This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft File: AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json) Hash identifier: quJ71fiIq34MxmYWjRH9r19wIvJRwqEZ29+yFUS5lsY= Subject key identifier: 46:A4:21:EC:8E:3B:69:11:D4:A1:CF:98:FC:BB:B4:AE:85:0F:76:0D Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62 Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362 Certificate serial: 019B243EA4A9D25812086E95D9BC8DFF5E2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft Manifest number: 08 Signing time: Mon 15 Dec 2025 23:00:43 +0000 Manifest this update: Mon 15 Dec 2025 23:00:43 +0000 Manifest next update: Tue 16 Dec 2025 23:00:43 +0000 Files and hashes: 1: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: XwWhpVZo9+kWB2AaPz46BZKhmogOCCtENFXgKs2KzWc=) 2: Lbm30kMieYd721PV2KHSvhBUOqA.asa (hash: Xj6tX5jAtIAUBTLTJ0Ax6ulkGTmiNIvhT+c2crJgPQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:a4:a9:d2:58:12:08:6e:95:d9:bc:8d:ff:5e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362 Validity Not Before: Dec 15 23:00:43 2025 GMT Not After : Dec 16 23:00:43 2025 GMT Subject: CN=46a421ec8e3b6911d4a1cf98fcbbb4ae850f760d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:14:33:14:3b:41:9c:a2:1d:de:1d:90:7c: e7:31:ed:ab:cd:65:77:70:95:c9:ab:7b:49:c7:9f: ec:d4:6a:e6:69:91:ab:c7:15:9b:50:36:a6:b6:29: bb:4d:ab:9c:8a:ea:67:3c:8e:9a:07:33:59:0f:57: 22:39:9d:ac:fd:79:b4:57:5d:7f:23:bc:1e:5b:11: cb:08:9a:a4:57:e9:3a:7c:82:d1:24:84:2e:f9:84: 6f:33:0d:35:68:dd:ae:15:59:72:54:31:1a:23:2b: ab:06:09:a7:27:87:ba:4a:c6:10:ae:16:c0:96:e5: 08:59:64:0c:fa:84:c2:7a:0f:9c:31:cf:a9:b6:53: 66:91:b3:9f:e4:08:5a:06:fc:35:03:d9:e3:61:4d: 39:e0:e0:5a:9d:c7:ab:15:5c:a2:9d:4f:df:55:0f: 15:3a:4f:ed:2a:20:e8:b6:8e:8a:df:f8:2c:04:f9: 9d:a2:b1:93:4d:a6:2f:70:20:f0:f4:57:ad:09:a2: 61:ee:39:8e:29:a9:fc:2a:d0:9d:6a:37:86:91:f7: f8:72:b8:06:94:e5:9e:0f:a2:61:23:3c:74:fc:15: 58:3e:0a:2d:ce:32:e0:e9:a3:66:ff:c9:8c:85:fe: c4:d8:88:b6:5d:cf:16:82:64:d4:6c:ed:34:90:2d: 47:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A4:21:EC:8E:3B:69:11:D4:A1:CF:98:FC:BB:B4:AE:85:0F:76:0D X509v3 Authority Key Identifier: keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:a1:e3:f0:c9:b5:07:09:8a:fd:c8:79:a8:d3:38:97:4b:00: 64:1c:24:e1:21:2b:28:16:b2:2f:5a:03:59:8f:ec:5e:18:9b: 35:37:d7:c4:51:30:4f:8f:17:45:d8:fa:99:63:1c:e0:f8:00: 26:48:87:6b:00:2b:38:6c:bb:51:38:e4:31:79:4e:cc:93:f6: 7e:1c:3a:48:52:3d:a6:80:6e:2d:b1:f7:af:82:e1:a4:64:40: 87:79:1a:97:d2:ba:a3:3a:a3:ff:31:88:9c:62:ae:b7:12:44: 02:0f:46:74:20:27:9b:6e:77:68:94:e6:44:ff:cb:f8:4a:75: 4a:4a:ce:f1:23:8f:3d:83:e6:b6:eb:7a:8a:4b:19:88:30:84: 10:a1:3d:89:cf:8f:2e:59:89:49:44:e3:a7:e4:4e:5c:31:61: ed:1e:e6:27:ab:ed:7c:e5:c4:f6:9e:3e:6e:de:35:69:dd:43: b8:e5:ea:30:03:ed:9a:20:3f:ac:49:61:1d:66:6e:98:1c:a4: f4:27:a9:b2:69:9c:44:55:c0:70:7d:56:a8:c8:4d:30:13:1a: aa:a9:54:82:48:51:10:15:c5:a3:64:d3:22:fe:8a:d3:11:5e: 71:c9:9d:51:2c:71:34:11:f9:c0:d5:1b:38:f3:ec:de:95:b6: 36:54:7e:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPqSp0lgSCG6V2byN/14uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOTRjMGY3MzY4YzA0NzY0M2U5MWM1N2Q2Y2ZkYTlmOTk4 OTczNjIwHhcNMjUxMjE1MjMwMDQzWhcNMjUxMjE2MjMwMDQzWjAzMTEwLwYDVQQD Eyg0NmE0MjFlYzhlM2I2OTExZDRhMWNmOThmY2JiYjRhZTg1MGY3NjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvMUMxQ7QZyiHd4dkHznMe2rzWV3 cJXJq3tJx5/s1GrmaZGrxxWbUDamtim7TauciupnPI6aBzNZD1ciOZ2s/Xm0V11/ I7weWxHLCJqkV+k6fILRJIQu+YRvMw01aN2uFVlyVDEaIyurBgmnJ4e6SsYQrhbA luUIWWQM+oTCeg+cMc+ptlNmkbOf5AhaBvw1A9njYU054OBancerFVyinU/fVQ8V Ok/tKiDoto6K3/gsBPmdorGTTaYvcCDw9FetCaJh7jmOKan8KtCdajeGkff4crgG lOWeD6JhIzx0/BVYPgotzjLg6aNm/8mMhf7E2Ii2Xc8WgmTUbO00kC1H5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEakIeyOO2kR1KHPmPy7tK6FD3YNMB8GA1UdIwQY MBaAFACUwPc2jAR2Q+kcV9bP2p+ZiXNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82M2VmYmItZmUwMi00NjhhLTk2MGQt M2MyNzQyZjI4YTNjLzEvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82M2VmYmItZmUwMi00NjhhLTk2MGQtM2MyNzQyZjI4YTNj LzEvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqHj8Mm1 BwmK/ch5qNM4l0sAZBwk4SErKBayL1oDWY/sXhibNTfXxFEwT48XRdj6mWMc4PgA JkiHawArOGy7UTjkMXlOzJP2fhw6SFI9poBuLbH3r4LhpGRAh3kal9K6ozqj/zGI nGKutxJEAg9GdCAnm253aJTmRP/L+Ep1SkrO8SOPPYPmtut6iksZiDCEEKE9ic+P LlmJSUTjp+ROXDFh7R7mJ6vtfOXE9p4+bt41ad1DuOXqMAPtmiA/rElhHWZumByk 9CepsmmcRFXAcH1WqMhNMBMaqqlUgkhREBXFo2TTIv6K0xFeccmdUSxxNBH5wNUb OPPs3pW2NlR+nw== -----END CERTIFICATE-----Generated at Tue Dec 16 04:32:47 2025 by rpki-client