This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft File: AJpjcoKz0KD8pKVU9pNvffQugWU.mft (raw, json) Hash identifier: uJDvxcJxAaAU7cfWLpmd7Hlpy9jDPrYcsr8DfW+Uf8o= Subject key identifier: 7F:86:C2:BF:2E:4D:12:D9:67:F4:1B:9B:A0:E0:30:39:D5:FF:F6:FE Authority key identifier: 00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65 Certificate issuer: /CN=009a637282b3d0a0fca4a554f6936f7df42e8165 Certificate serial: 019AF1D1A347A47B51B79B8BEAC799E7B59D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft Manifest number: 0D3B Signing time: Sat 06 Dec 2025 04:00:39 +0000 Manifest this update: Sat 06 Dec 2025 04:00:39 +0000 Manifest next update: Sun 07 Dec 2025 04:00:39 +0000 Files and hashes: 1: 2KtTnEqgfSqztCd7tujgpeMQKiY.roa (hash: PzcW2SmGhKzM/HWv9p7Gvr3dpPmkVhm+gAuqFa6OHHQ=) 2: AJpjcoKz0KD8pKVU9pNvffQugWU.crl (hash: 5eDFlR7FUNS68ZX4vEHylRXXvMNRDnVa5id0IgxBVaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a3:47:a4:7b:51:b7:9b:8b:ea:c7:99:e7:b5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=009a637282b3d0a0fca4a554f6936f7df42e8165 Validity Not Before: Dec 6 04:00:39 2025 GMT Not After : Dec 7 04:00:39 2025 GMT Subject: CN=7f86c2bf2e4d12d967f41b9ba0e03039d5fff6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:43:8c:b5:09:e3:14:df:42:9b:fb:37:53: a3:ce:76:05:3f:5b:b3:33:3e:74:8e:d1:a7:6a:2f: 27:93:33:34:4e:53:15:dc:87:f7:63:c6:3b:f7:8f: a4:0d:6a:88:d1:40:78:ca:ed:95:17:f2:cb:44:ad: 72:61:cb:fd:18:95:43:c1:9d:3b:01:c7:e3:d7:02: 83:5b:98:cf:23:f8:13:9e:1f:a0:90:c0:89:7c:0c: cb:8c:22:9d:16:3d:50:12:22:7f:39:bf:8f:d3:fe: 39:21:b6:73:fa:ae:79:a6:c6:4d:95:72:82:02:b8: 32:9c:1e:d9:6a:0e:69:c5:37:bd:c1:7c:db:08:82: 4b:fb:09:1a:dd:c7:cc:e1:cc:c4:46:3b:6e:02:cf: 54:94:5d:ef:8e:c4:65:cb:71:dc:2e:f9:3d:60:6a: f0:fe:83:ee:ca:61:c6:3e:03:92:5c:60:87:e9:c0: 6d:3f:4d:ce:90:00:a7:ac:69:9a:84:35:db:79:b5: d8:a6:f5:f0:f8:0a:6a:d3:6f:93:cc:5c:8b:4b:12: a5:82:24:b0:71:a6:a7:75:e2:6f:a3:44:d0:aa:d6: b2:a3:1e:63:f4:dc:a9:2b:db:29:37:54:15:15:12: 90:6b:1a:44:ca:01:3d:9a:6a:ac:68:68:20:84:b6: 9d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:86:C2:BF:2E:4D:12:D9:67:F4:1B:9B:A0:E0:30:39:D5:FF:F6:FE X509v3 Authority Key Identifier: keyid:00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:31:7f:34:39:0c:9a:0c:c4:39:94:34:9c:fb:aa:29:85:8a: 5d:7d:0d:34:e8:b8:b2:39:6d:a1:36:2e:fb:e4:a4:a0:b8:74: 