This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft File: AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json) Hash identifier: uxDQDc6fK3r35UzapjxA0xZltwy3OxRcNfvSAT5wQ8Q= Subject key identifier: F1:81:43:7B:E6:09:90:DD:05:BF:87:49:07:31:5D:86:69:B8:32:79 Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5 Certificate issuer: /CN=007e6b5aa437d3693151502a211496e37d4ae2c5 Certificate serial: 019AF2AD479774456166F81BB43053E970CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft Manifest number: 14E0 Signing time: Sat 06 Dec 2025 08:00:33 +0000 Manifest this update: Sat 06 Dec 2025 08:00:33 +0000 Manifest next update: Sun 07 Dec 2025 08:00:33 +0000 Files and hashes: 1: 6F_Q4XpRKgEexZcCv84M_kGGwx8.roa (hash: jzUe5knYI2NZSGwBtOwn1dJh+2wMTZvaI6KEnoCDN6M=) 2: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: RPVn52a7dFiW0eltBeCO2PLg6DzoqW35nQI5YF41Zwo=) 3: Ry-o6BvHlNuOD_d14wdLVmhDsgM.roa (hash: S/jHrYJPbAAtdA+RZZOotd+GpMfWfmGdhS0b8Kc0V30=) 4: VFSqRzcGMZ3Y2JFZb1Fsblb27nQ.roa (hash: UUfcXkF0GWrqVSNu+3z9VDCb/uLRbXj4ZsTEe5POQ7M=) 5: W_b0Ax5Mpx_fhvv-92F8GttV04I.roa (hash: y/SVVGY3IuSmMubg1JbInzxD9q8qop1Ol37UDvpp3pE=) 6: gZrmTs3ukQIINjYb9akCKLL_iZM.roa (hash: WbSg2tywBgMqpLgEuUZPOKgd7CPp10c7QuJJvyuvaco=) 7: mV18Ah11BcP39CQhLtpf79pVug8.roa (hash: RGt06BrejPetx9+VOGQ2Y1/RTWPMTF5VhkkYrYGyW40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:47:97:74:45:61:66:f8:1b:b4:30:53:e9:70:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5 Validity Not Before: Dec 6 08:00:33 2025 GMT Not After : Dec 7 08:00:33 2025 GMT Subject: CN=f181437be60990dd05bf874907315d8669b83279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:aa:29:c9:36:be:52:d8:09:db:5e:91:d3:8b: 0f:5f:08:2a:89:db:87:a5:bd:9b:01:2a:50:62:54: 92:a3:25:57:c5:f5:a6:be:8a:1a:99:e2:ba:a4:19: b4:87:76:72:b7:15:f2:08:31:bd:aa:1f:72:58:b4: 3c:fd:7b:7a:6d:b8:fd:38:32:90:33:32:48:87:fa: e4:cb:47:47:95:df:22:b8:08:b9:47:48:f4:93:d4: 06:ca:e4:d5:05:f7:02:d1:5e:72:81:5e:86:19:3e: dc:db:26:e3:bd:f8:59:c4:04:95:da:64:a2:27:34: 24:05:ac:08:b1:5a:9f:4e:4a:6e:c1:67:09:60:04: 47:81:05:08:38:5c:35:fc:29:26:28:6b:df:98:f2: 80:2c:fe:f3:a5:40:f1:0b:6e:6c:7a:7c:c9:97:1e: ae:dd:7a:a7:e1:7e:f8:6a:c6:93:fc:bc:19:81:7d: e0:d1:f5:cc:06:04:e2:e0:bc:59:6d:ca:df:67:45: dd:bd:5f:e9:a7:d2:7f:c1:ad:19:16:85:f2:e1:b0: 2b:75:7a:07:ad:6c:c2:83:2f:8f:bf:17:60:da:f3: be:9a:70:ee:0a:0e:0f:03:b0:61:19:88:aa:d4:28: 4d:c8:77:c1:95:47:d5:77:41:b3:78:5d:68:19:ab: 33:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:81:43:7B:E6:09:90:DD:05:BF:87:49:07:31:5D:86:69:B8:32:79 X509v3 Authority Key Identifier: keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:76:95:ce:f1:a2:2a:f3:b2:14:70:1d:32:d0:4f:81:31:53: 76:b8:30:14:d9:b3:1d:59:68:b2:c4:14:68:cb:ce:a2:39:75: 9c:b7:c0:ec:c1:dd:61:8b:ee:c9:6f:99:ee:49:d8:12:3b:bd: e1:65:02:90:2e:c6:90:ab:ef:fb:a7:12:b4:93:9c:08:62:bc: 23:c6:03:23:0b:2d:56:72:c2:ca:76:18:64:ae:ee:ae:8f:aa: e5:7a:64:d7:b6:c4:70:a8:24:e3:98:03:51:80:a5:dc:21:2d: 13:4f:5b:5e:62:eb:c2:4d:43:85:af:49:38:6a:d1:7e:9f:5a: bf:de:ba:39:2c:c6:c3:99:53:67:2d:9b:95:1f:d0:34:e7:1b: 23:b9:b8:da:cb:ab:6f:71:40:ba:d3:d3:cf:1e:24:b5:6c:3d: 67:0c:62:61:db:bc:43:b2:eb:f0:8c:59:f1:d9:d2:31:d8:5d: 80:96:8a:ad:17:de:b2:66:f5:b6:4c:be:15:27:bc:c1:cc:9b: 07:cc:da:c8:91:83:68:79:3f:61:34:55:dd:d3:fe:2a:3f:3f: c6:e1:06:aa:97:70:87:42:03:e0:e4:18:33:76:d9:02:44:ff: ed:bd:e0:0a:21:c9:77:09:8d:f2:05:cd:1e:c4:6d:51:16:26: 8c:a2:d6:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUeXdEVhZvgbtDBT6XDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwN2U2YjVhYTQzN2QzNjkzMTUxNTAyYTIxMTQ5NmUzN2Q0 YWUyYzUwHhcNMjUxMjA2MDgwMDMzWhcNMjUxMjA3MDgwMDMzWjAzMTEwLwYDVQQD EyhmMTgxNDM3YmU2MDk5MGRkMDViZjg3NDkwNzMxNWQ4NjY5YjgzMjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6opyTa+UtgJ216R04sPXwgqiduH pb2bASpQYlSSoyVXxfWmvooameK6pBm0h3ZytxXyCDG9qh9yWLQ8/Xt6bbj9ODKQ MzJIh/rky0dHld8iuAi5R0j0k9QGyuTVBfcC0V5ygV6GGT7c2ybjvfhZxASV2mSi JzQkBawIsVqfTkpuwWcJYARHgQUIOFw1/CkmKGvfmPKALP7zpUDxC25senzJlx6u 3Xqn4X74asaT/LwZgX3g0fXMBgTi4LxZbcrfZ0XdvV/pp9J/wa0ZFoXy4bArdXoH rWzCgy+Pvxdg2vO+mnDuCg4PA7BhGYiq1ChNyHfBlUfVd0GzeF1oGaszPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGBQ3vmCZDdBb+HSQcxXYZpuDJ5MB8GA1UdIwQY MBaAFAB+a1qkN9NpMVFQKiEUluN9SuLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYt NWE4YzY3ODQyMzg5LzEvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYtNWE4YzY3ODQyMzg5 LzEvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnaVzvGi KvOyFHAdMtBPgTFTdrgwFNmzHVlossQUaMvOojl1nLfA7MHdYYvuyW+Z7knYEju9 4WUCkC7GkKvv+6cStJOcCGK8I8YDIwstVnLCynYYZK7uro+q5Xpk17bEcKgk45gD UYCl3CEtE09bXmLrwk1Dha9JOGrRfp9av966OSzGw5lTZy2blR/QNOcbI7m42sur b3FAutPTzx4ktWw9ZwxiYdu8Q7Lr8IxZ8dnSMdhdgJaKrRfesmb1tky+FSe8wcyb B8zayJGDaHk/YTRV3dP+Kj8/xuEGqpdwh0ID4OQYM3bZAkT/7b3gCiHJdwmN8gXN HsRtURYmjKLWHw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:37 2025 by rpki-client