This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft File: aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft (raw, json) Hash identifier: gut/BvFRsrTPe9EQbQNjRqcUnSwLTXu4VUmEvzXO8oY= Subject key identifier: B2:67:41:0E:99:18:96:74:38:30:FA:58:70:91:3B:12:FD:C1:DB:0B Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4 Certificate issuer: /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4 Certificate serial: 019B446E9F05989EE2CD599C37856FA83DA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 05:00:58 +0000 Manifest this update: Mon 22 Dec 2025 05:00:58 +0000 Manifest next update: Tue 23 Dec 2025 05:00:58 +0000 Files and hashes: 1: aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl (hash: EVqC2dzXt2K0BcHBXLGGETaMnO1cohv3Rgh4txB4dYY=) 2: dUqyD5dBwTvJ_qoTBxGI93eGedY.roa (hash: u/v6Ya7ReNYFR+FOK7OzZoy9GOIB91+hBxT7UAGsW1U=) 3: xf5euvYwoNkCugSTZpIpZIs6gdQ.roa (hash: TROZHBrJUwOEntOqJDRdHWhVUC4xDktW9XYJSjQLr0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:9f:05:98:9e:e2:cd:59:9c:37:85:6f:a8:3d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4 Validity Not Before: Dec 22 05:00:58 2025 GMT Not After : Dec 23 05:00:58 2025 GMT Subject: CN=b267410e991896743830fa5870913b12fdc1db0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:86:aa:6f:3c:51:63:85:11:f1:36:8e:e6: 9e:b2:28:ee:a8:d2:36:3f:2c:b5:2e:88:6a:ef:af: 19:f8:94:69:bb:84:f7:2c:c1:4f:27:1c:06:70:8e: 6a:4e:54:af:0f:48:28:38:25:9f:1d:50:ea:d0:70: 2b:44:d9:77:3b:3d:b8:49:f0:4f:9a:ac:83:04:ff: 2d:d0:7b:13:b8:49:94:3d:72:d8:38:ba:da:bd:f4: ad:be:80:32:54:a4:b2:fa:93:99:71:fa:88:71:b6: c4:f7:c8:69:39:fb:a1:2e:51:7a:a9:51:9d:0a:43: f5:80:cd:95:ef:81:73:55:95:8d:9c:38:d0:bd:6b: 56:69:bb:e6:26:da:01:18:d8:d3:36:dd:26:9a:a7: 9a:cc:ee:ee:c9:8b:4b:19:6a:00:02:86:9e:1f:a8: 72:d7:1f:9b:df:5f:8b:15:41:e3:7f:b8:d2:4f:7a: 30:9f:4c:e7:a9:2c:e4:26:08:e7:7d:bd:cb:6e:86: 62:8e:a6:8f:c2:3f:f0:be:a9:32:67:d1:4f:06:fc: 4a:92:64:19:9e:6c:08:5b:47:5c:01:98:51:3c:9f: d4:84:54:88:1b:22:f2:f3:0b:50:2d:3f:c5:06:5a: b9:85:ce:69:fe:9e:9d:e0:70:de:d2:97:c8:1b:97: 1a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:67:41:0E:99:18:96:74:38:30:FA:58:70:91:3B:12:FD:C1:DB:0B X509v3 Authority Key Identifier: keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ae:d4:a2:fa:b8:36:55:39:a2:0d:75:c7:ce:cc:90:6f:66: d4:69:07:86:ee:10:53:74:3c:ef:13:f3:96:40:a6:c3:99:3c: