This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft File: aiElvfZalVLVuOF6s2FaoQuAWXY.mft (raw, json) Hash identifier: pN2q4PwdbMfNwWs69HwMfWpusOGlEeC/XRWNg0vmjcc= Subject key identifier: F2:96:D4:FB:E9:50:9C:BF:B1:EA:96:FA:E1:BB:8E:25:E0:0B:C8:66 Authority key identifier: 6A:21:25:BD:F6:5A:95:52:D5:B8:E1:7A:B3:61:5A:A1:0B:80:59:76 Certificate issuer: /CN=6a2125bdf65a9552d5b8e17ab3615aa10b805976 Certificate serial: 019B4EF297A59D4142B32AEDC6B90C90E4B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft Manifest number: 0393 Signing time: Wed 24 Dec 2025 06:01:19 +0000 Manifest this update: Wed 24 Dec 2025 06:01:19 +0000 Manifest next update: Thu 25 Dec 2025 06:01:19 +0000 Files and hashes: 1: aiElvfZalVLVuOF6s2FaoQuAWXY.crl (hash: UviLpN9m4QllWdjhkzHYSJYoLz1YxxlgxsW15KMkFpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:97:a5:9d:41:42:b3:2a:ed:c6:b9:0c:90:e4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a2125bdf65a9552d5b8e17ab3615aa10b805976 Validity Not Before: Dec 24 06:01:19 2025 GMT Not After : Dec 25 06:01:19 2025 GMT Subject: CN=f296d4fbe9509cbfb1ea96fae1bb8e25e00bc866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0c:58:5d:eb:a9:c9:84:39:bf:5b:0e:22:c0: b6:6d:2b:a4:54:2d:a3:d5:e2:3d:3b:29:de:0f:4d: 6d:08:e9:16:cc:af:45:19:16:66:70:f0:d1:64:70: 6a:d5:03:5c:bc:2c:f0:06:f4:1c:e3:24:68:89:1f: 04:55:b3:7d:92:b9:e6:fe:0d:60:1f:78:93:ba:ba: 93:d7:6c:be:16:1b:65:0c:55:85:28:4d:d7:d0:7e: 03:4d:b9:a8:13:87:c2:25:89:9d:68:9e:01:1e:a8: 8d:a2:ab:b4:61:05:39:ef:b2:ea:32:0a:ef:8e:15: 66:7a:5b:16:04:3e:bb:cf:58:6a:a5:fa:d3:48:bc: 60:9e:cf:e3:a0:7d:94:15:12:f5:44:80:4e:02:74: 86:d9:3f:94:c2:d1:8c:40:9c:d4:92:02:13:62:06: b5:7f:21:c7:c1:b7:da:94:5c:56:7d:b7:07:91:16: dc:f2:9c:0e:42:68:04:73:f1:95:de:bc:b0:12:41: b5:28:57:db:7c:95:d6:96:a1:82:7d:f6:52:82:f7: 04:bb:a5:2b:f6:6f:16:60:ce:22:04:27:50:46:a3: 67:f5:6c:3b:92:cd:11:e5:dc:60:07:a9:64:e1:ca: 3a:89:4b:ab:d6:e7:9f:e9:2c:4b:69:35:43:01:14: 26:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:96:D4:FB:E9:50:9C:BF:B1:EA:96:FA:E1:BB:8E:25:E0:0B:C8:66 X509v3 Authority Key Identifier: keyid:6A:21:25:BD:F6:5A:95:52:D5:B8:E1:7A:B3:61:5A:A1:0B:80:59:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ed:66:d3:e8:65:cc:9d:29:90:3b:26:b5:a0:8b:22:5c:d8: 5e:1d:93:8f:a3:4f:0d:49:fc:f7:d7:40:8a:8b:fd:2c:da:c1: