This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft File: Ami5ML7spR-_NUP-efmxk0XPE9U.mft (raw, json) Hash identifier: V/mb8gdJYle9nYRQnKWIrO6HNdEiLFVeZPmgWmtaiL8= Subject key identifier: 1B:9F:11:4A:36:8F:FC:36:E3:E6:9A:54:D1:9B:20:7A:E0:BE:06:79 Authority key identifier: 02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5 Certificate issuer: /CN=0268b930beeca51fbf3543fe79f9b19345cf13d5 Certificate serial: 019AF49C6B2F2264D61EE51EBA32A4806650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft Manifest number: 0D2D Signing time: Sat 06 Dec 2025 17:01:22 +0000 Manifest this update: Sat 06 Dec 2025 17:01:22 +0000 Manifest next update: Sun 07 Dec 2025 17:01:22 +0000 Files and hashes: 1: 7ocFAoRHk3yJWF4ccbCKPsPczz0.roa (hash: 3rzZftACx3aNRwkNijs0bb/ATBefsoIo/62WXVgzLj8=) 2: Ami5ML7spR-_NUP-efmxk0XPE9U.crl (hash: DNe01t0FPA2Q9yQBq0L36iiIJf0volxc6cdHQ/Q38cI=) 3: KQ2gfKjDTAqDCIF8rg6ctK4u8jw.roa (hash: SW1oNVSy3V9mCkDE3DhSyTP3T2L66HAY6yybOJ8XTqM=) 4: z58icxsnW3D1G-Tg8oJfAEu4K30.roa (hash: 2xl+ZWAT8+7LeSxTlZeMXeVfz1ij8cub6sBtbC4Yv/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:6b:2f:22:64:d6:1e:e5:1e:ba:32:a4:80:66:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0268b930beeca51fbf3543fe79f9b19345cf13d5 Validity Not Before: Dec 6 17:01:22 2025 GMT Not After : Dec 7 17:01:22 2025 GMT Subject: CN=1b9f114a368ffc36e3e69a54d19b207ae0be0679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:63:a0:8e:d6:6a:98:3f:da:7b:ff:74:07:05: 07:e0:54:72:20:62:36:f2:ad:66:c0:e3:98:51:e5: 73:89:b0:29:10:9f:a4:35:2a:09:82:90:00:c4:b7: 6c:22:a4:e2:aa:8d:d8:ab:cd:26:45:08:ed:89:0b: 7d:82:6f:1d:e8:7a:e3:a4:48:f0:5a:41:40:1d:df: f6:4a:83:2c:0a:5c:a2:62:e9:c3:00:ad:3a:3d:9a: fa:49:9f:76:d8:1c:b5:dc:48:ff:4a:a9:3b:4e:a7: c9:86:56:67:4a:2a:a8:d9:29:22:3e:b6:cf:a3:60: 04:63:32:85:93:3e:f2:b7:4d:aa:e8:32:90:24:44: 5e:ba:6e:95:cf:4e:68:48:00:77:25:0d:8a:77:a7: 78:6c:4a:b4:99:a3:ca:8a:cb:d2:97:8b:42:ba:ec: 2b:68:f2:0c:ae:0d:a1:fa:95:fa:58:cf:dc:d7:35: 13:38:f1:78:9d:d6:b1:5e:7f:1f:3b:a1:5e:17:91: 99:0a:79:67:1f:77:79:92:22:e0:84:20:75:19:93: d2:51:d3:44:f1:8e:d0:97:2d:f5:0f:a7:90:14:09: e3:8b:f6:50:01:c5:31:70:ad:24:52:a2:b2:43:31: 6a:22:0c:48:bb:e0:f6:13:99:67:a7:06:62:89:9a: 04:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9F:11:4A:36:8F:FC:36:E3:E6:9A:54:D1:9B:20:7A:E0:BE:06:79 X509v3 Authority Key Identifier: keyid:02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:40:40:fe:d1:be:ec:2a:62:05:d5:ce:ed:73:0d:5f:85:bf: