This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft File: AdAmgGkTiUArPrM15cnIvj6ZMKA.mft (raw, json) Hash identifier: O5rPrBrD6LqJDJ4mV6g5PafzHtPbiSJ6AhjGogsFzDI= Subject key identifier: BB:F4:B9:39:07:B7:71:F8:10:0D:1F:52:6A:86:AE:6E:28:44:88:12 Authority key identifier: 01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0 Certificate issuer: /CN=01d02680691389402b3eb335e5c9c8be3e9930a0 Certificate serial: 019AF3F70DD19D6AF588555F9C525C0B4896 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft Manifest number: 14A0 Signing time: Sat 06 Dec 2025 14:00:45 +0000 Manifest this update: Sat 06 Dec 2025 14:00:45 +0000 Manifest next update: Sun 07 Dec 2025 14:00:45 +0000 Files and hashes: 1: AdAmgGkTiUArPrM15cnIvj6ZMKA.crl (hash: Gnn0N5VBj6eFRx8/Q5snUYIGeDHGLJRPMBcUe3wT5HA=) 2: uZb6h7TLe1-lJihPhirYKpDZ4mY.roa (hash: aDykphD+aoMx3Jh78ZAzXroKL36r82PVvsKm3+s85wA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:0d:d1:9d:6a:f5:88:55:5f:9c:52:5c:0b:48:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01d02680691389402b3eb335e5c9c8be3e9930a0 Validity Not Before: Dec 6 14:00:45 2025 GMT Not After : Dec 7 14:00:45 2025 GMT Subject: CN=bbf4b93907b771f8100d1f526a86ae6e28448812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:10:ca:b6:b2:5f:48:b3:cd:76:f7:4c:c3:3e: 16:8b:0e:5c:d1:38:68:14:5a:ad:21:2b:07:b9:7c: d3:93:f4:f4:e9:f8:7c:c7:76:4c:0f:69:57:86:e7: 8b:34:6b:6c:a1:78:fc:d6:58:f2:e7:7a:46:c4:47: 6a:11:d1:36:a7:ea:79:f0:9a:84:bf:e7:97:c7:b7: 71:ff:a3:26:60:79:5d:f5:6f:65:3b:75:3a:61:0a: db:f3:66:47:0b:4b:3e:25:8c:1d:97:8d:9c:e0:a1: 8c:08:1a:19:63:dc:3d:29:28:e1:c8:55:b4:29:0a: e8:42:9a:e2:b9:39:ca:2d:f9:81:85:ab:e5:9d:a3: 40:bd:6c:96:5e:bc:d6:76:db:cf:b4:20:0d:77:6e: 66:58:30:88:f1:1e:90:ef:c0:89:23:bf:6e:c2:2a: a7:f0:ad:4c:3c:91:1e:2d:86:67:0c:5c:96:28:d8: ee:fd:31:40:52:b8:07:2b:cc:58:98:c5:e5:63:7d: 75:2f:f5:13:aa:dd:f4:9c:5d:73:a4:58:00:aa:e6: 59:fd:32:59:bf:56:5d:df:c8:52:88:c2:8d:8a:34: bd:45:36:51:ec:a2:57:7b:28:2e:d8:72:d1:8d:09: 76:ae:c8:3f:54:06:b7:c6:70:29:dd:1c:a7:05:54: 55:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F4:B9:39:07:B7:71:F8:10:0D:1F:52:6A:86:AE:6E:28:44:88:12 X509v3 Authority Key Identifier: keyid:01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:92:5c:ba:10:f8:f2:a1:82:60:ec:a2:a0:38:ea:23:1a:dc: 2f:11:ed:47:c8:ba:00:bd:be:8f:fc:47:d2:93:93:38:88:45: 