This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json) Hash identifier: Nq6EuOEzLfNXUZQFqb2Z4oSXej2CP6+fBWR/ohjk08w= Subject key identifier: BB:D1:9E:0C:7C:2B:5E:2C:78:26:3A:8D:42:A6:0F:9B:70:CD:ED:05 Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21 Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821 Certificate serial: 019AF2AD7F8026BA1AA830C6D1886EDD55E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft Manifest number: 0BF7 Signing time: Sat 06 Dec 2025 08:00:47 +0000 Manifest this update: Sat 06 Dec 2025 08:00:47 +0000 Manifest next update: Sun 07 Dec 2025 08:00:47 +0000 Files and hashes: 1: 0avBUZc0fRe5pdYzvDk9HgX1ajQ.roa (hash: vHaXs0oLz+thOA7Ry4E1jwe2sP/zqNcNu+NOGxEA+rM=) 2: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: +BMe9hQbYTzc/8KwpGNGZ9nLGXadceLTbf1VMvTIFkU=) 3: EZwtw6Pq_G1qcUHbmI7-gXnu9Jc.roa (hash: vmy1JQIAxBf7tCsU1XK4dYqZEdqdyJHgDm3eJn2Yp94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7f:80:26:ba:1a:a8:30:c6:d1:88:6e:dd:55:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821 Validity Not Before: Dec 6 08:00:47 2025 GMT Not After : Dec 7 08:00:47 2025 GMT Subject: CN=bbd19e0c7c2b5e2c78263a8d42a60f9b70cded05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:19:92:77:ce:8e:3a:ac:06:05:a5:38:d2: 2b:ea:d2:5f:3b:5c:aa:6c:a4:15:96:e9:4e:d8:dc: 3e:ad:3e:ef:11:b4:b3:3b:97:4e:9d:1e:48:df:86: 53:a8:2f:dd:29:f1:cd:73:96:68:f3:bb:95:a4:3c: 85:f8:00:3d:ff:79:74:25:3b:42:5f:4c:6b:20:dc: 5f:79:85:e7:9a:60:0a:ec:aa:cd:c4:94:82:06:d2: 25:83:46:cb:31:a3:d8:cf:b7:bb:3b:ec:22:c8:03: 74:75:2b:0b:85:0c:48:d0:cd:69:c1:8e:93:77:a1: ac:91:02:cd:55:bd:73:56:70:78:af:3f:1e:d5:ea: fd:7e:2a:1f:39:5a:8d:53:d0:03:65:66:b7:51:61: cb:22:06:57:20:d6:55:3a:19:fb:d5:28:fb:23:08: ad:52:62:3d:c8:3c:69:37:6b:1f:63:4a:8f:20:c3: ca:80:aa:a4:31:59:11:3a:3f:2d:0f:fa:64:ce:8b: cc:ff:d8:f3:ed:2b:c7:15:c0:8d:6c:3a:08:11:aa: 5e:7d:c5:ff:99:5e:5c:0d:b6:3d:69:3a:26:11:e6: c9:14:34:60:cd:24:52:61:22:1d:75:24:7f:44:72: 63:c5:9a:71:c9:bf:e8:05:db:49:0f:b0:f1:b3:42: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D1:9E:0C:7C:2B:5E:2C:78:26:3A:8D:42:A6:0F:9B:70:CD:ED:05 X509v3 Authority Key Identifier: keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ee:cf:e0:05:b4:2b:de:20:f7:4b:cb:6d:39:db:8a:d4:b0: 81:f9:40:c0:ae:ab:93:bf:fc:d1:1b:82:2c:2a:fb:48:8f:f3: fe:d9:99:93:76:76:ee:b9:cc:6e:20:bd:6e:bd:aa:64:3c:d4: 14:b8:9e:15:c4:e7:e3:9f:28:6d:17:42:26:22:c3:d9:90:20: 97:6e:e6:87:c0:e0:e6:91:44:b6:8c:c4:d8:44:ac:21:29:0f: 8f:0b:52:9c:d8:4b:c0:ba:66:59:c6:95:37:13:80:e2:fb:1f: d1:1f:31:79:27:1b:17:c3:e7:56:47:65:c0:f5:6a:c7:36:9a: f0:b3:98:c8:e9:f7:55:45:44:d0:f0:bf:e7:07:df:e9:c9:81: ab:a1:12:9c:51:45:a2:f2:4b:94:05:9e:05:fa:ec:db:23:11: cf:5f:6c:5e:91:63:46:57:76:56:a9:fa:6d:a0:c8:93:93:f6: 2d:e5:8b:41:6d:54:af:f8:24:cc:99:89:bb:44:a3:2b:84:a3: 03:b3:5b:c0:9b:69:4d:07:aa:a6:2e:57:db:74:e2:2d:07:a1: 37:7b:47:1c:14:36:b0:09:a6:e5:4e:42:79:b5:5d:fe:0c:b3: 12:4a:53:71:d8:ce:8b:3e:42:a1:f0:5b:bc:dd:39:4e:ad:1e: 05:27:a4:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrX+AJroaqDDG0Yhu3VXpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYWQ2ZDgzYzgwODM3MjlkN2E5ZDg1NzFkNjVjZTk3ZTA1 OGI4MjEwHhcNMjUxMjA2MDgwMDQ3WhcNMjUxMjA3MDgwMDQ3WjAzMTEwLwYDVQQD EyhiYmQxOWUwYzdjMmI1ZTJjNzgyNjNhOGQ0MmE2MGY5YjcwY2RlZDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD4ZknfOjjqsBgWlONIr6tJfO1yq bKQVlulO2Nw+rT7vEbSzO5dOnR5I34ZTqC/dKfHNc5Zo87uVpDyF+AA9/3l0JTtC X0xrINxfeYXnmmAK7KrNxJSCBtIlg0bLMaPYz7e7O+wiyAN0dSsLhQxI0M1pwY6T d6GskQLNVb1zVnB4rz8e1er9fiofOVqNU9ADZWa3UWHLIgZXINZVOhn71Sj7Iwit UmI9yDxpN2sfY0qPIMPKgKqkMVkROj8tD/pkzovM/9jz7SvHFcCNbDoIEapefcX/ mV5cDbY9aTomEebJFDRgzSRSYSIddSR/RHJjxZpxyb/oBdtJD7Dxs0LccwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvRngx8K14seCY6jUKmD5twze0FMB8GA1UdIwQY MBaAFACtbYPICDcp16nYVx1lzpfgWLghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kYjI5MTItODlhOS00ZWU5LTgyMjkt YTU1Zjc3YjgzZTZiLzEvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kYjI5MTItODlhOS00ZWU5LTgyMjktYTU1Zjc3YjgzZTZi LzEvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAee7P4AW0 K94g90vLbTnbitSwgflAwK6rk7/80RuCLCr7SI/z/tmZk3Z27rnMbiC9br2qZDzU FLieFcTn458obRdCJiLD2ZAgl27mh8Dg5pFEtozE2ESsISkPjwtSnNhLwLpmWcaV NxOA4vsf0R8xeScbF8PnVkdlwPVqxzaa8LOYyOn3VUVE0PC/5wff6cmBq6ESnFFF ovJLlAWeBfrs2yMRz19sXpFjRld2Vqn6baDIk5P2LeWLQW1Ur/gkzJmJu0SjK4Sj A7NbwJtpTQeqpi5X23TiLQehN3tHHBQ2sAmm5U5CebVd/gyzEkpTcdjOiz5CofBb vN05Tq0eBSekdg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:49 2025 by rpki-client