This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier: EAfY1gBelioEmuWSnw9qsk3HIpIAI+OKlY9YR6xKXgU=
Subject key identifier: 0B:66:1B:93:FE:40:C6:54:1D:5E:4D:B2:CE:7B:CA:FF:F0:E8:46:31
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 019AF50AE95FD71211C1DF87D5EC192A4C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number: 1763
Signing time: Sat 06 Dec 2025 19:02:04 +0000
Manifest this update: Sat 06 Dec 2025 19:02:04 +0000
Manifest next update: Sun 07 Dec 2025 19:02:04 +0000
Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: fQyi9Z5HJqewLNOHtcbWJKSA10+ZN0D/q+8SkmZbvPo=)
2: Oh-npebKNll7vvyYtRrj-cg_Nd4.roa (hash: VvG7KPmbGgCRtlU1cK6JWKQbIKFRicXjsb5mCW827Cs=)
3: dUHtzdOigEdCMJb0gXsKu7_CR9E.roa (hash: qHPvPZRfGsBNL2Al0WMsavpV3isIJ/xgOqxOV/q3Zgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:0a:e9:5f:d7:12:11:c1:df:87:d5:ec:19:2a:4c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: Dec 6 19:02:04 2025 GMT
Not After : Dec 7 19:02:04 2025 GMT
Subject: CN=0b661b93fe40c6541d5e4db2ce7bcafff0e84631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:91:9f:d2:5f:44:23:a4:df:41:de:ec:31:
a7:02:e7:7e:05:ff:3b:3e:06:65:e8:63:ff:16:ab:
60:2b:b0:df:a0:79:17:89:28:a7:01:20:45:c1:79:
b4:30:f4:b6:a1:21:52:6b:13:c5:34:ac:67:84:72:
be:76:00:44:10:32:97:a3:bb:59:d9:ed:de:95:8f:
fe:bf:92:e9:a9:0e:f1:b0:a5:9f:4d:0e:d5:5b:84:
e6:a2:73:99:33:ab:9e:13:70:07:96:59:29:f2:fa:
cc:46:c7:15:2e:23:04:a4:ee:ba:9d:b9:f8:69:94:
98:85:2b:de:13:a0:e6:f7:9b:c1:a7:4f:73:3b:85:
f6:b9:33:7d:a2:58:bf:c7:b8:e9:58:0e:73:a3:81:
29:90:6b:cf:5e:4e:6b:cd:cc:13:9a:9f:27:38:07:
c0:f6:c4:83:70:ad:7e:c1:d2:f5:1b:6c:1b:df:4c:
56:b5:4d:c2:0d:b8:6f:17:10:b0:8f:43:07:7c:15:
e3:c5:61:6d:74:33:e0:00:20:83:c5:cf:38:33:b1:
bb:0c:c9:63:c0:b7:f7:1d:cc:57:5d:99:70:be:59:
db:7f:5c:05:1b:3c:ad:46:d7:80:14:c1:70:70:6f:
9f:a3:91:a9:62:06:22:ff:3c:3f:58:98:0b:41:a2:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:66:1B:93:FE:40:C6:54:1D:5E:4D:B2:CE:7B:CA:FF:F0:E8:46:31
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bd:58:8f:8a:16:d1:85:82:09:8e:a4:5c:89:5a:9b:79:39:
f7:30:9b:ba:a3:c1:6d:0f:99:c2:ce:89:9c:ac:94:e8:d3:26:
d2:63:de:22:6e:79:9c:c2:93:43:8a:4e:23:af:cd:33:06:e4:
31:bb:8d:0d:ed:88:92:03:1f:71:bb:a9:d1:ac:4c:2f:d5:88:
c8:9d:c2:70:8e:23:1e:08:b1:f1:28:2e:b4:c1:83:5b:ba:d2:
07:55:92:0f:81:34:03:60:69:43:95:f2:de:e5:32:48:cc:73:
67:db:8e:ff:b9:77:f3:5f:b8:be:e7:4e:84:54:7d:16:7f:0c:
37:cb:dc:83:f9:11:cb:cc:43:30:d4:e6:93:5c:2d:ef:4a:4a:
2d:9e:f6:d3:ff:4d:ab:00:87:bc:fc:2f:6e:8b:91:91:d9:ff:
50:c8:af:9b:ee:79:07:90:4a:37:c4:23:f3:43:c5:26:b4:ef:
51:b0:2b:40:e6:08:ee:5b:5c:5a:ca:cb:72:65:45:ab:f5:16:
ec:10:7c:96:b3:d9:f7:c3:0d:b0:44:39:ec:99:31:19:aa:bc:
bc:3b:5c:4b:a1:67:b6:ae:ab:87:a4:4e:8a:36:d6:ec:b6:63:
ec:8b:e8:c5:c5:3c:a9:f4:5f:a1:34:10:f5:81:10:54:2e:94:
43:b2:93:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:35:34 2025 by rpki-client