This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json) Hash identifier: B6nZ/uh7IhCBR6lcg28Q0kiaT1QGOpAE6H8xhjqpPvw= Subject key identifier: 29:5D:A0:92:57:B0:04:7F:50:BA:AC:92:39:82:08:66:31:91:55:33 Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd Certificate serial: 019B405BE52FBEBBB14E21A00925C317A49E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft Manifest number: 0E71 Signing time: Sun 21 Dec 2025 10:02:02 +0000 Manifest this update: Sun 21 Dec 2025 10:02:02 +0000 Manifest next update: Mon 22 Dec 2025 10:02:02 +0000 Files and hashes: 1: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: DDbzZtSsm2opWfxoVV9ygvuoEW6dVfwOSwSvBW31Y1I=) 2: epNs1frSSHg0k8RApfvyiS1o3e4.roa (hash: EqfynGitiIuAYCHQvy1uEOFIiGIwRJnEdzdFNRHUcpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:e5:2f:be:bb:b1:4e:21:a0:09:25:c3:17:a4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd Validity Not Before: Dec 21 10:02:02 2025 GMT Not After : Dec 22 10:02:02 2025 GMT Subject: CN=295da09257b0047f50baac923982086631915533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:30:15:bf:03:a5:3b:e8:5f:a7:e9:04:57:56: 54:5a:5f:28:9b:f4:99:6e:18:43:f6:08:56:70:73: 44:31:43:ea:9a:41:70:98:f0:6b:0c:f7:84:bc:9c: 88:0d:57:99:2b:b9:35:b9:45:e4:7c:1b:63:2d:4f: 8c:18:e4:92:06:15:56:b4:52:c0:9f:c3:b0:bd:56: 81:cb:fa:6c:3d:19:52:d4:b2:ff:c1:91:bd:15:fc: 34:b5:9c:23:71:b5:83:2b:f4:6b:c9:68:b9:6b:e4: da:b2:22:23:e2:f2:4e:9a:50:66:d8:6f:01:09:ef: 4f:16:05:f6:ac:2c:99:cd:f2:a1:bc:cd:e8:06:49: 1e:b2:d9:95:c0:c7:a4:a9:dc:02:c7:a4:87:a9:43: e7:eb:43:dd:ad:ea:6d:58:b3:50:75:40:83:d3:67: 1a:7d:fe:ce:3b:2c:8b:91:30:ec:7d:32:9f:ca:f2: 0e:0a:4c:d2:00:c7:4a:d3:85:6a:7b:38:a2:b5:ff: 0e:ac:5b:ae:1b:c0:63:b0:b4:d8:01:ca:43:20:26: f1:2d:73:60:0f:ad:dd:ed:0d:e0:3c:be:17:8f:9a: d0:20:77:d8:19:fd:a9:5b:a8:5b:bd:42:9b:e8:3a: 09:19:25:eb:f5:c9:70:ff:45:ad:69:02:74:f2:f0: e7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5D:A0:92:57:B0:04:7F:50:BA:AC:92:39:82:08:66:31:91:55:33 X509v3 Authority Key Identifier: keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:3d:bb:4a:99:8a:03:99:09:7f:5e:aa:fd:d4:33:5e:e8:76: 5b:44:88:2e:bd:be:d6:53:fa:01:0f:1d:aa:0e:44:94:8f:bf: a9:14:de:f1:ca:e6:70:2d:60:95:af:a4:5b:ae:9b:f2:e8:41: 77:ae:b4:eb:10:22:ba:e2:02:0a:66:ef:e0:2f:d8:3d:38:5a: 35:49:a2:5b:68:1b:c1:e8:3d:f4:6a:29:47:37:38:23:ca:ad: 04:b5:6b:37:60:b5:8e:f0:07:7d:67:07:04:71:25:5c:34:6f: fd:2f:64:5b:be:33:1b:41:c8:9b:75:81:b6:1a:40:cb:81:20: f4:e2:05:a1:27:21:85:bf:e4:5d:9e:1d:81:f2:19:bd:97:5c: 37:80:69:9a:58:29:e1:3d:ec:f3:40:53:6d:16:12:0a:3a:7c: e7:ea:ff:ab:dd:b2:a7:80:8c:ff:86:9f:f1:3f:2a:c4:ab:a1: 70:0e:34:b5:46:84:10:15:53:bb:4e:47:00:50:93:d6:ec:db: ea:8d:44:b3:f4:41:86:91:5d:ae:5c:f3:ca:1d:ea:03:4f:35: e3:45:aa:02:21:96:3d:4e:5a:7a:9c:cb:37:42:a5:44:a2:df: b0:d9:6f:f1:b1:1d:a5:c5:b5:84:55:4d:56:f0:6f:62:1a:dd: 0d:34:82:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW+UvvruxTiGgCSXDF6SeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyM2FkNmM0NDU4ZmU2OWY0NTkxZmFjY2I1NmJkYzMzMWFm NmI0Y2QwHhcNMjUxMjIxMTAwMjAyWhcNMjUxMjIyMTAwMjAyWjAzMTEwLwYDVQQD EygyOTVkYTA5MjU3YjAwNDdmNTBiYWFjOTIzOTgyMDg2NjMxOTE1NTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDAVvwOlO+hfp+kEV1ZUWl8om/SZ bhhD9ghWcHNEMUPqmkFwmPBrDPeEvJyIDVeZK7k1uUXkfBtjLU+MGOSSBhVWtFLA n8OwvVaBy/psPRlS1LL/wZG9Ffw0tZwjcbWDK/RryWi5a+TasiIj4vJOmlBm2G8B Ce9PFgX2rCyZzfKhvM3oBkkestmVwMekqdwCx6SHqUPn60PdreptWLNQdUCD02ca ff7OOyyLkTDsfTKfyvIOCkzSAMdK04Vqeziitf8OrFuuG8BjsLTYAcpDICbxLXNg D63d7Q3gPL4Xj5rQIHfYGf2pW6hbvUKb6DoJGSXr9clw/0WtaQJ08vDn2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCldoJJXsAR/ULqskjmCCGYxkVUzMB8GA1UdIwQY MBaAFAI61sRFj+afRZH6zLVr3DMa9rTNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQt MjRmMjg3YzlhNWY0LzEvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQtMjRmMjg3YzlhNWY0 LzEvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhD27SpmK A5kJf16q/dQzXuh2W0SILr2+1lP6AQ8dqg5ElI+/qRTe8crmcC1gla+kW66b8uhB d6606xAiuuICCmbv4C/YPThaNUmiW2gbweg99GopRzc4I8qtBLVrN2C1jvAHfWcH BHElXDRv/S9kW74zG0HIm3WBthpAy4Eg9OIFoSchhb/kXZ4dgfIZvZdcN4Bpmlgp 4T3s80BTbRYSCjp85+r/q92yp4CM/4af8T8qxKuhcA40tUaEEBVTu05HAFCT1uzb 6o1Es/RBhpFdrlzzyh3qA08140WqAiGWPU5aepzLN0KlRKLfsNlv8bEdpcW1hFVN VvBvYhrdDTSCAQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:55:06 2025 by rpki-client