This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft File: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json) Hash identifier: LqpoNP2AGsmdjvnsvi4mAyu9Xh1d21tf6KchI1kV6NA= Subject key identifier: 71:D4:93:42:70:7B:F0:4C:BE:A3:3B:07:12:6F:29:F5:AD:AA:89:69 Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D Certificate issuer: /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d Certificate serial: 019AF0BF5F191B80EB14D27F6A65058D6DC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft Manifest number: 16F4 Signing time: Fri 05 Dec 2025 23:01:04 +0000 Manifest this update: Fri 05 Dec 2025 23:01:04 +0000 Manifest next update: Sat 06 Dec 2025 23:01:04 +0000 Files and hashes: 1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: wtJ4kR4GDzsd98CNL8FuG/j7PlbEg7TIwzLQpRLjcOE=) 2: RZsQW2mn0p77cUSrDj82xlpY4kU.roa (hash: PgZwlEZ/SO6/ySPSoJ7naRU3kSxO9+Lme8pB8HNwF8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:5f:19:1b:80:eb:14:d2:7f:6a:65:05:8d:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d Validity Not Before: Dec 5 23:01:04 2025 GMT Not After : Dec 6 23:01:04 2025 GMT Subject: CN=71d49342707bf04cbea33b07126f29f5adaa8969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:43:95:4d:49:2b:ed:85:03:66:06:92:09: d5:88:a9:87:b8:f7:80:ed:e9:9d:79:c3:65:43:3d: e8:da:d9:e5:09:db:2e:21:46:86:bd:6d:04:9d:b9: 5c:09:7d:c1:ac:a0:c2:31:d8:a9:0d:f2:b7:80:26: 3c:98:bc:a6:bb:a1:ea:9e:f8:21:12:d9:85:31:8b: 54:e7:f9:95:db:c1:e6:2c:ad:a1:39:9c:50:b3:d8: 4e:90:7a:4b:fe:1b:69:5e:72:14:23:15:e1:a7:5d: da:85:0c:90:0b:08:83:29:1a:e3:9d:ea:03:8a:3a: 53:fd:8a:5d:49:fd:67:b2:7d:cc:7a:16:01:9b:77: d6:85:20:22:44:50:60:fb:ba:1a:78:5f:f0:52:5c: 51:5b:e3:af:53:fc:8e:11:c5:ad:4e:85:53:a3:5c: 1a:2e:0f:75:00:52:cc:7a:5b:1f:b2:b7:25:0d:61: e7:51:62:68:51:b8:b1:83:a8:3c:ab:07:e6:11:31: 41:d5:ec:e0:79:a0:ab:0d:a3:f1:7e:ca:75:86:d3: 40:40:63:87:8d:50:43:c2:62:f9:84:42:1c:26:84: 92:84:76:c7:3e:c6:32:64:2f:cb:00:19:9e:e3:bc: 13:39:df:10:18:89:69:95:79:63:3e:ef:99:32:b5: ab:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D4:93:42:70:7B:F0:4C:BE:A3:3B:07:12:6F:29:F5:AD:AA:89:69 X509v3 Authority Key Identifier: keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:bd:40:15:44:97:cf:ba:4f:a1:4d:17:03:6f:d5:c7:ea:00: b4:89:a6:63:3f:fa:15:c4:e3:18:7f:6c:08:f6:d8:93:5d:df: e3:8b:5c:c2:4b:e4:0f:fc:9d:18:73:83:96:2c:ed:c5:9d:f6: 8d:6c:67:99:ee:f5:b4:33:64:3a:6a:0c:97:4e:5a:2f:a6:ea: 64:f6:3a:df:49:65:bf:c6:ae:ab:31:f8:21:be:39:e9:dd:98: ae:09:8c:88:1f:97:9e:57:12:64:cc:78:0a:61:35:e5:44:f1: 00:04:ac:df:18:b2:b1:33:d4:29:90:d5:1d:45:40:21:86:81: 65:c6:32:f1:ff:4e:3b:16:c3:a3:a3:04:b8:de:de:64:f9:4e: 7a:15:64:3e:e3:97:ed:a8:26:08:1d:3f:15:06:56:9a:de:26: 3f:45:43:f7:35:bc:63:a9:43:2e:cc:4d:4e:e7:d5:2b:a9:77: da:0c:87:08:23:e6:d3:27:4e:04:f1:2e:c6:7d:65:99:15:92: c5:3c:2e:13:bf:2d:fb:c5:28:df:05:c6:02:fd:0b:94:62:e2: 57:12:90:ef:79:25:0e:1f:0a:4e:16:33:f1:b1:3f:e5:f6:34: 2e:97:86:66:cd:97:dc:ba:d0:c9:2e:21:b6:e8:6e:92:85:96: 2c:6b:21:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv18ZG4DrFNJ/amUFjW3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzRlYzNlYzUzZjUyZjdmNTI4MzViYjUxMGFiNmJlZGFh MDBhM2QwHhcNMjUxMjA1MjMwMTA0WhcNMjUxMjA2MjMwMTA0WjAzMTEwLwYDVQQD Eyg3MWQ0OTM0MjcwN2JmMDRjYmVhMzNiMDcxMjZmMjlmNWFkYWE4OTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF5DlU1JK+2FA2YGkgnViKmHuPeA 7emdecNlQz3o2tnlCdsuIUaGvW0EnblcCX3BrKDCMdipDfK3gCY8mLymu6Hqnvgh EtmFMYtU5/mV28HmLK2hOZxQs9hOkHpL/htpXnIUIxXhp13ahQyQCwiDKRrjneoD ijpT/YpdSf1nsn3MehYBm3fWhSAiRFBg+7oaeF/wUlxRW+OvU/yOEcWtToVTo1wa Lg91AFLMelsfsrclDWHnUWJoUbixg6g8qwfmETFB1ezgeaCrDaPxfsp1htNAQGOH jVBDwmL5hEIcJoSShHbHPsYyZC/LABme47wTOd8QGIlplXljPu+ZMrWr4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHUk0Jwe/BMvqM7BxJvKfWtqolpMB8GA1UdIwQY MBaAFAB07D7FP1L39Sg1u1EKtr7aoAo9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhUc1BzVV9VdmYxS0RXN1VRcTJ2dHFnQ2owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MDhhOGEtNThkYi00NTA5LWEyODUt MWFjMmVkZGE4ZTJhLzEvQUhUc1BzVV9VdmYxS0RXN1VRcTJ2dHFnQ2owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85MDhhOGEtNThkYi00NTA5LWEyODUtMWFjMmVkZGE4ZTJh LzEvQUhUc1BzVV9VdmYxS0RXN1VRcTJ2dHFnQ2owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALb1AFUSX z7pPoU0XA2/Vx+oAtImmYz/6FcTjGH9sCPbYk13f44tcwkvkD/ydGHODliztxZ32 jWxnme71tDNkOmoMl05aL6bqZPY630llv8auqzH4Ib456d2YrgmMiB+XnlcSZMx4 CmE15UTxAASs3xiysTPUKZDVHUVAIYaBZcYy8f9OOxbDo6MEuN7eZPlOehVkPuOX 7agmCB0/FQZWmt4mP0VD9zW8Y6lDLsxNTufVK6l32gyHCCPm0ydOBPEuxn1lmRWS xTwuE78t+8Uo3wXGAv0LlGLiVxKQ73klDh8KThYz8bE/5fY0LpeGZs2X3LrQyS4h tuhukoWWLGsh7w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:04 2025 by rpki-client