This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft File: AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json) Hash identifier: EXG8iwxoEdY6dsfIQcEjhh2gslYl2i8She3F16yILvY= Subject key identifier: C4:B4:B6:E7:9A:15:17:A6:02:13:E9:73:C1:A3:BD:1E:EB:D3:4C:18 Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2 Certificate issuer: /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2 Certificate serial: 019AF31D5BF6A975E87D27AD6757E2D413B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:02:58 +0000 Manifest this update: Sat 06 Dec 2025 10:02:58 +0000 Manifest next update: Sun 07 Dec 2025 10:02:58 +0000 Files and hashes: 1: 6bvZxxULuUAwxd6eAYmdH966b80.roa (hash: UhY3F2JnlJhsLB1FG3kdABwVVPcmvuwcVrV1nXeuwB0=) 2: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: d1hGJkyo4cFWRKa+uTQ7fk7XRfsPwRReaSg9sw7U6n0=) 3: hkmQH-83zbYgbeFajt_G5vLUDB4.roa (hash: gB0UcPN+esB++4aqp9cznO6G7WYynK4/0uUbdmlbv78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:5b:f6:a9:75:e8:7d:27:ad:67:57:e2:d4:13:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2 Validity Not Before: Dec 6 10:02:58 2025 GMT Not After : Dec 7 10:02:58 2025 GMT Subject: CN=c4b4b6e79a1517a60213e973c1a3bd1eebd34c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:01:18:b8:50:2c:6c:df:4c:7d:d3:21:0e: 84:73:e1:f8:14:44:33:b3:e1:5c:a2:99:6f:13:1c: 44:c1:55:12:b1:b5:33:08:cb:a5:1b:ea:37:da:c3: 24:18:70:a9:16:3d:85:f2:0d:68:b7:2c:3d:d7:34: ea:b9:eb:e6:34:a4:98:57:db:f3:60:8e:3d:3d:c7: bf:4d:90:69:b8:71:d1:ca:6f:c6:4d:58:0c:f4:8b: 7b:fc:e0:3c:a3:ee:7b:e9:4d:f8:1a:ac:23:c5:58: 82:79:38:f0:03:64:31:b0:2d:ac:22:9b:7b:58:bc: 35:1f:ab:53:9a:2e:e7:2a:5e:13:d3:9b:50:10:0f: e6:7e:25:e6:ae:f7:be:46:48:7a:e0:9c:ee:f5:14: 3e:00:b8:8b:0b:c0:03:3e:99:f3:6f:e1:52:f4:48: 8d:1d:02:2f:d9:8d:fc:64:51:15:90:d4:30:26:9b: df:00:d3:f1:43:a6:58:1b:3e:8d:80:ff:38:64:15: 4e:32:ed:83:29:3b:3d:97:3b:ad:b9:b8:3e:78:90: 95:af:ab:da:b6:8c:e8:a6:8e:dc:81:eb:b3:0b:71: 46:1e:f4:44:ba:73:90:49:78:a2:9a:b1:39:16:9e: fb:cc:44:4d:05:4f:32:ae:a5:9f:06:00:f8:91:7e: ea:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B4:B6:E7:9A:15:17:A6:02:13:E9:73:C1:A3:BD:1E:EB:D3:4C:18 X509v3 Authority Key Identifier: keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ce:d0:81:9c:d0:ab:45:9f:41:af:8a:01:0b:7d:ce:1a:ec: 17:f9:76:13:64:c3:dd:1b:b1:d0:e1:32:10:56:f6:77:10:6d: 