This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft File: amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft (raw, json) Hash identifier: 7xOP2oXYTZVJA1oYghKgN9h+St3W0nMb/QDZ8r9C3f0= Subject key identifier: 6E:26:0A:80:DB:1B:92:F2:DC:6A:FF:C8:E4:20:56:17:EF:3B:A1:16 Authority key identifier: 6A:6A:0C:9F:27:78:A8:87:86:8B:74:3A:2B:5F:FA:8C:62:7E:55:F3 Certificate issuer: /CN=6a6a0c9f2778a887868b743a2b5ffa8c627e55f3 Certificate serial: 019AF3529EDF8D011ACA1962026D0ECB9B18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft Manifest number: D5 Signing time: Sat 06 Dec 2025 11:01:09 +0000 Manifest this update: Sat 06 Dec 2025 11:01:09 +0000 Manifest next update: Sun 07 Dec 2025 11:01:09 +0000 Files and hashes: 1: amoMnyd4qIeGi3Q6K1_6jGJ-VfM.crl (hash: HBXtsaeL9hAzyyLebFsukBQfo/0c8g2AqB5PBJRnJ8Q=) 2: qS9lbWxycbZu6RoyXldJwuJR6TM.roa (hash: qx382/Be7wHuXq5Yjg5wuqIZocz2BMbKerwk1urC5hM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft rsync://rpki.ripe.net/repository/DEFAULT/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:9e:df:8d:01:1a:ca:19:62:02:6d:0e:cb:9b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a6a0c9f2778a887868b743a2b5ffa8c627e55f3 Validity Not Before: Dec 6 11:01:09 2025 GMT Not After : Dec 7 11:01:09 2025 GMT Subject: CN=6e260a80db1b92f2dc6affc8e4205617ef3ba116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7b:df:df:93:f2:c4:4e:ba:17:9d:82:51:64: 4b:ce:00:70:5e:93:30:05:26:f6:e9:df:df:af:17: 37:c3:16:a0:6b:4b:95:01:5b:d7:d6:35:77:3f:33: ca:12:ef:1d:39:d2:7f:a1:e8:03:f2:c9:fa:c1:70: b0:74:cd:3d:b6:29:de:36:c9:41:77:c3:a6:44:91: 85:a8:c7:cb:4f:f9:53:55:87:ff:2e:e2:6f:48:ac: 4a:ca:85:f9:83:31:63:bc:af:36:ed:69:29:18:cd: d2:43:ce:d6:ea:6d:ad:6e:ad:41:ec:e8:25:15:52: d0:3e:a0:48:d9:d2:c2:ed:69:2d:70:31:32:85:5e: f5:a8:55:0a:a9:af:91:3d:39:9c:52:bc:a1:05:68: 1f:c0:b2:eb:93:31:a4:7d:a7:2d:13:7c:eb:3f:c9: 44:40:91:c4:c4:52:cb:5b:6b:48:b2:9a:c3:de:6d: 73:8e:d0:a6:98:f9:8b:57:53:db:6f:1e:68:32:81: 37:7d:fb:22:ff:23:4d:27:4c:b7:6a:aa:48:3b:56: 64:66:4e:2e:9f:ea:c6:50:11:17:3f:c6:69:8e:5d: 15:81:35:fd:f2:13:4b:27:6b:e5:a9:61:a6:05:0d: 8b:97:25:38:c1:c4:63:92:88:22:17:d6:77:d5:6c: a0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:26:0A:80:DB:1B:92:F2:DC:6A:FF:C8:E4:20:56:17:EF:3B:A1:16 X509v3 Authority Key Identifier: keyid:6A:6A:0C:9F:27:78:A8:87:86:8B:74:3A:2B:5F:FA:8C:62:7E:55:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:50:68:0a:a5:88:4f:16:3c:2d:4d:87:8a:ac:23:70:e6:b8: 