This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft File: AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json) Hash identifier: zwiMaaoMi5IPogO9r4GrKCVm1u/AZJ7xlLMKNKg2wDQ= Subject key identifier: D4:58:7D:CB:00:65:C1:FE:31:D3:D0:8D:F3:28:50:30:7F:A6:8B:23 Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B Certificate issuer: /CN=00a856a4173895af44b8fd34455469a5c4d6173b Certificate serial: 019AF5780006DD2599BE65F5C64867E91A9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft Manifest number: 02A8 Signing time: Sat 06 Dec 2025 21:01:13 +0000 Manifest this update: Sat 06 Dec 2025 21:01:13 +0000 Manifest next update: Sun 07 Dec 2025 21:01:13 +0000 Files and hashes: 1: 4mezRfHPXPaCo28qoJyolX64C48.roa (hash: QHUvtDK2DiCjdwwLpsM73EoVrUrKJFVkLwmkkTWUE3k=) 2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: s8cb6sEvY8msoxfozUPwgj2v9jsqznlFs6OkAdB6nTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:00:06:dd:25:99:be:65:f5:c6:48:67:e9:1a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b Validity Not Before: Dec 6 21:01:13 2025 GMT Not After : Dec 7 21:01:13 2025 GMT Subject: CN=d4587dcb0065c1fe31d3d08df32850307fa68b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c1:75:b6:10:0d:ec:73:3f:ce:6e:e6:ef:44: 63:ad:36:d7:ea:86:42:53:07:3a:ae:49:25:35:d0: 30:fb:e4:6b:3c:de:c5:2e:d3:23:36:c3:98:b6:17: c2:20:ae:c1:cc:f5:f4:ca:75:c1:ce:55:94:95:5d: 1b:50:9b:da:01:b9:d5:b4:53:94:85:7d:85:0e:5f: 40:6f:2f:46:27:d3:1c:a9:50:fe:fd:10:64:ca:4a: 89:be:d4:33:39:10:4c:7d:3b:96:84:a1:8a:8f:ca: 15:e8:b7:59:48:00:92:3b:d3:6c:59:88:3e:9c:56: 7e:c4:85:22:85:7f:a3:a6:d1:89:a9:a1:e9:29:69: a4:60:b8:21:71:0d:4c:1b:96:8f:63:39:a0:03:5d: dc:3a:ac:82:80:3b:43:50:97:0e:ce:87:d0:a1:83: e9:f6:14:f4:7c:65:16:8e:63:c7:bd:1e:59:68:3e: 8c:68:e4:f9:f1:f0:50:93:63:58:ea:54:8b:0f:5b: f7:ef:20:b5:09:0d:90:be:ef:59:c6:2b:a8:6f:8c: f4:12:df:be:5f:a8:3b:6d:57:20:fd:dc:46:c7:a2: e0:eb:db:dd:80:81:09:fe:c9:37:04:31:15:5a:73: 21:34:53:95:b4:30:af:a5:af:9b:c7:67:f2:7d:b7: 19:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:58:7D:CB:00:65:C1:FE:31:D3:D0:8D:F3:28:50:30:7F:A6:8B:23 X509v3 Authority Key Identifier: keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:0e:4b:91:7d:56:bb:39:0b:cb:eb:32:df:9a:1b:02:e6:85: 86:95:3f:5c:ee:9f:7c:04:b8:d1:7f:7b:76:0e:dd:9f:2b:a8: b9:82:a2:0b:d2:97:9b:41:17:fc:66:67:ea:91:99:a2:9b:e5: c5:e3:71:e9:3c:97:c0:3d:eb:26:f6:47:b3:28:ba:b9:f4:13: 82:9f:6e:ef:65:d7:df:e4:f8:79:77:ff:87:4c:82:16:9e:a3: 43:b6:b4:5b:dd:4f:ab:6f:b7:53:5f:94:50:1b:0b:3c:83:20: 46:71:2a:dd:ba:da:55:18:fe:76:25:d4:be:9e:74:11:a2:e0: f5:87:b3:8f:ff:8d:81:2b:27:61:ca:aa:c8:b9:45:e1:fe:a3: 99:7e:ad:28:9a:d6:95:6e:42:49:7f:0a:bb:4a:61:31:f8:ac: 44:17:fa:a0:d0:90:39:ae:1c:94:5d:99:ac:dc:fd:07:d2:a8: 92:f4:a4:6d:63:93:b3:0f:db:64:ef:53:9c:5b:d1:c6:88:a5: d9:ae:b6:a8:d3:c2:e4:ba:02:b6:d5:a9:e4:72:c2:c0:f0:5d: 54:b6:c2:5c:2c:48:23:56:49:01:be:23:79:b0:12:4e:d6:e3: 35:21:de:93:ee:6c:49:14:31:22:3d:65:a8:f3:48:a5:b2:18: 95:95:6f:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eAAG3SWZvmX1xkhn6RqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYTg1NmE0MTczODk1YWY0NGI4ZmQzNDQ1NTQ2OWE1YzRk NjE3M2IwHhcNMjUxMjA2MjEwMTEzWhcNMjUxMjA3MjEwMTEzWjAzMTEwLwYDVQQD EyhkNDU4N2RjYjAwNjVjMWZlMzFkM2QwOGRmMzI4NTAzMDdmYTY4YjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcF1thAN7HM/zm7m70RjrTbX6oZC Uwc6rkklNdAw++RrPN7FLtMjNsOYthfCIK7BzPX0ynXBzlWUlV0bUJvaAbnVtFOU hX2FDl9Aby9GJ9McqVD+/RBkykqJvtQzORBMfTuWhKGKj8oV6LdZSACSO9NsWYg+ nFZ+xIUihX+jptGJqaHpKWmkYLghcQ1MG5aPYzmgA13cOqyCgDtDUJcOzofQoYPp 9hT0fGUWjmPHvR5ZaD6MaOT58fBQk2NY6lSLD1v37yC1CQ2Qvu9Zxiuob4z0Et++ X6g7bVcg/dxGx6Lg69vdgIEJ/sk3BDEVWnMhNFOVtDCvpa+bx2fyfbcZKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRYfcsAZcH+MdPQjfMoUDB/posjMB8GA1UdIwQY MBaAFACoVqQXOJWvRLj9NEVUaaXE1hc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82Yjc1MTItOTJjYS00OWY5LTk4NzAt Y2I5ZTdkZGFkMTg5LzEvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82Yjc1MTItOTJjYS00OWY5LTk4NzAtY2I5ZTdkZGFkMTg5 LzEvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdg5LkX1W uzkLy+sy35obAuaFhpU/XO6ffAS40X97dg7dnyuouYKiC9KXm0EX/GZn6pGZopvl xeNx6TyXwD3rJvZHsyi6ufQTgp9u72XX3+T4eXf/h0yCFp6jQ7a0W91Pq2+3U1+U UBsLPIMgRnEq3braVRj+diXUvp50EaLg9Yezj/+NgSsnYcqqyLlF4f6jmX6tKJrW lW5CSX8Ku0phMfisRBf6oNCQOa4clF2ZrNz9B9KokvSkbWOTsw/bZO9TnFvRxoil 2a62qNPC5LoCttWp5HLCwPBdVLbCXCxII1ZJAb4jebASTtbjNSHek+5sSRQxIj1l qPNIpbIYlZVvRw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:09:29 2025 by rpki-client