This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft File: Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json) Hash identifier: d1x/Hf2JygEjDkvQII+OTnDeZlFRNjdfOL992ERZZ0c= Subject key identifier: 96:DD:6A:C0:D0:40:D0:9F:02:BB:F4:2C:4B:93:C6:76:A0:BB:AC:11 Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa Certificate serial: 019AF3C01893110C60D1B106BD04A4386943 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft Manifest number: 1240 Signing time: Sat 06 Dec 2025 13:00:43 +0000 Manifest this update: Sat 06 Dec 2025 13:00:43 +0000 Manifest next update: Sun 07 Dec 2025 13:00:43 +0000 Files and hashes: 1: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: /wLEbhv8DlQIrmd/XisCrbBncPG85HlpozCn7RwSYCI=) 2: fVmkukCoNZRcRoc3LS-TXPrqhnE.roa (hash: jN7loYTxoFJMSibKv+JC0+n6QXqAWoukHaK+yW79eHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:18:93:11:0c:60:d1:b1:06:bd:04:a4:38:69:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa Validity Not Before: Dec 6 13:00:43 2025 GMT Not After : Dec 7 13:00:43 2025 GMT Subject: CN=96dd6ac0d040d09f02bbf42c4b93c676a0bbac11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6a:8f:a4:f8:9f:0f:55:a4:c7:38:7c:bf:b8: 28:f0:e8:c4:8a:d0:cd:93:ca:af:5d:8f:78:33:39: a8:75:ad:b6:e1:a7:a0:16:3b:30:bb:bc:87:8c:a5: c0:f9:54:9b:e1:c4:32:89:a6:7b:ef:ed:48:d8:2a: cb:50:d8:82:94:1e:4a:48:75:83:ff:1d:59:78:d8: 63:4f:30:08:22:21:8f:25:ad:93:59:0c:72:04:6b: 06:5a:48:5d:62:c9:b4:e0:15:23:15:bd:2d:d6:d7: d0:ff:4f:ca:de:7c:15:a3:0f:62:08:94:64:b0:e0: 60:6d:45:d7:50:77:07:c7:a1:25:8f:fa:f6:8c:e2: b5:04:ca:b0:8d:ae:e3:ee:36:6e:f3:fc:78:73:b6: 4c:86:c8:73:ca:f8:0a:43:3e:83:8f:43:62:3e:03: d9:8f:9c:c9:79:2b:d0:45:ee:7a:f1:16:1e:6e:08: 5e:05:89:d9:04:ec:9f:07:6f:a2:aa:99:7b:55:bd: e0:14:8b:de:9f:33:98:30:85:e4:0c:9b:ee:c2:2a: db:75:53:be:57:40:ed:c6:30:a4:67:b0:60:6d:49: 01:27:72:b5:68:58:4c:63:42:0c:0b:ef:f8:39:21: c6:94:60:6c:8b:da:fe:34:26:c6:53:a7:74:c0:93: 65:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DD:6A:C0:D0:40:D0:9F:02:BB:F4:2C:4B:93:C6:76:A0:BB:AC:11 X509v3 Authority Key Identifier: keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:95:49:03:32:7e:2d:38:37:1d:3f:c8:4d:e2:eb:63:f6:36: 7e:c5:db:4e:0f:fa:41:91:85:e3:4b:65:0d:b0:92:66:9b:94: 4b:29:fa:b5:3e:e4:68:d5:ab:cf:fd:07:19:ad:07:66:70:e7: 1c:a0:07:5b:1a:5d:89:5b:6c:a2:81:07:5b:b3:a9:cf:5f:21: 38:b7:25:d3:71:67:dd:cc:e8:43:eb:70:84:51:e5:4c:16:ec: a3:18:6e:60:c8:98:81:b4:f4:47:5f:06:a5:af:e0:bd:fe:4c: 56:9d:48:13:c9:a7:25:1f:0c:f8:11:86:63:92:7d:51:b9:30: 77:6b:51:62:fa:a9:74:e0:f6:bd:b1:04:4e:79:6b:cb:94:32: fb:4b:67:e1:b9:fb:83:a4:c4:6f:20:91:75:89:73:3f:ee:5a: bd:fa:78:72:7e:5e:18:c7:05:c3:4c:f9:aa:86:4f:95:0d:0e: 22:e3:7f:12:07:e3:00:ce:7b:07:8c:7d:a7:5b:81:18:f1:27: 4d:09:dd:70:64:9f:cc:2c:23:e9:aa:dd:69:84:76:01:34:08: 82:63:a0:68:e7:ed:67:55:d0:6a:2c:d3:de:4a:99:c3:56:62: 38:9b:7b:b4:44:63:a7:96:08:af:de:36:66:18:c3:4a:30:16: 3c:e9:f3:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwBiTEQxg0bEGvQSkOGlDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMWFiM2RkMjJjMzMzYTc5YjZmZjMwYWFiN2YyZTAzNmZj MzcwYWEwHhcNMjUxMjA2MTMwMDQzWhcNMjUxMjA3MTMwMDQzWjAzMTEwLwYDVQQD Eyg5NmRkNmFjMGQwNDBkMDlmMDJiYmY0MmM0YjkzYzY3NmEwYmJhYzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymqPpPifD1Wkxzh8v7go8OjEitDN k8qvXY94Mzmoda224aegFjswu7yHjKXA+VSb4cQyiaZ77+1I2CrLUNiClB5KSHWD /x1ZeNhjTzAIIiGPJa2TWQxyBGsGWkhdYsm04BUjFb0t1tfQ/0/K3nwVow9iCJRk sOBgbUXXUHcHx6Elj/r2jOK1BMqwja7j7jZu8/x4c7ZMhshzyvgKQz6Dj0NiPgPZ j5zJeSvQRe568RYebgheBYnZBOyfB2+iqpl7Vb3gFIvenzOYMIXkDJvuwirbdVO+ V0DtxjCkZ7BgbUkBJ3K1aFhMY0IMC+/4OSHGlGBsi9r+NCbGU6d0wJNl1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbdasDQQNCfArv0LEuTxnagu6wRMB8GA1UdIwQY MBaAFAIas90iwzOnm2/zCqt/LgNvw3CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMGZiYjYtZGVhMi00YzdiLWFmYWQt NGFjZWM2NDc1NzJkLzEvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMGZiYjYtZGVhMi00YzdiLWFmYWQtNGFjZWM2NDc1NzJk LzEvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZVJAzJ+ LTg3HT/ITeLrY/Y2fsXbTg/6QZGF40tlDbCSZpuUSyn6tT7kaNWrz/0HGa0HZnDn HKAHWxpdiVtsooEHW7Opz18hOLcl03Fn3czoQ+twhFHlTBbsoxhuYMiYgbT0R18G pa/gvf5MVp1IE8mnJR8M+BGGY5J9Ubkwd2tRYvqpdOD2vbEETnlry5Qy+0tn4bn7 g6TEbyCRdYlzP+5avfp4cn5eGMcFw0z5qoZPlQ0OIuN/EgfjAM57B4x9p1uBGPEn TQndcGSfzCwj6ardaYR2ATQIgmOgaOftZ1XQaizT3kqZw1ZiOJt7tERjp5YIr942 ZhjDSjAWPOnzmw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:37:43 2025 by rpki-client