This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft File: AMAJiEz5L9xqDS6hJ7619MyMDcc.mft (raw, json) Hash identifier: DJfISvsogvvyMJyxtNSMx0tVcPxtYVykGefyvfZH/b4= Subject key identifier: 79:75:C3:EE:4E:AA:48:12:BB:9E:9B:51:84:0B:58:5B:E8:8C:64:10 Authority key identifier: 00:C0:09:88:4C:F9:2F:DC:6A:0D:2E:A1:27:BE:B5:F4:CC:8C:0D:C7 Certificate issuer: /CN=00c009884cf92fdc6a0d2ea127beb5f4cc8c0dc7 Certificate serial: 019AF2772AE09697C83EF548AD205472B3E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft Manifest number: 16C2 Signing time: Sat 06 Dec 2025 07:01:27 +0000 Manifest this update: Sat 06 Dec 2025 07:01:27 +0000 Manifest next update: Sun 07 Dec 2025 07:01:27 +0000 Files and hashes: 1: AMAJiEz5L9xqDS6hJ7619MyMDcc.crl (hash: JBMGEmIELZjwbPq5wbjUipNUWEBPcOlp5ry2HSDxQWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:2a:e0:96:97:c8:3e:f5:48:ad:20:54:72:b3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00c009884cf92fdc6a0d2ea127beb5f4cc8c0dc7 Validity Not Before: Dec 6 07:01:27 2025 GMT Not After : Dec 7 07:01:27 2025 GMT Subject: CN=7975c3ee4eaa4812bb9e9b51840b585be88c6410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f2:44:91:3f:f2:66:6d:88:84:f9:54:7b:1b: aa:48:b8:df:5b:d2:43:06:d3:4b:79:ab:15:6f:9d: 1a:4d:d1:6f:9c:e2:4a:27:2a:4d:52:3c:81:9c:7f: d6:a3:ef:41:25:1b:d8:14:09:1f:4c:76:78:60:d4: a5:a3:fa:46:d0:dc:70:2b:f8:82:a2:bb:fd:b2:47: e9:54:65:25:dd:82:02:f0:23:4e:c7:d6:08:16:a5: 38:0d:96:54:25:82:c7:27:ab:a1:5b:93:34:ea:79: 2f:e6:19:c4:dc:43:8b:24:00:88:c5:68:69:e9:c7: cf:4d:ce:77:c3:f3:d8:bc:f9:4b:5b:8c:ed:9a:21: 88:a3:b6:71:24:55:19:59:69:26:03:93:3a:f4:35: 06:62:03:9c:bc:14:65:b2:c5:3d:c8:ac:76:0b:b1: a1:a3:66:4b:83:af:75:4d:e8:40:7a:7e:87:fd:d6: 5d:07:42:e4:4f:45:66:00:15:45:b5:80:72:e3:a1: 9c:4e:22:3f:3a:6c:35:18:25:b3:65:ab:83:8d:19: d7:75:7e:49:b0:b9:ef:0c:1e:d5:ac:2b:7d:8a:8c: fe:a5:52:40:73:19:f8:13:1c:5d:6b:57:7c:00:4a: 2b:4d:2b:f3:bd:05:73:1b:38:6e:8b:83:f2:04:7a: eb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:75:C3:EE:4E:AA:48:12:BB:9E:9B:51:84:0B:58:5B:E8:8C:64:10 X509v3 Authority Key Identifier: keyid:00:C0:09:88:4C:F9:2F:DC:6A:0D:2E:A1:27:BE:B5:F4:CC:8C:0D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8a:36:0b:29:7d:ec:56:84:fc:95:5d:f3:9d:9b:6c:de:2d: 0c:ce:9f:84:e7:61:47:70:c9:b4:73:57:4d:32:c7:74:b1:86: eb:eb:8d:2e:a9:b7:be:19:37:4e:03:d4:28:b8:59:5e:7f:6f: f7:b4:df:66:3d:fa:e8:af:9f:e1:84:51:35:59:00:2b:dd:c8: 3a:ad:aa:95:ce:22:65:4b:35:7d:a7:37:56:fd:fd:b7:79:05: d5:fc:c4:fb:13:04:fb:81:6f:1d:48:38:03:5a:84:2f:af:6f: e2:d0:51:89:63:38:42:bf:d2:19:48:2e:c0:84:ab:0f:39:d7: 3b:af:76:18:d7:46:39:7b:e9:00:bb:34:58:02:27:32:4d:33: 32:e4:16:3d:c9:15:86:0e:8f:ec:62:2b:4d:53:85:9f:28:67: df:6b:17:86:2c:d0:71:a9:df:dd:42:94:2b:1b:f0:31:86:d9: 23:bb:e0:11:34:27:7f:ff:12:c5:b1:80:22:24:18:7c:3a:cc: dc:2a:d9:32:64:89:12:4b:c5:df:8b:9c:fd:5a:88:cf:a4:df: 15:45:fb:f8:bc:09:89:93:fe:86:d9:48:2e:7b:9c:4e:0b:25: 9c:5b:5b:52:fc:a9:8f:d2:c0:5e:f4:90:66:17:1e:80:88:b1: d4:99:c1:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyrglpfIPvVIrSBUcrPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYzAwOTg4NGNmOTJmZGM2YTBkMmVhMTI3YmViNWY0Y2M4 YzBkYzcwHhcNMjUxMjA2MDcwMTI3WhcNMjUxMjA3MDcwMTI3WjAzMTEwLwYDVQQD Eyg3OTc1YzNlZTRlYWE0ODEyYmI5ZTliNTE4NDBiNTg1YmU4OGM2NDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PJEkT/yZm2IhPlUexuqSLjfW9JD BtNLeasVb50aTdFvnOJKJypNUjyBnH/Wo+9BJRvYFAkfTHZ4YNSlo/pG0NxwK/iC orv9skfpVGUl3YIC8CNOx9YIFqU4DZZUJYLHJ6uhW5M06nkv5hnE3EOLJACIxWhp 6cfPTc53w/PYvPlLW4ztmiGIo7ZxJFUZWWkmA5M69DUGYgOcvBRlssU9yKx2C7Gh o2ZLg691TehAen6H/dZdB0LkT0VmABVFtYBy46GcTiI/Omw1GCWzZauDjRnXdX5J sLnvDB7VrCt9ioz+pVJAcxn4Exxda1d8AEorTSvzvQVzGzhui4PyBHrrvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHl1w+5OqkgSu56bUYQLWFvojGQQMB8GA1UdIwQY MBaAFADACYhM+S/cag0uoSe+tfTMjA3HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU1BSmlFejVMOXhxRFM2aEo3NjE5TXlNRGNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yNzc1NDgtZGRiZi00MDlhLTgyY2Ut ZGM2NmNiOTI5NjdjLzEvQU1BSmlFejVMOXhxRFM2aEo3NjE5TXlNRGNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yNzc1NDgtZGRiZi00MDlhLTgyY2UtZGM2NmNiOTI5Njdj LzEvQU1BSmlFejVMOXhxRFM2aEo3NjE5TXlNRGNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoo2Cyl9 7FaE/JVd852bbN4tDM6fhOdhR3DJtHNXTTLHdLGG6+uNLqm3vhk3TgPUKLhZXn9v 97TfZj366K+f4YRRNVkAK93IOq2qlc4iZUs1fac3Vv39t3kF1fzE+xME+4FvHUg4 A1qEL69v4tBRiWM4Qr/SGUguwISrDznXO692GNdGOXvpALs0WAInMk0zMuQWPckV hg6P7GIrTVOFnyhn32sXhizQcanf3UKUKxvwMYbZI7vgETQnf/8SxbGAIiQYfDrM 3CrZMmSJEkvF34uc/VqIz6TfFUX7+LwJiZP+htlILnucTgslnFtbUvypj9LAXvSQ ZhcegIix1JnBMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:20 2025 by rpki-client