7d:c7:36:ea:f6:70:db:b3:ce:f3:12:87:f7:a6:35:cf:27:d0: 91:d7:24:b2:16:a5:29:19:db:41:bb:d7:63:80:20:63:a5:ba: bc:05:6c:7a:bd:98:de:be:19:bb:11:8e:31:a6:19:40:63:33: 13:3f:4c:7e:3f:9f:ce:e3:33:f1:d7:bd:54:bc:2e:b8:5d:1a: 63:e6:d0:51:5b:78:dc:b5:5f:91:7e:5b:83:a0:19:3d:f4:17: 64:60:d0:59:1b:3a:09:d1:f1:4f:1f:eb:61:cf:82:f9:1d:28: f4:82:86:2f:6a:66:f6:17:04:6a:16:d8:3e:99:79:96:46:bd: 17:d2:1b:5b:f9:8e:f2:0b:eb:1b:1e:13:9e:2f:6c:af:5e:8e: fa:86:5e:f1:eb:ec:85:a4:8c:3a:f7:ef:97:e3:82:a4:c2:62: de:2f:43:a3:7e:4b:33:a2:5d:f5:88:55:c6:35:cf:ff:5f:96: 48:68:8b:f5:fa:33:51:15:97:22:66:e5:1a:9d:56:3f:64:64: f2:52:34:67:42:8a:1a:77:e7:7b:46:c1:c3:4b:ac:d2:4c:0b: ec:f0:7f:0a:02:86:8c:c5:a9:da:40:29:87:b7:ce:9c:e3:ad: 92:dd:5b:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUp7fjQEayhliAm0Oy5sYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNmEwYzlmMjc3OGE4ODc4NjhiNzQzYTJiNWZmYThjNjI3 ZTU1ZjMwHhcNMjUxMjA2MTEwMTA5WhcNMjUxMjA3MTEwMTA5WjAzMTEwLwYDVQQD Eyg2ZTI2MGE4MGRiMWI5MmYyZGM2YWZmYzhlNDIwNTYxN2VmM2JhMTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznvf35PyxE66F52CUWRLzgBwXpMw BSb26d/frxc3wxaga0uVAVvX1jV3PzPKEu8dOdJ/oegD8sn6wXCwdM09tineNslB d8OmRJGFqMfLT/lTVYf/LuJvSKxKyoX5gzFjvK827WkpGM3SQ87W6m2tbq1B7Ogl FVLQPqBI2dLC7WktcDEyhV71qFUKqa+RPTmcUryhBWgfwLLrkzGkfactE3zrP8lE QJHExFLLW2tIsprD3m1zjtCmmPmLV1Pbbx5oMoE3ffsi/yNNJ0y3aqpIO1ZkZk4u n+rGUBEXP8Zpjl0VgTX98hNLJ2vlqWGmBQ2LlyU4wcRjkogiF9Z31WygyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4mCoDbG5Ly3Gr/yOQgVhfvO6EWMB8GA1UdIwQY MBaAFGpqDJ8neKiHhot0Oitf+oxiflXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW1vTW55ZDRxSWVHaTNRNksxXzZqR0otVmZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85ODBmNzctN2Q3NS00ZmMzLWI0NWUt MTEyYTQ4NTcwZjQwLzEvYW1vTW55ZDRxSWVHaTNRNksxXzZqR0otVmZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85ODBmNzctN2Q3NS00ZmMzLWI0NWUtMTEyYTQ4NTcwZjQw LzEvYW1vTW55ZDRxSWVHaTNRNksxXzZqR0otVmZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVBoCqWI TxY8LU2HiqwjcOa4fcc26vZw27PO8xKH96Y1zyfQkdckshalKRnbQbvXY4AgY6W6 vAVser2Y3r4ZuxGOMaYZQGMzEz9Mfj+fzuMz8de9VLwuuF0aY+bQUVt43LVfkX5b g6AZPfQXZGDQWRs6CdHxTx/rYc+C+R0o9IKGL2pm9hcEahbYPpl5lka9F9IbW/mO 8gvrGx4Tni9sr16O+oZe8evshaSMOvfvl+OCpMJi3i9Do35LM6Jd9YhVxjXP/1+W SGiL9fozURWXImblGp1WP2Rk8lI0Z0KKGnfne0bBw0us0kwL7PB/CgKGjMWp2kAp h7fOnOOtkt1btw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:42 2025 by rpki-client