This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json) Hash identifier: A5r6Gq3k26pdDwI4JV2OjvZzkLr1++Jt9MCnMQrNuus= Subject key identifier: 94:13:47:D5:00:E4:E2:DE:C9:C5:20:CC:77:0E:14:9C:FA:CE:EF:DF Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90 Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90 Certificate serial: 019AF6F82CC737084DCF56A82DB7E5EB92AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft Manifest number: 03DC Signing time: Sun 07 Dec 2025 04:00:50 +0000 Manifest this update: Sun 07 Dec 2025 04:00:50 +0000 Manifest next update: Mon 08 Dec 2025 04:00:50 +0000 Files and hashes: 1: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: SMxQr9ufEVBj3ub3vZAujoZouB1I3pTBzVuIeMloUWQ=) 2: PinfW_YHyw5uymC7Qg5_e_ihs1A.roa (hash: pxez1kR2olajgq0bPf5GWwA/2mx0CN85t2SDcizNJFk=) 3: q6pqSEbcTlqmRayyanV7tPyo7fs.roa (hash: EC2KtAOMCahopm9kPSQwxVqEk8+Lm5s50v5gQFz0rN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:2c:c7:37:08:4d:cf:56:a8:2d:b7:e5:eb:92:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90 Validity Not Before: Dec 7 04:00:50 2025 GMT Not After : Dec 8 04:00:50 2025 GMT Subject: CN=941347d500e4e2dec9c520cc770e149cfaceefdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:d4:4a:45:ac:30:e7:1c:ab:75:91:49:32: 5a:2c:ff:c8:b0:f1:17:f2:20:b1:15:6b:3a:6f:fa: e1:53:8e:eb:f3:b3:43:a9:d0:cf:8f:89:c9:32:18: e5:c0:2e:84:5a:c5:f2:e3:52:b6:e9:72:24:3a:ff: e9:8a:ba:f5:eb:4a:2b:f5:f3:fb:bc:80:6a:9e:f7: 32:a0:ef:36:e5:06:91:52:5f:13:e6:5e:91:0b:d0: bc:b9:19:e5:4a:e4:5c:09:fe:ed:8d:5e:47:e7:62: 78:0a:34:4c:d4:d8:a1:f5:4a:72:49:94:68:a0:1b: 6c:72:72:4b:d7:49:8e:c5:29:e2:fb:cc:82:bb:11: 32:10:e8:05:b8:68:79:29:3a:9f:c4:e6:e5:9e:d0: 62:bd:50:87:c9:9b:45:5f:8b:c5:0a:cb:cb:7a:9d: 7e:da:4d:49:2c:6e:9d:9c:7e:44:92:83:d4:b3:6f: 26:9a:0f:11:c0:2a:1d:c4:2a:e2:2f:ca:5f:92:60: 90:fc:d2:73:e3:0c:22:ba:a0:71:de:09:b1:63:6b: 86:ad:73:c1:61:31:c6:91:87:e7:3b:92:39:70:d8: 42:0e:7e:f0:7f:40:09:81:b9:dd:73:9d:96:af:d6: e5:92:e6:4f:0d:68:60:28:4a:47:bf:50:76:b2:51: 3e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:13:47:D5:00:E4:E2:DE:C9:C5:20:CC:77:0E:14:9C:FA:CE:EF:DF X509v3 Authority Key Identifier: keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:55:ab:fb:3d:92:f9:f4:c9:c4:a2:87:9e:28:08:e3:c2:8d: 33:29:1e:d7:45:0a:cd:47:e2:4f:a5:79:57:88:fe:2b:38:50: 38:ec:cb:2f:5a:8b:e7:74:c0:8a:3a:bc:6b:34:09:d1:45:8e: 1e:f7:8b:59:69:db:6f:6f:b6:f7:89:eb:ff:bf:99:c2:65:b7: ef:79:64:65:d6:2d:dd:e2:b4:15:5c:c3:3a:e0:fe:de:4f:16: a0:fd:bb:b4:bc:a0:70:21:eb:b2:c2:6f:f6:b9:52:e6:f9:95: 15:15:1d:1a:fd:d5:d5:40:d8:a6:81:4c:4e:49:10:17:fd:b4: e6:0d:c8:f3:34:ed:9a:7e:e7:73:30:80:99:6f:5c:80:5b:c5: d5:84:37:48:ef:ea:2e:4f:46:ad:0d:4c:24:e5:d4:cd:a9:e9: 91:95:12:38:69:85:03:f5:33:4f:a0:b8:d2:5c:c9:a7:40:17: c6:1b:9f:17:08:7c:86:f7:6a:a7:7e:7d:ed:a2:97:66:72:e8: 8a:e4:ab:df:2b:a8:4b:5e:7f:5d:13:9f:4d:b5:47:ba:52:5b: 2c:f5:50:b6:9a:95:b1:da:47:82:c0:72:be:4a:b8:51:88:93: 06:be:90:25:fe:bd:bf:6b:87:82:7d:44:85:f7:44:4b:a9:35: 9f:f7:da:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+CzHNwhNz1aoLbfl65KtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNmQ1MTFjZTNhZjkwYzRkNjAxYzdjY2Y4MzYwNTIzNzEz ZTJjOTAwHhcNMjUxMjA3MDQwMDUwWhcNMjUxMjA4MDQwMDUwWjAzMTEwLwYDVQQD Eyg5NDEzNDdkNTAwZTRlMmRlYzljNTIwY2M3NzBlMTQ5Y2ZhY2VlZmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqTUSkWsMOccq3WRSTJaLP/IsPEX 8iCxFWs6b/rhU47r87NDqdDPj4nJMhjlwC6EWsXy41K26XIkOv/pirr160or9fP7 vIBqnvcyoO825QaRUl8T5l6RC9C8uRnlSuRcCf7tjV5H52J4CjRM1Nih9UpySZRo oBtscnJL10mOxSni+8yCuxEyEOgFuGh5KTqfxOblntBivVCHyZtFX4vFCsvLep1+ 2k1JLG6dnH5EkoPUs28mmg8RwCodxCriL8pfkmCQ/NJz4wwiuqBx3gmxY2uGrXPB YTHGkYfnO5I5cNhCDn7wf0AJgbndc52Wr9blkuZPDWhgKEpHv1B2slE+xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQTR9UA5OLeycUgzHcOFJz6zu/fMB8GA1UdIwQY MBaAFAJtURzjr5DE1gHHzPg2BSNxPiyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMGM0MDItZTA5ZS00YzY5LWFjYzkt ODRkYTYyMDY2ZThhLzEvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iMGM0MDItZTA5ZS00YzY5LWFjYzktODRkYTYyMDY2ZThh LzEvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuVWr+z2S +fTJxKKHnigI48KNMyke10UKzUfiT6V5V4j+KzhQOOzLL1qL53TAijq8azQJ0UWO HveLWWnbb2+294nr/7+ZwmW373lkZdYt3eK0FVzDOuD+3k8WoP27tLygcCHrssJv 9rlS5vmVFRUdGv3V1UDYpoFMTkkQF/205g3I8zTtmn7nczCAmW9cgFvF1YQ3SO/q Lk9GrQ1MJOXUzanpkZUSOGmFA/UzT6C40lzJp0AXxhufFwh8hvdqp3597aKXZnLo iuSr3yuoS15/XROfTbVHulJbLPVQtpqVsdpHgsByvkq4UYiTBr6QJf69v2uHgn1E hfdES6k1n/farg== -----END CERTIFICATE-----Generated at Sun Dec 7 11:13:06 2025 by rpki-client