This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json) Hash identifier: CN3E48pzeF2axX7ciWqYnAd71vBWnIcQdpBhgwCq/8I= Subject key identifier: 94:BD:D2:EA:BB:8B:2F:DE:27:39:9A:EF:B9:2C:50:F2:02:9C:7E:0A Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96 Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996 Certificate serial: 019B40C898EAE2A54C7BE2D0670C56D205BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft Manifest number: 11C4 Signing time: Sun 21 Dec 2025 12:00:46 +0000 Manifest this update: Sun 21 Dec 2025 12:00:46 +0000 Manifest next update: Mon 22 Dec 2025 12:00:46 +0000 Files and hashes: 1: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: woHvla+Dy8wBNCIISKcNVsWBOcBF3Qa35cA8ahYpMGw=) 2: wg8apK3BDTweN5QY23srhQ2Ha3w.roa (hash: DjFhm8ALq6AqJb+G3kbd5fS8BkGacsBJVQ0HGsFeBZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:98:ea:e2:a5:4c:7b:e2:d0:67:0c:56:d2:05:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996 Validity Not Before: Dec 21 12:00:46 2025 GMT Not After : Dec 22 12:00:46 2025 GMT Subject: CN=94bdd2eabb8b2fde27399aefb92c50f2029c7e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3f:23:b5:0e:0f:14:eb:6f:fc:de:35:fc:4b: 6a:ff:fb:8b:ca:5f:2c:52:db:fc:29:bd:24:44:b0: f6:af:6f:18:4a:11:f7:ff:ca:07:e1:03:56:8f:a1: a5:38:0c:41:92:c9:c6:be:bc:3f:21:7d:78:2c:68: c4:d7:c1:4b:dc:85:5d:f6:49:a4:12:0e:fe:55:5f: 25:2e:f1:7a:70:56:22:a5:fc:e4:c7:ca:07:2c:37: bb:3f:8c:3b:9c:97:79:c0:ba:87:1b:7a:7b:71:b0: 92:c7:28:23:a4:01:a1:5f:79:fa:2f:f1:ee:d6:8b: 78:37:38:53:ed:6d:4a:24:00:90:74:7d:71:30:2d: 72:39:ed:a1:89:e3:80:ef:96:71:d9:4c:cd:6b:d9: 05:81:35:5f:f0:83:39:0c:ed:43:17:f9:91:13:6b: 78:c0:7a:7c:3e:4f:63:5b:ac:76:32:94:d0:c8:52: 60:69:c9:84:e5:89:98:b7:8d:45:7c:50:ab:86:7b: cc:37:c5:59:64:9a:0f:32:02:d4:e4:d9:6b:2a:a6: 01:78:73:6a:d4:74:06:bd:94:99:e0:e5:ba:40:0e: fa:04:77:15:47:66:57:60:9d:b9:08:69:54:84:56: f1:07:08:d4:f7:c6:99:61:59:55:96:14:81:97:80: 59:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BD:D2:EA:BB:8B:2F:DE:27:39:9A:EF:B9:2C:50:F2:02:9C:7E:0A X509v3 Authority Key Identifier: keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:05:61:6b:ea:0b:9e:8b:f9:ca:16:7f:6d:9e:61:e0:ff:2e: f1:bd:20:db:79:a8:6f:e2:35:9f:67:71:09:88:0f:59:fa:e9: 02:61:98:b4:b5:f5:61:f4:e3:f6:75:69:fe:8b:87:e6:fa:b6: 8c:ae:01:b4:f6:86:2e:99:3c:30:49:df:9d:5f:2d:2f:90:19: 91:de:f1:3b:43:c9:c4:de:18:2a:8a:ab:a1:2b:07:a1:93:b0: 39:1b:4e:83:03:2e:ca:b5:08:53:fd:f8:85:34:8e:9e:6d:3d: dc:08:a0:43:08:32:bf:c3:0d:9c:c1:16:05:6f:26:3c:5c:87: ae:43:c4:16:53:68:8e:5b:25:0b:97:77:7e:0a:09:a8:d4:c0: 9d:77:cf:98:da:55:5f:10:98:99:db:65:3a:ad:43:b5:d0:ce: 39:96:4a:ae:17:98:23:b1:d4:ad:d6:0c:56:05:54:e1:e4:c8: 06:89:3c:67:15:74:0d:24:e3:6c:3e:96:8a:a2:0a:7b:e8:01: 57:d0:96:41:e0:75:9d:eb:61:be:ef:bd:56:b4:cf:cf:f3:19: fa:0b:99:31:fd:fa:54:20:5f:54:c0:65:2d:9e:97:3f:83:a2: ae:83:b3:c4:35:45:47:f0:19:b5:1e:ba:1f:db:af:2c:19:3f: d4:77:6d:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyJjq4qVMe+LQZwxW0gW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NDE3ZGE4YWE0ZmUwYjhjZmYxODg0MTJlZWRkYTYzY2Jk Y2Y5OTYwHhcNMjUxMjIxMTIwMDQ2WhcNMjUxMjIyMTIwMDQ2WjAzMTEwLwYDVQQD Eyg5NGJkZDJlYWJiOGIyZmRlMjczOTlhZWZiOTJjNTBmMjAyOWM3ZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T8jtQ4PFOtv/N41/Etq//uLyl8s Utv8Kb0kRLD2r28YShH3/8oH4QNWj6GlOAxBksnGvrw/IX14LGjE18FL3IVd9kmk Eg7+VV8lLvF6cFYipfzkx8oHLDe7P4w7nJd5wLqHG3p7cbCSxygjpAGhX3n6L/Hu 1ot4NzhT7W1KJACQdH1xMC1yOe2hieOA75Zx2UzNa9kFgTVf8IM5DO1DF/mRE2t4 wHp8Pk9jW6x2MpTQyFJgacmE5YmYt41FfFCrhnvMN8VZZJoPMgLU5NlrKqYBeHNq 1HQGvZSZ4OW6QA76BHcVR2ZXYJ25CGlUhFbxBwjU98aZYVlVlhSBl4BZXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJS90uq7iy/eJzma77ksUPICnH4KMB8GA1UdIwQY MBaAFGhBfaiqT+C4z/GIQS7t2mPL3PmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYt NGQ1MzdjZjAxODA5LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYtNGQ1MzdjZjAxODA5 LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvwVha+oL nov5yhZ/bZ5h4P8u8b0g23mob+I1n2dxCYgPWfrpAmGYtLX1YfTj9nVp/ouH5vq2 jK4BtPaGLpk8MEnfnV8tL5AZkd7xO0PJxN4YKoqroSsHoZOwORtOgwMuyrUIU/34 hTSOnm093AigQwgyv8MNnMEWBW8mPFyHrkPEFlNojlslC5d3fgoJqNTAnXfPmNpV XxCYmdtlOq1DtdDOOZZKrheYI7HUrdYMVgVU4eTIBok8ZxV0DSTjbD6WiqIKe+gB V9CWQeB1nethvu+9VrTPz/MZ+guZMf36VCBfVMBlLZ6XP4OiroOzxDVFR/AZtR66 H9uvLBk/1Hdt0w== -----END CERTIFICATE-----Generated at Sun Dec 21 22:27:33 2025 by rpki-client