This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json) Hash identifier: U9NTS6PahiLiv0bYuh2a0iXXVe+UcnqAtx2BLVW7i/I= Subject key identifier: 32:3E:09:45:75:93:04:0A:97:72:D0:AF:23:77:A1:91:C3:89:2C:07 Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82 Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082 Certificate serial: 019B2F9EAA38B0BE062DF20FF8E5873016AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 04:01:25 +0000 Manifest this update: Thu 18 Dec 2025 04:01:25 +0000 Manifest next update: Fri 19 Dec 2025 04:01:25 +0000 Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: YbuQ/lsx4fR0ONP2bWM0re0yLiRVGqMUTgLNqcR0WgY=) 2: TEkUtdSJlCwJOLmZGlc_aRWHYHQ.roa (hash: 6v28t0X8IRT5vkPcD+0Ak9J7sxuHKDaxDcFCFxn0jgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:aa:38:b0:be:06:2d:f2:0f:f8:e5:87:30:16:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082 Validity Not Before: Dec 18 04:01:25 2025 GMT Not After : Dec 19 04:01:25 2025 GMT Subject: CN=323e09457593040a9772d0af2377a191c3892c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:46:8a:05:d5:25:5a:9d:c5:3b:d8:ad:80:66: 16:a4:e7:f6:11:b6:6d:d6:53:d3:39:f3:39:bb:f8: 56:97:0d:f2:b3:95:2e:0b:76:3e:66:c3:af:b1:f7: 87:57:0c:cc:57:de:55:ee:14:7e:9e:18:af:d7:5b: dc:a0:40:69:3b:e7:21:c7:88:8f:8e:2a:3e:52:14: 78:b7:d8:bf:5a:43:da:b2:86:63:d2:d7:a9:ce:dc: d0:58:51:f9:f5:a0:b5:05:71:b9:7e:eb:e9:67:cc: 1f:a2:21:0c:c2:23:d6:df:be:62:72:56:ea:47:c6: 5d:81:e0:b6:9f:ef:e7:e3:a8:2a:dc:86:59:d5:d4: ca:07:94:95:b2:2d:3f:c4:53:e9:1b:7b:fa:af:7c: 19:5c:7b:f1:26:bb:c0:ca:7d:31:ba:2a:f9:ed:0c: 24:dd:66:fd:4d:dd:5e:7b:f1:c5:70:5a:67:01:b7: 39:c7:c3:1e:62:aa:f1:3f:de:11:4d:68:5b:84:4c: bf:70:d4:be:8c:a2:1a:07:a2:18:62:9e:a1:d4:1c: 0c:e7:61:ed:95:2e:b4:21:37:66:75:40:c3:16:90: cc:d1:1a:98:42:be:bf:1e:21:3f:0a:26:1d:ac:b4: 7b:d7:6b:8e:1c:65:96:bc:8e:bb:b6:4c:fb:a3:54: 71:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3E:09:45:75:93:04:0A:97:72:D0:AF:23:77:A1:91:C3:89:2C:07 X509v3 Authority Key Identifier: keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ce:e8:2f:5d:1b:7d:99:45:7e:3f:af:e0:a0:0c:5b:80:76: 19:cf:55:70:62:1e:96:be:fe:96:cb:4e:73:88:89:f4:10:c4: 48:6d:a0:56:37:53:84:b2:76:e2:72:ef:56:f5:be:e0:f4:b5: 55:6d:bb:27:17:22:95:00:31:6a:16:aa:27:30:eb:75:41:38: 9e:f1:1f:03:4f:9b:79:69:00:91:30:99:e9:27:78:9b:11:e9: 2c:f0:b3:6c:a0:6a:e3:ce:cb:26:cf:b9:4f:cd:8a:88:9b:d5: ec:33:c2:ac:09:08:95:46:d9:c8:c9:1e:9a:bd:cf:c1:68:43: 00:41:a2:7e:7d:51:7a:5d:b6:6c:6b:51:98:ef:7b:bd:81:76: e8:95:53:90:7c:34:05:be:ad:18:72:e3:25:99:65:d5:16:64: 81:7a:58:90:10:66:84:34:f9:98:90:cf:ec:0c:ec:b5:6a:db: 4a:1c:6c:37:a7:14:6a:5e:af:81:a6:79:83:83:c5:cd:f7:6d: 78:09:8e:af:ca:67:c9:2d:2d:aa:98:28:53:9c:51:5f:6c:9b: 24:31:f4:94:37:80:bb:5c:c4:74:2e:91:a2:64:33:2f:e0:67: 59:de:a8:5f:1e:e3:6a:c9:36:84:77:25:d6:17:f0:79:e8:80: 2f:02:42:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnqo4sL4GLfIP+OWHMBavMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZDk0NmE1MzQwYjdmMGZmNTBkOWFmYTY1MTlhZGU3ZjNh NGEwODIwHhcNMjUxMjE4MDQwMTI1WhcNMjUxMjE5MDQwMTI1WjAzMTEwLwYDVQQD EygzMjNlMDk0NTc1OTMwNDBhOTc3MmQwYWYyMzc3YTE5MWMzODkyYzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUaKBdUlWp3FO9itgGYWpOf2EbZt 1lPTOfM5u/hWlw3ys5UuC3Y+ZsOvsfeHVwzMV95V7hR+nhiv11vcoEBpO+chx4iP jio+UhR4t9i/WkPasoZj0tepztzQWFH59aC1BXG5fuvpZ8wfoiEMwiPW375iclbq R8ZdgeC2n+/n46gq3IZZ1dTKB5SVsi0/xFPpG3v6r3wZXHvxJrvAyn0xuir57Qwk 3Wb9Td1ee/HFcFpnAbc5x8MeYqrxP94RTWhbhEy/cNS+jKIaB6IYYp6h1BwM52Ht lS60ITdmdUDDFpDM0RqYQr6/HiE/CiYdrLR712uOHGWWvI67tkz7o1RxeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDI+CUV1kwQKl3LQryN3oZHDiSwHMB8GA1UdIwQY MBaAFADZRqU0C38P9Q2a+mUZrefzpKCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAt NTVkZGY4MGU5YTlkLzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAtNTVkZGY4MGU5YTlk LzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXs7oL10b fZlFfj+v4KAMW4B2Gc9VcGIelr7+lstOc4iJ9BDESG2gVjdThLJ24nLvVvW+4PS1 VW27JxcilQAxahaqJzDrdUE4nvEfA0+beWkAkTCZ6Sd4mxHpLPCzbKBq487LJs+5 T82KiJvV7DPCrAkIlUbZyMkemr3PwWhDAEGifn1Rel22bGtRmO97vYF26JVTkHw0 Bb6tGHLjJZll1RZkgXpYkBBmhDT5mJDP7AzstWrbShxsN6cUal6vgaZ5g4PFzfdt eAmOr8pnyS0tqpgoU5xRX2ybJDH0lDeAu1zEdC6RomQzL+BnWd6oXx7jask2hHcl 1hfweeiALwJCvg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:50:50 2025 by rpki-client