This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json) Hash identifier: v21FGOxuq7sbvegBuP99zO66si/ES5yrKXCvNaBrE10= Subject key identifier: 0C:5F:C4:46:85:B2:0A:AE:B0:0A:64:DB:33:A6:42:9F:BF:57:0E:EC Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af Certificate serial: 019AF61C8C26DDBFE7F55D8FCB4BED36F2E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft Manifest number: 0F92 Signing time: Sun 07 Dec 2025 00:00:57 +0000 Manifest this update: Sun 07 Dec 2025 00:00:57 +0000 Manifest next update: Mon 08 Dec 2025 00:00:57 +0000 Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: 9+w2kwnSt+kI1kDNL+IADdFpzXpsoEGOV7ROl4ROklE=) 2: B0Hd0utXPhNTqlbRxXDwmF9KHjs.roa (hash: 1ceb7F8O/NW3RMAYN486oZsriG91e3FFu7flF4b5QpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:8c:26:dd:bf:e7:f5:5d:8f:cb:4b:ed:36:f2:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af Validity Not Before: Dec 7 00:00:57 2025 GMT Not After : Dec 8 00:00:57 2025 GMT Subject: CN=0c5fc44685b20aaeb00a64db33a6429fbf570eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:04:e0:3c:29:45:de:2f:a2:a9:68:0d:b4:d3: 05:87:4a:0d:03:94:af:14:d8:49:cd:40:06:14:cb: e9:f0:a3:20:39:b6:43:68:03:26:f0:9a:ed:a9:80: 51:97:94:63:81:8a:12:76:72:9c:d1:b6:13:ab:97: ca:79:e2:08:52:42:43:b8:f7:e2:6e:3e:1f:2e:61: 30:a7:c0:df:e9:94:7a:aa:6a:93:27:b4:0f:a6:d1: ff:f9:1b:a2:f7:7b:e4:bf:00:eb:b7:b5:7c:4d:c5: e6:98:ad:7b:9b:d1:6d:38:83:a1:81:2d:af:a6:d7: 24:97:c3:5f:87:e3:48:ad:31:02:db:1e:a3:f1:41: 25:fb:4d:be:b4:40:56:c9:b0:47:b3:3c:fc:13:2e: 09:7b:71:2e:2c:ce:d9:e1:a2:a9:50:bc:74:f1:93: 62:d9:ad:33:9f:4c:27:e6:6c:f6:a3:a2:94:b2:cb: 54:55:d6:09:c0:09:56:48:4d:db:cc:57:65:ee:11: 2c:3f:99:b2:45:81:13:bc:b5:51:27:cc:48:e4:6c: f1:80:39:8f:e6:06:98:3f:50:a6:cf:fb:c7:51:d1: 5c:e1:3e:94:2b:78:92:13:d4:5e:b2:75:91:86:c1: ef:28:03:e3:83:aa:a5:e6:a9:9d:de:0c:f9:60:25: a7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5F:C4:46:85:B2:0A:AE:B0:0A:64:DB:33:A6:42:9F:BF:57:0E:EC X509v3 Authority Key Identifier: keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:14:25:5c:84:a4:78:08:e8:5c:9b:61:33:48:67:cc:84:38: dd:6b:cf:1b:32:ba:de:6a:07:f0:ab:f8:16:d8:30:79:dd:dc: 37:eb:f3:81:ca:41:31:0c:64:bd:fe:cf:4e:67:27:2a:79:d8: 9a:fd:fb:47:61:83:ea:e4:d6:71:c9:30:46:38:23:68:47:e5: 9f:67:1d:e8:37:24:cd:03:60:09:4e:f3:7b:13:4b:58:96:76: ba:73:b7:25:25:89:44:64:6d:29:21:89:4b:bd:91:dc:e7:4f: fd:78:ec:90:7b:11:f8:e1:6f:46:37:4e:89:99:e7:8e:8c:eb: af:ae:78:c9:60:34:7e:41:c0:6e:87:9c:c6:8f:eb:b6:58:91: f8:8b:73:cf:16:10:a5:ec:a8:84:b0:f1:d5:38:3d:3d:81:77: fc:6b:61:d8:7c:0e:8f:44:27:a5:6e:dc:7a:20:c0:45:51:f3: 15:1b:d3:3a:63:99:36:eb:e7:bc:75:99:c9:1c:cd:3f:1e:3d: 8a:1e:32:47:24:d5:a7:e9:2f:b5:52:19:48:60:05:5a:7e:40: 9c:87:0a:5b:ab:6b:3e:fc:44:45:0b:37:ff:3d:a7:bd:07:e3: 17:c5:13:aa:bf:be:ae:58:fc:35:d6:20:1f:e7:f3:b8:e5:92: d4:31:b7:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HIwm3b/n9V2Py0vtNvLkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzI0ZTZhYTU4ODMyOWVhYzdhOTM4ZmI5ODc4ZDEzMmYy YTg1YWYwHhcNMjUxMjA3MDAwMDU3WhcNMjUxMjA4MDAwMDU3WjAzMTEwLwYDVQQD EygwYzVmYzQ0Njg1YjIwYWFlYjAwYTY0ZGIzM2E2NDI5ZmJmNTcwZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgTgPClF3i+iqWgNtNMFh0oNA5Sv FNhJzUAGFMvp8KMgObZDaAMm8JrtqYBRl5RjgYoSdnKc0bYTq5fKeeIIUkJDuPfi bj4fLmEwp8Df6ZR6qmqTJ7QPptH/+Rui93vkvwDrt7V8TcXmmK17m9FtOIOhgS2v ptckl8Nfh+NIrTEC2x6j8UEl+02+tEBWybBHszz8Ey4Je3EuLM7Z4aKpULx08ZNi 2a0zn0wn5mz2o6KUsstUVdYJwAlWSE3bzFdl7hEsP5myRYETvLVRJ8xI5GzxgDmP 5gaYP1Cmz/vHUdFc4T6UK3iSE9ResnWRhsHvKAPjg6ql5qmd3gz5YCWnsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxfxEaFsgqusApk2zOmQp+/Vw7sMB8GA1UdIwQY MBaAFAIyTmqliDKerHqTj7mHjRMvKoWvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jMjNiOTYtYWViNC00OTM0LWE1NTAt NGRiOTg0ZTFjODMxLzEvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9jMjNiOTYtYWViNC00OTM0LWE1NTAtNGRiOTg0ZTFjODMx LzEvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxQlXISk eAjoXJthM0hnzIQ43WvPGzK63moH8Kv4Ftgwed3cN+vzgcpBMQxkvf7PTmcnKnnY mv37R2GD6uTWcckwRjgjaEfln2cd6DckzQNgCU7zexNLWJZ2unO3JSWJRGRtKSGJ S72R3OdP/XjskHsR+OFvRjdOiZnnjozrr654yWA0fkHAboecxo/rtliR+ItzzxYQ peyohLDx1Tg9PYF3/Gth2HwOj0QnpW7ceiDARVHzFRvTOmOZNuvnvHWZyRzNPx49 ih4yRyTVp+kvtVIZSGAFWn5AnIcKW6trPvxERQs3/z2nvQfjF8UTqr++rlj8NdYg H+fzuOWS1DG3qQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:09 2025 by rpki-client