This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft File: ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft (raw, json) Hash identifier: 62HGajvFQss6s+OGt9qC/lMmM43il9qOpxsHISJXEpE= Subject key identifier: 11:E5:71:84:45:16:FE:13:FE:59:E1:1C:BB:96:46:90:FC:20:37:88 Authority key identifier: 6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E Certificate issuer: /CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e Certificate serial: 019AF0BF35502A16689694B40BF5DC20C56C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft Manifest number: 035F Signing time: Fri 05 Dec 2025 23:00:53 +0000 Manifest this update: Fri 05 Dec 2025 23:00:53 +0000 Manifest next update: Sat 06 Dec 2025 23:00:53 +0000 Files and hashes: 1: ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl (hash: ltfYOpBqKt7rejvyIi6wKV4JDY5nhgyWJAVLkzdYj1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:35:50:2a:16:68:96:94:b4:0b:f5:dc:20:c5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e Validity Not Before: Dec 5 23:00:53 2025 GMT Not After : Dec 6 23:00:53 2025 GMT Subject: CN=11e571844516fe13fe59e11cbb964690fc203788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:64:6e:da:d7:cc:5c:0a:15:fe:72:71:a6: 0d:06:d9:4d:b4:b6:37:b3:c7:73:c8:9e:43:66:5d: 89:2a:62:c0:62:0b:2c:e3:d0:26:5d:d6:a9:5d:30: ec:5a:21:fa:2d:74:2c:e2:1b:2d:2d:b1:fb:68:82: e2:72:73:3e:ca:b6:67:a9:5d:84:c0:fd:73:ed:e9: 49:ee:a1:6c:22:c6:e9:a5:28:db:b6:f1:01:0c:89: c6:45:13:ed:e7:90:65:3a:cb:83:ea:4b:76:87:86: f2:e0:04:74:4e:bf:62:e7:4a:48:49:d7:62:9a:22: 04:e0:d8:25:16:41:e4:70:74:5f:a9:11:c9:9e:07: 08:3d:40:94:b0:90:31:29:7c:49:75:4a:d9:2f:c8: fb:71:82:a4:5e:9d:1b:19:5f:04:f4:0f:5b:01:bd: de:33:b5:bc:44:53:cf:e2:61:e1:58:4c:7e:94:73: 5e:97:4a:46:e8:c4:fc:fa:59:22:7c:d5:e7:ba:eb: 38:fe:94:96:df:e0:5e:0b:1e:95:2d:fe:df:9a:e0: 0b:39:04:47:9f:7d:f3:d1:63:f3:85:30:d2:81:d6: 28:c9:1b:3e:93:e7:5c:81:3b:ae:12:01:57:57:43: 55:6b:07:f5:41:ec:9f:f8:6a:58:69:24:99:4e:3c: 14:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E5:71:84:45:16:FE:13:FE:59:E1:1C:BB:96:46:90:FC:20:37:88 X509v3 Authority Key Identifier: keyid:6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e5:e3:4a:4c:af:51:40:e3:e8:b1:5a:97:11:e4:4b:7a:f6: 9a:6a:03:6f:bd:2a:3c:bf:14:71:6d:41:cb:80:bf:5c:94:ee: 3b:3c:4e:0d:fb:f7:ef:31:e3:ea:71:11:57:6c:c7:78:09:79: 02:af:1f:02:e0:a7:55:2e:5a:31:bd:b2:fb:e8:41:72:21:46: 4e:85:78:d2:f6:00:bb:37:38:e6:dc:8a:ec:d7:47:d8:a6:42: 4c:cc:de:7b:cd:20:8c:20:3c:95:f1:5f:1a:c8:24:26:67:52: 5e:56:67:1f:80:b6:af:1d:59:c5:9f:1b:5d:da:98:c9:02:17: 66:fa:9f:90:ea:60:1d:7d:1d:aa:63:d0:0d:8d:98:86:15:e9: 4a:72:36:bb:fd:74:ac:ee:54:81:41:0f:2b:ff:7e:cd:7b:c8: 74:36:77:e3:25:90:07:e7:83:b4:78:89:93:67:5e:cc:0f:d3: 9c:a8:3f:e1:21:07:bf:88:b2:d7:43:77:51:b9:10:0c:46:c2: ef:76:6c:cf:c5:4a:ec:e0:a0:86:c2:2a:61:bf:06:d5:7b:d9: f6:a2:b1:17:fd:60:3f:da:cb:d5:75:a5:b1:9e:79:14:63:e5: a1:f8:e7:ae:0c:d9:e7:3f:59:e0:32:00:cd:65:47:75:0c:4b: 3e:32:05:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzVQKhZolpS0C/XcIMVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMWM0ODE5ZDBlMTlkZmE3NDBkODQ1MWFmMTM5OGQyMzBj NmQ4NGUwHhcNMjUxMjA1MjMwMDUzWhcNMjUxMjA2MjMwMDUzWjAzMTEwLwYDVQQD EygxMWU1NzE4NDQ1MTZmZTEzZmU1OWUxMWNiYjk2NDY5MGZjMjAzNzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPtkbtrXzFwKFf5ycaYNBtlNtLY3 s8dzyJ5DZl2JKmLAYgss49AmXdapXTDsWiH6LXQs4hstLbH7aILicnM+yrZnqV2E wP1z7elJ7qFsIsbppSjbtvEBDInGRRPt55BlOsuD6kt2h4by4AR0Tr9i50pISddi miIE4NglFkHkcHRfqRHJngcIPUCUsJAxKXxJdUrZL8j7cYKkXp0bGV8E9A9bAb3e M7W8RFPP4mHhWEx+lHNel0pG6MT8+lkifNXnuus4/pSW3+BeCx6VLf7fmuALOQRH n33z0WPzhTDSgdYoyRs+k+dcgTuuEgFXV0NVawf1Qeyf+GpYaSSZTjwUnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHlcYRFFv4T/lnhHLuWRpD8IDeIMB8GA1UdIwQY MBaAFGocSBnQ4Z36dA2EUa8TmNIwxthOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWh4SUdkRGhuZnAwRFlSUnJ4T1kwakRHMkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xYTNmNGItYjA4YS00NWFiLWE0NzYt ZDdiMjhkMmE4MmIxLzEvYWh4SUdkRGhuZnAwRFlSUnJ4T1kwakRHMkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xYTNmNGItYjA4YS00NWFiLWE0NzYtZDdiMjhkMmE4MmIx LzEvYWh4SUdkRGhuZnAwRFlSUnJ4T1kwakRHMkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquXjSkyv UUDj6LFalxHkS3r2mmoDb70qPL8UcW1By4C/XJTuOzxODfv37zHj6nERV2zHeAl5 Aq8fAuCnVS5aMb2y++hBciFGToV40vYAuzc45tyK7NdH2KZCTMzee80gjCA8lfFf GsgkJmdSXlZnH4C2rx1ZxZ8bXdqYyQIXZvqfkOpgHX0dqmPQDY2YhhXpSnI2u/10 rO5UgUEPK/9+zXvIdDZ34yWQB+eDtHiJk2dezA/TnKg/4SEHv4iy10N3UbkQDEbC 73Zsz8VK7OCghsIqYb8G1XvZ9qKxF/1gP9rL1XWlsZ55FGPlofjnrgzZ5z9Z4DIA zWVHdQxLPjIFrA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:42 2025 by rpki-client