This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft File: ajqLdK1O1nN5ep9rd0nCI0VpedA.mft (raw, json) Hash identifier: lDp3AMW/RJ+LEpNQg07Jv4KsoAP+rVuudLNqTGQcOPg= Subject key identifier: A9:B6:E8:02:64:85:6E:00:E4:FF:E3:7D:01:29:62:7C:8A:B4:73:F0 Authority key identifier: 6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0 Certificate issuer: /CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0 Certificate serial: 019AF50995142711FD1EBED2DC3CB9E0C7C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft Manifest number: 1626 Signing time: Sat 06 Dec 2025 19:00:37 +0000 Manifest this update: Sat 06 Dec 2025 19:00:37 +0000 Manifest next update: Sun 07 Dec 2025 19:00:37 +0000 Files and hashes: 1: ajqLdK1O1nN5ep9rd0nCI0VpedA.crl (hash: 7abmoZ6AANlKCtuSsLtvEC0JqLW6ouJOkPYu6OCRJB0=) 2: jkQdp6EX7jHh6f31YxZYZhR0C8U.roa (hash: FmayEZ/+k7yvcImZRXEurVZdNlGpk+kZM2DFLPiqTu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:95:14:27:11:fd:1e:be:d2:dc:3c:b9:e0:c7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0 Validity Not Before: Dec 6 19:00:37 2025 GMT Not After : Dec 7 19:00:37 2025 GMT Subject: CN=a9b6e80264856e00e4ffe37d0129627c8ab473f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:56:20:6a:ed:8d:12:56:65:18:81:25:84:ea: 71:42:0b:39:b5:7f:9b:cd:50:0e:cb:6b:69:8d:f1: 3d:a7:9e:63:c1:3e:e7:f5:53:4b:72:c5:83:c5:25: 2f:d1:2a:26:9c:28:1e:bb:98:6e:f1:81:04:78:b5: de:d6:f2:f3:34:61:aa:e0:36:3b:7b:b0:4d:20:a8: f1:72:14:cb:94:94:1e:ce:61:fc:2b:e3:5d:35:f5: 4d:c7:db:c8:60:b4:3d:49:bf:35:e2:79:12:8d:96: 4e:a8:f9:23:b5:8d:28:b8:f3:36:7c:de:c7:35:60: 93:81:e1:d4:71:70:51:3c:7b:d9:c3:21:a3:f9:a5: 0d:95:86:cb:16:a6:10:de:08:ec:8c:85:0b:24:b9: b8:4c:21:ff:cd:91:53:83:ab:73:f4:16:39:e1:19: 4c:af:2d:2f:0e:df:13:64:82:79:06:d0:d9:ad:29: 4f:e4:89:7a:4e:26:d9:15:8b:a1:58:ed:16:06:9e: 34:06:c2:d2:ad:f8:6f:09:89:87:e9:25:e9:45:62: 64:9c:e3:ef:10:a2:39:fa:87:2c:55:6c:37:bf:31: c1:2e:c3:4e:5f:88:28:5b:57:ac:ca:1b:bf:a4:23: 3d:89:c9:32:67:cd:f8:8b:e6:54:4d:63:40:b7:5a: f4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B6:E8:02:64:85:6E:00:E4:FF:E3:7D:01:29:62:7C:8A:B4:73:F0 X509v3 Authority Key Identifier: keyid:6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d4:39:6f:de:87:f9:47:7d:1a:38:04:22:6a:31:e0:57:a4: d6:f7:be:da:cd:e1:6f:0d:3d:2b:1f:58:ea:a2:44:74:e5:56: