This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft File: AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft (raw, json) Hash identifier: ICLanOdk0k5L2F9u1R0yW6A59wwpRvDp02NiepdHLVU= Subject key identifier: 27:CE:FD:93:9C:4E:6C:1F:7B:20:F9:50:69:90:E3:DB:2B:F8:72:CD Authority key identifier: 00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91 Certificate issuer: /CN=00046b434526bf2836e2749ce0e36e08443d6b91 Certificate serial: 019B3C101511F0B6F38B8989E1EDAC76ED55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft Manifest number: 91 Signing time: Sat 20 Dec 2025 14:00:45 +0000 Manifest this update: Sat 20 Dec 2025 14:00:45 +0000 Manifest next update: Sun 21 Dec 2025 14:00:45 +0000 Files and hashes: 1: 3Gh8OdXmWQdIZ4mk5HiPN4TPVh4.roa (hash: Cp0uJqQCCfVS+mC0KewqKWaLegack3UYWeQPqXDJvvI=) 2: AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl (hash: fGDMca9zF7eHjep8m+IKdaamDQr+xQYx3RlsnTahPPg=) 3: sChO2wUfE9hSdmv4khdrkrYtnMk.roa (hash: /INpfWnZY160HpcHDvzWJGinUo9LuDU7A4NCloJUW/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:15:11:f0:b6:f3:8b:89:89:e1:ed:ac:76:ed:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00046b434526bf2836e2749ce0e36e08443d6b91 Validity Not Before: Dec 20 14:00:45 2025 GMT Not After : Dec 21 14:00:45 2025 GMT Subject: CN=27cefd939c4e6c1f7b20f9506990e3db2bf872cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dd:b9:36:13:80:ee:d8:b2:22:b8:2c:5f:94: bd:a9:54:5b:da:ba:92:0e:90:4b:ea:bb:a0:51:6f: 6e:b4:b7:50:c2:94:c4:5a:ba:ee:9d:2b:e4:fa:07: 3d:92:76:d4:a1:b2:8b:98:d3:19:da:6b:c7:c3:81: 6f:8d:5c:f4:3a:f5:31:30:e4:96:0b:95:77:f4:76: b2:2f:0b:2f:11:8f:9c:61:20:90:e6:5d:af:4d:cf: 2a:65:a7:5b:46:ed:04:86:8d:2e:68:14:d2:36:03: 45:02:4b:f7:e0:37:18:e1:75:b6:43:63:96:ab:ff: ab:e8:c8:a8:39:d0:69:dd:de:c8:87:7b:73:9a:9b: 63:33:43:5b:94:1d:f4:11:10:52:aa:ac:26:82:dc: 25:c7:bb:b3:ab:d0:3a:e1:d6:89:a8:e4:d2:22:75: 1a:34:06:96:97:5f:53:43:24:1f:8b:8a:8f:2f:18: e0:ac:b5:a9:49:9b:f4:79:93:69:6f:58:36:1b:74: e8:11:69:7c:c5:a9:a3:41:20:17:54:db:45:e6:26: ce:aa:d9:d1:cc:31:ef:d0:30:c5:92:49:d1:c7:c9: 66:29:72:a2:b6:93:de:28:7a:88:8d:1f:2e:5b:3d: b4:7f:df:a7:cd:07:21:5b:9a:8c:b4:a9:8a:c0:1c: 0b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CE:FD:93:9C:4E:6C:1F:7B:20:F9:50:69:90:E3:DB:2B:F8:72:CD X509v3 Authority Key Identifier: