This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft File: p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft (raw, json) Hash identifier: SAUU8bCjVPMMaTnsWWsISW+HDq1oc39Bs/a6uxdY3y4= Subject key identifier: 0D:5C:28:B2:0A:94:08:B7:CD:00:60:CC:A7:8E:55:F3:35:17:A5:1E Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47 Certificate issuer: /CN=a750263823402b83c11c5014d32666dcab111447 Certificate serial: 019AF1D228E4080DF105020F1BEF5961524B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft Manifest number: 0204 Signing time: Sat 06 Dec 2025 04:01:13 +0000 Manifest this update: Sat 06 Dec 2025 04:01:13 +0000 Manifest next update: Sun 07 Dec 2025 04:01:13 +0000 Files and hashes: 1: iwQbkJtBuAm_xcfzDuJT6i57BjY.roa (hash: RmTZJ40kwHa9kbSdBRPYJl4skgdfEXdZGrx35wy6Kio=) 2: p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl (hash: L29iK2jLGjDyOv2/sljJTvf1XlixEPT+zQQlH8gOPhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:28:e4:08:0d:f1:05:02:0f:1b:ef:59:61:52:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a750263823402b83c11c5014d32666dcab111447 Validity Not Before: Dec 6 04:01:13 2025 GMT Not After : Dec 7 04:01:13 2025 GMT Subject: CN=0d5c28b20a9408b7cd0060cca78e55f33517a51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:48:49:92:15:d2:8f:c3:d8:e5:cd:cb:1c:2f: 95:3c:3c:78:4d:99:12:72:7c:66:0e:c9:1a:a0:31: 1e:63:e4:6c:70:0d:00:5a:10:06:75:c8:c3:40:b8: 59:61:7f:60:06:5e:2e:d7:66:07:6e:27:79:04:8c: 78:e4:2a:72:af:51:8e:19:eb:ba:d4:3e:42:40:e8: 66:9c:34:68:8a:0d:c1:07:50:00:b2:02:79:de:40: e9:e1:46:d4:d8:82:b1:f8:64:41:14:08:e1:f8:4d: 89:29:1c:48:41:d7:9f:52:2c:dc:a5:c7:00:38:88: 07:82:c0:53:a6:ad:44:51:3d:15:b0:44:ef:44:db: f5:41:96:95:58:fe:ff:95:4f:1e:04:2e:60:22:2a: 9b:d9:83:f4:90:e1:43:a3:d6:61:86:59:94:1e:49: d4:73:39:cc:4f:9b:01:80:bc:69:da:87:93:df:b1: b9:f8:c6:21:4d:30:1e:ff:e7:53:7b:c1:69:56:32: 0a:2a:54:2d:d0:dd:b4:c3:b6:67:17:a0:b6:a6:a4: e8:0e:6b:c7:d2:80:09:57:72:d9:bc:f2:c7:e1:5b: 36:43:5a:b5:98:08:53:83:84:6b:9a:af:86:9b:aa: 22:cc:fe:a6:7b:c1:c6:c7:f9:44:af:66:93:b2:03: 5b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5C:28:B2:0A:94:08:B7:CD:00:60:CC:A7:8E:55:F3:35:17:A5:1E X509v3 Authority Key Identifier: keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:18:ae:60:07:29:94:98:da:77:09:ad:fe:df:90:c6:78:ba: 7d:d1:ba:c2:1d:e1:59:68:a8:d9:35:34:e0:85:28:1f:f3:f6: 