This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft File: AYJcep4nAba6NnDQjSoQqeoV0-M.mft (raw, json) Hash identifier: 8m7Q84VgxJWgtLxGAOt8/spZscWzE9DYDsCcLB5Ye5s= Subject key identifier: 14:6C:00:FA:24:89:21:EB:84:33:48:F0:AF:61:65:D9:7D:13:37:18 Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3 Certificate issuer: /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3 Certificate serial: 019AF389B75ABF98D8B6D560A14F188DEA2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft Manifest number: 08A9 Signing time: Sat 06 Dec 2025 12:01:20 +0000 Manifest this update: Sat 06 Dec 2025 12:01:20 +0000 Manifest next update: Sun 07 Dec 2025 12:01:20 +0000 Files and hashes: 1: AYJcep4nAba6NnDQjSoQqeoV0-M.crl (hash: yHyktDCyc89PeZqlkUo0Jn/EdRcVsyClf/FtgUDNSCY=) 2: BFnGMJbw_FyqQDvzEvSvzgyfC8c.roa (hash: Z0qcTwZhrvNxXQZpuNqxicC23C3Fi6C39Y2LCY//Cvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:b7:5a:bf:98:d8:b6:d5:60:a1:4f:18:8d:ea:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3 Validity Not Before: Dec 6 12:01:20 2025 GMT Not After : Dec 7 12:01:20 2025 GMT Subject: CN=146c00fa248921eb843348f0af6165d97d133718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:c7:a9:19:f7:3b:9b:98:91:64:34:dc:7d: 8c:26:fe:25:9f:9f:bf:88:ca:82:70:31:6a:d2:bc: be:62:07:55:b0:28:f1:0f:b1:14:2f:c2:fb:58:d8: 94:b9:9e:37:ad:eb:10:a1:e5:b1:d4:42:26:85:1b: 58:c4:6d:fe:29:8a:d3:b2:47:52:b4:9a:ae:68:6b: ec:a0:25:20:d8:31:b6:46:69:88:34:15:f0:b3:63: 66:b0:38:ea:4d:f8:44:e4:21:6e:8f:84:d5:81:1a: ac:0d:6d:69:50:e3:fc:ae:91:da:c5:ea:03:5d:7f: f0:95:f3:01:b2:0a:f1:91:01:45:3d:8e:ac:e3:38: 24:68:a9:4c:b9:fe:69:1d:fc:6d:59:e2:9e:24:5f: b9:0a:6a:9a:d3:35:46:2a:dd:14:da:e9:ed:39:0a: b8:81:3e:3f:49:b7:e8:81:89:68:64:7b:30:6d:12: 99:68:cc:1b:20:5d:53:a8:75:df:89:be:00:65:82: 73:77:09:19:74:fd:bf:82:52:53:a1:4f:a1:e0:da: 24:7b:ee:a4:a9:4c:66:36:94:56:2a:34:43:7c:c6: 6a:0f:46:68:32:36:4e:da:5c:d7:77:2c:59:95:73: be:81:28:7f:cf:b5:c3:04:71:66:db:ef:d1:f6:bd: 3d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6C:00:FA:24:89:21:EB:84:33:48:F0:AF:61:65:D9:7D:13:37:18 X509v3 Authority Key Identifier: keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:49:0f:8d:6b:df:b1:41:bf:fb:1a:25:02:44:0f:89:55:1b: f6:3f:51:d5:bf:47:5d:80:5f:9e:50:ba:a8:ac:81:ed:50:e4: