This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft File: AhtowZzVXWul-GX7DdDW-MnZ49o.mft (raw, json) Hash identifier: ZAN2koXRp/rrhc/xeM/VBueY99/zl0dFMDJRpy1Gews= Subject key identifier: EC:C9:50:EC:85:D3:16:87:3D:02:52:A7:52:FB:32:33:02:35:D6:68 Authority key identifier: 02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA Certificate issuer: /CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da Certificate serial: 019AF12D033703E3F8DA1AA498667171E1C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft Manifest number: 0215 Signing time: Sat 06 Dec 2025 01:00:50 +0000 Manifest this update: Sat 06 Dec 2025 01:00:50 +0000 Manifest next update: Sun 07 Dec 2025 01:00:50 +0000 Files and hashes: 1: AhtowZzVXWul-GX7DdDW-MnZ49o.crl (hash: 9EydqT+cwBPMTDEbOjLXfY6xfqE8w2sFK2ZGnVZ3MMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:03:37:03:e3:f8:da:1a:a4:98:66:71:71:e1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da Validity Not Before: Dec 6 01:00:50 2025 GMT Not After : Dec 7 01:00:50 2025 GMT Subject: CN=ecc950ec85d316873d0252a752fb32330235d668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:eb:eb:20:c0:7c:8e:d4:62:73:d8:29:02:61: 82:0a:a2:42:ff:f6:be:91:ca:21:df:f5:8a:24:c9: b4:47:93:78:be:d3:18:3f:e5:dc:25:17:1e:2b:74: 59:67:2b:dd:1b:fb:d7:72:98:60:be:38:c1:fa:af: ca:41:43:14:dc:bc:de:e4:4e:02:07:74:d3:3a:3e: 1f:87:f9:48:d7:7c:83:5a:d8:f6:28:94:bc:48:2f: bf:52:5d:92:72:6c:5f:7c:76:f9:90:b0:19:f1:59: e9:fd:6f:94:8f:cc:b9:c5:30:d9:e6:b2:41:7d:0b: 67:a2:be:ed:41:90:d3:bd:06:81:1f:f0:6a:27:6d: 17:5c:d5:89:4a:87:be:17:c7:93:5b:67:72:36:a7: a5:79:d4:24:8c:48:f6:4a:84:de:cf:0c:ac:35:7c: ff:ad:2e:08:bc:73:c5:75:92:3e:0c:1f:37:a5:dd: 59:e9:36:7f:3f:3b:47:4a:f9:80:52:54:58:2f:da: 45:86:5a:c2:e2:2c:b7:01:b4:ad:d3:dd:18:19:01: 1a:50:ec:84:76:12:b9:c0:fc:62:d8:b4:ef:f3:15: 98:ac:ba:47:ab:5d:f8:82:59:3f:f2:fa:6b:fe:6f: d5:7c:aa:fc:e6:0f:12:15:90:ac:55:b1:53:8a:cb: 6a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C9:50:EC:85:D3:16:87:3D:02:52:A7:52:FB:32:33:02:35:D6:68 X509v3 Authority Key Identifier: keyid:02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:77:76:17:75:b6:ef:85:bc:0c:81:da:ec:60:b9:b4:ff:e2: 4a:a8:72:36:4d:a3:1f:69:34:51:bf:54:5c:94:97:52:cd:0a: 95:16:a5:fd:2e:34:3d:51:b9:00:30:8f:64:86:6b:a6:78:9a: f9:55:af:7b:a4:8c:b5:2a:55:04:6f:e8:e4:d4:86:56:5d:1f: cc:2a:d4:37:32:a0:3a:db:59:06:8f:54:98:de:f8:fb:52:22: ad:84:42:69:0e:84:9c:17:1f:a9:83:0a:cc:29:1c:26:a8:5a: 32:ce:0f:e8:cb:19:6d:51:ab:e2:f5:99:ca:a8:33:1e:fe:28: 00:e1:16:5e:8e:47:4e:33:30:05:96:71:6f:a2:c7:93:66:eb: 53:c2:74:9f:67:a1:88:45:20:45:15:c5:04:5c:5f:ec:8f:0c: 2e:1b:d0:4d:41:88:a4:d4:24:8a:fd:7f:31:c7:79:cd:09:57: 33:ba:74:c3:0f:77:9f:98:d9:55:fa:21:2e:31:d9:79:78:c7: 0d:d4:02:c9:15:52:2c:6b:b1:19:29:6b:dc:39:d0:94:c1:ff: f2:3a:a2:12:54:c8:2b:88:8b:48:17:79:b3:c6:e6:a3:e2:fc: 4b:06:aa:73:be:fb:51:90:72:2c:e1:24:ba:75:1e:b1:1e:55: 44:62:c4:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQM3A+P42hqkmGZxceHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMWI2OGMxOWNkNTVkNmJhNWY4NjVmYjBkZDBkNmY4Yzlk OWUzZGEwHhcNMjUxMjA2MDEwMDUwWhcNMjUxMjA3MDEwMDUwWjAzMTEwLwYDVQQD EyhlY2M5NTBlYzg1ZDMxNjg3M2QwMjUyYTc1MmZiMzIzMzAyMzVkNjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uvrIMB8jtRic9gpAmGCCqJC//a+ kcoh3/WKJMm0R5N4vtMYP+XcJRceK3RZZyvdG/vXcphgvjjB+q/KQUMU3Lze5E4C B3TTOj4fh/lI13yDWtj2KJS8SC+/Ul2ScmxffHb5kLAZ8Vnp/W+Uj8y5xTDZ5rJB fQtnor7tQZDTvQaBH/BqJ20XXNWJSoe+F8eTW2dyNqeledQkjEj2SoTezwysNXz/ rS4IvHPFdZI+DB83pd1Z6TZ/PztHSvmAUlRYL9pFhlrC4iy3AbSt090YGQEaUOyE dhK5wPxi2LTv8xWYrLpHq134glk/8vpr/m/VfKr85g8SFZCsVbFTistqnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzJUOyF0xaHPQJSp1L7MjMCNdZoMB8GA1UdIwQY MBaAFAIbaMGc1V1rpfhl+w3Q1vjJ2ePaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWh0b3daelZYV3VsLUdYN0RkRFctTW5aNDlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85YzYxNjctZmY5ZC00NTFiLTg0ZWIt Nzc3MGU3OTA3MjBmLzEvQWh0b3daelZYV3VsLUdYN0RkRFctTW5aNDlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi85YzYxNjctZmY5ZC00NTFiLTg0ZWItNzc3MGU3OTA3MjBm LzEvQWh0b3daelZYV3VsLUdYN0RkRFctTW5aNDlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAand2F3W2 74W8DIHa7GC5tP/iSqhyNk2jH2k0Ub9UXJSXUs0KlRal/S40PVG5ADCPZIZrpnia +VWve6SMtSpVBG/o5NSGVl0fzCrUNzKgOttZBo9UmN74+1IirYRCaQ6EnBcfqYMK zCkcJqhaMs4P6MsZbVGr4vWZyqgzHv4oAOEWXo5HTjMwBZZxb6LHk2brU8J0n2eh iEUgRRXFBFxf7I8MLhvQTUGIpNQkiv1/Mcd5zQlXM7p0ww93n5jZVfohLjHZeXjH DdQCyRVSLGuxGSlr3DnQlMH/8jqiElTIK4iLSBd5s8bmo+L8Swaqc777UZByLOEk unUesR5VRGLEbg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:27 2025 by rpki-client