4b:15:4a:cb:37:fc:dc:c0:2c:a8:35:1b:64:f3:d6:24:3c:f5: e8:ab:22:f6:d2:65:8a:85:b2:bd:59:fa:d1:a1:b8:c1:71:c5: 4f:23:a7:c6:17:15:d1:ce:4f:a4:59:d1:df:22:b6:a8:9e:10: 75:85:5b:20:fd:bc:05:32:d9:ba:cf:de:ab:78:32:78:37:90: 69:87:bf:5a:88:0b:f0:f3:b1:a6:75:90:d0:51:d2:93:d2:ff: e5:70:fd:eb:19:49:1c:15:a3:38:23:99:b0:af:4c:13:7c:ca: 4c:a8:92:a5:d4:53:c2:03:d4:eb:5a:ad:ed:4f:21:72:32:12: 71:e1:98:02:11:46:83:50:63:3f:b4:7d:1d:fd:57:4d:1a:f8: 52:07:5b:16:a3:e2:73:d6:60:9f:69:ab:67:e1:32:69:ee:3b: 01:d8:26:b6:ee:02:cf:1d:de:ae:b5:f6:18:bc:c0:99:1e:a3: 95:5e:13:0c:fd:01:eb:b2:05:7f:11:45:cb:01:44:8b:4b:42: 40:6f:d7:df:69:5d:23:24:19:cc:97:35:0d:22:b0:ab:45:a7: c5:62:63:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVv2qXXofSetZ1fi1BO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYWY5ZGRhMzA3Y2I1MjUzODVlZjkwZjUwNmQwZDU3YmI5 ZDJiZjIwHhcNMjUxMjA2MTAwMjU4WhcNMjUxMjA3MTAwMjU4WjAzMTEwLwYDVQQD EyhjNGI0YjZlNzlhMTUxN2E2MDIxM2U5NzNjMWEzYmQxZWViZDM0YzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx8BGLhQLGzfTH3TIQ6Ec+H4FEQz s+FcoplvExxEwVUSsbUzCMulG+o32sMkGHCpFj2F8g1otyw91zTquevmNKSYV9vz YI49Pce/TZBpuHHRym/GTVgM9It7/OA8o+576U34GqwjxViCeTjwA2QxsC2sIpt7 WLw1H6tTmi7nKl4T05tQEA/mfiXmrve+Rkh64Jzu9RQ+ALiLC8ADPpnzb+FS9EiN HQIv2Y38ZFEVkNQwJpvfANPxQ6ZYGz6NgP84ZBVOMu2DKTs9lzutubg+eJCVr6va tozopo7cgeuzC3FGHvREunOQSXiimrE5Fp77zERNBU8yrqWfBgD4kX7qXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMS0tueaFRemAhPpc8GjvR7r00wYMB8GA1UdIwQY MBaAFACvndowfLUlOF75D1BtDVe7nSvyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUstZDJqQjh0U1U0WHZrUFVHME5WN3VkS19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kMGUyZjQtYjYwYS00MGIyLTkyZTkt OTBlYWNlOWUwNTllLzEvQUstZDJqQjh0U1U0WHZrUFVHME5WN3VkS19JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9kMGUyZjQtYjYwYS00MGIyLTkyZTktOTBlYWNlOWUwNTll LzEvQUstZDJqQjh0U1U0WHZrUFVHME5WN3VkS19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMc7QgZzQ q0WfQa+KAQt9zhrsF/l2E2TD3Rux0OEyEFb2dxBtSxVKyzf83MAsqDUbZPPWJDz1 6Ksi9tJlioWyvVn60aG4wXHFTyOnxhcV0c5PpFnR3yK2qJ4QdYVbIP28BTLZus/e q3gyeDeQaYe/WogL8POxpnWQ0FHSk9L/5XD96xlJHBWjOCOZsK9ME3zKTKiSpdRT wgPU61qt7U8hcjISceGYAhFGg1BjP7R9Hf1XTRr4UgdbFqPic9Zgn2mrZ+Eyae47 Adgmtu4Czx3errX2GLzAmR6jlV4TDP0B67IFfxFFywFEi0tCQG/X32ldIyQZzJc1 DSKwq0WnxWJjpg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:09 2025 by rpki-client