74:bf:ee:2e:9b:08:39:9e:af:aa:44:3d:5f:c8:73:70:d3:30: 88:fb:26:56:6b:91:5a:3c:43:61:f9:11:d9:a0:45:c9:59:a6: e4:58:53:df:5e:47:25:26:46:2a:d2:ac:14:52:c8:3e:84:2d: b8:fd:88:dc:7c:33:c1:88:67:1f:5d:2b:7c:09:cf:20:ef:09: c6:aa:73:bc:b3:cd:4d:01:fe:b8:ac:ba:0f:6e:d0:6f:5b:93: 05:43:d1:7f:27:c2:32:1f:c4:1a:75:f6:99:34:46:c2:bf:d0: 21:29:96:32:8e:6c:a6:46:8a:23:84:1c:0a:0d:78:03:2e:d1: f0:91:4a:d7:70:01:e3:b6:e4:39:ea:b9:b2:c5:25:3b:2d:86: e9:ec:dd:4c:5f:08:c8:6f:1f:e6:8c:b4:67:5d:e8:16:07:99: fe:b4:c8:32:ce:4e:79:44:eb:4b:d8:26:d7:b7:2c:87:6e:38: d8:ec:62:da:81:88:46:20:fa:db:c7:d5:ab:36:e0:a3:2e:57: 7b:c6:e8:c4:2a:67:b4:00:61:db:b6:fd:43:b0:c8:6f:94:03: 7f:10:f9:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aNHpHtRt5uL6seZ57WdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOWE2MzcyODJiM2QwYTBmY2E0YTU1NGY2OTM2ZjdkZjQy ZTgxNjUwHhcNMjUxMjA2MDQwMDM5WhcNMjUxMjA3MDQwMDM5WjAzMTEwLwYDVQQD Eyg3Zjg2YzJiZjJlNGQxMmQ5NjdmNDFiOWJhMGUwMzAzOWQ1ZmZmNmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqxDjLUJ4xTfQpv7N1OjznYFP1uz Mz50jtGnai8nkzM0TlMV3If3Y8Y794+kDWqI0UB4yu2VF/LLRK1yYcv9GJVDwZ07 Acfj1wKDW5jPI/gTnh+gkMCJfAzLjCKdFj1QEiJ/Ob+P0/45IbZz+q55psZNlXKC ArgynB7Zag5pxTe9wXzbCIJL+wka3cfM4czERjtuAs9UlF3vjsRly3HcLvk9YGrw /oPuymHGPgOSXGCH6cBtP03OkACnrGmahDXbebXYpvXw+Apq02+TzFyLSxKlgiSw caandeJvo0TQqtayox5j9NypK9spN1QVFRKQaxpEygE9mmqsaGgghLadkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+Gwr8uTRLZZ/Qbm6DgMDnV//b+MB8GA1UdIwQY MBaAFACaY3KCs9Cg/KSlVPaTb330LoFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpwamNvS3owS0Q4cEtWVTlwTnZmZlF1Z1dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kZGMzNDQtNjRjNi00NmM4LWEyNWMt ZDRlZGMwZWIzZTBhLzEvQUpwamNvS3owS0Q4cEtWVTlwTnZmZlF1Z1dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9kZGMzNDQtNjRjNi00NmM4LWEyNWMtZDRlZGMwZWIzZTBh LzEvQUpwamNvS3owS0Q4cEtWVTlwTnZmZlF1Z1dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzF/NDkM mgzEOZQ0nPuqKYWKXX0NNOi4sjltoTYu++SkoLh0dL/uLpsIOZ6vqkQ9X8hzcNMw iPsmVmuRWjxDYfkR2aBFyVmm5FhT315HJSZGKtKsFFLIPoQtuP2I3HwzwYhnH10r fAnPIO8JxqpzvLPNTQH+uKy6D27Qb1uTBUPRfyfCMh/EGnX2mTRGwr/QISmWMo5s pkaKI4QcCg14Ay7R8JFK13AB47bkOeq5ssUlOy2G6ezdTF8IyG8f5oy0Z13oFgeZ /rTIMs5OeUTrS9gm17csh2442Oxi2oGIRiD628fVqzbgoy5Xe8boxCpntABh27b9 Q7DIb5QDfxD5Tw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:58 2025 by rpki-client