f3:4d:55:d6:6a:cc:30:ed:22:bc:a0:1c:a8:c0:65:d6:20:ca: 76:c1:1d:53:42:30:0d:94:ac:46:a0:c6:68:8d:3a:f1:e8:2a: 63:e3:6c:cf:01:bd:fe:88:22:73:ef:de:f3:b0:8c:5e:26:44: ce:99:27:c9:20:6c:55:ed:85:3e:c1:f0:bc:53:cb:61:92:29: 5b:6e:85:6b:53:a3:f4:65:0c:a0:63:77:e6:c2:5b:a0:55:4f: 7e:4d:0f:83:82:23:08:bc:70:8d:28:a8:5e:a1:48:94:78:79: 89:8c:97:9c:9d:78:87:99:39:b4:ba:4a:ec:4d:e9:c0:82:db: fc:7b:0f:19:6b:7d:61:f6:58:58:6c:8b:ed:a6:ff:6c:92:73: 51:41:6d:d9:55:1d:96:57:dd:90:8c:01:11:38:1d:69:2e:f4: f3:41:d1:b5:9f:e8:4f:a0:ca:dc:fa:4d:62:ae:b1:05:98:b6: 9d:9a:b5:8c:ac:d7:a4:38:6b:c3:51:aa:90:1a:4d:e9:b3:82: 5a:4c:83:3e:c5:13:c0:61:67:db:9b:8f:47:c3:70:e1:a3:1b: 3e:4a:63:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbp8FmJ7izVmcN4VvqD2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OTRlMWI4ZGE4MGNhYzJhZDFhMmYzZjA5YmY5ZGI1YTEy NDg2YTQwHhcNMjUxMjIyMDUwMDU4WhcNMjUxMjIzMDUwMDU4WjAzMTEwLwYDVQQD EyhiMjY3NDEwZTk5MTg5Njc0MzgzMGZhNTg3MDkxM2IxMmZkYzFkYjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZiGqm88UWOFEfE2juaesijuqNI2 Pyy1Lohq768Z+JRpu4T3LMFPJxwGcI5qTlSvD0goOCWfHVDq0HArRNl3Oz24SfBP mqyDBP8t0HsTuEmUPXLYOLravfStvoAyVKSy+pOZcfqIcbbE98hpOfuhLlF6qVGd CkP1gM2V74FzVZWNnDjQvWtWabvmJtoBGNjTNt0mmqeazO7uyYtLGWoAAoaeH6hy 1x+b31+LFUHjf7jST3own0znqSzkJgjnfb3LboZijqaPwj/wvqkyZ9FPBvxKkmQZ nmwIW0dcAZhRPJ/UhFSIGyLy8wtQLT/FBlq5hc5p/p6d4HDe0pfIG5caSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJnQQ6ZGJZ0ODD6WHCROxL9wdsLMB8GA1UdIwQY MBaAFGiU4bjagMrCrRovPwm/nbWhJIakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUpUaHVOcUF5c0t0R2k4X0NiLWR0YUVraHFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yY2FiMWEtZGY2Ni00MTg3LWIxODIt NzAzY2FiNGQwNTk4LzEvYUpUaHVOcUF5c0t0R2k4X0NiLWR0YUVraHFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8yY2FiMWEtZGY2Ni00MTg3LWIxODItNzAzY2FiNGQwNTk4 LzEvYUpUaHVOcUF5c0t0R2k4X0NiLWR0YUVraHFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB67Uovq4 NlU5og11x87MkG9m1GkHhu4QU3Q87xPzlkCmw5k8801V1mrMMO0ivKAcqMBl1iDK dsEdU0IwDZSsRqDGaI068egqY+NszwG9/ogic+/e87CMXiZEzpknySBsVe2FPsHw vFPLYZIpW26Fa1Oj9GUMoGN35sJboFVPfk0Pg4IjCLxwjSioXqFIlHh5iYyXnJ14 h5k5tLpK7E3pwILb/HsPGWt9YfZYWGyL7ab/bJJzUUFt2VUdllfdkIwBETgdaS70 80HRtZ/oT6DK3PpNYq6xBZi2nZq1jKzXpDhrw1GqkBpN6bOCWkyDPsUTwGFn25uP R8Nw4aMbPkpjyg== -----END CERTIFICATE-----Generated at Mon Dec 22 07:17:47 2025 by rpki-client