This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft File: amy2jfouNjg5NN5oDtAlGsOu3Mo.mft (raw, json) Hash identifier: c9xRbm7P0yEaORjdRsjHO11xO6qKH2rpY1BTL5A4AIw= Subject key identifier: DF:09:C9:47:67:FB:FA:7A:3F:88:2F:BF:AF:14:05:77:BC:D8:26:F8 Authority key identifier: 6A:6C:B6:8D:FA:2E:36:38:39:34:DE:68:0E:D0:25:1A:C3:AE:DC:CA Certificate issuer: /CN=6a6cb68dfa2e36383934de680ed0251ac3aedcca Certificate serial: 019AF0BF6DF69DBAA0F852EB88B1AE6C6578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft Manifest number: 0165 Signing time: Fri 05 Dec 2025 23:01:08 +0000 Manifest this update: Fri 05 Dec 2025 23:01:08 +0000 Manifest next update: Sat 06 Dec 2025 23:01:08 +0000 Files and hashes: 1: amy2jfouNjg5NN5oDtAlGsOu3Mo.crl (hash: Ge+zG/djokHm1/jg9+8w+VtxxYejJSjv8EXqXmEnN0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:6d:f6:9d:ba:a0:f8:52:eb:88:b1:ae:6c:65:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a6cb68dfa2e36383934de680ed0251ac3aedcca Validity Not Before: Dec 5 23:01:08 2025 GMT Not After : Dec 6 23:01:08 2025 GMT Subject: CN=df09c94767fbfa7a3f882fbfaf140577bcd826f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:15:73:05:ea:0f:1c:d6:d4:22:b4:d4:e0: 1c:20:85:06:5b:09:a0:31:a9:e7:c8:ae:98:2f:e7: 6c:84:a3:23:91:be:d2:2a:20:7a:ec:04:e0:1c:10: 4d:5c:93:4e:ea:38:19:f0:4e:4a:3f:e4:f7:8d:25: 2d:60:55:83:2e:c7:92:22:1a:06:f3:ad:e3:1c:30: 30:40:b4:ce:1b:38:12:63:88:c7:fc:70:2b:d6:90: bf:e3:40:cd:3e:05:71:09:1c:59:d1:e0:32:76:5c: d6:3e:6f:14:ba:20:8e:18:ae:b5:ad:b3:90:ba:2b: f6:a9:29:dc:75:b6:74:54:1a:98:4d:7b:61:e6:2f: e8:e5:38:5d:73:41:91:4c:d7:92:29:33:95:43:56: bd:2e:ca:cc:a5:f9:61:fa:ec:5d:58:cb:0d:8b:01: cf:33:30:30:1f:2c:97:e8:1f:d2:a3:5f:96:02:59: b5:1b:01:a3:a1:a0:1c:62:ac:87:fa:cc:ef:db:54: 73:ef:da:fd:28:da:31:6e:aa:b2:3a:3d:0d:4b:ec: 1a:5c:e4:04:50:9e:af:dd:4c:d9:03:50:21:4e:8a: b5:4a:3f:99:d2:5c:fa:72:93:32:51:fa:e9:e1:d6: f6:cb:7f:bd:48:c5:45:df:26:bb:8e:5f:8d:3e:0e: ec:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:09:C9:47:67:FB:FA:7A:3F:88:2F:BF:AF:14:05:77:BC:D8:26:F8 X509v3 Authority Key Identifier: keyid:6A:6C:B6:8D:FA:2E:36:38:39:34:DE:68:0E:D0:25:1A:C3:AE:DC:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ad:24:1f:d1:17:a3:58:56:fb:b5:d9:cc:6f:12:0b:c1:56: 1a:8e:21:9d:47:c4:7d:25:25:10:0c:41:8f:dc:8a:ae:f9:4a: b3:59:da:19:73:59:98:d7:53:44:23:a2:e4:11:e2:ed:28:bd: 04:80:b8:c9:b9:8e:49:10:0e:89:5e:89:86:1a:42:02:09:94: b6:4c:f5:49:f9:09:31:ca:4f:0b:8b:29:37:02:c7:41:ec:16: fa:d9:df:bd:45:1a:c3:9b:d0:ba:97:3a:b1:46:f8:67:9b:93: 8d:1e:92:f6:27:e7:1b:db:15:0e:82:9c:06:42:5a:9a:b5:b6: cf:a4:00:62:34:b0:11:d4:d6:e1:71:4f:73:85:03:e9:6c:4f: a2:55:56:dd:f6:a9:71:ee:83:01:f8:42:11:31:0c:e5:85:7b: 37:08:d4:27:2a:92:3a:c1:f0:c6:65:f5:4c:90:8d:1e:26:24: cc:0a:ad:1d:c0:94:b7:9d:f8:9f:44:66:d2:4b:3b:5d:a5:9f: c1:37:b9:a3:c2:56:a5:65:eb:86:d6:18:fb:32:3e:4f:a9:09: 03:98:50:2a:56:be:5a:62:c2:77:b4:32:87:35:10:96:37:6f: 23:82:63:21:9e:f9:12:7a:56:f5:98:d2:50:30:b7:5b:b9:12: 9f:ae:fa:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv232nbqg+FLriLGubGV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNmNiNjhkZmEyZTM2MzgzOTM0ZGU2ODBlZDAyNTFhYzNh ZWRjY2EwHhcNMjUxMjA1MjMwMTA4WhcNMjUxMjA2MjMwMTA4WjAzMTEwLwYDVQQD EyhkZjA5Yzk0NzY3ZmJmYTdhM2Y4ODJmYmZhZjE0MDU3N2JjZDgyNmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZsVcwXqDxzW1CK01OAcIIUGWwmg MannyK6YL+dshKMjkb7SKiB67ATgHBBNXJNO6jgZ8E5KP+T3jSUtYFWDLseSIhoG 863jHDAwQLTOGzgSY4jH/HAr1pC/40DNPgVxCRxZ0eAydlzWPm8UuiCOGK61rbOQ uiv2qSncdbZ0VBqYTXth5i/o5Thdc0GRTNeSKTOVQ1a9LsrMpflh+uxdWMsNiwHP MzAwHyyX6B/So1+WAlm1GwGjoaAcYqyH+szv21Rz79r9KNoxbqqyOj0NS+waXOQE UJ6v3UzZA1AhToq1Sj+Z0lz6cpMyUfrp4db2y3+9SMVF3ya7jl+NPg7sVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8JyUdn+/p6P4gvv68UBXe82Cb4MB8GA1UdIwQY MBaAFGpsto36LjY4OTTeaA7QJRrDrtzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW15Mmpmb3VOamc1Tk41b0R0QWxHc091M01vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wZjNiZTYtMjkzYS00YmNlLTlhNzIt ODdmZjZlNjkwNTkxLzEvYW15Mmpmb3VOamc1Tk41b0R0QWxHc091M01vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8wZjNiZTYtMjkzYS00YmNlLTlhNzItODdmZjZlNjkwNTkx LzEvYW15Mmpmb3VOamc1Tk41b0R0QWxHc091M01vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoq0kH9EX o1hW+7XZzG8SC8FWGo4hnUfEfSUlEAxBj9yKrvlKs1naGXNZmNdTRCOi5BHi7Si9 BIC4ybmOSRAOiV6JhhpCAgmUtkz1SfkJMcpPC4spNwLHQewW+tnfvUUaw5vQupc6 sUb4Z5uTjR6S9ifnG9sVDoKcBkJamrW2z6QAYjSwEdTW4XFPc4UD6WxPolVW3fap ce6DAfhCETEM5YV7NwjUJyqSOsHwxmX1TJCNHiYkzAqtHcCUt534n0Rm0ks7XaWf wTe5o8JWpWXrhtYY+zI+T6kJA5hQKla+WmLCd7QyhzUQljdvI4JjIZ75EnpW9ZjS UDC3W7kSn676bg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:16 2025 by rpki-client