This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft File: ajXs8V8abbPIJhCSrr4iEyWRNc4.mft (raw, json) Hash identifier: 212yd2nEGnWBIJVRkTJJzmVe9ydVvzls4rIaRGk2EPE= Subject key identifier: E5:45:65:ED:7F:C7:CF:2B:0E:1C:0B:7F:6D:25:76:5F:AF:CD:58:9C Authority key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE Certificate issuer: /CN=6a35ecf15f1a6db3c8261092aebe2213259135ce Certificate serial: 019B23D12349958D1BF08F3FF41890795536 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft Manifest number: 12 Signing time: Mon 15 Dec 2025 21:01:07 +0000 Manifest this update: Mon 15 Dec 2025 21:01:07 +0000 Manifest next update: Tue 16 Dec 2025 21:01:07 +0000 Files and hashes: 1: Lew-h_DR6pX_cLDKkCKKKvC30n4.asa (hash: d3xiU+jGcgBPAr/J+bp6R3hubPZue+FUp5GBeI9OOQw=) 2: ajXs8V8abbPIJhCSrr4iEyWRNc4.crl (hash: U5wCs9dLWh0IpGLfvDvXl0aaPUYLbK2lkZKVSv7BKeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:23:49:95:8d:1b:f0:8f:3f:f4:18:90:79:55:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce Validity Not Before: Dec 15 21:01:07 2025 GMT Not After : Dec 16 21:01:07 2025 GMT Subject: CN=e54565ed7fc7cf2b0e1c0b7f6d25765fafcd589c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c4:ad:a6:01:e0:98:28:af:71:f2:05:41:12: 3d:e5:f3:c9:06:4d:b5:e9:02:7c:1e:f7:0e:c6:c1: 1b:37:6a:26:da:18:a1:0f:c7:41:71:bc:e7:5a:4a: 18:c6:dd:c4:e9:26:8f:46:53:79:1b:05:c2:a8:8b: 61:7a:ca:bc:1d:e7:11:bb:cf:b4:64:b6:b8:67:58: f1:7e:1f:a2:dc:03:1b:6a:00:eb:b3:a2:15:4a:63: 54:85:10:09:0f:08:07:48:5e:3f:15:a4:bc:a0:f8: 5c:91:65:1a:a6:7d:f4:d6:00:9d:28:53:e7:9c:86: 99:b6:56:6e:24:75:d0:08:c5:2e:b9:18:3d:f4:aa: 5c:91:cc:8a:aa:aa:d7:14:a5:77:1a:02:bd:86:9a: 41:55:47:da:a3:fb:e3:5f:58:2a:31:9c:74:75:92: 7e:cb:0e:1b:c5:d5:7d:3c:93:4e:47:b7:c6:c0:df: c4:b0:b9:ba:a1:68:9a:bf:cb:72:b9:a3:4e:be:2c: 29:ef:66:f9:f2:8c:c1:44:54:80:f4:de:b8:84:14: 03:00:33:a0:16:dc:1c:36:39:e2:1d:ae:b1:d6:ec: a4:d5:42:f2:2f:8e:43:b6:f1:ee:b7:36:65:3e:90: 5f:56:8c:ce:b0:ac:4e:eb:bd:1e:c7:52:90:c5:f2: 60:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:45:65:ED:7F:C7:CF:2B:0E:1C:0B:7F:6D:25:76:5F:AF:CD:58:9C X509v3 Authority Key Identifier: keyid:6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:23:93:bf:70:f5:a9:3f:e1:01:b1:f1:12:67:db:5c:68:1f: 75:28:48:49:ec:2f:cc:a0:fa:66:2e:70:52:33:33:03:c0:bd: