This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft File: AnTQhnltTXea0WTCTCI_JrMoTtQ.mft (raw, json) Hash identifier: oKh1Gl6C3Zy2SoMGPNK39yf54bB4PV2EmV8K4itABEg= Subject key identifier: BB:B9:5A:04:7E:AB:FB:12:DF:1A:90:59:BB:0C:16:AD:FF:47:50:70 Authority key identifier: 02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4 Certificate issuer: /CN=0274d086796d4d779ad164c24c223f26b3284ed4 Certificate serial: 019AF3C036FEF633D0D152AF0747D266AB88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 13:00:51 +0000 Manifest this update: Sat 06 Dec 2025 13:00:51 +0000 Manifest next update: Sun 07 Dec 2025 13:00:51 +0000 Files and hashes: 1: AnTQhnltTXea0WTCTCI_JrMoTtQ.crl (hash: U5mFhTTX5rv5E0xXquRLa5UKvKoSAqe0c4cLDqDqWgw=) 2: t14W6NV1DIvb11EAZ4XUA2ovVHE.roa (hash: zVqRh34b+6mC5A8sW6DvCRtqqP+h65EGfBsPI/G1bUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:36:fe:f6:33:d0:d1:52:af:07:47:d2:66:ab:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0274d086796d4d779ad164c24c223f26b3284ed4 Validity Not Before: Dec 6 13:00:51 2025 GMT Not After : Dec 7 13:00:51 2025 GMT Subject: CN=bbb95a047eabfb12df1a9059bb0c16adff475070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:95:92:28:73:e4:15:2b:6a:f4:6b:6f:c2: 1f:a9:6e:db:9b:af:27:7b:56:d4:ba:d3:1b:11:29: 5c:47:05:33:0e:a6:16:c7:ff:52:10:19:e0:9a:8a: 9d:6d:4d:10:66:f1:35:35:5c:f1:09:d0:ce:5c:59: 4c:41:60:bb:23:e3:8b:5d:b1:88:dc:fb:95:8a:90: 28:72:1e:35:47:2f:fd:0e:87:51:79:4a:9c:c0:36: e2:f4:92:61:d7:6c:b3:e9:ff:63:10:ad:53:60:d5: e0:f5:b0:f1:fd:c9:8f:93:47:03:f7:da:11:cd:8d: f1:d8:9d:94:da:86:a5:0c:d9:1f:3a:b0:ab:93:3d: ce:c1:d2:44:29:6b:a5:0c:14:6c:c1:bd:71:c6:94: f5:e5:d8:33:a3:61:45:a6:4a:19:bc:81:c1:bd:55: db:87:9e:04:1b:10:fe:ad:b8:f4:54:3d:ee:c7:e5: 6a:04:c2:67:61:e1:ef:2d:5a:bc:43:90:fc:88:c2: 86:1c:ee:ad:3b:f6:43:b7:92:b9:9b:32:c9:b1:a3: 43:7e:f7:ee:53:b3:b6:20:ca:16:74:d5:1c:95:e1: 03:0e:4c:10:ca:bf:87:da:50:56:ea:2e:3b:34:a5: 4d:a5:2e:1a:80:c4:62:d8:f0:b2:55:5a:20:9f:f0: 17:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B9:5A:04:7E:AB:FB:12:DF:1A:90:59:BB:0C:16:AD:FF:47:50:70 X509v3 Authority Key Identifier: keyid:02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:52:64:db:19:60:b6:c9:cf:23:5b:e3:3d:5c:2f:f1:c4:8e: 12:6f:f5:d2:41:f0:76:86:c8:5e:0b:f7:39:f7:14:7b:1d:fa: