This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft File: Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json) Hash identifier: oLiT5CEBUlrCW0lsNRK2R1/ZqZiUJuMOLi0F8ZMJg5c= Subject key identifier: 20:9F:D1:21:40:62:6C:B2:66:EA:01:79:36:83:01:92:FB:5E:52:29 Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7 Certificate issuer: /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7 Certificate serial: 019AF31B3BB8092649D3CE860D1DD2F13B31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft Manifest number: 056D Signing time: Sat 06 Dec 2025 10:00:39 +0000 Manifest this update: Sat 06 Dec 2025 10:00:39 +0000 Manifest next update: Sun 07 Dec 2025 10:00:39 +0000 Files and hashes: 1: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: HXA6I3Ri7RGD7AY/gUJUduKEmMCVcYSS3CJx4MNX1s0=) 2: q-0tOhbXBE8z7Hlp7AMLHyIkH0o.roa (hash: clCq9CQNeepLFI/InJwVfW2jsbdMuqRrXN6npNkjGNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:3b:b8:09:26:49:d3:ce:86:0d:1d:d2:f1:3b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7 Validity Not Before: Dec 6 10:00:39 2025 GMT Not After : Dec 7 10:00:39 2025 GMT Subject: CN=209fd12140626cb266ea017936830192fb5e5229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7f:e5:2a:c4:a2:54:a0:e9:05:f2:5f:5e:6d: 61:cf:c7:a1:ac:34:d8:5f:67:c6:f0:54:1e:65:63: 9c:cb:5b:4a:35:c0:30:5e:86:56:6e:7c:a4:52:9e: 24:5c:39:5c:26:98:17:69:8c:e7:8c:0d:3a:77:bc: 5c:1d:ee:ee:4d:21:95:b9:2c:eb:7b:dd:e5:60:7c: 2f:f7:26:eb:62:da:f4:99:63:7b:ee:f5:fd:b0:2a: a3:db:9c:2e:45:e1:a3:93:1e:47:05:5c:16:42:5e: 8a:a9:1f:26:4c:94:8b:82:12:e4:b9:fc:0e:03:f3: 95:2e:08:41:55:55:64:18:58:e5:ae:71:c9:64:c0: 67:5c:64:87:92:65:eb:32:ab:a9:b4:7b:79:d7:aa: 1d:75:01:c8:2f:7e:81:28:ff:03:2a:68:63:08:50: 74:c0:70:6d:a1:74:95:ea:8a:fa:fd:56:b9:4c:ca: 99:02:09:af:09:82:06:98:51:b4:f9:62:18:64:45: 02:c2:1a:06:fe:4e:59:b1:36:d8:71:e0:71:48:ed: a6:81:7b:47:5c:a9:66:9f:d6:0b:74:a7:13:4d:5e: 9b:f0:98:a8:91:ce:2b:1d:63:e3:28:5c:9a:83:bf: c0:b1:bf:1b:a3:02:5a:3d:43:32:84:a4:1a:11:9e: a7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9F:D1:21:40:62:6C:B2:66:EA:01:79:36:83:01:92:FB:5E:52:29 X509v3 Authority Key Identifier: keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:9c:7c:e7:1d:8f:ec:1e:20:c3:c7:e0:28:c5:7d:87:5d:74: 74:ed:9a:ce:0c:5c:a2:16:dd:b3:ba:12:99:56:92:00:49:8a: 75:35:30:ac:f2:4f:8f:f9:f9:78:7a:0a:3f:b5:5e:e4:ff:ec: 3f:36:c9:af:b4:84:2e:9f:13:27:cc:62:09:01:ea:b7:74:a1: 30:56:73:70:ac:3f:4b:2f:27:e1:b3:7f:ac:8d:c8:a8:b6:72: 2b:f9:b3:30:f8:fc:60:4c:f3:7e:60:ee:4a:91:14:72:22:b7: af:42:14:ce:b1:6c:8a:02:de:04:35:2e:cc:10:90:15:c6:5c: 30:f3:b8:d0:12:8d:14:7e:9a:23:06:37:20:04:22:b8:0d:21: ba:90:9f:70:7c:f3:5d:c4:65:2b:70:90:29:44:ab:63:69:bd: 7e:34:f7:4b:5c:96:ca:7a:9f:34:7c:f6:08:62:7f:b2:8e:65: 29:dc:5d:7b:fa:70:e4:05:ba:16:6c:27:73:b2:60:ed:56:70: d8:f7:40:54:41:3e:20:9b:fe:e4:96:ec:9f:98:9e:51:8a:36: 9c:0f:2c:ca:f1:f8:a8:2d:a4:b1:80:61:95:1f:8c:c1:79:7a: a5:8a:0f:70:05:ba:5d:ab:7c:b2:58:96:0e:0e:41:63:a0:5e: 7d:b7:78:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzu4CSZJ086GDR3S8TsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyM2Y2M2ZiMmJmYzYzMWM0NGY0YmI2ZDk0YmRmMjhiM2Vj OWRmZjcwHhcNMjUxMjA2MTAwMDM5WhcNMjUxMjA3MTAwMDM5WjAzMTEwLwYDVQQD EygyMDlmZDEyMTQwNjI2Y2IyNjZlYTAxNzkzNjgzMDE5MmZiNWU1MjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX/lKsSiVKDpBfJfXm1hz8ehrDTY X2fG8FQeZWOcy1tKNcAwXoZWbnykUp4kXDlcJpgXaYznjA06d7xcHe7uTSGVuSzr e93lYHwv9ybrYtr0mWN77vX9sCqj25wuReGjkx5HBVwWQl6KqR8mTJSLghLkufwO A/OVLghBVVVkGFjlrnHJZMBnXGSHkmXrMquptHt516oddQHIL36BKP8DKmhjCFB0 wHBtoXSV6or6/Va5TMqZAgmvCYIGmFG0+WIYZEUCwhoG/k5ZsTbYceBxSO2mgXtH XKlmn9YLdKcTTV6b8Jiokc4rHWPjKFyag7/Asb8bowJaPUMyhKQaEZ6ngQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCf0SFAYmyyZuoBeTaDAZL7XlIpMB8GA1UdIwQY MBaAFAI/Y/sr/GMcRPS7bZS98os+yd/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jZjExYjQtNzk3Yi00ODIwLWJmZWEt NTNjZDkxYjI4YzRmLzEvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9jZjExYjQtNzk3Yi00ODIwLWJmZWEtNTNjZDkxYjI4YzRm LzEvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapx85x2P 7B4gw8fgKMV9h110dO2azgxcohbds7oSmVaSAEmKdTUwrPJPj/n5eHoKP7Ve5P/s PzbJr7SELp8TJ8xiCQHqt3ShMFZzcKw/Sy8n4bN/rI3IqLZyK/mzMPj8YEzzfmDu SpEUciK3r0IUzrFsigLeBDUuzBCQFcZcMPO40BKNFH6aIwY3IAQiuA0hupCfcHzz XcRlK3CQKUSrY2m9fjT3S1yWynqfNHz2CGJ/so5lKdxde/pw5AW6Fmwnc7Jg7VZw 2PdAVEE+IJv+5Jbsn5ieUYo2nA8syvH4qC2ksYBhlR+MwXl6pYoPcAW6Xat8sliW Dg5BY6Befbd4UA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:11 2025 by rpki-client