This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json) Hash identifier: csLlsZAvRCflna3qxhXqQnMXcSApusrYSMrIxxLnbK0= Subject key identifier: 44:8E:EC:28:A9:1B:FE:A4:DD:37:6F:85:3E:B6:BC:B7:79:3A:3D:D9 Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6 Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6 Certificate serial: 019AF164372CA8F188A08564F04E90A71D64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft Manifest number: 117D Signing time: Sat 06 Dec 2025 02:01:07 +0000 Manifest this update: Sat 06 Dec 2025 02:01:07 +0000 Manifest next update: Sun 07 Dec 2025 02:01:07 +0000 Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: U5Csv8eaW94s/sZRL5N2YqkuBeQSe/pfXSc7e2NFMMY=) 2: QQdNezXcd1-hIhXGU4Qn8ucBV9Q.roa (hash: WaSlkfe1MwojG0zscntSp+2Lok4NRbwf50hshXXL8jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:37:2c:a8:f1:88:a0:85:64:f0:4e:90:a7:1d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00933848021d3888860dadf7188094d792af6ae6 Validity Not Before: Dec 6 02:01:07 2025 GMT Not After : Dec 7 02:01:07 2025 GMT Subject: CN=448eec28a91bfea4dd376f853eb6bcb7793a3dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:a6:2e:90:dd:ec:04:e4:8f:41:21:cf:46: 57:99:1a:2a:75:49:30:c7:80:ae:fc:e6:6e:0c:e4: 76:c2:ae:a7:03:98:3e:42:f0:84:ff:c4:6d:99:62: b5:24:c9:e8:62:07:6c:c0:d1:71:6b:1f:1e:9c:d2: 1d:fa:3f:c8:a8:a8:c1:fe:b4:e6:39:16:8c:42:a3: ea:cf:8a:f7:aa:29:4d:7a:36:96:26:a3:1b:77:55: 42:3d:4c:1a:e4:70:ae:ca:c5:8e:06:80:5f:63:04: fe:a7:81:ab:5e:1a:7b:2e:35:e4:dc:d8:9a:07:5b: 63:e2:ba:0c:b2:22:75:6f:50:2d:80:b2:45:33:e7: ec:ee:5c:2c:36:5e:8e:f6:68:1d:bf:da:9a:78:75: dc:d0:ed:be:0c:59:3e:74:f7:96:5b:26:f4:3a:85: 84:7f:ca:f6:d5:1b:5d:34:7a:56:b7:1a:1b:07:f0: ff:65:f7:30:4a:84:f5:45:fd:c9:5f:21:2b:b1:be: 65:42:04:8c:de:b1:14:39:e9:e2:86:01:68:92:52: fe:7b:d5:77:ec:cf:ab:a1:3f:6e:de:3c:e8:e3:99: 23:cd:76:a7:49:f8:29:bb:22:26:ae:b5:5f:c2:08: 7a:69:cb:ad:71:b0:29:5e:a1:81:55:96:48:7a:81: bf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8E:EC:28:A9:1B:FE:A4:DD:37:6F:85:3E:B6:BC:B7:79:3A:3D:D9 X509v3 Authority Key Identifier: keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:80:fc:6e:18:f0:dc:5e:83:b2:96:5c:17:44:b5:6b:f4:c1: 9f:b3:1f:30:3f:96:6a:50:86:32:22:a9:2a:9f:1a:20:62:39: fe:0e:70:d4:58:74:87:64:26:93:95:42:7e:40:85:8c:af:f8: a1:fc:cb:55:58:0d:d3:da:33:bd:94:b1:3f:75:fe:f4:ec:2e: 01:02:b3:da:b7:99:ae:fe:71:f2:5a:46:3b:38:c9:ed:0b:ac: 3e:f7:20:34:6e:ad:20:89:fc:05:55:d0:6b:3d:af:78:a2:07: b6:59:a6:15:d2:71:ef:e8:2d:dd:9d:70:46:17:b9:2d:fc:98: 20:ea:ca:96:43:06:3c:7d:e9:b8:c1:ff:16:2b:18:71:a0:a0: 4d:78:af:b3:eb:d7:25:d1:e1:b7:f5:db:b7:ce:f8:2b:f9:ab: d8:fa:46:0a:d8:75:15:fc:b7:f2:8b:28:6d:1a:c7:26:94:21: e2:be:d0:29:30:b5:8f:21:18:ce:a6:3f:7f:7f:8a:e6:e2:64: b8:25:af:10:3d:11:01:ae:6a:67:2f:bd:4d:78:17:50:12:fd: d6:d8:3d:54:f0:09:fb:7f:b5:c0:da:69:08:9d:4f:52:11:aa: cc:d3:39:5e:a7:28:8a:72:0c:89:8a:cb:c8:40:24:71:fb:0f: 44:81:57:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDcsqPGIoIVk8E6Qpx1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOTMzODQ4MDIxZDM4ODg4NjBkYWRmNzE4ODA5NGQ3OTJh ZjZhZTYwHhcNMjUxMjA2MDIwMTA3WhcNMjUxMjA3MDIwMTA3WjAzMTEwLwYDVQQD Eyg0NDhlZWMyOGE5MWJmZWE0ZGQzNzZmODUzZWI2YmNiNzc5M2EzZGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3OmLpDd7ATkj0Ehz0ZXmRoqdUkw x4Cu/OZuDOR2wq6nA5g+QvCE/8RtmWK1JMnoYgdswNFxax8enNId+j/IqKjB/rTm ORaMQqPqz4r3qilNejaWJqMbd1VCPUwa5HCuysWOBoBfYwT+p4GrXhp7LjXk3Nia B1tj4roMsiJ1b1AtgLJFM+fs7lwsNl6O9mgdv9qaeHXc0O2+DFk+dPeWWyb0OoWE f8r21RtdNHpWtxobB/D/ZfcwSoT1Rf3JXyErsb5lQgSM3rEUOenihgFoklL+e9V3 7M+roT9u3jzo45kjzXanSfgpuyImrrVfwgh6acutcbApXqGBVZZIeoG/ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESO7CipG/6k3TdvhT62vLd5Oj3ZMB8GA1UdIwQY MBaAFACTOEgCHTiIhg2t9xiAlNeSr2rmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84Njc2MmItYWE2MS00ODRhLWIxNTkt OTdmMzliYjEzMzJkLzEvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84Njc2MmItYWE2MS00ODRhLWIxNTktOTdmMzliYjEzMzJk LzEvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYD8bhjw 3F6DspZcF0S1a/TBn7MfMD+WalCGMiKpKp8aIGI5/g5w1Fh0h2Qmk5VCfkCFjK/4 ofzLVVgN09ozvZSxP3X+9OwuAQKz2reZrv5x8lpGOzjJ7QusPvcgNG6tIIn8BVXQ az2veKIHtlmmFdJx7+gt3Z1wRhe5LfyYIOrKlkMGPH3puMH/FisYcaCgTXivs+vX JdHht/Xbt874K/mr2PpGCth1Ffy38osobRrHJpQh4r7QKTC1jyEYzqY/f3+K5uJk uCWvED0RAa5qZy+9TXgXUBL91tg9VPAJ+3+1wNppCJ1PUhGqzNM5XqcoinIMiYrL yEAkcfsPRIFXTw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:14:52 2025 by rpki-client