This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json) Hash identifier: waCDlTfCTxQceXJG3BDBeQMzkLe3GWT4K/+Xkhrxavk= Subject key identifier: 17:D4:F3:F0:B3:70:C2:3A:E0:93:5A:E9:DD:D9:27:E3:C8:03:42:60 Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd Certificate serial: 019AF50BC4B8B9B12815908A25B346110FE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft Manifest number: 1469 Signing time: Sat 06 Dec 2025 19:03:00 +0000 Manifest this update: Sat 06 Dec 2025 19:03:00 +0000 Manifest next update: Sun 07 Dec 2025 19:03:00 +0000 Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: 59F09oxTYtRXRZQa9RD0uCL9MTgZO5Mc0gOMUmujW4k=) 2: C8VNDT0eLyU6a-BGSaat20kBt5Q.roa (hash: GVJtrMJUvAX+z3Z9hhGqUx0RMXPQ0og215klHN94fVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:c4:b8:b9:b1:28:15:90:8a:25:b3:46:11:0f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd Validity Not Before: Dec 6 19:03:00 2025 GMT Not After : Dec 7 19:03:00 2025 GMT Subject: CN=17d4f3f0b370c23ae0935ae9ddd927e3c8034260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:95:50:2f:2a:2f:ff:87:9f:db:f3:37:db:6f: 54:38:25:3b:78:eb:ca:97:83:d7:15:51:bc:28:13: 08:56:10:69:94:eb:6f:89:5e:a2:e6:bd:b0:9b:41: 72:66:82:7d:02:2d:37:25:25:df:c2:8b:4f:38:0d: e1:9f:9d:01:39:e8:8c:ee:0c:7d:2d:cf:d3:c0:8b: f3:19:90:69:86:24:cc:80:40:d8:7c:67:21:80:33: ab:14:26:3d:5f:66:52:47:1a:5d:7c:07:77:ce:a7: 2f:52:99:7f:59:f9:b5:f7:aa:3f:4c:41:d7:96:f0: b6:64:da:d9:d7:76:e6:fd:85:82:81:ea:53:b5:d9: 61:d1:c2:fc:f8:f5:90:90:04:c9:90:4b:77:28:2d: 9e:18:49:82:07:4d:0f:c4:55:a0:a8:7b:5b:58:48: 5e:75:9a:78:0a:2f:25:45:6a:cc:8a:12:ae:d1:24: c7:4d:1a:b5:21:63:b8:48:bd:90:6b:fe:ef:af:2e: 98:15:04:dd:46:ff:72:67:47:0c:03:d9:ce:63:a8: 61:dd:61:01:40:ff:67:60:b6:12:54:83:22:6d:a7: 0a:7f:c5:cb:d8:ef:10:eb:7f:0d:0e:c9:26:22:d6: 15:4d:03:f9:8d:29:c4:cf:e4:26:8f:24:41:0c:14: d4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D4:F3:F0:B3:70:C2:3A:E0:93:5A:E9:DD:D9:27:E3:C8:03:42:60 X509v3 Authority Key Identifier: keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:65:e7:e1:b6:66:89:78:07:60:eb:af:06:f3:aa:a5:7b:cb: b9:f5:a0:17:a5:bf:6b:88:a6:75:32:8c:be:82:9b:cf:67:a2: 71:a0:a4:39:17:f9:d3:88:35:7a:ca:b8:15:0c:17:7a:87:9f: 83:b5:c8:c2:38:13:48:15:67:8f:87:8e:04:ba:a9:dd:d4:91: 92:bd:eb:73:a6:e5:b2:36:e4:e4:17:dc:e1:66:3b:ea:e3:fa: 52:06:9d:d3:5d:d1:a4:be:32:2f:cb:d7:83:7c:6e:3c:34:b2: ee:bf:04:fc:cf:fa:ee:df:0d:13:bf:fe:fb:71:0a:96:67:05: b9:75:ae:c4:db:3f:90:3f:40:95:73:f6:cf:90:1e:d1:24:a3: f3:49:59:77:a6:13:2c:76:a4:19:28:46:ed:be:46:19:cc:c6: f0:cd:b7:51:c0:7b:1f:7c:95:16:ee:33:27:49:0b:9d:09:0d: d2:c4:5e:5d:67:55:36:68:dd:fd:91:9b:ae:30:1d:26:79:26: d3:52:ce:96:72:33:e2:5b:7d:c4:22:db:d9:e3:dc:78:6e:d7: ee:c7:64:59:cc:be:a0:f5:9d:a5:15:39:57:6c:ea:4e:af:09: a6:16:33:db:47:ae:71:3c:60:cd:f2:34:18:02:a7:c3:6b:85: 1a:99:1a:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C8S4ubEoFZCKJbNGEQ/jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwY2M0ZDUwODhkYjcxZTIxODc3N2Q5NzZkMGFhZGM0OThj NDZjZmQwHhcNMjUxMjA2MTkwMzAwWhcNMjUxMjA3MTkwMzAwWjAzMTEwLwYDVQQD EygxN2Q0ZjNmMGIzNzBjMjNhZTA5MzVhZTlkZGQ5MjdlM2M4MDM0MjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpVQLyov/4ef2/M3229UOCU7eOvK l4PXFVG8KBMIVhBplOtviV6i5r2wm0FyZoJ9Ai03JSXfwotPOA3hn50BOeiM7gx9 Lc/TwIvzGZBphiTMgEDYfGchgDOrFCY9X2ZSRxpdfAd3zqcvUpl/Wfm196o/TEHX lvC2ZNrZ13bm/YWCgepTtdlh0cL8+PWQkATJkEt3KC2eGEmCB00PxFWgqHtbWEhe dZp4Ci8lRWrMihKu0STHTRq1IWO4SL2Qa/7vry6YFQTdRv9yZ0cMA9nOY6hh3WEB QP9nYLYSVIMibacKf8XL2O8Q638NDskmItYVTQP5jSnEz+QmjyRBDBTUSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfU8/CzcMI64JNa6d3ZJ+PIA0JgMB8GA1UdIwQY MBaAFADMTVCI23HiGHd9l20KrcSYxGz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQt YTIzODFjMzZjMDU0LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQtYTIzODFjMzZjMDU0 LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWXn4bZm iXgHYOuvBvOqpXvLufWgF6W/a4imdTKMvoKbz2eicaCkORf504g1esq4FQwXeoef g7XIwjgTSBVnj4eOBLqp3dSRkr3rc6blsjbk5Bfc4WY76uP6Ugad013RpL4yL8vX g3xuPDSy7r8E/M/67t8NE7/++3EKlmcFuXWuxNs/kD9AlXP2z5Ae0SSj80lZd6YT LHakGShG7b5GGczG8M23UcB7H3yVFu4zJ0kLnQkN0sReXWdVNmjd/ZGbrjAdJnkm 01LOlnIz4lt9xCLb2ePceG7X7sdkWcy+oPWdpRU5V2zqTq8JphYz20eucTxgzfI0 GAKnw2uFGpkamA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:19:22 2025 by rpki-client