dd:52:74:fa:50:4f:aa:aa:17:4e:6c:54:58:41:bb:f8:d6:0e: c5:b5:2e:3c:b8:bc:aa:e4:09:de:0e:9e:4a:b2:1d:91:8f:d6: 2e:a9:b7:77:83:b5:55:30:c7:9f:ce:42:96:8a:7f:0d:6e:dc: 1d:0e:a9:9e:fb:b7:91:5b:01:1c:1a:8e:86:34:e0:1f:62:27: 6a:21:5c:47:dc:dd:10:7f:35:25:0e:06:54:de:d3:64:d6:4a: e2:30:54:a3:db:46:bd:32:9f:28:b6:c8:db:49:cb:f0:d2:a4: 09:e5:92:ae:d4:38:71:d8:55:ea:5e:af:b1:a2:7f:04:ef:83: 00:15:52:f1:7b:c9:d7:a0:a8:c8:c3:60:7a:93:b4:5b:5d:ca: b1:0b:05:83:6f:3d:1b:7b:fa:d7:03:a1:f8:e5:c2:c1:93:5f: 11:49:ce:a4:d3:3f:aa:52:37:cd:d9:78:88:04:68:6c:17:4c: e6:a2:82:a6:a5:06:7e:91:81:5b:58:1a:c4:c7:c4:50:f0:bc: d8:ab:ea:be:08:04:4e:3d:59:79:e8:a0:74:54:e3:c3:5e:8a: c7:84:80:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibdav5jYttVgoU8YjeotMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxODI1YzdhOWUyNzAxYjZiYTM2NzBkMDhkMmExMGE5ZWEx NWQzZTMwHhcNMjUxMjA2MTIwMTIwWhcNMjUxMjA3MTIwMTIwWjAzMTEwLwYDVQQD EygxNDZjMDBmYTI0ODkyMWViODQzMzQ4ZjBhZjYxNjVkOTdkMTMzNzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcvHqRn3O5uYkWQ03H2MJv4ln5+/ iMqCcDFq0ry+YgdVsCjxD7EUL8L7WNiUuZ43resQoeWx1EImhRtYxG3+KYrTskdS tJquaGvsoCUg2DG2RmmINBXws2NmsDjqTfhE5CFuj4TVgRqsDW1pUOP8rpHaxeoD XX/wlfMBsgrxkQFFPY6s4zgkaKlMuf5pHfxtWeKeJF+5Cmqa0zVGKt0U2untOQq4 gT4/SbfogYloZHswbRKZaMwbIF1TqHXfib4AZYJzdwkZdP2/glJToU+h4Noke+6k qUxmNpRWKjRDfMZqD0ZoMjZO2lzXdyxZlXO+gSh/z7XDBHFm2+/R9r098QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRsAPokiSHrhDNI8K9hZdl9EzcYMB8GA1UdIwQY MBaAFAGCXHqeJwG2ujZw0I0qEKnqFdPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVlKY2VwNG5BYmE2Tm5EUWpTb1FxZW9WMC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWFjMDMtZGM2YS00MGMwLTgyY2It OGYxMGQ1Yjk2ZmQ0LzEvQVlKY2VwNG5BYmE2Tm5EUWpTb1FxZW9WMC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83OWFjMDMtZGM2YS00MGMwLTgyY2ItOGYxMGQ1Yjk2ZmQ0 LzEvQVlKY2VwNG5BYmE2Tm5EUWpTb1FxZW9WMC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0kPjWvf sUG/+xolAkQPiVUb9j9R1b9HXYBfnlC6qKyB7VDk3VJ0+lBPqqoXTmxUWEG7+NYO xbUuPLi8quQJ3g6eSrIdkY/WLqm3d4O1VTDHn85Clop/DW7cHQ6pnvu3kVsBHBqO hjTgH2InaiFcR9zdEH81JQ4GVN7TZNZK4jBUo9tGvTKfKLbI20nL8NKkCeWSrtQ4 cdhV6l6vsaJ/BO+DABVS8XvJ16CoyMNgepO0W13KsQsFg289G3v61wOh+OXCwZNf EUnOpNM/qlI3zdl4iARobBdM5qKCpqUGfpGBW1gaxMfEUPC82KvqvggETj1Zeeig dFTjw16Kx4SAxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:20 2025 by rpki-client