This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft File: a1zOqpdLKQWssmKvRSwCKAMWqrs.mft (raw, json) Hash identifier: JLL4Lt+RJzRAKViOBYA68sttsG5i4Q6deYiCBUUCfl8= Subject key identifier: 8A:DB:CC:42:0A:D3:0A:C5:63:9E:04:F9:AD:CB:25:26:68:82:5B:D7 Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB Certificate issuer: /CN=6b5cceaa974b2905acb262af452c02280316aabb Certificate serial: 019B529844F053C4E6B4255474BEFA379C8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft Manifest number: 06D1 Signing time: Wed 24 Dec 2025 23:01:09 +0000 Manifest this update: Wed 24 Dec 2025 23:01:09 +0000 Manifest next update: Thu 25 Dec 2025 23:01:09 +0000 Files and hashes: 1: a1zOqpdLKQWssmKvRSwCKAMWqrs.crl (hash: A7fuHNx1RThVDPzb44yyZcwLP+IC8vLRQCccwrhPsmI=) 2: bItIvz4oTSzEDWqrAWUpQQfUMhI.roa (hash: F1ATAeaXzdv7TC8vaBAXGNSvaND60c6EFcHFAEWNuFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:44:f0:53:c4:e6:b4:25:54:74:be:fa:37:9c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb Validity Not Before: Dec 24 23:01:09 2025 GMT Not After : Dec 25 23:01:09 2025 GMT Subject: CN=8adbcc420ad30ac5639e04f9adcb252668825bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c2:2e:ed:c3:21:fd:6a:2e:5b:ff:d6:da:e8: 61:3b:32:b5:a6:e9:f2:62:b7:ec:59:b1:10:02:b9: 6e:1a:11:13:ef:36:1f:bf:71:48:be:20:65:17:5c: 30:a8:99:48:c0:69:3d:ba:ef:11:64:98:0b:e8:67: 36:7b:fc:17:20:2d:1d:c9:fa:0a:c9:0c:63:26:8f: 3d:b7:98:83:1c:17:87:d0:fa:4f:79:73:c2:45:c3: d1:fb:57:40:ba:a2:a8:15:c4:aa:a2:41:e9:9e:fb: fd:85:3b:8c:1b:49:42:cc:49:04:8b:47:08:39:d6: 1b:73:30:05:54:af:b7:ba:71:b7:23:75:32:ed:da: 7a:dc:91:dd:f6:92:6f:f5:ec:83:3f:06:31:15:c1: 00:b3:d7:44:b7:46:27:57:7d:01:a4:d2:1b:7a:b8: fb:c2:db:72:f5:8e:69:91:b3:e1:c4:73:c6:98:fe: 5a:66:9b:9e:5e:2d:5c:ce:8e:38:d5:c2:fd:3c:ae: 0b:40:6f:fb:78:b5:3f:29:2c:db:1a:86:65:93:1e: 58:13:42:f0:ab:1d:79:49:5d:9f:be:e0:7d:14:34: 66:c1:1a:58:26:4c:f6:fb:8b:4e:a8:d4:c0:29:41: e1:6c:72:b7:a3:36:79:d8:4f:83:e4:85:ca:bc:70: e9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DB:CC:42:0A:D3:0A:C5:63:9E:04:F9:AD:CB:25:26:68:82:5B:D7 X509v3 Authority Key Identifier: keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ee:b0:1d:7f:40:12:6c:81:bf:53:ba:b7:0e:fa:22:89:5f: d4:9a:6d:40:71:e9:1b:e8:0d:21:8b:ca:e2:80:dc:fb:9e:81: 05:1a:c6:ec:a7:75:4c:18:52:26:52:79:b8:78:71:d9:bb:09: fb:7e:93:ee:22:54:6b:d9:b6:c8:aa:5c:46:33:ad:03:3f:81: af:70:06:e4:94:e9:21:4a:29:a6:bb:c2:72:87:38:6a:8e:1a: 07:18:2b:78:06:38:a0:bb:5f:28:89:53:44:c1:08:a4:97:48: 57:24:87:07:e0:96:eb:bf:97:a7:0b:4e:df:9b:1f:39:00:04: 8d:6e:e9:63:17:40:6a:2a:51:27:40:95:4c:d2:8f:bd:29:93: b0:e1:bf:f2:c8:c6:c7:21:ba:c2:f4:0a:dc:2f:68:d0:26:ad: 6a:08:db:8d:82:4c:c9:93:d1:db:da:3c:a5:97:45:fa:05:b3: 5e:eb:ab:04:8d:3a:e1:4b:5a:08:2f:3e:2b:21:cf:5d:0c:67: c5:fd:3a:a4:f7:08:a1:1e:f3:e6:60:33:53:33:99:dc:11:d5: 23:d4:8c:19:25:32:85:28:e3:15:4d:4b:e2:c2:de:64:09:9c: 78:38:34:42:72:b3:f2:db:0b:e5:12:50:03:39:5d:57:e5:c1: a9:59:b4:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmETwU8TmtCVUdL76N5yOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWNjZWFhOTc0YjI5MDVhY2IyNjJhZjQ1MmMwMjI4MDMx NmFhYmIwHhcNMjUxMjI0MjMwMTA5WhcNMjUxMjI1MjMwMTA5WjAzMTEwLwYDVQQD Eyg4YWRiY2M0MjBhZDMwYWM1NjM5ZTA0ZjlhZGNiMjUyNjY4ODI1YmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysIu7cMh/WouW//W2uhhOzK1puny YrfsWbEQArluGhET7zYfv3FIviBlF1wwqJlIwGk9uu8RZJgL6Gc2e/wXIC0dyfoK yQxjJo89t5iDHBeH0PpPeXPCRcPR+1dAuqKoFcSqokHpnvv9hTuMG0lCzEkEi0cI OdYbczAFVK+3unG3I3Uy7dp63JHd9pJv9eyDPwYxFcEAs9dEt0YnV30BpNIberj7 wtty9Y5pkbPhxHPGmP5aZpueXi1czo441cL9PK4LQG/7eLU/KSzbGoZlkx5YE0Lw qx15SV2fvuB9FDRmwRpYJkz2+4tOqNTAKUHhbHK3ozZ52E+D5IXKvHDplwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrbzEIK0wrFY54E+a3LJSZoglvXMB8GA1UdIwQY MBaAFGtczqqXSykFrLJir0UsAigDFqq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTF6T3FwZExLUVdzc21LdlJTd0NLQU1XcXJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zOWYxZTAtMzYyNy00OTJmLWFlOTMt OGIwN2FjZDA3Yzk0LzEvYTF6T3FwZExLUVdzc21LdlJTd0NLQU1XcXJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zOWYxZTAtMzYyNy00OTJmLWFlOTMtOGIwN2FjZDA3Yzk0 LzEvYTF6T3FwZExLUVdzc21LdlJTd0NLQU1XcXJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANO6wHX9A EmyBv1O6tw76Iolf1JptQHHpG+gNIYvK4oDc+56BBRrG7Kd1TBhSJlJ5uHhx2bsJ +36T7iJUa9m2yKpcRjOtAz+Br3AG5JTpIUopprvCcoc4ao4aBxgreAY4oLtfKIlT RMEIpJdIVySHB+CW67+XpwtO35sfOQAEjW7pYxdAaipRJ0CVTNKPvSmTsOG/8sjG xyG6wvQK3C9o0CatagjbjYJMyZPR29o8pZdF+gWzXuurBI064UtaCC8+KyHPXQxn xf06pPcIoR7z5mAzUzOZ3BHVI9SMGSUyhSjjFU1L4sLeZAmceDg0QnKz8tsL5RJQ AzldV+XBqVm0pw== -----END CERTIFICATE-----Generated at Thu Dec 25 07:07:14 2025 by rpki-client