This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft File: 1AjPCbarAFupM7KnpKbSfqa7cso.mft (raw, json) Hash identifier: TSDrc36eRvz3vb88fRofGG8NFWOMhpHGL1NQsACYMk8= Subject key identifier: 64:8C:50:D8:9D:B1:C8:8C:AC:80:89:EE:AB:36:0B:99:20:BF:F7:16 Authority key identifier: D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA Certificate issuer: /CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca Certificate serial: 019AF38934270A88EBC85203396C18506BC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft Manifest number: 047B Signing time: Sat 06 Dec 2025 12:00:46 +0000 Manifest this update: Sat 06 Dec 2025 12:00:46 +0000 Manifest next update: Sun 07 Dec 2025 12:00:46 +0000 Files and hashes: 1: 1AjPCbarAFupM7KnpKbSfqa7cso.crl (hash: althvjWEgftZGzSxEIqqUTVKjPS+VrJ/U+sxpQRAdNo=) 2: mjk_9mBIX2K41ASneFahi5WxQms.roa (hash: qL7nGWS3Awht9PmP0vDzSTXhKhc/jIpjX536PZtB9fQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:34:27:0a:88:eb:c8:52:03:39:6c:18:50:6b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca Validity Not Before: Dec 6 12:00:46 2025 GMT Not After : Dec 7 12:00:46 2025 GMT Subject: CN=648c50d89db1c88cac8089eeab360b9920bff716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3a:4f:3d:4a:62:2c:3b:d0:8e:f1:3b:3e:f8: 19:fe:b5:d5:18:11:8c:77:ba:84:57:11:44:04:e5: 74:27:86:5e:13:ea:3e:78:32:cd:69:e2:02:1e:8b: 3f:4a:f1:01:b2:25:2f:0a:c7:db:7c:75:eb:c4:f3: 11:a3:b5:d3:09:49:88:bf:93:9d:f2:6d:8b:88:29: 8e:75:b3:f8:c7:3e:0e:47:68:af:52:26:74:85:f1: 58:43:a6:9a:46:52:01:da:99:81:42:6e:21:f5:9d: 73:0a:0d:b6:3d:bf:65:ac:68:83:7c:56:2e:31:d0: f1:12:72:c4:63:dd:69:a9:7a:dc:b0:43:d1:90:44: f4:81:b1:22:d0:93:d7:da:95:62:9a:9b:9f:5f:2f: f6:3f:0c:b1:06:41:46:6c:f4:fd:a4:ff:4e:b9:1f: 2b:12:00:8a:26:4d:42:ef:dc:22:05:d3:11:73:92: 6a:ba:14:6f:ab:59:d4:2c:c5:59:b6:db:6c:b1:06: 5f:aa:67:c8:ac:bb:2a:b6:36:ba:cf:fd:74:00:95: 93:a3:aa:d8:9b:6d:16:19:b4:19:24:1f:74:9a:c5: f4:dd:4d:9d:7b:88:10:fe:e6:cf:e1:4c:c5:ba:f2: 89:7d:ea:37:20:20:b9:0d:03:e8:a9:db:f4:ea:62: ac:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8C:50:D8:9D:B1:C8:8C:AC:80:89:EE:AB:36:0B:99:20:BF:F7:16 X509v3 Authority Key Identifier: keyid:D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:56:40:de:42:33:08:5f:d3:2e:28:50:dc:9b:11:50:ee:3c: b3:29:43:3f:21:3f:c0:e7:f1:47:48:23:18:3b:87:a4:eb:48: 