This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json) Hash identifier: C7beR2FKcZL9SKyswVXa4S47GmtxIzJ/4owV74OFA/4= Subject key identifier: C8:27:57:FF:DF:60:C5:CC:AA:FD:5A:96:B9:39:29:BC:88:A8:BF:83 Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd Certificate serial: 019B2EFA6AD41996A796196797BF0600A4C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft Manifest number: 0E68 Signing time: Thu 18 Dec 2025 01:02:01 +0000 Manifest this update: Thu 18 Dec 2025 01:02:01 +0000 Manifest next update: Fri 19 Dec 2025 01:02:01 +0000 Files and hashes: 1: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: a07ttyC/LXrzv9Nd56ByZuIQceKs+vGhFSFiHiH7x4c=) 2: epNs1frSSHg0k8RApfvyiS1o3e4.roa (hash: EqfynGitiIuAYCHQvy1uEOFIiGIwRJnEdzdFNRHUcpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:6a:d4:19:96:a7:96:19:67:97:bf:06:00:a4:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd Validity Not Before: Dec 18 01:02:01 2025 GMT Not After : Dec 19 01:02:01 2025 GMT Subject: CN=c82757ffdf60c5ccaafd5a96b93929bc88a8bf83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6c:75:70:75:3f:66:77:a2:0a:7d:11:8f:52: 7d:21:92:76:7a:31:19:99:9e:96:9d:37:59:19:56: 4d:18:2a:7f:d6:a0:1f:cd:f3:1a:92:84:4a:19:7b: 6b:0f:fe:ce:bb:93:30:34:81:4d:b1:41:22:57:c9: f7:73:df:69:96:af:7e:15:da:6b:42:6a:4c:4d:2d: d2:38:72:86:0d:ff:56:7f:64:11:8b:09:6f:04:3e: 90:e0:3b:02:95:e4:85:81:24:4a:aa:09:34:bf:25: 6c:b5:36:ae:b3:18:83:e6:10:f7:54:b2:14:82:20: 7d:62:9c:f7:b5:f0:ef:17:90:d3:74:19:1f:d4:1a: f0:f2:27:65:b2:10:3d:96:31:ff:76:12:4c:b1:ba: 45:aa:f8:58:03:ea:cb:f4:b5:f5:31:fb:15:ad:56: ee:2c:4b:cd:49:27:2e:4d:2c:00:a1:06:61:6a:7d: e0:cb:93:40:ed:b0:d3:3d:59:47:89:a1:de:07:7d: 26:7d:8a:3a:2e:f2:52:d8:da:99:f5:4e:37:2a:81: 79:b7:ea:45:d5:a0:9d:f0:83:c1:13:66:e6:7e:1a: 22:58:db:0c:e8:2e:0d:7a:ea:5a:5f:61:17:7b:96: e1:eb:49:6d:ae:63:49:0c:5e:9d:d6:59:1e:28:47: ad:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:27:57:FF:DF:60:C5:CC:AA:FD:5A:96:B9:39:29:BC:88:A8:BF:83 X509v3 Authority Key Identifier: keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0f:62:8e:77:29:28:99:9d:d7:59:ec:cc:d3:0b:47:22:3b: 3e:9f:8a:da:91:23:6a:3a:d9:a5:ba:6c:1d:cb:2f:7e:8b:29: 44:b6:c3:f5:f0:db:41:8e:8c:43:ab:28:87:5c:da:9a:f1:06: bb:15:57:27:98:15:fa:09:df:19:44:47:24:6f:03:21:f7:5c: 09:19:f3:e1:c7:fa:48:91:d3:44:b6:91:96:d7:4c:08:82:71: de:d2:b4:9b:99:2d:c0:f8:eb:49:5f:c6:09:5d:a5:56:87:f8: 4f:6c:62:5c:9d:c2:c6:dc:31:7c:eb:80:2d:63:71:86:9e:e3: 3d:b9:7f:6d:30:72:77:8f:9d:ad:6f:fb:f7:37:3c:c5:19:cd: 6a:ca:c7:6f:eb:2a:f3:13:96:4f:2c:b2:9f:70:b9:c8:33:bb: e3:fd:e2:07:fd:f3:10:11:c9:8b:ca:2d:0b:a2:88:e7:56:4e: d1:c7:fd:98:c5:b0:08:58:3d:9f:c1:64:59:8a:61:51:56:ff: a2:0f:5a:13:6b:0d:44:79:e4:60:44:08:46:72:c0:5d:56:e3: c1:57:8d:5a:01:6e:a4:9f:02:40:1d:12:1d:66:5d:ef:62:bb: 8e:8f:20:73:63:26:c3:2d:5d:76:40:a7:85:aa:52:6c:58:14: df:b7:c5:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+mrUGZanlhlnl78GAKTDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyM2FkNmM0NDU4ZmU2OWY0NTkxZmFjY2I1NmJkYzMzMWFm NmI0Y2QwHhcNMjUxMjE4MDEwMjAxWhcNMjUxMjE5MDEwMjAxWjAzMTEwLwYDVQQD EyhjODI3NTdmZmRmNjBjNWNjYWFmZDVhOTZiOTM5MjliYzg4YThiZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Gx1cHU/ZneiCn0Rj1J9IZJ2ejEZ mZ6WnTdZGVZNGCp/1qAfzfMakoRKGXtrD/7Ou5MwNIFNsUEiV8n3c99plq9+Fdpr QmpMTS3SOHKGDf9Wf2QRiwlvBD6Q4DsCleSFgSRKqgk0vyVstTausxiD5hD3VLIU giB9Ypz3tfDvF5DTdBkf1Brw8idlshA9ljH/dhJMsbpFqvhYA+rL9LX1MfsVrVbu LEvNSScuTSwAoQZhan3gy5NA7bDTPVlHiaHeB30mfYo6LvJS2NqZ9U43KoF5t+pF 1aCd8IPBE2bmfhoiWNsM6C4NeupaX2EXe5bh60ltrmNJDF6d1lkeKEetVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgnV//fYMXMqv1alrk5KbyIqL+DMB8GA1UdIwQY MBaAFAI61sRFj+afRZH6zLVr3DMa9rTNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQt MjRmMjg3YzlhNWY0LzEvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQtMjRmMjg3YzlhNWY0 LzEvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiw9ijncp KJmd11nszNMLRyI7Pp+K2pEjajrZpbpsHcsvfospRLbD9fDbQY6MQ6soh1zamvEG uxVXJ5gV+gnfGURHJG8DIfdcCRnz4cf6SJHTRLaRltdMCIJx3tK0m5ktwPjrSV/G CV2lVof4T2xiXJ3CxtwxfOuALWNxhp7jPbl/bTByd4+drW/79zc8xRnNasrHb+sq 8xOWTyyyn3C5yDO74/3iB/3zEBHJi8otC6KI51ZO0cf9mMWwCFg9n8FkWYphUVb/ og9aE2sNRHnkYEQIRnLAXVbjwVeNWgFupJ8CQB0SHWZd72K7jo8gc2Mmwy1ddkCn hapSbFgU37fFVw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:43:39 2025 by rpki-client