This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft File: amgjORLYCZ5O3U5ZBtsfxiOubPk.mft (raw, json) Hash identifier: LQ+NQM4FsKt42ygd0411xVEMWpuBgSZPWR/HSKdTFHM= Subject key identifier: 0A:E8:EB:F3:5F:B2:B4:14:FC:35:ED:23:05:8B:A1:0F:DB:88:C4:35 Authority key identifier: 6A:68:23:39:12:D8:09:9E:4E:DD:4E:59:06:DB:1F:C6:23:AE:6C:F9 Certificate issuer: /CN=6a68233912d8099e4edd4e5906db1fc623ae6cf9 Certificate serial: 019AF12DC3703FCFEC872B3E76C4A31D8ED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft Manifest number: 0215 Signing time: Sat 06 Dec 2025 01:01:39 +0000 Manifest this update: Sat 06 Dec 2025 01:01:39 +0000 Manifest next update: Sun 07 Dec 2025 01:01:39 +0000 Files and hashes: 1: amgjORLYCZ5O3U5ZBtsfxiOubPk.crl (hash: oZL1ofY+WSO9TkLZ1TvawEyEMb/QL/1NG5FOiHRjO2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.crl rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c3:70:3f:cf:ec:87:2b:3e:76:c4:a3:1d:8e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a68233912d8099e4edd4e5906db1fc623ae6cf9 Validity Not Before: Dec 6 01:01:39 2025 GMT Not After : Dec 7 01:01:39 2025 GMT Subject: CN=0ae8ebf35fb2b414fc35ed23058ba10fdb88c435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:68:fc:7a:19:bd:b6:b2:02:00:94:42:cd: 67:cc:e0:32:54:99:4b:d7:58:00:74:a5:03:f9:90: a4:68:12:34:e5:81:b2:9c:9d:08:0a:f4:a9:37:bc: ac:46:20:4d:ac:ef:6e:a8:17:9b:fc:0e:02:b4:50: b2:73:4a:f2:7c:8c:58:a7:c2:ca:91:58:35:cc:d2: 9f:4c:5e:1a:52:4c:e3:60:5a:8d:fa:e0:5a:36:0e: df:57:2c:13:12:67:2f:17:32:4a:36:a3:39:af:7d: e3:86:a7:9c:c3:0e:f2:e7:4e:d4:0a:ee:c0:5f:d6: ed:e1:1f:d8:96:d8:55:3d:78:99:71:78:ac:f0:d3: 82:ab:7b:ad:f7:74:6e:ff:7a:a5:a4:63:66:fd:49: c5:da:48:01:41:81:05:90:1f:6f:30:f1:ac:1c:40: 14:81:dc:4d:3d:47:94:9e:d1:6c:29:85:b9:a8:0e: f4:80:c7:1f:44:bd:8c:7b:70:e0:9b:11:e9:77:97: 36:12:94:a1:ff:aa:f2:eb:f0:92:dd:80:21:2a:98: b3:76:31:de:8d:4a:3c:94:72:3d:79:fe:ef:13:17: ef:48:4c:ab:1d:7f:f2:55:9e:8c:fe:8a:8f:53:83: 1a:e8:e1:61:c5:a3:bc:f6:aa:c3:6e:5b:ab:fb:0e: 11:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E8:EB:F3:5F:B2:B4:14:FC:35:ED:23:05:8B:A1:0F:DB:88:C4:35 X509v3 Authority Key Identifier: keyid:6A:68:23:39:12:D8:09:9E:4E:DD:4E:59:06:DB:1F:C6:23:AE:6C:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ae:df:5b:83:5b:dd:8f:23:fb:74:0c:13:5d:c4:01:8a:31: 1f:ed:cc:5f:6d:6a:d6:3e:0a:7b:5c:41:cc:3e:4a:fd:b8:5c: