0MTY1ZWMxODBhLzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjItMjI0MTY1ZWMxODBh LzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkc38yFn sa7YJvg8wC5Jjmk+fiujDsGCKPXCPWIAfK8KmSvJ84b44kB+9UQB1pnNkVQLTSxf 0rgM+MbebAhYjTSL9UfK/LtkozqFncuzEJ7YjfxxMw0v5QA3QxeGBR4C8B0sMUJt xVNtW7+XFrarH6lDkRl3M9ac6n+wy6T+qc0tLlbN4vS/Wlx3NycNaRPtXmf8ZOH6 I12rodA/fiUHg4X4fdAfywZg0waYaa1aK7XIpk1eTVjS3He3fSn38ce/R+uW02Uv jeIpyx0v9vBpB6Qrz4Owr+foYlmf8y57RwnoU8SqfLZXdxRi59cl+zPv7z3VDf4+ UFEjTVHjdszQHw== -----END CERTIFICATE-----Generated at Tue Dec 16 12:51:57 2025 by rpki-client