e5:a6:99:bf:bd:27:c6:c3:23:8b:8f:4b:c0:21:5c:7e:31:48: 58:69:80:56:b7:e4:3f:de:bc:84:6c:7f:bc:0d:1e:31:20:42: ed:07:7e:bd:f8:5e:f5:06:f7:c7:61:ed:38:1f:63:a4:5a:99: 0d:55:c9:ae:08:29:88:d7:72:ba:69:2f:85:f5:db:74:da:1d: 9b:0f:0c:b4:be:12:23:bc:26:d4:a6:ae:4f:e0:39:ed:53:5e: f0:dc:66:18:c4:f0:db:79:34:2a:33:4a:a1:41:77:6e:19:44: 11:0a:89:69:8a:66:47:ed:66:88:1a:0f:90:b0:17:92:d4:1a: 35:4e:ad:aa:73:f7:7f:f6:f0:96:3a:90:29:24:67:cd:88:73: 1d:6b:8d:ff:a6:e2:08:30:9a:dc:16:5e:2c:f0:62:8b:02:c3: e9:c0:b5:7d:2f:3f:b8:06:f0:50:4c:0b:ff:e5:01:ac:00:d4: b5:f5:5f:21:48:ca:69:c2:95:06:04:4b:e6:a5:44:a1:09:9f: 16:11:0a:a5:86:9a:08:00:c4:25:7f:e3:0c:f8:99:17:c0:58: fc:47:7f:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CZUUJxH9Hr7S3Dy54MfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhM2E4Yjc0YWQ0ZWQ2NzM3OTdhOWY2Yjc3NDljMjIzNDU2 OTc5ZDAwHhcNMjUxMjA2MTkwMDM3WhcNMjUxMjA3MTkwMDM3WjAzMTEwLwYDVQQD EyhhOWI2ZTgwMjY0ODU2ZTAwZTRmZmUzN2QwMTI5NjI3YzhhYjQ3M2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVYgau2NElZlGIElhOpxQgs5tX+b zVAOy2tpjfE9p55jwT7n9VNLcsWDxSUv0SomnCgeu5hu8YEEeLXe1vLzNGGq4DY7 e7BNIKjxchTLlJQezmH8K+NdNfVNx9vIYLQ9Sb814nkSjZZOqPkjtY0ouPM2fN7H NWCTgeHUcXBRPHvZwyGj+aUNlYbLFqYQ3gjsjIULJLm4TCH/zZFTg6tz9BY54RlM ry0vDt8TZIJ5BtDZrSlP5Il6TibZFYuhWO0WBp40BsLSrfhvCYmH6SXpRWJknOPv EKI5+ocsVWw3vzHBLsNOX4goW1esyhu/pCM9ickyZ834i+ZUTWNAt1r0IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKm26AJkhW4A5P/jfQEpYnyKtHPwMB8GA1UdIwQY MBaAFGo6i3StTtZzeXqfa3dJwiNFaXnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWpxTGRLMU8xbk41ZXA5cmQwbkNJMFZwZWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81M2FjYTItZTg4OC00MjFjLWI1OWEt Yzk1OGJmNGY4OTkxLzEvYWpxTGRLMU8xbk41ZXA5cmQwbkNJMFZwZWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81M2FjYTItZTg4OC00MjFjLWI1OWEtYzk1OGJmNGY4OTkx LzEvYWpxTGRLMU8xbk41ZXA5cmQwbkNJMFZwZWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtQ5b96H +Ud9GjgEImox4Fek1ve+2s3hbw09Kx9Y6qJEdOVW5aaZv70nxsMji49LwCFcfjFI WGmAVrfkP968hGx/vA0eMSBC7Qd+vfhe9Qb3x2HtOB9jpFqZDVXJrggpiNdyumkv hfXbdNodmw8MtL4SI7wm1KauT+A57VNe8NxmGMTw23k0KjNKoUF3bhlEEQqJaYpm R+1miBoPkLAXktQaNU6tqnP3f/bwljqQKSRnzYhzHWuN/6biCDCa3BZeLPBiiwLD 6cC1fS8/uAbwUEwL/+UBrADUtfVfIUjKacKVBgRL5qVEoQmfFhEKpYaaCADEJX/j DPiZF8BY/Ed/oA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:36:55 2025 by rpki-client