This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft File: AMe7gqYBJXucgs_3rHkz81E6TUk.mft (raw, json) Hash identifier: hP4COYW1dfE9KyboBVS7gkTjZfJ6gXcju1CQ6DADdkw= Subject key identifier: 30:5E:F1:78:84:6F:1C:8B:CC:11:8D:E0:D6:57:CE:E8:B5:E9:D2:30 Authority key identifier: 00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49 Certificate issuer: /CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49 Certificate serial: 019B3C7DC09A01D60DD603423C167124A72C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 16:00:32 +0000 Manifest this update: Sat 20 Dec 2025 16:00:32 +0000 Manifest next update: Sun 21 Dec 2025 16:00:32 +0000 Files and hashes: 1: AMe7gqYBJXucgs_3rHkz81E6TUk.crl (hash: /g3XscVA6UUvqWpEu4fvbH6GQQkFYuBG8wygptnxzIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:c0:9a:01:d6:0d:d6:03:42:3c:16:71:24:a7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49 Validity Not Before: Dec 20 16:00:32 2025 GMT Not After : Dec 21 16:00:32 2025 GMT Subject: CN=305ef178846f1c8bcc118de0d657cee8b5e9d230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:da:94:01:1b:4c:50:b9:2f:12:ea:44:b6:51: e6:50:19:1d:7b:5f:a8:5c:62:27:4e:38:3f:b7:ca: 51:83:36:10:a9:6d:ec:47:93:a7:8d:c9:3b:0d:e8: 24:7d:50:62:3c:b5:52:3d:3d:bf:00:4d:ba:8d:32: 9d:50:98:8c:c8:12:3d:12:99:8d:22:87:9a:24:ef: 59:8d:83:eb:95:c5:53:48:5f:33:41:29:d7:0e:b1: c5:98:3f:1c:d8:53:89:43:a2:3b:3b:0f:ca:38:45: f3:5f:53:e8:79:d8:72:da:eb:11:6c:3e:ee:10:88: 3d:2b:71:4a:44:71:5f:16:e7:4a:25:af:e7:0d:b3: 72:a5:eb:a9:15:3c:9a:5c:a8:68:1e:27:55:48:db: ab:47:d2:4a:2d:f2:b3:c8:be:0b:d7:8c:4d:d0:10: f9:61:39:f6:e3:f2:b0:cf:d1:7d:b6:5b:af:a3:e8: 8f:5d:a7:65:f2:09:4a:c6:e2:fc:05:bf:04:ce:83: a7:69:b7:de:46:91:5d:f7:03:0a:66:72:65:39:c1: 0f:8c:30:65:93:18:d7:cd:4c:15:a2:ff:57:3f:95: 9f:f1:b2:5f:67:df:c8:6e:63:85:9c:0f:2c:38:2e: 92:e6:23:39:27:87:6d:96:1d:f7:dd:0d:d2:cb:c5: 8d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5E:F1:78:84:6F:1C:8B:CC:11:8D:E0:D6:57:CE:E8:B5:E9:D2:30 X509v3 Authority Key Identifier: keyid:00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:2c:cf:6b:32:f4:6b:38:12:96:de:60:e8:d8:03:e9:f8:e0: 5d:a8:e8:f6:d4:40:ef:dd:36:07:7e:ba:e3:5d:02:31:d0:ac: cb:93:74:25:90:d0:20:36:02:4f:8b:1c:d6:cf:e5:8b:e7:ba: cf:d6:50:d9:cf:92:b6:44:89:72:9b:0b:82:f1:7d:8b:a6:0c: 37:16:21:71:92:77:63:3b:e7:97:0d:8d:97:9e:29:bd:1d:2d: 17:7b:f5:9a:66:29:e8:58:0b:0d:e5:1f:5c:aa:ac:55:0c:53: 95:bc:32:22:b5:a0:c5:d5:f6:21:92:52:8d:6c:7f:bf:e5:1f: bd:f5:67:8f:68:ae:d0:de:fe:72:8e:fb:d8:4b:c0:7a:58:e2: d5:c6:7c:d0:ec:88:d3:6c:05:66:ea:28:e9:14:dd:f8:fd:8a: 23:a0:df:eb:b1:58:1b:85:95:4d:cc:21:78:73:d4:99:37:d0: 78:13:2d:15:20:c6:e4:4d:7a:a1:dd:93:1e:22:b0:bd:9d:4c: 2e:0b:b2:2f:50:95:44:da:f2:58:d3:e6:cf:40:3d:4d:c0:8e: 4f:27:fe:fe:4c:01:f2:33:77:1e:3c:f2:df:89:85:31:95:a6: 0f:14:01:0d:63:ec:d0:c8:0a:90:65:c7:5c:a4:05:58:c9:c0: 67:8b:80:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fcCaAdYN1gNCPBZxJKcsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYzdiYjgyYTYwMTI1N2I5YzgyY2ZmN2FjNzkzM2YzNTEz YTRkNDkwHhcNMjUxMjIwMTYwMDMyWhcNMjUxMjIxMTYwMDMyWjAzMTEwLwYDVQQD EygzMDVlZjE3ODg0NmYxYzhiY2MxMThkZTBkNjU3Y2VlOGI1ZTlkMjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltqUARtMULkvEupEtlHmUBkde1+o XGInTjg/t8pRgzYQqW3sR5Onjck7DegkfVBiPLVSPT2/AE26jTKdUJiMyBI9EpmN IoeaJO9ZjYPrlcVTSF8zQSnXDrHFmD8c2FOJQ6I7Ow/KOEXzX1Poedhy2usRbD7u EIg9K3FKRHFfFudKJa/nDbNypeupFTyaXKhoHidVSNurR9JKLfKzyL4L14xN0BD5 YTn24/Kwz9F9tluvo+iPXadl8glKxuL8Bb8EzoOnabfeRpFd9wMKZnJlOcEPjDBl kxjXzUwVov9XP5Wf8bJfZ9/IbmOFnA8sOC6S5iM5J4dtlh333Q3Sy8WN6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBe8XiEbxyLzBGN4NZXzui16dIwMB8GA1UdIwQY MBaAFADHu4KmASV7nILP96x5M/NROk1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU1lN2dxWUJKWHVjZ3NfM3JIa3o4MUU2VFVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNjIzZDgtYWY2Mi00OTFhLTlmOWYt MTIxNjIyNmM2ZmI1LzEvQU1lN2dxWUJKWHVjZ3NfM3JIa3o4MUU2VFVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iNjIzZDgtYWY2Mi00OTFhLTlmOWYtMTIxNjIyNmM2ZmI1 LzEvQU1lN2dxWUJKWHVjZ3NfM3JIa3o4MUU2VFVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSzPazL0 azgSlt5g6NgD6fjgXajo9tRA7902B366410CMdCsy5N0JZDQIDYCT4sc1s/li+e6 z9ZQ2c+StkSJcpsLgvF9i6YMNxYhcZJ3Yzvnlw2Nl54pvR0tF3v1mmYp6FgLDeUf XKqsVQxTlbwyIrWgxdX2IZJSjWx/v+UfvfVnj2iu0N7+co772EvAelji1cZ80OyI 02wFZuoo6RTd+P2KI6Df67FYG4WVTcwheHPUmTfQeBMtFSDG5E16od2THiKwvZ1M LguyL1CVRNryWNPmz0A9TcCOTyf+/kwB8jN3Hjzy34mFMZWmDxQBDWPs0MgKkGXH XKQFWMnAZ4uA/w== -----END CERTIFICATE-----Generated at Sat Dec 20 22:27:15 2025 by rpki-client