73:a8:4a:38:82:94:2c:60:a4:d9:52:25:82:51:48:e2:f3:10: 1f:2a:75:ff:c6:85:2e:97:ab:d1:d3:71:b1:11:cc:f9:49:bf: 3f:fe:0e:99:80:f8:03:8a:5d:8c:d7:bf:b7:a5:d8:0a:d7:66: 06:20:49:b8:28:3b:6a:e2:79:03:2b:55:46:02:b1:67:0a:27: 60:da:b3:7a:13:62:00:e6:de:95:fd:10:e5:84:ab:40:55:01: 5d:69:ec:af:a9:06:da:44:73:5b:8b:b4:72:ec:46:df:f1:98: 46:76:29:cc:09:f6:df:e9:c1:1d:f3:52:73:6c:df:c4:db:e3: a3:e3:89:c1:c9:fa:80:d9:0f:72:68:dc:b0:a5:4d:31:a2:d8: fc:a0:8b:f5:a8:ee:ea:f2:b2:e3:2f:48:30:53:fb:0f:88:15: 71:95:ff:26:73:aa:02:8d:1c:9c:59:65:f5:2d:62:fa:e6:6f: 33:7e:aa:f3:ce:de:62:cb:dc:b4:22:5e:fc:72:da:8b:13:6c: 5e:c7:ce:1c:23:d4:90:69:ad:54:ed:fa:1c:a1:4a:83:d1:43: 8d:bd:66:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9w3RnWr1iFVfnFJcC0iWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZDAyNjgwNjkxMzg5NDAyYjNlYjMzNWU1YzljOGJlM2U5 OTMwYTAwHhcNMjUxMjA2MTQwMDQ1WhcNMjUxMjA3MTQwMDQ1WjAzMTEwLwYDVQQD EyhiYmY0YjkzOTA3Yjc3MWY4MTAwZDFmNTI2YTg2YWU2ZTI4NDQ4ODEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRDKtrJfSLPNdvdMwz4Wiw5c0Tho FFqtISsHuXzTk/T06fh8x3ZMD2lXhueLNGtsoXj81ljy53pGxEdqEdE2p+p58JqE v+eXx7dx/6MmYHld9W9lO3U6YQrb82ZHC0s+JYwdl42c4KGMCBoZY9w9KSjhyFW0 KQroQpriuTnKLfmBhavlnaNAvWyWXrzWdtvPtCANd25mWDCI8R6Q78CJI79uwiqn 8K1MPJEeLYZnDFyWKNju/TFAUrgHK8xYmMXlY311L/UTqt30nF1zpFgAquZZ/TJZ v1Zd38hSiMKNijS9RTZR7KJXeygu2HLRjQl2rsg/VAa3xnAp3RynBVRVfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLv0uTkHt3H4EA0fUmqGrm4oRIgSMB8GA1UdIwQY MBaAFAHQJoBpE4lAKz6zNeXJyL4+mTCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWRBbWdHa1RpVUFyUHJNMTVjbkl2ajZaTUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iOWY5MDUtY2Q2Yi00YzdlLTlmNGUt YmMyOWIyMWQzY2U3LzEvQWRBbWdHa1RpVUFyUHJNMTVjbkl2ajZaTUtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9iOWY5MDUtY2Q2Yi00YzdlLTlmNGUtYmMyOWIyMWQzY2U3 LzEvQWRBbWdHa1RpVUFyUHJNMTVjbkl2ajZaTUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZJcuhD4 8qGCYOyioDjqIxrcLxHtR8i6AL2+j/xH0pOTOIhFc6hKOIKULGCk2VIlglFI4vMQ Hyp1/8aFLper0dNxsRHM+Um/P/4OmYD4A4pdjNe/t6XYCtdmBiBJuCg7auJ5AytV RgKxZwonYNqzehNiAObelf0Q5YSrQFUBXWnsr6kG2kRzW4u0cuxG3/GYRnYpzAn2 3+nBHfNSc2zfxNvjo+OJwcn6gNkPcmjcsKVNMaLY/KCL9aju6vKy4y9IMFP7D4gV cZX/JnOqAo0cnFll9S1i+uZvM36q887eYsvctCJe/HLaixNsXsfOHCPUkGmtVO36 HKFKg9FDjb1mjw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:42:21 2025 by rpki-client