This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft File: AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft (raw, json) Hash identifier: PdFbBqWJAtOmaB1MljGmJzsf8VqzkFAOEHc35QlXKJw= Subject key identifier: AC:1B:52:A1:D0:11:4F:B8:56:4A:59:06:FB:A9:AD:E0:CA:2E:A2:3B Authority key identifier: 00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E Certificate issuer: /CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e Certificate serial: 019B3A8FCE1972A340DC51B604D0178D4A7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft Manifest number: 1783 Signing time: Sat 20 Dec 2025 07:01:01 +0000 Manifest this update: Sat 20 Dec 2025 07:01:01 +0000 Manifest next update: Sun 21 Dec 2025 07:01:01 +0000 Files and hashes: 1: AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl (hash: TuCUefHTNq4w08WOfq58VRgUknvvZXdlsB9MSqChV1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:ce:19:72:a3:40:dc:51:b6:04:d0:17:8d:4a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e Validity Not Before: Dec 20 07:01:01 2025 GMT Not After : Dec 21 07:01:01 2025 GMT Subject: CN=ac1b52a1d0114fb8564a5906fba9ade0ca2ea23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2b:9c:15:12:7a:23:1c:26:fc:cb:ac:04:ce: 1f:9e:be:d8:32:48:e7:6b:09:bc:b7:2f:38:18:45: f3:c5:96:41:d2:5a:21:39:9f:9e:1b:2c:a9:5e:4e: d0:50:d2:c7:48:5c:84:59:7b:94:0d:ac:c5:80:b3: b2:04:e1:94:6f:ac:bd:c8:f4:60:d4:b3:92:ed:be: 21:c0:d9:ba:c6:52:da:7f:cd:c1:d6:28:4d:fd:4d: c2:bc:ab:dc:71:51:d4:e7:2c:03:35:a9:71:d0:23: 60:f7:3f:ee:50:8c:65:80:aa:d0:8a:9b:d6:69:96: c9:d2:41:e1:6f:99:37:a4:96:30:65:4a:ef:f4:be: 13:9b:d7:b1:8b:fd:9b:96:8e:08:0f:78:96:35:52: 4a:87:70:de:8a:7c:18:62:af:31:1b:7d:0f:4d:19: 6a:c5:ae:69:eb:4f:25:91:ec:8b:b1:27:5f:b2:a5: e9:aa:df:19:94:07:74:30:5f:e1:b4:52:2e:ba:ad: 39:7e:23:ff:05:97:95:e7:5d:1e:f9:f5:79:30:b0: fd:ad:5d:49:ef:4d:5e:30:6a:3f:00:4b:d3:24:dd: 1b:56:d4:50:7d:d1:9b:55:82:e4:ac:7e:c9:17:f0: 7c:ac:ca:1f:6e:b9:12:bd:18:93:01:74:db:c3:b2: 1f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1B:52:A1:D0:11:4F:B8:56:4A:59:06:FB:A9:AD:E0:CA:2E:A2:3B X509v3 Authority Key Identifier: keyid:00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:bc:8e:96:c9:e9:89:e3:89:c3:62:c7:4f:f7:e2:62:6e:41: a3:f2:48:d2:ff:e3:fc:3d:dc:90:9c:21:da:4b:d8:12:c3:a6: 86:c0:d7:e8:ba:6a:94:83:d4:12:cc:6d:ab:83:d7:33:2f:47: f1:61:3d:b8:05:f3:35:46:a0:86:85:89:45:9b:d3:24:14:06: 6a:88:f8:c3:e2:86:41:54:03:b4:aa:6b:7f:b9:2d:12:5a:f5: 5b:be:00:2a:dc:03:31:c3:a8:50:51:57:23:42:36:1d:4c:36: c2:90:93:39:48:91:ff:14:61:c2:92:9a:ae:11:98:4c:d4:db: ac:e5:bb:75:75:10:28:a7:e6:ad:97:b0:c3:30:33:1e:dc:4a: 42:98:fc:74:41:4c:c0:6b:e6:b6:0e:12:e0:18:66:bb:c6:76: d3:23:bb:3a:d6:d2:27:fe:26:80:34:ab:7a:ff:e4:6b:0f:d9: c3:a0:fa:43:c2:ca:79:94:66:46:69:1c:47:7d:9d:9c:18:ca: 49:cf:c8:31:e1:5a:2f:ce:07:aa:d9:43:c4:76:11:9d:64:20: ee:7a:7e:5a:92:6a:fc:ab:6f:b2:52:05:93:42:d4:0e:0d:c4: 13:44:39:95:7c:6c:a5:65:d4:af:ad:bf:87:9b:9d:a8:38:a8: f5:e0:7f:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j84ZcqNA3FG2BNAXjUp8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOTI2Y2E4YzUxZmQxZWViMjdjMmE3ODRkYmYyMGJkMmE0 OTkxOWUwHhcNMjUxMjIwMDcwMTAxWhcNMjUxMjIxMDcwMTAxWjAzMTEwLwYDVQQD EyhhYzFiNTJhMWQwMTE0ZmI4NTY0YTU5MDZmYmE5YWRlMGNhMmVhMjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iucFRJ6Ixwm/MusBM4fnr7YMkjn awm8ty84GEXzxZZB0lohOZ+eGyypXk7QUNLHSFyEWXuUDazFgLOyBOGUb6y9yPRg 1LOS7b4hwNm6xlLaf83B1ihN/U3CvKvccVHU5ywDNalx0CNg9z/uUIxlgKrQipvW aZbJ0kHhb5k3pJYwZUrv9L4Tm9exi/2blo4ID3iWNVJKh3DeinwYYq8xG30PTRlq xa5p608lkeyLsSdfsqXpqt8ZlAd0MF/htFIuuq05fiP/BZeV510e+fV5MLD9rV1J 701eMGo/AEvTJN0bVtRQfdGbVYLkrH7JF/B8rMofbrkSvRiTAXTbw7If0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwbUqHQEU+4VkpZBvupreDKLqI7MB8GA1UdIwQY MBaAFACSbKjFH9HusnwqeE2/IL0qSZGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpKc3FNVWYwZTZ5ZkNwNFRiOGd2U3BKa1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81NDM2NDMtYjNiYS00ZWNkLWFiZDQt YzE5NTU4NTQ5MDBjLzEvQUpKc3FNVWYwZTZ5ZkNwNFRiOGd2U3BKa1o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS81NDM2NDMtYjNiYS00ZWNkLWFiZDQtYzE5NTU4NTQ5MDBj LzEvQUpKc3FNVWYwZTZ5ZkNwNFRiOGd2U3BKa1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7yOlsnp ieOJw2LHT/fiYm5Bo/JI0v/j/D3ckJwh2kvYEsOmhsDX6LpqlIPUEsxtq4PXMy9H 8WE9uAXzNUaghoWJRZvTJBQGaoj4w+KGQVQDtKprf7ktElr1W74AKtwDMcOoUFFX I0I2HUw2wpCTOUiR/xRhwpKarhGYTNTbrOW7dXUQKKfmrZewwzAzHtxKQpj8dEFM wGvmtg4S4Bhmu8Z20yO7OtbSJ/4mgDSrev/kaw/Zw6D6Q8LKeZRmRmkcR32dnBjK Sc/IMeFaL84HqtlDxHYRnWQg7np+WpJq/KtvslIFk0LUDg3EE0Q5lXxspWXUr62/ h5udqDio9eB/pQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:57:57 2025 by rpki-client