This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json) Hash identifier: nt0wzRDVt0Zy4mYzjt124dnTnvhZ04lwrGiEMLO2/1Y= Subject key identifier: 6F:C5:06:BC:A9:24:FF:B6:28:2E:0F:71:2E:0D:3A:66:E0:57:4C:E1 Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6 Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6 Certificate serial: 019AF5E6005CE1C890C86777BE5900129B7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft Manifest number: 0ED9 Signing time: Sat 06 Dec 2025 23:01:22 +0000 Manifest this update: Sat 06 Dec 2025 23:01:22 +0000 Manifest next update: Sun 07 Dec 2025 23:01:22 +0000 Files and hashes: 1: RqntMWBDTAuHkvxXJRUQlBHvO0Y.roa (hash: rHf6WPLDzEiSy2rPCd2fdO2Jo+GQGQFkoNjCSTwwLww=) 2: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: 9HPPL7KmqFu9mN1lH5bJjOPgfGjNUnaIn3Xai3D0m1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:00:5c:e1:c8:90:c8:67:77:be:59:00:12:9b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6 Validity Not Before: Dec 6 23:01:22 2025 GMT Not After : Dec 7 23:01:22 2025 GMT Subject: CN=6fc506bca924ffb6282e0f712e0d3a66e0574ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f3:91:0b:4f:df:74:03:16:3e:cb:51:f7:12: aa:b2:0d:a3:e7:b4:0f:04:42:2a:3a:a8:4b:d6:a9: 6d:98:a0:90:17:ba:9e:98:3e:e6:85:25:6e:22:ac: 1a:73:51:ba:a2:2c:25:89:25:df:de:b1:b8:20:a6: a1:28:39:fd:07:4c:93:58:5f:4d:ef:f8:b8:ab:93: 1e:7d:f7:cc:29:8f:0a:6a:9a:25:55:49:d2:ac:73: 76:4a:10:5b:02:0e:d5:b2:c3:2d:82:af:c4:12:2d: 99:b4:ed:8d:75:74:4b:8d:19:b3:eb:a8:85:91:b0: ee:d9:d6:f5:c0:b1:32:99:d4:5a:0a:63:c1:ca:a4: f9:76:79:b0:15:e8:1c:7f:8d:89:6f:43:86:8d:48: fe:da:87:42:89:f1:e9:d5:fc:a4:c8:61:c7:4a:48: c4:eb:9d:e8:64:a2:b0:97:fd:9f:39:bf:ec:28:4e: be:c8:52:ea:ce:84:6a:85:6e:45:11:37:06:89:b5: eb:dc:ca:1c:70:94:10:b5:53:f5:49:24:3d:38:6a: df:fe:d2:c7:96:a4:32:b8:58:5a:37:e9:47:24:be: b1:1d:8f:fb:d0:97:c4:58:e5:95:54:26:6e:ab:84: 7c:57:29:95:77:7b:59:14:83:5d:29:95:54:ec:88: db:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C5:06:BC:A9:24:FF:B6:28:2E:0F:71:2E:0D:3A:66:E0:57:4C:E1 X509v3 Authority Key Identifier: keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:96:5b:2c:86:4c:da:d9:7e:d6:92:0f:38:54:58:11:14:53: b7:c4:d4:d2:d9:43:58:c7:f8:39:dc:7b:12:21:bc:13:bc:c1: 41:33:39:6e:79:5f:b0:65:a9:77:4a:40:ef:b3:24:05:3e:c6: 38:71:79:97:66:2b:f2:dc:f4:d4:98:36:ea:b9:8d:b1:82:c2: bc:94:48:c5:81:f8:3a:ff:37:84:2e:5a:c2:86:7c:ee:db:8b: 23:34:01:a2:23:00:02:75:45:f6:46:4c:dc:64:33:fc:61:bf: 05:6d:10:c9:cd:77:78:e9:42:54:5c:a0:ed:1f:72:1d:e4:f2: 17:07:09:ab:ee:b7:19:17:5c:90:fc:d6:5c:17:d2:87:ad:40: 1d:d6:43:e3:f6:2f:d0:56:af:51:e1:bd:d4:80:8d:db:9c:78: dd:94:ea:62:48:4a:f3:51:db:28:7a:a4:26:72:ba:c0:5e:5c: d3:2c:da:89:7c:2a:76:c6:c0:c9:ef:8a:f0:4d:c4:8c:0a:dd: 8a:1f:ab:69:bd:09:f5:09:a4:c9:6e:f5:64:bb:8f:08:7e:24: b8:f4:43:4f:b4:2b:c0:a2:e0:ae:fd:34:a1:47:16:90:08:8f: 9f:cc:ee:0c:e0:5d:b8:12:e3:d4:75:04:0c:3d:e7:cd:e6:91: 99:92:07:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15gBc4ciQyGd3vlkAEpt/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMzc5ODIyMDdlNjJkZWQwNjkxZGNiMThlZjZlYTMyZDQx M2YzZjYwHhcNMjUxMjA2MjMwMTIyWhcNMjUxMjA3MjMwMTIyWjAzMTEwLwYDVQQD Eyg2ZmM1MDZiY2E5MjRmZmI2MjgyZTBmNzEyZTBkM2E2NmUwNTc0Y2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfORC0/fdAMWPstR9xKqsg2j57QP BEIqOqhL1qltmKCQF7qemD7mhSVuIqwac1G6oiwliSXf3rG4IKahKDn9B0yTWF9N 7/i4q5MefffMKY8KapolVUnSrHN2ShBbAg7VssMtgq/EEi2ZtO2NdXRLjRmz66iF kbDu2db1wLEymdRaCmPByqT5dnmwFegcf42Jb0OGjUj+2odCifHp1fykyGHHSkjE 653oZKKwl/2fOb/sKE6+yFLqzoRqhW5FETcGibXr3MoccJQQtVP1SSQ9OGrf/tLH lqQyuFhaN+lHJL6xHY/70JfEWOWVVCZuq4R8VymVd3tZFINdKZVU7IjbgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/FBrypJP+2KC4PcS4NOmbgV0zhMB8GA1UdIwQY MBaAFGo3mCIH5i3tBpHcsY726jLUE/P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iODExZDUtYmEzNS00MjNkLTg2MmYt MjM1MzE2NTRlNTg5LzEvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9iODExZDUtYmEzNS00MjNkLTg2MmYtMjM1MzE2NTRlNTg5 LzEvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZZbLIZM 2tl+1pIPOFRYERRTt8TU0tlDWMf4Odx7EiG8E7zBQTM5bnlfsGWpd0pA77MkBT7G OHF5l2Yr8tz01Jg26rmNsYLCvJRIxYH4Ov83hC5awoZ87tuLIzQBoiMAAnVF9kZM 3GQz/GG/BW0Qyc13eOlCVFyg7R9yHeTyFwcJq+63GRdckPzWXBfSh61AHdZD4/Yv 0FavUeG91ICN25x43ZTqYkhK81HbKHqkJnK6wF5c0yzaiXwqdsbAye+K8E3EjArd ih+rab0J9QmkyW71ZLuPCH4kuPRDT7QrwKLgrv00oUcWkAiPn8zuDOBduBLj1HUE DD3nzeaRmZIHmg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:12:26 2025 by rpki-client