df:b1:e8:49:3e:55:5b:4b:27:2e:a3:c7:20:97:09:81:9c:84: 8e:2c:97:68:81:80:66:4b:88:a0:52:21:dd:d9:f9:7c:c1:36: 18:7f:6f:22:af:d1:00:5a:17:38:a7:20:f2:b7:f9:a0:61:94: 3b:61:85:1c:bb:10:b9:46:61:72:94:60:91:87:5d:03:ff:e3: 2b:5c:af:cb:1b:93:00:f8:80:13:12:89:6b:c6:04:2c:36:19: dd:35:17:c6:5e:4b:6f:93:be:fb:57:ad:19:fa:88:df:a8:68: c7:21:11:41:db:f5:89:f9:c4:c8:40:98:41:a1:36:e4:87:bf: 1c:1a:90:ed:41:72:c0:d5:f3:20:c1:83:e7:f2:b6:63:fb:c6: 33:05:9b:ba:9e:ed:b2:87:91:e8:29:0e:81:b5:db:5f:eb:8e: df:17:f5:b5:49:2b:97:79:84:89:f4:f5:cb:87:ad:f4:b7:79: d3:19:b8:71:1c:f6:4f:87:12:b6:98:99:40:e1:88:52:ef:07: f6:b1:7b:12:f9:77:2c:ee:c2:91:a1:b4:b5:f1:c5:9e:ea:ca: fd:7f:cd:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0SNJlY0b8I8/9BiQeVU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMzVlY2YxNWYxYTZkYjNjODI2MTA5MmFlYmUyMjEzMjU5 MTM1Y2UwHhcNMjUxMjE1MjEwMTA3WhcNMjUxMjE2MjEwMTA3WjAzMTEwLwYDVQQD EyhlNTQ1NjVlZDdmYzdjZjJiMGUxYzBiN2Y2ZDI1NzY1ZmFmY2Q1ODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8StpgHgmCivcfIFQRI95fPJBk21 6QJ8HvcOxsEbN2om2hihD8dBcbznWkoYxt3E6SaPRlN5GwXCqIthesq8HecRu8+0 ZLa4Z1jxfh+i3AMbagDrs6IVSmNUhRAJDwgHSF4/FaS8oPhckWUapn301gCdKFPn nIaZtlZuJHXQCMUuuRg99KpckcyKqqrXFKV3GgK9hppBVUfao/vjX1gqMZx0dZJ+ yw4bxdV9PJNOR7fGwN/EsLm6oWiav8tyuaNOviwp72b58ozBRFSA9N64hBQDADOg FtwcNjniHa6x1uyk1ULyL45DtvHutzZlPpBfVozOsKxO670ex1KQxfJgoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVFZe1/x88rDhwLf20ldl+vzVicMB8GA1UdIwQY MBaAFGo17PFfGm2zyCYQkq6+IhMlkTXOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWpYczhWOGFiYlBJSmhDU3JyNGlFeVdSTmM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yYTY5NDMtMTA2MC00YmFlLWE3YTQt N2EyODg0OTZlZDY2LzEvYWpYczhWOGFiYlBJSmhDU3JyNGlFeVdSTmM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8yYTY5NDMtMTA2MC00YmFlLWE3YTQtN2EyODg0OTZlZDY2 LzEvYWpYczhWOGFiYlBJSmhDU3JyNGlFeVdSTmM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXiOTv3D1 qT/hAbHxEmfbXGgfdShISewvzKD6Zi5wUjMzA8C937HoST5VW0snLqPHIJcJgZyE jiyXaIGAZkuIoFIh3dn5fME2GH9vIq/RAFoXOKcg8rf5oGGUO2GFHLsQuUZhcpRg kYddA//jK1yvyxuTAPiAExKJa8YELDYZ3TUXxl5Lb5O++1etGfqI36hoxyERQdv1 ifnEyECYQaE25Ie/HBqQ7UFywNXzIMGD5/K2Y/vGMwWbup7tsoeR6CkOgbXbX+uO 3xf1tUkrl3mEifT1y4et9Ld50xm4cRz2T4cStpiZQOGIUu8H9rF7Evl3LO7CkaG0 tfHFnurK/X/NVQ== -----END CERTIFICATE-----Generated at Tue Dec 16 04:32:35 2025 by rpki-client