This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft File: ajZv38qiDoDov8MwpNixvn3modA.mft (raw, json) Hash identifier: swDkWTTcnb5XIVSWgJ4DzTmp3Ja1wuCgCUFLutz9Vus= Subject key identifier: EE:B3:0F:8A:7F:FC:D9:B7:E0:96:45:B8:EF:A6:E3:6D:AA:6F:7E:6C Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0 Certificate issuer: /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0 Certificate serial: 019B2B8A7D4C513E5E458DA1A34E821EB019 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft Manifest number: 1787 Signing time: Wed 17 Dec 2025 09:00:54 +0000 Manifest this update: Wed 17 Dec 2025 09:00:54 +0000 Manifest next update: Thu 18 Dec 2025 09:00:54 +0000 Files and hashes: 1: ajZv38qiDoDov8MwpNixvn3modA.crl (hash: e2DB3exf3tEp1GdF4ad54PanzDYv2ZT0W0soX2Ee/NQ=) 2: vtQmEnQvCzTxgKx6eoQDleSryN0.roa (hash: X99pd7WPnymxRoUriny009KnFNB5G5RPTZ3dWOg4RYg=) 3: zfevDRWTI9ElP_0JFPWcB5eiL-A.roa (hash: xu09TmX2/se2qxFKlwHjNcmA2dSMzqNt9raj3MmhER4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:7d:4c:51:3e:5e:45:8d:a1:a3:4e:82:1e:b0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0 Validity Not Before: Dec 17 09:00:54 2025 GMT Not After : Dec 18 09:00:54 2025 GMT Subject: CN=eeb30f8a7ffcd9b7e09645b8efa6e36daa6f7e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:c9:11:08:74:ff:c3:56:b9:68:8a:01:ce: e5:2a:f4:82:bd:59:c9:5a:30:79:e5:2a:76:da:cf: d4:30:78:43:38:ad:a9:c4:69:69:b4:a5:04:c1:d3: 5a:04:c3:5f:0c:b8:f2:84:29:97:41:8f:37:4e:b8: a2:cc:f0:44:5b:9b:f0:dc:e4:dc:db:c7:44:0a:ab: f2:b7:69:92:53:9d:85:cc:09:ff:64:b4:bc:82:3e: 20:67:ae:07:85:cf:6c:5a:2c:54:24:6b:be:64:6f: 2b:11:e8:98:2c:72:32:35:50:85:20:5e:8a:63:75: 1c:79:55:9d:ad:f0:02:ca:34:57:5b:67:51:a6:b1: cf:c6:a7:8c:07:56:8b:f2:bf:58:bf:02:e5:6c:4c: 08:1a:8c:2b:34:b6:45:96:3b:20:7f:e4:f7:96:52: 45:19:9e:8a:e1:9e:58:c2:a2:bd:5e:65:d5:e9:d9: fa:f8:c1:43:f8:7d:4d:90:35:38:2c:5e:a2:11:5e: bf:3f:00:02:cd:03:6b:c1:a8:71:fd:ad:77:2f:ea: 39:23:e1:99:c6:92:eb:b7:72:a0:9a:3c:8b:eb:0b: a4:0a:26:02:ca:0e:cf:fa:69:e2:44:a1:08:b9:96: 9b:ca:2d:45:c8:e9:6b:40:58:93:cb:5e:76:4a:c4: d7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B3:0F:8A:7F:FC:D9:B7:E0:96:45:B8:EF:A6:E3:6D:AA:6F:7E:6C X509v3 Authority Key Identifier: keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:de:85:f9:e6:be:e9:1d:1a:6a:53:93:72:b8:7a:cd:fd:fa: 83:e0:06:26:60:38:02:fd:98:b6:10:24:eb:c7:c1:6c:08:fc: 