This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft File: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft (raw, json) Hash identifier: kFCCt6bXlvoixLKOhNgdguvf6GnxBIBLN2LA4hIyDPs= Subject key identifier: 01:62:B0:CD:A1:FF:DC:F1:B9:B3:A3:F4:11:D2:1D:82:97:A3:D6:A1 Authority key identifier: 02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF Certificate issuer: /CN=023c397109340b767bcb324515f6d1f82c8cc7cf Certificate serial: 019AF389ADDB324309EA94A3D986B985CE81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft Manifest number: 13CE Signing time: Sat 06 Dec 2025 12:01:17 +0000 Manifest this update: Sat 06 Dec 2025 12:01:17 +0000 Manifest next update: Sun 07 Dec 2025 12:01:17 +0000 Files and hashes: 1: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl (hash: IkzTSPkYsMFVQ8ctjqolDz83uyR+slraSV0OGIDRAow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:ad:db:32:43:09:ea:94:a3:d9:86:b9:85:ce:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023c397109340b767bcb324515f6d1f82c8cc7cf Validity Not Before: Dec 6 12:01:17 2025 GMT Not After : Dec 7 12:01:17 2025 GMT Subject: CN=0162b0cda1ffdcf1b9b3a3f411d21d8297a3d6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a3:0c:17:77:58:ed:6e:5f:03:f9:08:fa:3c: c3:08:35:87:c4:fb:86:66:ac:57:1e:23:6b:02:14: c5:e3:a6:5d:f5:01:89:70:63:6d:a2:c3:b7:61:0e: 97:68:a4:0e:48:07:cd:a3:73:48:95:86:ca:de:72: f5:fc:3e:ed:67:11:4b:5c:21:6a:1d:d1:64:68:aa: 84:72:ef:0b:6a:b8:75:53:57:f7:5d:a9:24:ed:d5: af:a7:2f:a6:f8:57:15:a5:d2:0c:94:f5:7b:23:e1: c6:f5:59:3d:9b:21:a9:72:6d:ea:30:63:55:54:76: 2d:d3:79:26:60:1b:af:5f:e0:c6:0e:3e:37:21:ad: 7c:57:fb:c4:0f:72:52:5c:f1:07:63:1a:be:f5:68: f4:05:9f:3d:f9:83:ab:46:c1:48:0c:35:f4:4a:48: 9a:c7:36:0c:fd:12:0d:91:b9:98:2a:d8:4b:0f:db: df:c5:19:1d:2c:28:08:28:72:38:c4:f9:70:37:39: 04:b1:4c:f1:45:4b:be:ac:34:1e:43:54:c0:62:20: 59:92:78:3c:f8:7a:d4:e7:a7:35:a1:da:0d:d7:57: 49:e3:19:e0:04:f8:61:d1:a9:53:56:a2:76:90:3b: ff:7d:b0:8a:7c:b5:d1:37:34:67:1b:5d:10:18:50: e2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:62:B0:CD:A1:FF:DC:F1:B9:B3:A3:F4:11:D2:1D:82:97:A3:D6:A1 X509v3 Authority Key Identifier: keyid:02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:63:ca:8d:8e:4d:f0:e0:24:8f:d6:c9:36:f8:fc:25:48:60: 2c:fc:60:19:83:9d:e2:96:bd:aa:bc:89:bf:0e:5c:52:4f:af: 3d:b2:78:e1:ab:8d:b8:ad:5a:31:72:9b:55:4d:7d:14:b4:2a: db:0d:83:ec:74:3c:f8:63:d5:9b:d2:3e:fa:2c:be:7d:50:6a: 2c:8f:49:88:a1:3f:1e:30:5d:74:ac:de:34:97:cc:64:ec:46: 83:71:e3:39:77:1f:03:0b:06:fb:ef:ed:f1:cc:2b:53:79:c7: 7d:85:f4:1f:d7:32:60:7b:37:fa:3c:db:96:57:41:c7:9e:df: f6:78:37:ca:9a:7b:64:9a:e9:30:b7:33:0e:94:9c:06:c2:0f: 22:6e:84:fd:04:f1:ef:fd:08:4a:29:5d:c6:4d:73:86:23:b6: 58:35:84:6c:30:fe:38:b2:c2:b3:df:13:da:64:7f:68:36:0a: 22:f2:ac:51:5e:48:ab:c0:56:c3:70:fb:09:70:31:bb:60:c8: 7e:f1:4d:76:a4:69:df:be:79:b0:ff:46:12:b3:f5:e6:bf:1c: e4:1b:96:e9:94:4f:69:4b:2b:56:86:2d:55:87:a3:45:51:27: 0c:84:f5:7a:5f:a8:5a:74:10:d0:32:b5:1d:45:62:74:34:92: 4b:f8:86:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzia3bMkMJ6pSj2Ya5hc6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyM2MzOTcxMDkzNDBiNzY3YmNiMzI0NTE1ZjZkMWY4MmM4 Y2M3Y2YwHhcNMjUxMjA2MTIwMTE3WhcNMjUxMjA3MTIwMTE3WjAzMTEwLwYDVQQD EygwMTYyYjBjZGExZmZkY2YxYjliM2EzZjQxMWQyMWQ4Mjk3YTNkNmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqMMF3dY7W5fA/kI+jzDCDWHxPuG ZqxXHiNrAhTF46Zd9QGJcGNtosO3YQ6XaKQOSAfNo3NIlYbK3nL1/D7tZxFLXCFq HdFkaKqEcu8Larh1U1f3Xakk7dWvpy+m+FcVpdIMlPV7I+HG9Vk9myGpcm3qMGNV VHYt03kmYBuvX+DGDj43Ia18V/vED3JSXPEHYxq+9Wj0BZ89+YOrRsFIDDX0Skia xzYM/RINkbmYKthLD9vfxRkdLCgIKHI4xPlwNzkEsUzxRUu+rDQeQ1TAYiBZkng8 +HrU56c1odoN11dJ4xngBPhh0alTVqJ2kDv/fbCKfLXRNzRnG10QGFDiGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFisM2h/9zxubOj9BHSHYKXo9ahMB8GA1UdIwQY MBaAFAI8OXEJNAt2e8syRRX20fgsjMfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWp3NWNRazBDM1o3eXpKRkZmYlItQ3lNeDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hNTU5MzUtNTJiZi00ZDZmLThiOTAt ZTkwZWVmZGIzYWM1LzEvQWp3NWNRazBDM1o3eXpKRkZmYlItQ3lNeDg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9hNTU5MzUtNTJiZi00ZDZmLThiOTAtZTkwZWVmZGIzYWM1 LzEvQWp3NWNRazBDM1o3eXpKRkZmYlItQ3lNeDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2PKjY5N 8OAkj9bJNvj8JUhgLPxgGYOd4pa9qryJvw5cUk+vPbJ44auNuK1aMXKbVU19FLQq 2w2D7HQ8+GPVm9I++iy+fVBqLI9JiKE/HjBddKzeNJfMZOxGg3HjOXcfAwsG++/t 8cwrU3nHfYX0H9cyYHs3+jzblldBx57f9ng3ypp7ZJrpMLczDpScBsIPIm6E/QTx 7/0ISildxk1zhiO2WDWEbDD+OLLCs98T2mR/aDYKIvKsUV5Iq8BWw3D7CXAxu2DI fvFNdqRp3755sP9GErP15r8c5BuW6ZRPaUsrVoYtVYejRVEnDIT1el+oWnQQ0DK1 HUVidDSSS/iGQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:25:24 2025 by rpki-client