3f:5d:e3:fe:4f:d3:71:0f:28:37:c7:32:b1:4d:bb:fe:fc:18: b1:0d:6c:87:78:83:b6:e1:ac:8d:18:79:4b:04:ba:49:fe:85: 50:cb:dc:f2:48:ce:7d:c1:c9:16:84:7c:5a:da:13:80:cf:05: 5d:da:7a:7c:2b:a2:8e:d2:8b:66:f1:2e:b3:7e:e4:0c:e0:e5: b4:f1:82:62:ff:cc:60:f6:26:6c:21:35:b6:6d:45:ab:c0:6b: 2a:a0:ab:9f:55:af:3f:52:d5:db:7b:8f:62:60:44:1a:a1:93: 2b:9b:c9:88:41:40:56:97:a2:34:dc:1a:83:d9:9f:c5:2b:5f: 70:3b:d1:59:5a:00:97:77:c7:ad:b8:a8:a5:fb:a9:d7:0f:19: c3:70:5a:ac:2f:6d:f6:83:d6:de:58:98:78:e6:ff:71:80:f0: a6:53:db:a2:91:9a:92:3b:e3:dc:2a:3c:1f:7e:b0:be:0e:7e: 7b:c1:45:0e:63:0f:0f:2f:14:25:32:61:43:52:09:8a:9d:ea: cd:28:f8:53:32:61:e5:90:05:b3:d2:5c:13:74:d8:7b:5f:e8: 0f:a4:a8:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziTQnCojryFIDOWwYUGvFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MDhjZjA5YjZhYjAwNWJhOTMzYjJhN2E0YTZkMjdlYTZi YjcyY2EwHhcNMjUxMjA2MTIwMDQ2WhcNMjUxMjA3MTIwMDQ2WjAzMTEwLwYDVQQD Eyg2NDhjNTBkODlkYjFjODhjYWM4MDg5ZWVhYjM2MGI5OTIwYmZmNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjpPPUpiLDvQjvE7PvgZ/rXVGBGM d7qEVxFEBOV0J4ZeE+o+eDLNaeICHos/SvEBsiUvCsfbfHXrxPMRo7XTCUmIv5Od 8m2LiCmOdbP4xz4OR2ivUiZ0hfFYQ6aaRlIB2pmBQm4h9Z1zCg22Pb9lrGiDfFYu MdDxEnLEY91pqXrcsEPRkET0gbEi0JPX2pVimpufXy/2PwyxBkFGbPT9pP9OuR8r EgCKJk1C79wiBdMRc5JquhRvq1nULMVZtttssQZfqmfIrLsqtja6z/10AJWTo6rY m20WGbQZJB90msX03U2de4gQ/ubP4UzFuvKJfeo3ICC5DQPoqdv06mKsiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSMUNidsciMrICJ7qs2C5kgv/cWMB8GA1UdIwQY MBaAFNQIzwm2qwBbqTOyp6Sm0n6mu3LKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUFqUENiYXJBRnVwTTdLbnBLYlNmcWE3Y3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hNmQxMjQtMDRlNi00ZGVmLWExNmIt ZDY1MjM2ODI5OWQ1LzEvMUFqUENiYXJBRnVwTTdLbnBLYlNmcWE3Y3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9hNmQxMjQtMDRlNi00ZGVmLWExNmItZDY1MjM2ODI5OWQ1 LzEvMUFqUENiYXJBRnVwTTdLbnBLYlNmcWE3Y3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFZA3kIz CF/TLihQ3JsRUO48sylDPyE/wOfxR0gjGDuHpOtIP13j/k/TcQ8oN8cysU27/vwY sQ1sh3iDtuGsjRh5SwS6Sf6FUMvc8kjOfcHJFoR8WtoTgM8FXdp6fCuijtKLZvEu s37kDODltPGCYv/MYPYmbCE1tm1Fq8BrKqCrn1WvP1LV23uPYmBEGqGTK5vJiEFA VpeiNNwag9mfxStfcDvRWVoAl3fHrbiopfup1w8Zw3BarC9t9oPW3liYeOb/cYDw plPbopGakjvj3Co8H36wvg5+e8FFDmMPDy8UJTJhQ1IJip3qzSj4UzJh5ZAFs9Jc E3TYe1/oD6SoSg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:15:38 2025 by rpki-client