This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft File: AmEbTqouCzf3LMCKySlhmB6rsh8.mft (raw, json) Hash identifier: NYKxw3x1GqnabDdEFDszj2QUa4IVp7llP8o74u44f8M= Subject key identifier: 5A:E9:30:0D:F2:7C:A2:0F:D5:01:EE:73:7E:5E:C4:E0:F1:DB:9E:AA Authority key identifier: 02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F Certificate issuer: /CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f Certificate serial: 019AF31C9ACE2EA3D1BCE3C96A2350FB6964 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 10:02:09 +0000 Manifest this update: Sat 06 Dec 2025 10:02:09 +0000 Manifest next update: Sun 07 Dec 2025 10:02:09 +0000 Files and hashes: 1: AmEbTqouCzf3LMCKySlhmB6rsh8.crl (hash: 2Qo4Cx5W3c2CcVF2excqiWhEraY9J6ROtAJ4zaKTcJs=) 2: ZYWLpZ35KZiRaWxSeFuEnh6lxl0.roa (hash: A+6pCmvRh21bff+k990m7MW26aQWM6C7J37zdRTRafw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:9a:ce:2e:a3:d1:bc:e3:c9:6a:23:50:fb:69:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f Validity Not Before: Dec 6 10:02:09 2025 GMT Not After : Dec 7 10:02:09 2025 GMT Subject: CN=5ae9300df27ca20fd501ee737e5ec4e0f1db9eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c7:17:f7:c1:69:f6:df:ce:d9:43:24:43:52: 36:a9:4a:46:a3:6b:45:17:b1:b5:68:9c:d5:1c:a5: b3:44:7a:00:89:c0:39:2c:65:17:ba:16:d1:91:f7: 71:f2:a5:4f:f7:d9:95:61:82:21:6f:d1:bb:9e:ea: c0:e2:67:df:8a:6e:8e:e0:ea:f5:d8:e5:9a:45:d2: 7e:94:ab:b6:6e:ef:1e:99:1c:d8:a6:d9:97:bb:bf: 68:b3:30:94:c4:f5:33:3b:72:80:16:b1:5d:86:6d: 77:ad:3f:45:80:6d:da:67:61:17:d7:e3:df:86:2e: 33:27:85:3b:9e:69:2a:11:da:1e:75:07:16:11:7e: 01:36:3e:ea:fb:04:90:21:a1:e8:7a:fc:db:df:17: c0:26:37:4d:37:64:ca:1e:91:c2:87:63:3d:c6:9f: b2:4f:21:01:21:8f:ad:cb:48:3d:e7:9f:6c:02:75: 56:a8:ce:93:0b:06:f3:4c:29:96:df:a1:aa:57:a7: 78:0b:be:5b:6a:39:9c:96:ab:f6:91:37:75:c5:cd: d5:5d:97:87:e2:60:0a:86:3c:80:eb:f1:2e:1b:58: 56:8c:42:e8:20:ac:7e:ae:58:91:4c:96:43:44:82: 36:1d:50:1e:22:85:ca:66:61:fe:b1:2b:30:a2:3f: c4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E9:30:0D:F2:7C:A2:0F:D5:01:EE:73:7E:5E:C4:E0:F1:DB:9E:AA X509v3 Authority Key Identifier: keyid:02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:73:48:a4:4e:d9:50:7c:de:35:a6:b6:19:78:b0:2f:16:ad: ce:4d:8b:ff:62:e0:6b:a9:d1:25:5b:35:f2:05:a1:a5:08:be: 33:1c:23:45:61:bd:4a:b2:61:b7:1a:22:40:f1:09:f7:8a:17: f9:d1:46:be:73:f5:49:5b:8a:a2:0b:80:a1:45:ac:51:ed:00: 4c:73:5a:f4:82:69:9f:67:c7:5c:44:a9:f0:5b:ec:c8:14:fd: c2:7c:59:c2:68:dc:6f:f0:bf:5c:b9:2e:a7:f0:d0:8b:2a:d2: 64:4e:90:bc:54:f9:0f:7f:df:d1:ff:f4:dd:a0:88:17:ec:9c: 85:84:84:2b:b6:14:8c:87:62:c2:61:83:93:5e:b4:04:54:14: 96:d5:eb:98:ba:86:79:31:c1:88:f0:fa:12:a5:42:1b:7f:53: 73:81:c4:34:e7:6f:37:a7:85:f1:2f:eb:52:aa:0d:e8:ce:e0: 9e:3d:a3:7c:e4:5e:01:c5:c5:d2:92:0f:53:f4:9a:a6:e4:ac: 64:fd:b1:bd:b7:fe:36:5e:13:86:19:a4:55:34:69:d7:a9:39: 67:6c:d9:aa:83:f0:38:8d:ff:c9:46:ac:2d:bd:97:99:96:3c: 2e:a7:e9:c3:88:01:51:c6:97:d4:92:74:aa:eb:3e:1a:77:9b: a8:de:02:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJrOLqPRvOPJaiNQ+2lkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNjExYjRlYWEyZTBiMzdmNzJjYzA4YWM5Mjk2MTk4MWVh YmIyMWYwHhcNMjUxMjA2MTAwMjA5WhcNMjUxMjA3MTAwMjA5WjAzMTEwLwYDVQQD Eyg1YWU5MzAwZGYyN2NhMjBmZDUwMWVlNzM3ZTVlYzRlMGYxZGI5ZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48cX98Fp9t/O2UMkQ1I2qUpGo2tF F7G1aJzVHKWzRHoAicA5LGUXuhbRkfdx8qVP99mVYYIhb9G7nurA4mffim6O4Or1 2OWaRdJ+lKu2bu8emRzYptmXu79oszCUxPUzO3KAFrFdhm13rT9FgG3aZ2EX1+Pf hi4zJ4U7nmkqEdoedQcWEX4BNj7q+wSQIaHoevzb3xfAJjdNN2TKHpHCh2M9xp+y TyEBIY+ty0g9559sAnVWqM6TCwbzTCmW36GqV6d4C75bajmclqv2kTd1xc3VXZeH 4mAKhjyA6/EuG1hWjELoIKx+rliRTJZDRII2HVAeIoXKZmH+sSswoj/E2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrpMA3yfKIP1QHuc35exODx256qMB8GA1UdIwQY MBaAFAJhG06qLgs39yzAiskpYZgeq7IfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW1FYlRxb3VDemYzTE1DS3lTbGhtQjZyc2g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82NDY0MzgtNmRhMi00YzA1LTlmY2Qt MTJjNGJkODA1OGFhLzEvQW1FYlRxb3VDemYzTE1DS3lTbGhtQjZyc2g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82NDY0MzgtNmRhMi00YzA1LTlmY2QtMTJjNGJkODA1OGFh LzEvQW1FYlRxb3VDemYzTE1DS3lTbGhtQjZyc2g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAunNIpE7Z UHzeNaa2GXiwLxatzk2L/2Lga6nRJVs18gWhpQi+MxwjRWG9SrJhtxoiQPEJ94oX +dFGvnP1SVuKoguAoUWsUe0ATHNa9IJpn2fHXESp8FvsyBT9wnxZwmjcb/C/XLku p/DQiyrSZE6QvFT5D3/f0f/03aCIF+ychYSEK7YUjIdiwmGDk160BFQUltXrmLqG eTHBiPD6EqVCG39Tc4HENOdvN6eF8S/rUqoN6M7gnj2jfOReAcXF0pIPU/SapuSs ZP2xvbf+Nl4ThhmkVTRp16k5Z2zZqoPwOI3/yUasLb2XmZY8Lqfpw4gBUcaX1JJ0 qus+GnebqN4CXA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:16:32 2025 by rpki-client