02:d7:2e:d9:c5:1f:65:f7:ad:c6:81:b2:f4:55:60:23:a8:9c: aa:8b:c4:51:fa:94:bd:e3:68:8e:44:6a:1d:58:2b:01:98:bc: cc:07:93:dc:00:43:00:17:be:fa:1b:a7:e8:9a:90:69:e2:dd: 11:8c:de:14:32:89:92:0f:d6:f9:e7:d7:9b:87:7f:64:90:75: ba:5c:6f:1f:42:eb:71:f7:f5:b5:31:d1:3f:8b:17:5a:2f:56: 22:01:27:1a:14:0f:94:9f:cf:92:ae:d6:49:0e:f1:d5:53:ad: d1:da:d2:be:01:f5:ba:30:13:0b:bc:38:6a:09:cc:0b:65:a4: 0a:f3:e8:9f:f0:e7:8e:da:56:e8:93:8f:9d:c7:aa:82:0b:9c: 48:e0:68:89:67:bd:3b:f2:60:b1:f6:08:2b:70:ab:33:c2:15: c1:b3:e4:fb:d5:37:31:45:f5:12:1e:90:15:ab:8d:b8:36:64: 78:6b:2b:8f:fa:f9:d0:67:15:20:74:46:4a:de:f9:97:24:b1: 1a:32:f7:99:c3:b2:27:58:4d:b4:7c:6a:bd:60:a6:97:e8:02: 15:12:35:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ijkCA3xBQIPG+9ZYVJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NTAyNjM4MjM0MDJiODNjMTFjNTAxNGQzMjY2NmRjYWIx MTE0NDcwHhcNMjUxMjA2MDQwMTEzWhcNMjUxMjA3MDQwMTEzWjAzMTEwLwYDVQQD EygwZDVjMjhiMjBhOTQwOGI3Y2QwMDYwY2NhNzhlNTVmMzM1MTdhNTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0hJkhXSj8PY5c3LHC+VPDx4TZkS cnxmDskaoDEeY+RscA0AWhAGdcjDQLhZYX9gBl4u12YHbid5BIx45Cpyr1GOGeu6 1D5CQOhmnDRoig3BB1AAsgJ53kDp4UbU2IKx+GRBFAjh+E2JKRxIQdefUizcpccA OIgHgsBTpq1EUT0VsETvRNv1QZaVWP7/lU8eBC5gIiqb2YP0kOFDo9ZhhlmUHknU cznMT5sBgLxp2oeT37G5+MYhTTAe/+dTe8FpVjIKKlQt0N20w7ZnF6C2pqToDmvH 0oAJV3LZvPLH4Vs2Q1q1mAhTg4Rrmq+Gm6oizP6me8HGx/lEr2aTsgNbEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1cKLIKlAi3zQBgzKeOVfM1F6UeMB8GA1UdIwQY MBaAFKdQJjgjQCuDwRxQFNMmZtyrERRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDFBbU9DTkFLNFBCSEZBVTB5Wm0zS3NSRkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jY2I0ZmQtZmE2Ny00OGQ2LWE4ZmMt OWEyOWYxZjQwODFjLzEvcDFBbU9DTkFLNFBCSEZBVTB5Wm0zS3NSRkVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9jY2I0ZmQtZmE2Ny00OGQ2LWE4ZmMtOWEyOWYxZjQwODFj LzEvcDFBbU9DTkFLNFBCSEZBVTB5Wm0zS3NSRkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRiuYAcp lJjadwmt/t+Qxni6fdG6wh3hWWio2TU04IUoH/P2Atcu2cUfZfetxoGy9FVgI6ic qovEUfqUveNojkRqHVgrAZi8zAeT3ABDABe++hun6JqQaeLdEYzeFDKJkg/W+efX m4d/ZJB1ulxvH0Lrcff1tTHRP4sXWi9WIgEnGhQPlJ/Pkq7WSQ7x1VOt0drSvgH1 ujATC7w4agnMC2WkCvPon/DnjtpW6JOPnceqggucSOBoiWe9O/JgsfYIK3CrM8IV wbPk+9U3MUX1Eh6QFauNuDZkeGsrj/r50GcVIHRGSt75lySxGjL3mcOyJ1hNtHxq vWCml+gCFRI1ZA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:03 2025 by rpki-client