This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft File: AK26S0B03hPZjWSBmm7IX4Eqeek.mft (raw, json) Hash identifier: /HO7dszDVNfDA+SFwaHSIZjjQZYnL7of/f8588aw2Ws= Subject key identifier: A6:05:FB:22:95:F2:D7:C5:2B:98:E5:C1:69:42:21:22:E7:46:4E:2B Authority key identifier: 00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9 Certificate issuer: /CN=00adba4b4074de13d98d64819a6ec85f812a79e9 Certificate serial: 019AF19B689935333B905993A9C00DFF53CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: 6MYFp39ARHMq2YJE5lHJSxTEL30.roa (hash: 5gVWBuoSK8Y4bSXsVg//9ioaebm5O8SmIGV4l8p9YZY=) 2: AK26S0B03hPZjWSBmm7IX4Eqeek.crl (hash: tEh8uMZLrBCvYcKDGxETx0KqekjjxixLwO6YWdft0PI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:68:99:35:33:3b:90:59:93:a9:c0:0d:ff:53:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00adba4b4074de13d98d64819a6ec85f812a79e9 Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=a605fb2295f2d7c52b98e5c169422122e7464e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:5c:6f:eb:1e:7b:fc:aa:28:aa:18:6d:78: 98:99:9e:c9:2b:17:47:30:2d:19:28:6a:2f:57:f2: c0:30:ba:a6:f4:f6:db:9c:8b:b8:f6:5c:4e:bf:c1: 8c:0e:4c:3a:18:be:7d:04:af:4d:c6:ed:19:d8:27: c7:47:15:16:8c:01:1b:49:e8:eb:74:c0:85:c0:56: 27:11:1e:d5:9b:78:6e:c4:ca:bc:0b:43:1e:01:cf: f0:8f:b2:9d:b1:9f:0e:4b:cf:cb:85:a6:6b:e8:0d: b4:a0:c3:f6:f2:8c:ea:45:64:9a:14:ad:b4:a8:51: 75:a8:3d:32:e7:d6:5a:8b:92:e3:51:eb:85:16:8d: 84:e4:9f:92:21:1b:51:63:93:6c:e9:5c:b3:1f:9f: 23:a0:44:51:c9:7b:e8:58:b5:da:16:2e:c0:b0:35: 2e:88:29:2a:ab:5c:9f:5a:f0:90:b9:6a:ad:aa:82: d6:77:73:77:37:7e:0b:5a:56:24:c2:d5:53:b3:76: da:0f:0f:2d:30:12:b8:9f:3e:c0:03:a8:5c:6a:19: ca:2a:98:0b:a6:90:0e:c3:e5:d6:09:dd:ea:b2:55: 65:92:1e:93:19:11:bf:c1:0a:4f:ea:5f:60:2f:d3: c4:16:e4:c1:5c:b6:47:98:66:eb:a6:e6:6c:a6:b0: cf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:05:FB:22:95:F2:D7:C5:2B:98:E5:C1:69:42:21:22:E7:46:4E:2B X509v3 Authority Key Identifier: keyid:00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:a9:c3:4d:3d:4a:87:40:e6:41:5e:39:bb:99:83:90:23:79: c0:71:1f:b4:08:b1:94:9a:3d:dc:7e:23:01:4b:b2:df:dc:1b: 47:4a:98:da:c2:4a:b4:f5:7a:8d:1e:e5:e2:54:93:da:c0:41: 81:ad:90:3f:2e:c5:40:fa:5d:42:d6:bd:03:c6:e9:20:3c:28: 30:41:a1:b8:60:f9:a3:28:b6:60:a3:ce:cb:8f:d2:5e:8b:cf: 6d:1e:fd:cf:71:41:2d:8d:a0:b7:d9:ce:52:7c:fa:dc:1e:2c: 59:3a:ba:34:7c:31:ef:20:67:c6:7b:ba:93:b3:f2:c6:b5:b0: 53:ea:42:59:6e:37:d0:ee:13:c8:d1:68:53:ed:c4:05:35:18: 5d:c7:51:ca:c2:be:f5:9f:ea:01:36:76:3c:4d:64:30:43:d9: 87:1e:d4:c3:c6:12:75:f6:51:f4:a7:95:23:f2:0a:af:80:2f: 8b:e7:55:12:5d:d5:dc:bc:3c:c6:3f:26:95:dd:ff:2e:6a:dd: 9f:e4:d0:80:52:63:01:50:92:ad:99:3f:99:fb:b8:76:a4:b8: dc:2a:e1:53:b7:67:6e:de:06:ac:b7:25:f5:53:df:3b:95:03: 00:06:47:fa:23:48:65:71:5f:33:d9:57:05:50:bf:42:18:d3: ae:aa:52:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2iZNTM7kFmTqcAN/1PNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYWRiYTRiNDA3NGRlMTNkOThkNjQ4MTlhNmVjODVmODEy YTc5ZTkwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD EyhhNjA1ZmIyMjk1ZjJkN2M1MmI5OGU1YzE2OTQyMjEyMmU3NDY0ZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmhcb+see/yqKKoYbXiYmZ7JKxdH MC0ZKGovV/LAMLqm9PbbnIu49lxOv8GMDkw6GL59BK9Nxu0Z2CfHRxUWjAEbSejr dMCFwFYnER7Vm3huxMq8C0MeAc/wj7KdsZ8OS8/LhaZr6A20oMP28ozqRWSaFK20 qFF1qD0y59Zai5LjUeuFFo2E5J+SIRtRY5Ns6VyzH58joERRyXvoWLXaFi7AsDUu iCkqq1yfWvCQuWqtqoLWd3N3N34LWlYkwtVTs3baDw8tMBK4nz7AA6hcahnKKpgL ppAOw+XWCd3qslVlkh6TGRG/wQpP6l9gL9PEFuTBXLZHmGbrpuZsprDPbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYF+yKV8tfFK5jlwWlCISLnRk4rMB8GA1UdIwQY MBaAFACtuktAdN4T2Y1kgZpuyF+BKnnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUsyNlMwQjAzaFBaaldTQm1tN0lYNEVxZWVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMTRhMGYtYzFkMi00MzRjLTg3MWUt YjM4OTViOTYyYzUyLzEvQUsyNlMwQjAzaFBaaldTQm1tN0lYNEVxZWVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMTRhMGYtYzFkMi00MzRjLTg3MWUtYjM4OTViOTYyYzUy LzEvQUsyNlMwQjAzaFBaaldTQm1tN0lYNEVxZWVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAganDTT1K h0DmQV45u5mDkCN5wHEftAixlJo93H4jAUuy39wbR0qY2sJKtPV6jR7l4lST2sBB ga2QPy7FQPpdQta9A8bpIDwoMEGhuGD5oyi2YKPOy4/SXovPbR79z3FBLY2gt9nO Unz63B4sWTq6NHwx7yBnxnu6k7PyxrWwU+pCWW430O4TyNFoU+3EBTUYXcdRysK+ 9Z/qATZ2PE1kMEPZhx7Uw8YSdfZR9KeVI/IKr4Avi+dVEl3V3Lw8xj8mld3/Lmrd n+TQgFJjAVCSrZk/mfu4dqS43CrhU7dnbt4GrLcl9VPfO5UDAAZH+iNIZXFfM9lX BVC/QhjTrqpS8A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:07 2025 by rpki-client