e3:9b:37:1d:f4:cd:62:38:41:c5:66:8e:8a:ad:58:2a:bd:a5: 7d:f3:12:b3:cd:17:cb:a7:aa:6a:d4:4e:b5:ee:ce:ac:c9:f9: 7a:77:c6:ff:e6:52:9b:15:40:24:f6:23:65:53:29:69:f4:62: 80:33:25:c0:cb:e5:63:a6:90:b5:b2:71:3b:bf:9d:b5:62:3b: 01:1a:0a:45:1d:ff:ae:b2:9f:79:e2:33:74:d9:61:9e:2c:04: a2:cc:f2:72:b3:9c:43:76:4c:7a:51:72:e8:c2:47:7b:7b:b9: 12:74:e6:b5:a7:ff:5d:8f:8a:9b:35:85:1b:d9:ea:83:95:42: 35:2b:5c:f2:22:cf:d2:ae:16:12:87:e3:6e:3f:6c:fe:61:4b: 4d:60:a7:b9:92:34:4d:21:01:df:85:aa:64:0c:e9:dc:6d:ad: fb:28:18:e5:20:29:2d:47:c7:db:79:e8:f2:40:c9:e7:80:e6: c0:d0:2f:26:54:0d:c4:5b:20:a3:0a:cc:c0:8c:13:92:21:cc: 61:07:14:ac:48:d2:9f:82:e2:7b:8f:2f:b8:8e:99:54:67:6a: 7e:2d:0d:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcNwP8/shys+dsSjHY7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNjgyMzM5MTJkODA5OWU0ZWRkNGU1OTA2ZGIxZmM2MjNh ZTZjZjkwHhcNMjUxMjA2MDEwMTM5WhcNMjUxMjA3MDEwMTM5WjAzMTEwLwYDVQQD EygwYWU4ZWJmMzVmYjJiNDE0ZmMzNWVkMjMwNThiYTEwZmRiODhjNDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLho/HoZvbayAgCUQs1nzOAyVJlL 11gAdKUD+ZCkaBI05YGynJ0ICvSpN7ysRiBNrO9uqBeb/A4CtFCyc0ryfIxYp8LK kVg1zNKfTF4aUkzjYFqN+uBaNg7fVywTEmcvFzJKNqM5r33jhqecww7y507UCu7A X9bt4R/YlthVPXiZcXis8NOCq3ut93Ru/3qlpGNm/UnF2kgBQYEFkB9vMPGsHEAU gdxNPUeUntFsKYW5qA70gMcfRL2Me3DgmxHpd5c2EpSh/6ry6/CS3YAhKpizdjHe jUo8lHI9ef7vExfvSEyrHX/yVZ6M/oqPU4Ma6OFhxaO89qrDblur+w4R7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAro6/NfsrQU/DXtIwWLoQ/biMQ1MB8GA1UdIwQY MBaAFGpoIzkS2AmeTt1OWQbbH8Yjrmz5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW1nak9STFlDWjVPM1U1WkJ0c2Z4aU91YlBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iZTA2MzAtYjJiMC00Y2IxLWIyZGQt NzQxMTg4ZGZhMjdkLzEvYW1nak9STFlDWjVPM1U1WkJ0c2Z4aU91YlBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iZTA2MzAtYjJiMC00Y2IxLWIyZGQtNzQxMTg4ZGZhMjdk LzEvYW1nak9STFlDWjVPM1U1WkJ0c2Z4aU91YlBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADq7fW4Nb 3Y8j+3QME13EAYoxH+3MX21q1j4Ke1xBzD5K/bhc45s3HfTNYjhBxWaOiq1YKr2l ffMSs80Xy6eqatROte7OrMn5enfG/+ZSmxVAJPYjZVMpafRigDMlwMvlY6aQtbJx O7+dtWI7ARoKRR3/rrKfeeIzdNlhniwEoszycrOcQ3ZMelFy6MJHe3u5EnTmtaf/ XY+KmzWFG9nqg5VCNStc8iLP0q4WEofjbj9s/mFLTWCnuZI0TSEB34WqZAzp3G2t +ygY5SApLUfH23no8kDJ54DmwNAvJlQNxFsgowrMwIwTkiHMYQcUrEjSn4Lie48v uI6ZVGdqfi0NUg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:40 2025 by rpki-client