d1:85:05:3c:25:0a:8f:9e:c5:d8:c3:1c:4c:83:b1:21:63:52: 78:1d:76:e2:ef:32:be:b6:29:b5:1d:ed:62:e1:b1:5a:bb:9d: b1:03:f7:3a:b3:ab:ab:18:61:a7:ad:3d:69:a3:2a:80:02:94: ce:c1:b0:4a:22:91:e2:2d:db:0e:fa:51:da:c5:a1:ab:59:17: 3e:ac:55:d9:db:b1:fe:35:85:ec:fb:f6:c7:07:cb:6b:14:dd: b9:1b:3f:76:9c:eb:e5:67:64:18:a6:96:62:8d:42:eb:78:bb: 2e:ec:9b:1e:d4:d0:ea:b2:b3:6f:d1:69:4c:02:82:60:a2:a9: 24:26:4e:8d:6b:42:90:8d:7e:4f:05:44:30:78:9b:9d:f7:c7: 4d:a7:96:81:6d:55:96:b7:4f:4d:61:15:f7:71:45:7f:6e:e1: b9:52:f0:e9:76:3c:56:51:3b:ca:b7:f8:35:b4:b3:f3:41:26: 7d:94:e1:90:94:ac:73:c8:80:69:70:1e:d6:fd:72:26:60:8f: c4:ff:2c:9a:3c:c0:d2:34:c8:d1:ce:9c:d7:32:20:2f:e2:c0: eb:35:a8:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwDb+9jPQ0VKvB0fSZquIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNzRkMDg2Nzk2ZDRkNzc5YWQxNjRjMjRjMjIzZjI2YjMy ODRlZDQwHhcNMjUxMjA2MTMwMDUxWhcNMjUxMjA3MTMwMDUxWjAzMTEwLwYDVQQD EyhiYmI5NWEwNDdlYWJmYjEyZGYxYTkwNTliYjBjMTZhZGZmNDc1MDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlyVkihz5BUravRrb8IfqW7bm68n e1bUutMbESlcRwUzDqYWx/9SEBngmoqdbU0QZvE1NVzxCdDOXFlMQWC7I+OLXbGI 3PuVipAoch41Ry/9DodReUqcwDbi9JJh12yz6f9jEK1TYNXg9bDx/cmPk0cD99oR zY3x2J2U2oalDNkfOrCrkz3OwdJEKWulDBRswb1xxpT15dgzo2FFpkoZvIHBvVXb h54EGxD+rbj0VD3ux+VqBMJnYeHvLVq8Q5D8iMKGHO6tO/ZDt5K5mzLJsaNDfvfu U7O2IMoWdNUcleEDDkwQyr+H2lBW6i47NKVNpS4agMRi2PCyVVogn/AXEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLu5WgR+q/sS3xqQWbsMFq3/R1BwMB8GA1UdIwQY MBaAFAJ00IZ5bU13mtFkwkwiPyazKE7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW5UUWhubHRUWGVhMFdUQ1RDSV9Kck1vVHRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83NTE5NTgtYWJlYi00NTllLTgxNDEt Yjk1NTIwYzg3MmM1LzEvQW5UUWhubHRUWGVhMFdUQ1RDSV9Kck1vVHRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC83NTE5NTgtYWJlYi00NTllLTgxNDEtYjk1NTIwYzg3MmM1 LzEvQW5UUWhubHRUWGVhMFdUQ1RDSV9Kck1vVHRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVJk2xlg tsnPI1vjPVwv8cSOEm/10kHwdobIXgv3OfcUex360YUFPCUKj57F2MMcTIOxIWNS eB124u8yvrYptR3tYuGxWrudsQP3OrOrqxhhp609aaMqgAKUzsGwSiKR4i3bDvpR 2sWhq1kXPqxV2dux/jWF7Pv2xwfLaxTduRs/dpzr5WdkGKaWYo1C63i7LuybHtTQ 6rKzb9FpTAKCYKKpJCZOjWtCkI1+TwVEMHibnffHTaeWgW1VlrdPTWEV93FFf27h uVLw6XY8VlE7yrf4NbSz80EmfZThkJSsc8iAaXAe1v1yJmCPxP8smjzA0jTI0c6c 1zIgL+LA6zWohA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:03:43 2025 by rpki-client