d8:46:85:44:c5:bc:7d:fc:12:b4:cf:4c:4c:b6:2a:02:72:e4: 29:bd:2c:2a:4a:a8:a7:09:a6:58:b9:e1:61:dd:98:0b:62:76: 82:50:4d:ff:fc:d3:12:b8:2f:b4:f4:28:01:a6:d1:c3:7d:bd: b1:49:4a:7b:1e:91:d1:44:f8:f3:36:0b:e9:19:50:bc:9c:13: 7a:2f:ff:04:66:c5:97:c0:11:12:2a:1d:8d:50:71:dd:46:63: d3:a3:6a:bb:b7:1c:22:1c:81:4d:75:bb:ab:9c:d6:33:44:50: 8e:29:40:b5:1b:3f:ce:3a:15:77:b6:2b:2c:b6:4b:fe:79:6b: 1e:75:2f:67:e9:81:9c:41:af:e1:6a:16:97:cd:95:28:5e:0b: 41:45:35:a9:88:a9:ce:c5:05:3d:11:d7:a4:45:47:a7:5b:e7: 85:d0:e6:d4:22:a5:cb:21:e1:fe:a4:59:35:dd:7f:63:a8:1a: b7:47:37:cc:55:4c:98:29:dc:92:72:79:52:6d:91:83:29:4c: 65:04:7f:3e:1b:d7:2c:db:fc:b3:2a:0d:08:c1:d2:79:44:da: 82:2b:63:10:95:b9:1e:da:f4:e2:2d:bb:6a:d5:a5:ba:4b:c3: 24:a6:f8:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nGsvImTWHuUeujKkgGZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNjhiOTMwYmVlY2E1MWZiZjM1NDNmZTc5ZjliMTkzNDVj ZjEzZDUwHhcNMjUxMjA2MTcwMTIyWhcNMjUxMjA3MTcwMTIyWjAzMTEwLwYDVQQD EygxYjlmMTE0YTM2OGZmYzM2ZTNlNjlhNTRkMTliMjA3YWUwYmUwNjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGOgjtZqmD/ae/90BwUH4FRyIGI2 8q1mwOOYUeVzibApEJ+kNSoJgpAAxLdsIqTiqo3Yq80mRQjtiQt9gm8d6HrjpEjw WkFAHd/2SoMsClyiYunDAK06PZr6SZ922By13Ej/Sqk7TqfJhlZnSiqo2SkiPrbP o2AEYzKFkz7yt02q6DKQJEReum6Vz05oSAB3JQ2Kd6d4bEq0maPKisvSl4tCuuwr aPIMrg2h+pX6WM/c1zUTOPF4ndaxXn8fO6FeF5GZCnlnH3d5kiLghCB1GZPSUdNE 8Y7Qly31D6eQFAnji/ZQAcUxcK0kUqKyQzFqIgxIu+D2E5lnpwZiiZoEdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBufEUo2j/w24+aaVNGbIHrgvgZ5MB8GA1UdIwQY MBaAFAJouTC+7KUfvzVD/nn5sZNFzxPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW1pNU1MN3NwUi1fTlVQLWVmbXhrMFhQRTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80M2NkOTgtNmY4YS00NGNmLTk1YmQt NDIwZjljOGVhZmE0LzEvQW1pNU1MN3NwUi1fTlVQLWVmbXhrMFhQRTlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi80M2NkOTgtNmY4YS00NGNmLTk1YmQtNDIwZjljOGVhZmE0 LzEvQW1pNU1MN3NwUi1fTlVQLWVmbXhrMFhQRTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0BA/tG+ 7CpiBdXO7XMNX4W/2EaFRMW8ffwStM9MTLYqAnLkKb0sKkqopwmmWLnhYd2YC2J2 glBN//zTErgvtPQoAabRw329sUlKex6R0UT48zYL6RlQvJwTei//BGbFl8AREiod jVBx3UZj06Nqu7ccIhyBTXW7q5zWM0RQjilAtRs/zjoVd7YrLLZL/nlrHnUvZ+mB nEGv4WoWl82VKF4LQUU1qYipzsUFPRHXpEVHp1vnhdDm1CKlyyHh/qRZNd1/Y6ga t0c3zFVMmCncknJ5Um2RgylMZQR/PhvXLNv8syoNCMHSeUTagitjEJW5Htr04i27 atWlukvDJKb4Uw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:43:17 2025 by rpki-client