This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json) Hash identifier: rovS8Kbe4nH93S/kJ4k4JmpcAO+N11e+ftW0dYz15ks= Subject key identifier: 52:1F:FE:A4:30:D3:DB:23:37:1C:3F:63:D5:0B:1A:31:E3:13:68:A0 Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61 Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261 Certificate serial: 019AF12DA6704A0E404B192E3A42C3543E5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft Manifest number: 0E05 Signing time: Sat 06 Dec 2025 01:01:31 +0000 Manifest this update: Sat 06 Dec 2025 01:01:31 +0000 Manifest next update: Sun 07 Dec 2025 01:01:31 +0000 Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: donPeAXcsKXN7J0GLUyGHU9uYinvxZvOlIFjA01nYCg=) 2: qzSVGtS_jWsXuo115ysr12jv81o.roa (hash: 6sU/7Xohp1bS1zbTFVnz4YbGVdQCm8u0BmBoUOstkdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a6:70:4a:0e:40:4b:19:2e:3a:42:c3:54:3e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261 Validity Not Before: Dec 6 01:01:31 2025 GMT Not After : Dec 7 01:01:31 2025 GMT Subject: CN=521ffea430d3db23371c3f63d50b1a31e31368a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8d:1b:1f:b0:47:2a:59:d3:38:f1:75:b6:6f: db:3e:66:92:e4:77:43:44:f1:b4:7d:00:90:b3:80: 2d:79:88:b9:b9:df:1a:22:d9:97:d6:41:b8:0e:46: c9:44:a0:e2:3c:cb:e0:be:0c:a0:dd:de:1f:c9:a3: a5:4e:73:e5:35:b8:28:26:67:59:1a:a8:dc:75:74: b3:a4:f1:5e:4a:da:d3:0b:8b:b3:0c:11:15:3e:d2: 49:95:31:8e:a7:ad:8b:0e:e7:ac:d6:c5:4b:38:95: c8:66:43:82:01:a6:69:44:c5:20:bb:29:a7:e0:4a: c6:d1:43:93:1c:2e:b2:4f:71:92:74:45:74:f2:70: 5f:e5:af:a6:44:47:b9:2d:73:7e:a8:de:74:ca:b4: c0:58:81:0d:9b:ce:6f:d3:0e:1f:ed:2d:54:9e:5d: cf:a7:e9:ea:d9:55:0d:2e:88:f8:52:65:de:a2:a6: d9:df:91:15:92:4c:50:c1:ff:40:b2:a9:14:24:94: 21:2b:18:18:6b:a7:fb:fc:8c:4f:e0:b5:94:1a:0b: 08:c5:d4:ff:88:40:db:b4:22:70:2b:b6:a3:6d:dc: 72:da:ed:ef:54:77:2c:d1:03:55:e0:13:4b:d2:0e: 8d:27:29:18:c4:e6:2e:c1:fb:85:98:37:09:2c:23: 84:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1F:FE:A4:30:D3:DB:23:37:1C:3F:63:D5:0B:1A:31:E3:13:68:A0 X509v3 Authority Key Identifier: keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:6f:90:e3:5e:2f:61:f1:78:38:17:91:99:96:44:64:02:e6: 7c:3b:70:e6:56:d5:82:2c:12:ef:2a:59:bf:e0:dc:f1:1c:7c: a4:cb:8c:f2:57:ad:4d:79:8c:53:c3:8c:12:7c:5f:08:8d:68: 89:7c:03:34:ff:3d:78:2c:4b:cf:9f:2a:33:a9:9d:60:a7:88: f0:5e:35:a3:c6:bd:fc:44:ff:8f:5a:9f:d6:0b:fe:a7:4b:c8: 20:d5:25:ae:28:bc:15:63:70:1a:5b:1e:72:60:39:b9:8c:3e: dd:39:27:a3:0b:8f:2a:7a:0f:4d:6a:5b:c3:9f:8a:2d:03:0b: 4c:fa:46:4e:26:9c:bc:e9:a3:fa:75:75:50:7e:f5:7c:86:8f: 25:ed:e3:f7:b5:c8:e3:2b:a6:87:eb:18:6e:22:83:ad:0c:88: 86:99:f9:95:de:b7:5f:ff:a3:10:7a:b0:0b:c8:52:b4:a3:05: 4b:2c:ed:b7:62:8d:0c:a3:f8:7c:8e:5c:57:13:57:f1:0b:76: 50:95:d1:c0:ed:e6:aa:03:f2:f7:6d:19:b8:f4:c4:70:c0:09: a4:6f:5e:da:15:df:03:6d:c8:7f:ff:49:fe:c5:96:ab:7e:0e: 9c:28:04:ce:84:58:a0:29:a0:e9:70:fd:cd:fd:ca:44:d8:be: 50:80:91:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaZwSg5ASxkuOkLDVD5dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYmYyMzAwNDQ2NDljMDZkNzVlMzAyYzUxNzUwMDRkYmZj NjcyNjEwHhcNMjUxMjA2MDEwMTMxWhcNMjUxMjA3MDEwMTMxWjAzMTEwLwYDVQQD Eyg1MjFmZmVhNDMwZDNkYjIzMzcxYzNmNjNkNTBiMWEzMWUzMTM2OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI0bH7BHKlnTOPF1tm/bPmaS5HdD RPG0fQCQs4AteYi5ud8aItmX1kG4DkbJRKDiPMvgvgyg3d4fyaOlTnPlNbgoJmdZ GqjcdXSzpPFeStrTC4uzDBEVPtJJlTGOp62LDues1sVLOJXIZkOCAaZpRMUguymn 4ErG0UOTHC6yT3GSdEV08nBf5a+mREe5LXN+qN50yrTAWIENm85v0w4f7S1Unl3P p+nq2VUNLoj4UmXeoqbZ35EVkkxQwf9AsqkUJJQhKxgYa6f7/IxP4LWUGgsIxdT/ iEDbtCJwK7ajbdxy2u3vVHcs0QNV4BNL0g6NJykYxOYuwfuFmDcJLCOENwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIf/qQw09sjNxw/Y9ULGjHjE2igMB8GA1UdIwQY MBaAFAC/IwBEZJwG114wLFF1AE2/xnJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUw4akFFUmtuQWJYWGpBc1VYVUFUYl9HY21FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kODgxMjItZGVkYS00ZmQwLTlhNjct NmVmMWQ5NjgxM2EyLzEvQUw4akFFUmtuQWJYWGpBc1VYVUFUYl9HY21FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9kODgxMjItZGVkYS00ZmQwLTlhNjctNmVmMWQ5NjgxM2Ey LzEvQUw4akFFUmtuQWJYWGpBc1VYVUFUYl9HY21FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlm+Q414v YfF4OBeRmZZEZALmfDtw5lbVgiwS7ypZv+Dc8Rx8pMuM8letTXmMU8OMEnxfCI1o iXwDNP89eCxLz58qM6mdYKeI8F41o8a9/ET/j1qf1gv+p0vIINUlrii8FWNwGlse cmA5uYw+3TknowuPKnoPTWpbw5+KLQMLTPpGTiacvOmj+nV1UH71fIaPJe3j97XI 4yumh+sYbiKDrQyIhpn5ld63X/+jEHqwC8hStKMFSyztt2KNDKP4fI5cVxNX8Qt2 UJXRwO3mqgPy920ZuPTEcMAJpG9e2hXfA23If/9J/sWWq34OnCgEzoRYoCmg6XD9 zf3KRNi+UICR+w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:16 2025 by rpki-client