12:48:29:1d:a1:c9:60:2b:e0:c7:d6:26:3f:e3:c7:88:44:33: 63:18:1b:f1:26:9f:ef:d0:56:5a:e8:b1:77:b0:16:34:c1:0e: 0a:fb:54:4d:1e:a4:75:12:0b:67:33:32:27:da:41:fc:fa:6a: e4:f7:03:a9:84:2b:cc:92:71:2b:f6:e6:36:d1:d0:fc:fd:07: e1:92:6f:77:89:fa:8d:68:6e:e7:1f:b0:9e:07:e0:1f:99:ca: 04:7e:bb:15:85:53:49:a9:ec:f0:e7:3f:19:a5:98:33:37:df: fd:20:67:c6:e7:2f:31:40:37:40:5c:7a:12:b9:0c:bc:56:4c: bb:16:35:30:05:85:97:43:5e:81:87:f1:3a:20:ea:f2:62:d7: 4c:32:ae:1a:1c:1f:45:51:87:1c:71:3c:19:17:e6:90:48:5e: b4:6f:17:e4:62:4a:90:b0:78:5e:8d:e2:70:49:dc:ed:3f:01: 9f:8d:6a:00:03:18:64:85:7e:5d:d9:76:18:b5:1e:ee:ab:48: 59:7b:21:dd:76:8a:2f:f5:81:04:3f:dd:e8:64:92:86:11:c2: 89:87:a4:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrin1MUT5eRY2ho06CHrAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMzY2ZmRmY2FhMjBlODBlOGJmYzMzMGE0ZDhiMWJlN2Rl NmExZDAwHhcNMjUxMjE3MDkwMDU0WhcNMjUxMjE4MDkwMDU0WjAzMTEwLwYDVQQD EyhlZWIzMGY4YTdmZmNkOWI3ZTA5NjQ1YjhlZmE2ZTM2ZGFhNmY3ZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmbJEQh0/8NWuWiKAc7lKvSCvVnJ WjB55Sp22s/UMHhDOK2pxGlptKUEwdNaBMNfDLjyhCmXQY83TriizPBEW5vw3OTc 28dECqvyt2mSU52FzAn/ZLS8gj4gZ64Hhc9sWixUJGu+ZG8rEeiYLHIyNVCFIF6K Y3UceVWdrfACyjRXW2dRprHPxqeMB1aL8r9YvwLlbEwIGowrNLZFljsgf+T3llJF GZ6K4Z5YwqK9XmXV6dn6+MFD+H1NkDU4LF6iEV6/PwACzQNrwahx/a13L+o5I+GZ xpLrt3KgmjyL6wukCiYCyg7P+mniRKEIuZabyi1FyOlrQFiTy152SsTXnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6zD4p//Nm34JZFuO+m422qb35sMB8GA1UdIwQY MBaAFGo2b9/Kog6A6L/DMKTYsb595qHQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWpadjM4cWlEb0RvdjhNd3BOaXh2bjNtb2RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84YzRlYzQtZDYzNy00ZDNmLTlkZTgt MDU1NTljMWY1OTE1LzEvYWpadjM4cWlEb0RvdjhNd3BOaXh2bjNtb2RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84YzRlYzQtZDYzNy00ZDNmLTlkZTgtMDU1NTljMWY1OTE1 LzEvYWpadjM4cWlEb0RvdjhNd3BOaXh2bjNtb2RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfN6F+ea+ 6R0aalOTcrh6zf36g+AGJmA4Av2YthAk68fBbAj8EkgpHaHJYCvgx9YmP+PHiEQz Yxgb8Saf79BWWuixd7AWNMEOCvtUTR6kdRILZzMyJ9pB/Ppq5PcDqYQrzJJxK/bm NtHQ/P0H4ZJvd4n6jWhu5x+wngfgH5nKBH67FYVTSans8Oc/GaWYMzff/SBnxucv MUA3QFx6ErkMvFZMuxY1MAWFl0NegYfxOiDq8mLXTDKuGhwfRVGHHHE8GRfmkEhe tG8X5GJKkLB4Xo3icEnc7T8Bn41qAAMYZIV+Xdl2GLUe7qtIWXsh3XaKL/WBBD/d 6GSShhHCiYek/A== -----END CERTIFICATE-----Generated at Wed Dec 17 18:28:30 2025 by rpki-client