This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft File: AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft (raw, json) Hash identifier: 0hOc7AxqXBR3Qacu4fXLHA2pgCYOTfI0CPZPoV+AEqA= Subject key identifier: BE:3E:6F:30:9D:93:49:D7:1C:B2:40:32:CE:C6:26:B4:0C:AB:A6:F9 Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2 Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2 Certificate serial: 019AF0BEF5C53ABE3B449E0B0EF1713997E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft Manifest number: 1766 Signing time: Fri 05 Dec 2025 23:00:37 +0000 Manifest this update: Fri 05 Dec 2025 23:00:37 +0000 Manifest next update: Sat 06 Dec 2025 23:00:37 +0000 Files and hashes: 1: 7Ns-2cBnKCoAvvMfhajIUsqOfRM.roa (hash: xGbT8/8kQTWGMRGlRdu/Jth3qb8PIWWDn9MA5RF+54k=) 2: AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl (hash: f4xIQQA4hyo5A4PNsOKwUtLc8U6PexkwvWr8vXKLte4=) 3: aElB0_w7iL_LUpRU29R2Y75Dhrc.roa (hash: 1LiV/+sY4qGsrVLFK70gELnTzz3VangyIqPY1yxftrc=) 4: hAKkzIf2oiJNVc7cq9BOLAqtAwk.roa (hash: 3RbNRO/4bn+lvyxkoMHSxqNiv9S4Xn+bWprhvyyRHQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:f5:c5:3a:be:3b:44:9e:0b:0e:f1:71:39:97:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2 Validity Not Before: Dec 5 23:00:37 2025 GMT Not After : Dec 6 23:00:37 2025 GMT Subject: CN=be3e6f309d9349d71cb24032cec626b40caba6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:86:07:36:4a:91:48:48:79:61:b0:d5:59:8d: c5:90:d7:8d:51:78:f1:df:d8:44:81:c5:59:8e:6b: f8:eb:df:db:30:38:35:7b:4b:d9:8a:b6:07:05:79: 37:04:27:b7:ec:78:3b:88:d8:42:92:1d:48:a3:33: bb:c7:2a:94:39:eb:aa:e5:cf:da:7c:91:81:6c:8e: 44:66:67:94:1a:3b:fe:40:65:b5:23:53:c7:0c:c3: 7c:72:4f:2d:c9:2b:c6:17:84:e4:a1:62:f9:5f:d5: a4:45:8e:b3:5b:a2:f3:a8:ae:8c:0c:5a:28:c4:30: 08:06:16:d7:53:48:71:8e:ec:05:51:44:b4:ec:12: f9:96:c5:c5:12:90:26:07:44:1c:a9:00:9e:c6:86: 71:3c:12:a7:bc:3a:e6:03:79:79:ed:d5:04:56:9f: cb:c8:21:4d:c3:66:4b:9f:41:49:55:0c:52:f0:b1: 83:16:2e:ae:ff:f3:f0:1d:8c:23:e1:f2:8a:d8:10: 3e:f2:b7:d3:d9:d1:5d:85:4d:76:3d:12:38:28:e9: 37:02:a3:a8:fe:7b:d0:31:ce:38:73:b8:25:d6:60: 4f:9b:6e:a5:f2:ac:35:78:08:96:83:4c:a9:4c:1d: 10:db:1e:78:de:bd:ec:33:ba:bd:93:37:a7:27:46: e6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3E:6F:30:9D:93:49:D7:1C:B2:40:32:CE:C6:26:B4:0C:AB:A6:F9 X509v3 Authority Key Identifier: keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b4:bc:c0:4f:9a:88:01:2e:33:d0:ad:42:28:9d:ee:48:fe: fa:53:87:79:9e:b9:7d:7c:32:37:c9:23:11:79:a1:bb:0e:7c: cf:73:89:61:b0:89:49:87:10:e9:cd:b7:a2:d3:5a:6d:ac:7c: b5:50:f8:b1:f9:bb:ca:8d:2a:30:b5:ac:d6:04:51:2b:7e:3a: da:bb:6f:82:bc:4c:89:04:30:02:65:f1:e2:08:61:4b:0e:a4: 2a:16:e4:32:88:db:91:ce:04:52:6c:1b:b1:b7:0b:91:b3:a5: c4:2a:57:cf:fe:86:f3:73:73:53:9e:1b:b5:a9:9b:6a:9f:d8: d8:f0:3f:46:d2:c2:db:9d:ba:8f:14:00:2a:14:39:2a:bd:ce: ae:15:17:35:e8:b0:50:85:cd:59:cf:e1:c2:3e:8e:09:f3:50: 7d:80:1c:8f:cf:ed:46:16:40:da:cf:81:6e:e3:ec:e7:c3:2f: 01:b3:73:b4:ff:ed:b2:f2:ee:99:45:ad:89:bf:f6:d8:dd:e1: 92:5e:40:39:b4:58:7f:83:6d:9b:04:e7:cd:0e:b9:b5:77:86: bb:f5:e0:23:af:f8:3a:0f:de:f4:f6:91:52:45:5e:df:72:ec: 44:f0:b1:65:ec:b9:a5:1f:13:7b:ce:de:34:f4:9b:72:65:79: 18:e6:f8:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvvXFOr47RJ4LDvFxOZfkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzM5NDAyYzQyYjNmODQ5OTVjNGQ1OGVmNjcwZThkMTZj MmFmZTIwHhcNMjUxMjA1MjMwMDM3WhcNMjUxMjA2MjMwMDM3WjAzMTEwLwYDVQQD EyhiZTNlNmYzMDlkOTM0OWQ3MWNiMjQwMzJjZWM2MjZiNDBjYWJhNmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoYHNkqRSEh5YbDVWY3FkNeNUXjx 39hEgcVZjmv469/bMDg1e0vZirYHBXk3BCe37Hg7iNhCkh1IozO7xyqUOeuq5c/a fJGBbI5EZmeUGjv+QGW1I1PHDMN8ck8tySvGF4TkoWL5X9WkRY6zW6LzqK6MDFoo xDAIBhbXU0hxjuwFUUS07BL5lsXFEpAmB0QcqQCexoZxPBKnvDrmA3l57dUEVp/L yCFNw2ZLn0FJVQxS8LGDFi6u//PwHYwj4fKK2BA+8rfT2dFdhU12PRI4KOk3AqOo /nvQMc44c7gl1mBPm26l8qw1eAiWg0ypTB0Q2x543r3sM7q9kzenJ0bm+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4+bzCdk0nXHLJAMs7GJrQMq6b5MB8GA1UdIwQY MBaAFAIzlALEKz+EmVxNWO9nDo0Wwq/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2It ZmM2NGJmYzNkMmY5LzEvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2ItZmM2NGJmYzNkMmY5 LzEvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrS8wE+a iAEuM9CtQiid7kj++lOHeZ65fXwyN8kjEXmhuw58z3OJYbCJSYcQ6c23otNabax8 tVD4sfm7yo0qMLWs1gRRK3462rtvgrxMiQQwAmXx4ghhSw6kKhbkMojbkc4EUmwb sbcLkbOlxCpXz/6G83NzU54btambap/Y2PA/RtLC2526jxQAKhQ5Kr3OrhUXNeiw UIXNWc/hwj6OCfNQfYAcj8/tRhZA2s+BbuPs58MvAbNztP/tsvLumUWtib/22N3h kl5AObRYf4NtmwTnzQ65tXeGu/XgI6/4Og/e9PaRUkVe33LsRPCxZey5pR8Te87e NPSbcmV5GOb4nw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:49 2025 by rpki-client