This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft File: AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft (raw, json) Hash identifier: PEhaJHW3zAk4eis5YsCNSCNUJv3bIHxBmk/5ndLoPz8= Subject key identifier: 0A:2F:7B:C7:4F:1D:36:CB:FC:69:9E:E7:28:E2:DD:EF:19:D7:64:CC Authority key identifier: 00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16 Certificate issuer: /CN=00cadc5c7ba262a9a5b1d087369da5be797fba16 Certificate serial: 019AF2AD57B9B3445447D482CA67CDD97889 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft Manifest number: 011E Signing time: Sat 06 Dec 2025 08:00:37 +0000 Manifest this update: Sat 06 Dec 2025 08:00:37 +0000 Manifest next update: Sun 07 Dec 2025 08:00:37 +0000 Files and hashes: 1: 1-DF5D8tTh9lJKIY0izY4he5CjNI.roa (hash: spndr+yaPIzAms5NTzOXkrBxWrHm5eT2WPxTRQhq++s=) 2: AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl (hash: 9rnaewkB3fnhbKOWCCTc8kdM5T230VT28J3n3PqZxKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:57:b9:b3:44:54:47:d4:82:ca:67:cd:d9:78:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cadc5c7ba262a9a5b1d087369da5be797fba16 Validity Not Before: Dec 6 08:00:37 2025 GMT Not After : Dec 7 08:00:37 2025 GMT Subject: CN=0a2f7bc74f1d36cbfc699ee728e2ddef19d764cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:c8:1b:92:7f:1a:41:43:aa:22:f9:b5:2f: 67:93:a9:15:62:85:3b:19:12:3c:18:8b:f8:e4:99: 09:66:79:3e:fa:4a:1e:1b:63:8a:0f:45:43:46:49: 4a:0e:60:7f:a8:02:8c:08:0b:e9:48:32:3b:38:bb: 7a:75:eb:d4:03:40:07:4b:f2:ff:d8:18:ad:dd:d3: 5b:0a:46:9f:96:67:a8:eb:20:9f:a0:4d:90:4d:2e: 18:2e:6c:7b:93:b2:7f:1d:10:c3:7f:a4:4f:2d:e1: 2a:1b:81:67:a1:c1:7f:76:66:13:f5:a5:9f:ff:1d: c4:41:40:a2:65:fd:a6:f3:44:fb:88:cd:e3:e7:e5: 7c:4c:a6:69:6a:91:86:6b:37:43:af:fc:35:33:40: f3:26:13:59:39:1d:14:d2:e0:7e:50:7f:3d:ea:fb: 55:b8:bd:37:93:b9:67:05:b2:17:d6:05:9c:05:84: 02:a1:a8:16:91:cb:76:86:70:8e:f4:9c:34:8b:55: 4b:1a:94:4d:d5:46:35:e6:e5:fd:e2:be:42:93:c7: eb:19:89:8c:d9:ab:37:a4:49:0e:e0:33:63:ae:46: 73:0a:af:a1:ae:47:1e:b4:6a:b2:96:1d:65:2e:1c: 84:09:cd:d4:39:07:ef:61:5f:e5:58:ac:fe:fc:ac: 19:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2F:7B:C7:4F:1D:36:CB:FC:69:9E:E7:28:E2:DD:EF:19:D7:64:CC X509v3 Authority Key Identifier: keyid:00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f0:21:a5:7e:c5:ce:4a:20:75:7a:5b:2e:64:9d:1b:c0:dc: 