This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json) Hash identifier: OmfwJqZ+e3eyXB9xIHXUwcTYmtwnDtoP0JRdUAuXGlo= Subject key identifier: 99:AC:A6:29:AC:85:47:DF:4F:8F:8F:E3:16:55:CE:EA:98:7C:9D:CF Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef Certificate serial: 019AF19A908D371C74F1EA0175912783C60C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft Manifest number: 13F9 Signing time: Sat 06 Dec 2025 03:00:29 +0000 Manifest this update: Sat 06 Dec 2025 03:00:29 +0000 Manifest next update: Sun 07 Dec 2025 03:00:29 +0000 Files and hashes: 1: NCqzEDAkcdOF_5QXBG8yJjG5C8E.roa (hash: 3y6ZaPdmVv7AeJPbPV9rY47Ckca5BlO8ayxRNoPx1Jg=) 2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: hYuXFlZSZ2VA5Vh9+i9lc64pu/37Cn/XXHKJQGT4AOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:90:8d:37:1c:74:f1:ea:01:75:91:27:83:c6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef Validity Not Before: Dec 6 03:00:29 2025 GMT Not After : Dec 7 03:00:29 2025 GMT Subject: CN=99aca629ac8547df4f8f8fe31655ceea987c9dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:ce:31:59:78:cb:f2:f6:fb:25:c3:86:34: 66:d3:e8:61:8f:44:90:33:02:7d:98:70:64:90:20: 47:ae:30:09:57:8e:a3:97:4a:f5:11:2b:db:b1:5d: ff:2a:c7:0c:ad:8f:ce:90:16:85:09:25:8b:4c:71: da:9b:a2:50:24:38:b1:18:f1:76:97:2f:03:2d:d7: 7f:6c:2f:00:1c:3b:80:20:f4:1e:03:29:b1:78:92: cc:62:d0:e7:9e:96:4e:36:8c:79:b4:2b:4b:0a:ea: aa:56:d6:74:fc:39:59:c8:c2:ea:f4:f9:b3:90:c2: 50:fd:03:3f:17:8a:81:c8:53:e6:78:4c:a8:05:4c: ce:4c:82:09:bc:45:e8:67:95:08:f1:4f:42:8e:78: 40:9d:56:b5:23:80:db:cd:6a:f4:61:91:46:20:07: 37:2b:12:e2:fa:1e:3a:c4:f5:7a:83:f9:a0:a9:88: c8:4f:70:10:24:5e:da:3a:87:ee:fd:06:5d:42:41: 8b:58:3a:1e:8a:52:01:92:21:bf:8b:db:58:db:4d: 38:1f:ed:ef:0a:8e:7f:b4:09:90:ee:ef:dc:83:84: 14:e4:69:bf:d3:92:5c:68:95:5d:b9:63:9d:39:9d: 93:7a:96:0f:d9:0e:bf:94:58:94:e4:ef:7e:4d:e3: 83:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AC:A6:29:AC:85:47:DF:4F:8F:8F:E3:16:55:CE:EA:98:7C:9D:CF X509v3 Authority Key Identifier: keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c4:2d:05:81:33:5d:ee:d7:3b:e5:17:d3:03:49:ad:f9:81: 85:fe:bb:f7:04:a2:c8:14:8f:84:5a:b9:aa:f4:ff:7c:81:9e: d7:0b:56:f9:8e:0c:58:b9:da:c2:c4:1d:ac:2a:fa:e7:bf:80: 51:7f:ec:00:4f:40:92:30:d1:51:4e:1f:60:a6:5a:53:6f:9d: c6:44:97:fd:c9:3d:40:99:b0:01:8d:7f:5d:f0:ed:e7:0f:be: ed:fe:4d:ff:5f:2e:b2:15:f4:00:75:12:8a:5a:b0:e0:d7:08: bc:82:02:ad:67:f0:0b:0c:95:f2:6c:cc:8a:02:3f:af:c9:06: 9e:b3:21:2f:12:38:bf:df:db:cf:b9:a1:a5:39:7b:1c:0e:f2: ba:f8:25:6d:62:51:36:7c:ba:f6:86:38:a0:67:69:df:65:fe: d2:71:05:9e:f1:1a:a0:fa:11:b9:1c:9c:a4:8f:47:80:4d:f6: a4:62:26:7d:b2:e8:ce:ce:c6:5b:16:cc:6c:f0:aa:20:a1:93: 60:38:9b:60:51:4d:8c:b9:79:34:1d:87:b3:4a:71:2f:ce:4f: a4:86:3c:20:38:19:d5:a0:d5:44:98:bb:4a:3f:65:e0:12:12: 66:2a:50:0b:d0:26:74:8c:b9:58:a5:cf:17:e6:ec:09:d9:6b: a7:95:40:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpCNNxx08eoBdZEng8YMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMTg3Y2E1YjhhZWUxOTVjYzhjYWRjZmI0OGM1NDRiMTgx NDc3ZWYwHhcNMjUxMjA2MDMwMDI5WhcNMjUxMjA3MDMwMDI5WjAzMTEwLwYDVQQD Eyg5OWFjYTYyOWFjODU0N2RmNGY4ZjhmZTMxNjU1Y2VlYTk4N2M5ZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPLOMVl4y/L2+yXDhjRm0+hhj0SQ MwJ9mHBkkCBHrjAJV46jl0r1ESvbsV3/KscMrY/OkBaFCSWLTHHam6JQJDixGPF2 ly8DLdd/bC8AHDuAIPQeAymxeJLMYtDnnpZONox5tCtLCuqqVtZ0/DlZyMLq9Pmz kMJQ/QM/F4qByFPmeEyoBUzOTIIJvEXoZ5UI8U9CjnhAnVa1I4DbzWr0YZFGIAc3 KxLi+h46xPV6g/mgqYjIT3AQJF7aOofu/QZdQkGLWDoeilIBkiG/i9tY2004H+3v Co5/tAmQ7u/cg4QU5Gm/05JcaJVduWOdOZ2TepYP2Q6/lFiU5O9+TeODIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmspimshUffT4+P4xZVzuqYfJ3PMB8GA1UdIwQY MBaAFGoYfKW4ruGVzIytz7SMVEsYFHfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NWMwOGItNTA1Ni00Mzg2LWE0MmIt YmYwM2RjODM3OTAwLzEvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85NWMwOGItNTA1Ni00Mzg2LWE0MmItYmYwM2RjODM3OTAw LzEvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8QtBYEz Xe7XO+UX0wNJrfmBhf679wSiyBSPhFq5qvT/fIGe1wtW+Y4MWLnawsQdrCr657+A UX/sAE9AkjDRUU4fYKZaU2+dxkSX/ck9QJmwAY1/XfDt5w++7f5N/18ushX0AHUS ilqw4NcIvIICrWfwCwyV8mzMigI/r8kGnrMhLxI4v9/bz7mhpTl7HA7yuvglbWJR Nny69oY4oGdp32X+0nEFnvEaoPoRuRycpI9HgE32pGImfbLozs7GWxbMbPCqIKGT YDibYFFNjLl5NB2Hs0pxL85PpIY8IDgZ1aDVRJi7Sj9l4BISZipQC9AmdIy5WKXP F+bsCdlrp5VAxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:37 2025 by rpki-client