This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json) Hash identifier: 6N9XeYtVdmXYWCcZFnY+SBBTrMz32XhSJzmFrxhvCuo= Subject key identifier: 5F:B0:22:3B:2B:68:97:4C:61:52:16:2F:AB:90:7C:5A:72:8C:2F:2A Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90 Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090 Certificate serial: 019AF19BB8C73BD5894D544ECBD8AA4E6813 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:45 +0000 Manifest this update: Sat 06 Dec 2025 03:01:45 +0000 Manifest next update: Sun 07 Dec 2025 03:01:45 +0000 Files and hashes: 1: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: lxkeN5kxbiG6n1WDZxv/gI1KC6KJQe0U8+6pp0thymo=) 2: PuRCtZYS1zb-l6-lSbqSBFwnqhM.roa (hash: AbBVF9kyhgAnkvzoIY9J9QbGE309UtyTbrK9vyLj9EM=) 3: sAkyj21t8-IWELVSrcuIx5gPSVk.roa (hash: iR95lFASykLAMl0dgv405uAOE69TMGevQ+/+DeWufdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b8:c7:3b:d5:89:4d:54:4e:cb:d8:aa:4e:68:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090 Validity Not Before: Dec 6 03:01:45 2025 GMT Not After : Dec 7 03:01:45 2025 GMT Subject: CN=5fb0223b2b68974c6152162fab907c5a728c2f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bf:36:f4:bd:da:33:f9:e9:07:f7:92:9d:96: 37:46:6d:de:57:14:d4:8f:82:41:68:db:ed:fc:5f: d7:f0:be:a8:de:c5:c3:52:a4:87:9f:12:02:c7:b7: 5f:75:51:88:d4:32:ef:f6:cd:81:6b:27:e6:6a:12: eb:53:44:ad:0c:4a:23:cc:70:81:5a:df:31:00:11: b2:62:6a:ef:98:12:86:19:0a:bc:92:91:fa:4b:18: e2:e8:7b:1a:d6:f8:57:52:24:54:03:f6:28:19:a9: d4:2e:7d:37:35:e3:e6:9b:34:3c:03:ea:7e:b3:c2: 2d:e0:91:95:18:f9:98:39:eb:4c:65:ad:0e:f7:a9: 09:90:a6:e6:f0:55:9e:ad:38:e0:78:21:3d:04:c8: d0:d5:93:08:e3:a0:47:09:e2:33:06:83:14:02:df: c2:b1:f2:22:b9:88:91:5d:57:c8:64:ca:8c:f1:40: 71:d7:84:56:66:77:40:c8:33:42:35:9c:25:64:65: 3d:69:ae:a9:3d:a2:92:ac:11:bf:40:30:f4:2a:48: 8d:07:1b:64:55:51:a1:21:2d:0f:69:f4:83:24:2b: e1:29:25:9d:28:8d:9a:76:91:0f:73:20:35:db:47: b5:00:ac:20:25:1c:18:54:79:8c:7c:7e:1f:0d:4f: 21:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B0:22:3B:2B:68:97:4C:61:52:16:2F:AB:90:7C:5A:72:8C:2F:2A X509v3 Authority Key Identifier: keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d8:b9:d7:84:12:e5:58:3e:8c:76:fa:96:eb:55:3d:89:6a: 4e:95:83:6e:56:d1:15:7b:bd:57:0f:71:32:f0:34:83:f5:27: 9e:04:c3:3a:19:3f:a0:73:12:6e:c7:f9:3d:8a:7c:2b:e4:f5: 81:7b:7a:e2:f2:80:55:32:1c:fe:ce:39:0d:bb:70:91:67:fc: 4d:68:65:42:fc:1e:8f:97:fa:ad:3c:3a:f3:b1:08:a9:55:d2: 50:ea:58:d0:6b:e2:f7:37:1a:16:de:fb:3f:81:d1:28:af:b9: 8d:c1:84:97:63:13:42:0e:f2:e0:80:6b:0d:67:31:ef:da:48: 54:72:e8:04:14:04:2e:0c:5a:23:2d:d2:05:45:3c:86:8a:bc: 92:2c:b1:ac:ce:f5:c0:e3:e5:ac:84:56:eb:73:00:4e:e8:bf: 68:27:d2:bc:83:f1:d7:43:90:a4:6d:b7:f0:65:89:61:12:63: 8e:b1:06:ea:49:4c:f2:cf:df:91:18:e1:bf:57:8b:68:80:e7: 5e:94:86:03:4e:87:71:a0:75:dc:39:62:59:de:c4:41:6d:9c: 37:75:52:86:f3:ec:c0:ab:7b:6c:5c:60:1d:36:bc:77:ec:f2: 26:8a:62:d6:39:c3:55:51:ff:f3:61:40:5d:fd:be:ed:bc:41: 10:04:3d:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7jHO9WJTVROy9iqTmgTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOTExNzc5Yzc2N2QyMzY0ZTg2ZjRlMjdlZjhjNWZlOWJi MDEwOTAwHhcNMjUxMjA2MDMwMTQ1WhcNMjUxMjA3MDMwMTQ1WjAzMTEwLwYDVQQD Eyg1ZmIwMjIzYjJiNjg5NzRjNjE1MjE2MmZhYjkwN2M1YTcyOGMyZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4b829L3aM/npB/eSnZY3Rm3eVxTU j4JBaNvt/F/X8L6o3sXDUqSHnxICx7dfdVGI1DLv9s2BayfmahLrU0StDEojzHCB Wt8xABGyYmrvmBKGGQq8kpH6Sxji6Hsa1vhXUiRUA/YoGanULn03NePmmzQ8A+p+ s8It4JGVGPmYOetMZa0O96kJkKbm8FWerTjgeCE9BMjQ1ZMI46BHCeIzBoMUAt/C sfIiuYiRXVfIZMqM8UBx14RWZndAyDNCNZwlZGU9aa6pPaKSrBG/QDD0KkiNBxtk VVGhIS0PafSDJCvhKSWdKI2adpEPcyA120e1AKwgJRwYVHmMfH4fDU8hSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+wIjsraJdMYVIWL6uQfFpyjC8qMB8GA1UdIwQY MBaAFACRF3nHZ9I2Tob04n74xf6bsBCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYt NjJjMWIxZmYzYTI2LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYtNjJjMWIxZmYzYTI2 LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANti514QS 5Vg+jHb6lutVPYlqTpWDblbRFXu9Vw9xMvA0g/UnngTDOhk/oHMSbsf5PYp8K+T1 gXt64vKAVTIc/s45DbtwkWf8TWhlQvwej5f6rTw687EIqVXSUOpY0Gvi9zcaFt77 P4HRKK+5jcGEl2MTQg7y4IBrDWcx79pIVHLoBBQELgxaIy3SBUU8hoq8kiyxrM71 wOPlrIRW63MATui/aCfSvIPx10OQpG238GWJYRJjjrEG6klM8s/fkRjhv1eLaIDn XpSGA06HcaB13DliWd7EQW2cN3VShvPswKt7bFxgHTa8d+zyJopi1jnDVVH/82FA Xf2+7bxBEAQ9DA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:49 2025 by rpki-client