eb:b1:b0:8d:45:1b:34:ec:1b:48:f2:06:5b:79:33:2b:3d:27: f9:54:fc:80:41:de:12:39:83:c8:16:23:66:d4:f9:95:40:dc: 8d:30:72:36:77:b4:f5:61:3a:14:a5:01:6c:74:16:97:26:34: 4b:57:0f:ce:ae:67:cc:f4:d2:b8:32:76:55:34:f2:73:43:68: e0:39:23:fa:51:8c:98:db:07:4b:45:e1:49:64:64:36:ba:af: a9:95:3b:6b:80:7c:e3:ad:42:9f:83:12:89:5c:df:77:40:ab: 43:1d:ab:f1:2e:cf:7f:01:9e:df:32:c7:72:ef:50:cb:9d:4e: 8b:b7:17:95:0f:e2:01:3b:ed:79:99:91:1d:46:a2:aa:4c:88: e3:98:e8:f5:f4:80:ab:de:96:a4:ea:e0:f9:d3:38:61:4d:1e: b9:9a:a0:a0:8a:43:e9:d5:75:3f:62:17:93:03:20:69:86:28: 70:ae:3a:bd:46:bc:5f:a0:db:c0:7a:ab:7a:3e:bb:42:45:81: dc:22:72:39:1b:24:20:71:ff:55:98:68:71:cd:15:42:2a:b3: b8:5e:be:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8pelnUFCsyrtxrkMkOSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMjEyNWJkZjY1YTk1NTJkNWI4ZTE3YWIzNjE1YWExMGI4 MDU5NzYwHhcNMjUxMjI0MDYwMTE5WhcNMjUxMjI1MDYwMTE5WjAzMTEwLwYDVQQD EyhmMjk2ZDRmYmU5NTA5Y2JmYjFlYTk2ZmFlMWJiOGUyNWUwMGJjODY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wxYXeupyYQ5v1sOIsC2bSukVC2j 1eI9OyneD01tCOkWzK9FGRZmcPDRZHBq1QNcvCzwBvQc4yRoiR8EVbN9krnm/g1g H3iTurqT12y+FhtlDFWFKE3X0H4DTbmoE4fCJYmdaJ4BHqiNoqu0YQU577LqMgrv jhVmelsWBD67z1hqpfrTSLxgns/joH2UFRL1RIBOAnSG2T+UwtGMQJzUkgITYga1 fyHHwbfalFxWfbcHkRbc8pwOQmgEc/GV3rywEkG1KFfbfJXWlqGCffZSgvcEu6Ur 9m8WYM4iBCdQRqNn9Ww7ks0R5dxgB6lk4co6iUur1uef6SxLaTVDARQmzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKW1PvpUJy/seqW+uG7jiXgC8hmMB8GA1UdIwQY MBaAFGohJb32WpVS1bjherNhWqELgFl2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWlFbHZmWmFsVkxWdU9GNnMyRmFvUXVBV1hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mNWI2OGUtZTA5My00NmQ1LThkMGQt NjNlZDIyY2FiYzkyLzEvYWlFbHZmWmFsVkxWdU9GNnMyRmFvUXVBV1hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mNWI2OGUtZTA5My00NmQ1LThkMGQtNjNlZDIyY2FiYzky LzEvYWlFbHZmWmFsVkxWdU9GNnMyRmFvUXVBV1hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+1m0+hl zJ0pkDsmtaCLIlzYXh2Tj6NPDUn899dAiov9LNrB67GwjUUbNOwbSPIGW3kzKz0n +VT8gEHeEjmDyBYjZtT5lUDcjTByNne09WE6FKUBbHQWlyY0S1cPzq5nzPTSuDJ2 VTTyc0No4Dkj+lGMmNsHS0XhSWRkNrqvqZU7a4B8461Cn4MSiVzfd0CrQx2r8S7P fwGe3zLHcu9Qy51Oi7cXlQ/iATvteZmRHUaiqkyI45jo9fSAq96WpOrg+dM4YU0e uZqgoIpD6dV1P2IXkwMgaYYocK46vUa8X6DbwHqrej67QkWB3CJyORskIHH/VZho cc0VQiqzuF6+jw== -----END CERTIFICATE-----Generated at Wed Dec 24 09:00:42 2025 by rpki-client