8d:da:b1:74:28:5b:34:ce:4d:e7:56:23:a7:e3:49:92:bd:a3: ce:34:d3:95:ae:1d:83:22:f1:7f:e0:3d:db:94:c3:17:02:07: 9e:2d:6c:95:17:e6:34:77:f2:09:d8:e1:08:be:40:0e:c0:7c: 3c:13:41:80:c1:76:25:d1:af:43:ad:c8:c3:f4:43:eb:f4:ca: fa:2d:da:db:88:be:3a:d6:a5:8a:a5:7c:ce:23:64:45:0d:33: 0c:a9:f7:aa:3d:b5:e9:fd:63:fb:b0:c1:58:42:50:7c:52:ae: b2:d3:6f:be:41:c0:5c:37:92:c4:2d:45:5c:d0:68:5c:ec:93: 55:62:c7:02:76:9f:b5:54:4b:77:73:66:ad:a0:f1:e4:04:45: 12:fb:b7:79:f1:14:1d:86:ab:df:f4:21:8e:13:e8:bc:2d:64: 7c:80:33:df:22:89:2a:60:45:57:83:e1:44:aa:05:74:f3:17: f9:ab:4b:ff:ad:4d:24:35:79:be:47:41:a5:65:ab:61:3e:44: c5:2d:33:bf:08:bd:f5:60:61:88:40:c7:36:2a:33:87:73:31: 4f:87:3a:63:98:2e:d8:54:be:63:0b:e8:03:df:a1:44:47:aa: 72:0a:36:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVe5s0RUR9SCymfN2XiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwY2FkYzVjN2JhMjYyYTlhNWIxZDA4NzM2OWRhNWJlNzk3 ZmJhMTYwHhcNMjUxMjA2MDgwMDM3WhcNMjUxMjA3MDgwMDM3WjAzMTEwLwYDVQQD EygwYTJmN2JjNzRmMWQzNmNiZmM2OTllZTcyOGUyZGRlZjE5ZDc2NGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUnIG5J/GkFDqiL5tS9nk6kVYoU7 GRI8GIv45JkJZnk++koeG2OKD0VDRklKDmB/qAKMCAvpSDI7OLt6devUA0AHS/L/ 2Bit3dNbCkaflmeo6yCfoE2QTS4YLmx7k7J/HRDDf6RPLeEqG4FnocF/dmYT9aWf /x3EQUCiZf2m80T7iM3j5+V8TKZpapGGazdDr/w1M0DzJhNZOR0U0uB+UH896vtV uL03k7lnBbIX1gWcBYQCoagWkct2hnCO9Jw0i1VLGpRN1UY15uX94r5Ck8frGYmM 2as3pEkO4DNjrkZzCq+hrkcetGqylh1lLhyECc3UOQfvYV/lWKz+/KwZFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAove8dPHTbL/Gme5yji3e8Z12TMMB8GA1UdIwQY MBaAFADK3Fx7omKppbHQhzadpb55f7oWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU1yY1hIdWlZcW1sc2RDSE5wMmx2bmxfdWhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lMmRhYmEtMTZhMC00MThhLWI3YzUt MzRhNDg0NWMxZDhjLzEvQU1yY1hIdWlZcW1sc2RDSE5wMmx2bmxfdWhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9lMmRhYmEtMTZhMC00MThhLWI3YzUtMzRhNDg0NWMxZDhj LzEvQU1yY1hIdWlZcW1sc2RDSE5wMmx2bmxfdWhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/AhpX7F zkogdXpbLmSdG8DcjdqxdChbNM5N51Yjp+NJkr2jzjTTla4dgyLxf+A925TDFwIH ni1slRfmNHfyCdjhCL5ADsB8PBNBgMF2JdGvQ63Iw/RD6/TK+i3a24i+OtaliqV8 ziNkRQ0zDKn3qj216f1j+7DBWEJQfFKustNvvkHAXDeSxC1FXNBoXOyTVWLHAnaf tVRLd3NmraDx5ARFEvu3efEUHYar3/QhjhPovC1kfIAz3yKJKmBFV4PhRKoFdPMX +atL/61NJDV5vkdBpWWrYT5ExS0zvwi99WBhiEDHNiozh3MxT4c6Y5gu2FS+Ywvo A9+hREeqcgo2Og== -----END CERTIFICATE-----Generated at Sat Dec 6 12:46:42 2025 by rpki-client