keyid:00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:cd:a4:a2:79:48:b4:a5:7a:ee:00:12:5c:8b:9f:32:e4:1a: 48:25:f9:53:b0:25:6a:aa:98:21:76:6e:19:1d:d0:4a:2c:3e: ed:4b:49:e4:47:ce:56:fd:26:39:f7:f7:25:f9:40:ce:16:ba: 46:53:db:cd:83:50:84:99:5c:80:8d:31:8a:c6:f0:db:b5:31: 70:1f:ab:fa:20:af:a2:4e:0f:ad:d1:a4:13:32:6c:ea:97:2f: 49:b2:f5:0c:93:b1:c3:6e:05:6f:28:e4:cc:d0:f4:67:a3:d3: 33:78:d6:16:b4:3d:04:70:c2:a7:9b:8d:dc:de:00:6c:f6:9c: 73:8a:ba:92:32:f8:ee:b7:57:1c:25:b6:26:f6:f0:77:fc:20: 82:d0:da:b5:7c:f7:86:16:3e:ae:9b:ee:f4:19:0c:51:ab:21: 4d:8f:18:32:34:17:ca:9f:b1:89:9c:42:9d:8f:50:ed:ca:d4: 97:64:f5:5c:26:c6:d9:6c:81:f0:1d:6f:8b:a8:cb:b6:36:6c: 7b:d0:5e:88:ee:b9:1b:83:bd:aa:ca:6f:ec:d3:7d:ed:9b:58: 86:e2:5e:50:8f:88:38:a6:d3:02:cd:da:fb:92:26:c9:8e:fd: b1:02:09:fe:e5:64:59:99:84:41:9e:7c:b8:3e:6d:44:86:a4: f8:06:0a:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EBUR8Lbzi4mJ4e2sdu1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMDQ2YjQzNDUyNmJmMjgzNmUyNzQ5Y2UwZTM2ZTA4NDQz ZDZiOTEwHhcNMjUxMjIwMTQwMDQ1WhcNMjUxMjIxMTQwMDQ1WjAzMTEwLwYDVQQD EygyN2NlZmQ5MzljNGU2YzFmN2IyMGY5NTA2OTkwZTNkYjJiZjg3MmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN25NhOA7tiyIrgsX5S9qVRb2rqS DpBL6rugUW9utLdQwpTEWrrunSvk+gc9knbUobKLmNMZ2mvHw4FvjVz0OvUxMOSW C5V39HayLwsvEY+cYSCQ5l2vTc8qZadbRu0Eho0uaBTSNgNFAkv34DcY4XW2Q2OW q/+r6MioOdBp3d7Ih3tzmptjM0NblB30ERBSqqwmgtwlx7uzq9A64daJqOTSInUa NAaWl19TQyQfi4qPLxjgrLWpSZv0eZNpb1g2G3ToEWl8xamjQSAXVNtF5ibOqtnR zDHv0DDFkknRx8lmKXKitpPeKHqIjR8uWz20f9+nzQchW5qMtKmKwBwL1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfO/ZOcTmwfeyD5UGmQ49sr+HLNMB8GA1UdIwQY MBaAFAAEa0NFJr8oNuJ0nODjbghEPWuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMzdmOGQtNDEwZC00NTE4LTgwZTYt ZWNkNjcxMjgyYzFmLzEvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kMzdmOGQtNDEwZC00NTE4LTgwZTYtZWNkNjcxMjgyYzFm LzEvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJc2konlI tKV67gASXIufMuQaSCX5U7AlaqqYIXZuGR3QSiw+7UtJ5EfOVv0mOff3JflAzha6 RlPbzYNQhJlcgI0xisbw27UxcB+r+iCvok4PrdGkEzJs6pcvSbL1DJOxw24Fbyjk zND0Z6PTM3jWFrQ9BHDCp5uN3N4AbPacc4q6kjL47rdXHCW2Jvbwd/wggtDatXz3 hhY+rpvu9BkMUashTY8YMjQXyp+xiZxCnY9Q7crUl2T1XCbG2WyB8B1vi6jLtjZs e9BeiO65G4O9qspv7NN97ZtYhuJeUI+IOKbTAs3a+5ImyY79sQIJ/uVkWZmEQZ58 uD5tRIak+AYK2g== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:19 2025 by rpki-client