This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft File: AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json) Hash identifier: sF07JfP673jhlfC7PLg8mJfIUxoTeXHsNcCJy/EZDUA= Subject key identifier: 0E:EA:F2:48:2D:2E:D2:BB:36:B4:43:CD:D4:15:5B:36:DA:08:1B:20 Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86 Certificate issuer: /CN=0241ef4436142506f2659383c16ebda1e29b4f86 Certificate serial: 019AF1D1C83F3006DA3D2E98B55FD536D2D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft Manifest number: 1024 Signing time: Sat 06 Dec 2025 04:00:48 +0000 Manifest this update: Sat 06 Dec 2025 04:00:48 +0000 Manifest next update: Sun 07 Dec 2025 04:00:48 +0000 Files and hashes: 1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: Blyb13LdA47gWYDDuXUPah6tQgayq6tfivkvJ2PXSE0=) 2: NDyhuvBiD7Dcf-VvAcHjeKP4Wls.roa (hash: oeDnEopXVy5MJcNbGxGeEZ1ceng1jmSd304y/xLBjoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c8:3f:30:06:da:3d:2e:98:b5:5f:d5:36:d2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86 Validity Not Before: Dec 6 04:00:48 2025 GMT Not After : Dec 7 04:00:48 2025 GMT Subject: CN=0eeaf2482d2ed2bb36b443cdd4155b36da081b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:df:63:76:b6:ab:d5:4f:11:16:e5:01:b3:15: 32:fb:c6:05:15:7c:80:50:16:d7:4a:3b:8a:35:11: 46:7e:4f:27:5b:d9:25:58:1a:8b:cf:56:d6:a1:43: c6:6d:32:93:1f:43:e9:c1:e0:e4:f4:d3:32:0c:4d: 75:3c:ec:ef:4f:cb:ca:5f:41:bf:37:49:e6:dd:f4: a2:da:a4:43:cc:e8:b9:6d:06:ae:5d:f0:3e:98:5b: 48:e4:5a:cd:9d:51:d4:b7:ff:94:c0:04:96:e4:83: 06:c0:9a:a8:55:d8:9a:76:24:02:e7:e5:28:a4:ae: 76:d1:f6:34:a5:62:9b:1d:e8:47:75:e3:67:f8:9b: 0a:22:de:a2:ea:29:ff:91:67:c4:84:18:29:2f:9e: 6c:78:0f:17:de:a3:f0:53:ed:5f:6f:d9:de:e9:07: ac:6a:e4:55:a3:a0:f8:48:b7:45:bf:71:3d:54:4a: 59:15:cf:56:dd:55:77:d9:0b:ef:d6:45:e5:a8:22: f7:b2:66:35:db:3f:5b:f5:97:99:94:25:f8:c1:3c: 8b:c6:ee:d1:cd:9f:cc:0e:87:a7:5f:87:60:2b:32: 89:a6:03:13:5d:3d:0f:77:2d:a8:f9:fe:1a:f6:8c: 03:4b:bb:dd:87:1a:36:69:72:f4:0d:6b:cc:20:e2: ab:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EA:F2:48:2D:2E:D2:BB:36:B4:43:CD:D4:15:5B:36:DA:08:1B:20 X509v3 Authority Key Identifier: keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b3:28:ba:0e:c0:79:86:02:02:df:6d:26:c1:cc:36:03:b1: 8e:5f:22:57:98:97:b0:08:33:06:96:2d:1e:36:1d:37:40:b9: cd:a2:90:1f:66:c0:a8:d5:1b:c4:34:f0:92:30:59:a0:94:93: 9b:ea:11:cf:b4:55:0f:bd:ab:e6:29:20:7a:60:50:39:09:3b: f9:e5:47:9b:2b:a3:fd:10:1d:bf:e8:8e:8b:cb:ff:ac:49:29: eb:09:e6:6a:4a:2b:11:2c:77:16:11:10:7a:b9:f2:5f:8e:f3: 3c:91:27:86:0a:7e:e5:e5:db:c2:4e:af:95:27:3e:30:f5:a3: 2e:c4:73:a4:46:5c:85:38:04:e7:c3:55:72:9b:86:d4:fc:6f: 29:d8:6b:91:b5:c7:d0:22:71:6e:59:86:4b:3d:a5:a1:a8:47: 10:d2:07:74:de:de:01:cf:8f:77:97:cd:b0:49:e6:eb:a0:16: 37:51:76:a4:b3:9f:bd:c5:99:88:f3:49:c1:27:9b:b6:d6:a8: b6:f9:52:03:90:f2:c6:49:3c:31:ae:24:17:33:1f:d5:ad:59: 62:33:9a:7e:7e:4c:23:12:78:f8:b3:c8:fd:8a:e5:27:bf:3e: 07:bd:9e:71:0d:10:41:4f:e4:f6:53:56:6c:bc:1f:90:ec:05: 35:1f:89:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cg/MAbaPS6YtV/VNtLQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNDFlZjQ0MzYxNDI1MDZmMjY1OTM4M2MxNmViZGExZTI5 YjRmODYwHhcNMjUxMjA2MDQwMDQ4WhcNMjUxMjA3MDQwMDQ4WjAzMTEwLwYDVQQD EygwZWVhZjI0ODJkMmVkMmJiMzZiNDQzY2RkNDE1NWIzNmRhMDgxYjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd9jdrar1U8RFuUBsxUy+8YFFXyA UBbXSjuKNRFGfk8nW9klWBqLz1bWoUPGbTKTH0PpweDk9NMyDE11POzvT8vKX0G/ N0nm3fSi2qRDzOi5bQauXfA+mFtI5FrNnVHUt/+UwASW5IMGwJqoVdiadiQC5+Uo pK520fY0pWKbHehHdeNn+JsKIt6i6in/kWfEhBgpL55seA8X3qPwU+1fb9ne6Qes auRVo6D4SLdFv3E9VEpZFc9W3VV32Qvv1kXlqCL3smY12z9b9ZeZlCX4wTyLxu7R zZ/MDoenX4dgKzKJpgMTXT0Pdy2o+f4a9owDS7vdhxo2aXL0DWvMIOKrxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7q8kgtLtK7NrRDzdQVWzbaCBsgMB8GA1UdIwQY MBaAFAJB70Q2FCUG8mWTg8FuvaHim0+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZWUyMDItYjliMy00N2YwLThjOWEt OWZkZjRjMTVmOWE2LzEvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85ZWUyMDItYjliMy00N2YwLThjOWEtOWZkZjRjMTVmOWE2 LzEvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrMoug7A eYYCAt9tJsHMNgOxjl8iV5iXsAgzBpYtHjYdN0C5zaKQH2bAqNUbxDTwkjBZoJST m+oRz7RVD72r5ikgemBQOQk7+eVHmyuj/RAdv+iOi8v/rEkp6wnmakorESx3FhEQ ernyX47zPJEnhgp+5eXbwk6vlSc+MPWjLsRzpEZchTgE58NVcpuG1PxvKdhrkbXH 0CJxblmGSz2loahHENIHdN7eAc+Pd5fNsEnm66AWN1F2pLOfvcWZiPNJwSebttao tvlSA5Dyxkk8Ma4kFzMf1a1ZYjOafn5MIxJ4+LPI/YrlJ78+B72ecQ0QQU/k9lNW bLwfkOwFNR+JSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:04:27 2025 by rpki-client