This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft File: AM0TenUCPWcunw4UQ8sOjPU7A9M.mft (raw, json) Hash identifier: qHsFgytHEDntdclCb3PIiYJpJMJz19WgXXf/9RNSbpI= Subject key identifier: F0:F1:68:AF:0E:08:1A:F0:F5:25:CB:D1:7A:62:9D:01:81:9A:E2:63 Authority key identifier: 00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3 Certificate issuer: /CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3 Certificate serial: 019AF0BF9879B6AA535D14307BF8731717A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft Manifest number: 09 Signing time: Fri 05 Dec 2025 23:01:19 +0000 Manifest this update: Fri 05 Dec 2025 23:01:19 +0000 Manifest next update: Sat 06 Dec 2025 23:01:19 +0000 Files and hashes: 1: AM0TenUCPWcunw4UQ8sOjPU7A9M.crl (hash: zEHFZi98HyggUUQ1xbR+cnhuXuouwpSc/yRJc/MKu6Y=) 2: QRmb5YrXwDriaT2dAaAU-pHwvNQ.asa (hash: SD+gQNGtNRHX6vzbmlJIKYTNd1x65ITQz0EzQSUqHQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:98:79:b6:aa:53:5d:14:30:7b:f8:73:17:17:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3 Validity Not Before: Dec 5 23:01:19 2025 GMT Not After : Dec 6 23:01:19 2025 GMT Subject: CN=f0f168af0e081af0f525cbd17a629d01819ae263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:82:04:ab:35:b2:74:41:82:c4:a3:89:4e:42: 10:fd:1b:a7:e0:80:89:85:c1:84:3a:44:1d:6a:eb: 57:55:2d:5e:1c:96:eb:32:5a:cd:01:2d:aa:f6:27: 17:12:9c:d0:bf:71:8f:9a:04:d9:a2:9c:ee:78:55: 71:9d:60:e9:29:df:a6:b1:2b:09:01:ff:1a:74:7a: 73:37:3f:7a:fe:9b:3b:b1:34:ad:00:47:68:96:68: e2:af:15:c4:ba:82:c5:d8:14:f8:4e:28:3b:f2:07: da:2e:77:56:16:53:f6:ed:58:0b:aa:ef:39:d2:82: 78:04:85:c3:e9:e4:cb:6f:ca:de:bd:9a:47:22:df: fb:9b:4a:ec:9d:3f:e5:be:56:17:fd:3e:b1:16:93: b7:24:09:88:ff:80:07:c3:e7:6d:f2:57:10:6e:f8: 61:61:df:47:55:2b:3a:68:68:d5:e6:5e:2f:e4:ff: c8:08:7e:59:e6:66:83:c5:4a:65:88:1c:15:93:38: dd:2f:11:41:da:d7:e0:4d:b5:c5:15:57:aa:d6:07: f5:69:9e:9a:64:1c:27:86:7e:bf:ce:53:96:a3:52: 6c:e7:95:65:a2:bd:32:b6:99:e8:a6:33:66:0e:6a: b0:be:75:81:35:58:aa:d5:b6:26:d4:9e:10:c4:7a: 32:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F1:68:AF:0E:08:1A:F0:F5:25:CB:D1:7A:62:9D:01:81:9A:E2:63 X509v3 Authority Key Identifier: keyid:00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:65:6f:9a:2b:7b:7e:d6:75:7a:96:69:3e:8d:dc:15:a7:c5: 7b:0c:57:14:5b:1f:63:58:cd:c1:ee:f7:6f:03:8c:88:78:22: fc:46:eb:6c:63:58:46:7c:c5:3b:9d:8d:ad:0b:1c:dc:b6:5d: 88:a0:b2:3c:d0:ef:44:d4:dd:f3:89:87:28:85:ac:95:54:44: 24:94:c1:65:88:51:e9:32:15:4b:4b:6c:6e:2e:4a:4c:a9:54: 5c:a3:d8:e8:48:70:b8:84:92:b2:97:91:61:79:ae:b9:49:3b: 97:7a:1e:9d:ec:1a:33:ce:5f:c4:3d:2d:07:a1:f6:e5:3e:38: 24:23:01:7b:75:b6:bb:b9:54:7c:46:ca:f7:b2:4e:43:7c:8c: 39:f7:7c:5f:aa:f7:2e:97:33:69:71:ce:2b:c5:49:5a:c7:ce: a8:45:e3:3a:1a:a5:b9:a6:1e:c4:78:09:5e:1d:34:c6:c1:7f: 53:ff:f9:d7:a7:28:cb:ba:45:1e:ce:69:8d:04:49:24:4f:db: 9b:d1:4c:4c:d6:52:fb:34:30:67:65:a3:3d:e0:ea:3d:97:b3: 9d:17:c8:47:7b:f7:b0:49:df:5e:48:53:ed:58:cd:fb:c9:50: 9e:c9:54:43:d6:55:d7:55:04:04:9a:70:f8:06:f7:50:15:f6: c7:b3:13:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5h5tqpTXRQwe/hzFxegMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwY2QxMzdhNzUwMjNkNjcyZTlmMGUxNDQzY2IwZThjZjUz YjAzZDMwHhcNMjUxMjA1MjMwMTE5WhcNMjUxMjA2MjMwMTE5WjAzMTEwLwYDVQQD EyhmMGYxNjhhZjBlMDgxYWYwZjUyNWNiZDE3YTYyOWQwMTgxOWFlMjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYIEqzWydEGCxKOJTkIQ/Run4ICJ hcGEOkQdautXVS1eHJbrMlrNAS2q9icXEpzQv3GPmgTZopzueFVxnWDpKd+msSsJ Af8adHpzNz96/ps7sTStAEdolmjirxXEuoLF2BT4Tig78gfaLndWFlP27VgLqu85 0oJ4BIXD6eTLb8revZpHIt/7m0rsnT/lvlYX/T6xFpO3JAmI/4AHw+dt8lcQbvhh Yd9HVSs6aGjV5l4v5P/ICH5Z5maDxUpliBwVkzjdLxFB2tfgTbXFFVeq1gf1aZ6a ZBwnhn6/zlOWo1Js55Vlor0ytpnopjNmDmqwvnWBNViq1bYm1J4QxHoy+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDxaK8OCBrw9SXL0XpinQGBmuJjMB8GA1UdIwQY MBaAFADNE3p1Aj1nLp8OFEPLDoz1OwPTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mODMxMzYtMTg2ZC00OTA0LWI4MWMt Yzc5ODgxZjMxNWUyLzEvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mODMxMzYtMTg2ZC00OTA0LWI4MWMtYzc5ODgxZjMxNWUy LzEvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmVvmit7 ftZ1epZpPo3cFafFewxXFFsfY1jNwe73bwOMiHgi/EbrbGNYRnzFO52NrQsc3LZd iKCyPNDvRNTd84mHKIWslVREJJTBZYhR6TIVS0tsbi5KTKlUXKPY6EhwuISSspeR YXmuuUk7l3oenewaM85fxD0tB6H25T44JCMBe3W2u7lUfEbK97JOQ3yMOfd8X6r3 LpczaXHOK8VJWsfOqEXjOhqluaYexHgJXh00xsF/U//516coy7pFHs5pjQRJJE/b m9FMTNZS+zQwZ2WjPeDqPZeznRfIR3v3sEnfXkhT7VjN+8lQnslUQ9ZV11UEBJpw +Ab3UBX2x7MTGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:44:33 2025 by rpki-client