This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json) Hash identifier: XqII02zI/sY4ooy+NLiqG5z/TjEEM5yO9aXI4EL/ry8= Subject key identifier: 98:B9:65:95:6E:5F:2C:EE:0B:94:A5:E4:2C:BF:99:CA:1D:3E:FF:36 Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90 Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090 Certificate serial: 019B3CEC331505934F6ACD0D523309581354 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 18:01:11 +0000 Manifest this update: Sat 20 Dec 2025 18:01:11 +0000 Manifest next update: Sun 21 Dec 2025 18:01:11 +0000 Files and hashes: 1: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: bUqSHMtAGJPyGz9aZFuky8pqM7mGf0bMMDg71tHjldY=) 2: PuRCtZYS1zb-l6-lSbqSBFwnqhM.roa (hash: AbBVF9kyhgAnkvzoIY9J9QbGE309UtyTbrK9vyLj9EM=) 3: sAkyj21t8-IWELVSrcuIx5gPSVk.roa (hash: iR95lFASykLAMl0dgv405uAOE69TMGevQ+/+DeWufdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:33:15:05:93:4f:6a:cd:0d:52:33:09:58:13:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090 Validity Not Before: Dec 20 18:01:11 2025 GMT Not After : Dec 21 18:01:11 2025 GMT Subject: CN=98b965956e5f2cee0b94a5e42cbf99ca1d3eff36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a4:35:c2:72:9b:8e:b0:be:5e:02:95:8d:b6: bc:ee:71:2f:3c:96:ff:18:02:74:74:8d:69:18:aa: e9:c3:42:6a:0a:3e:7b:90:b1:02:3e:25:bc:aa:5b: 84:55:2d:d0:7a:2c:ad:61:0e:b9:3d:69:8c:75:c3: a6:7d:e1:21:77:3a:65:3c:a4:ae:14:92:74:0f:6e: 3b:85:f3:27:f9:2c:01:38:a9:f0:4c:93:4b:11:aa: bb:a2:42:ef:02:fc:ff:0b:76:75:c1:12:99:c9:f7: d5:25:76:70:ed:93:e2:3f:52:46:52:1c:16:79:d3: 8b:ca:08:22:91:83:9f:50:44:f7:e0:f3:d2:1b:44: c1:f9:b2:05:b3:38:d2:ff:f8:23:8f:58:40:04:f2: dd:3d:15:5f:f3:18:74:98:0b:f1:b3:d9:6e:74:4a: fc:c1:5e:32:c7:d7:c4:f9:c9:4d:f9:81:30:40:0d: bc:b5:fc:a9:0f:42:3f:f7:cd:fd:26:df:d8:a9:2e: 46:71:b8:d5:b4:50:78:2b:dd:94:73:41:d5:6a:c8: 8f:55:13:60:6e:9e:15:9e:de:ac:e8:c0:f4:4d:0c: 57:05:b0:d6:36:e2:04:2f:41:4f:ba:a3:a8:2f:db: 4d:0d:21:19:f9:b0:d0:cf:9b:4f:23:de:db:77:c5: 48:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B9:65:95:6E:5F:2C:EE:0B:94:A5:E4:2C:BF:99:CA:1D:3E:FF:36 X509v3 Authority Key Identifier: keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:bf:75:be:cb:2e:9d:b1:c4:cd:e7:ba:7c:44:89:ec:43:a8: fd:58:13:fd:16:81:a2:fc:8f:69:f7:23:f2:af:e9:23:d5:7d: 69:1f:9a:b6:8f:14:c0:80:08:dc:f1:e5:9f:5a:d7:68:47:03: 4d:46:25:f9:f6:8b:f6:b6:5c:8d:10:40:5a:b7:32:54:38:19: 18:92:42:6e:4f:d7:ff:83:df:22:79:8a:df:8f:e8:65:09:cf: c9:d6:2a:12:ea:0a:b6:72:07:5b:63:1c:3e:b3:45:50:8e:df: 39:8c:60:a3:b0:61:33:0e:98:f2:9f:49:ac:1a:f3:72:50:27: 69:5b:bc:b0:31:e3:e0:93:a0:ab:22:04:29:e5:61:3d:f0:1b: 7a:fb:73:ce:57:0a:4f:e8:85:c9:d8:b9:3a:14:db:4e:00:c8: c0:23:30:0e:ed:2e:34:84:90:d0:2a:77:66:84:78:75:61:e7: 18:e3:c9:8b:35:e7:42:82:4c:67:4c:87:58:c8:2c:58:15:9b: 95:43:5c:97:56:6f:d0:3c:b0:d8:ab:0b:36:1d:92:14:64:6c: 4e:5e:98:c4:c8:61:f1:3b:d4:b8:d9:5c:03:4c:3d:5d:c0:09: af:cb:dd:d9:06:bc:00:ec:a2:e6:9b:2f:62:72:b9:00:75:3a: cb:da:fd:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87DMVBZNPas0NUjMJWBNUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOTExNzc5Yzc2N2QyMzY0ZTg2ZjRlMjdlZjhjNWZlOWJi MDEwOTAwHhcNMjUxMjIwMTgwMTExWhcNMjUxMjIxMTgwMTExWjAzMTEwLwYDVQQD Eyg5OGI5NjU5NTZlNWYyY2VlMGI5NGE1ZTQyY2JmOTljYTFkM2VmZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaQ1wnKbjrC+XgKVjba87nEvPJb/ GAJ0dI1pGKrpw0JqCj57kLECPiW8qluEVS3QeiytYQ65PWmMdcOmfeEhdzplPKSu FJJ0D247hfMn+SwBOKnwTJNLEaq7okLvAvz/C3Z1wRKZyffVJXZw7ZPiP1JGUhwW edOLyggikYOfUET34PPSG0TB+bIFszjS//gjj1hABPLdPRVf8xh0mAvxs9ludEr8 wV4yx9fE+clN+YEwQA28tfypD0I/9839Jt/YqS5GcbjVtFB4K92Uc0HVasiPVRNg bp4Vnt6s6MD0TQxXBbDWNuIEL0FPuqOoL9tNDSEZ+bDQz5tPI97bd8VIwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJi5ZZVuXyzuC5Sl5Cy/mcodPv82MB8GA1UdIwQY MBaAFACRF3nHZ9I2Tob04n74xf6bsBCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYt NjJjMWIxZmYzYTI2LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYtNjJjMWIxZmYzYTI2 LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ791vssu nbHEzee6fESJ7EOo/VgT/RaBovyPafcj8q/pI9V9aR+ato8UwIAI3PHln1rXaEcD TUYl+faL9rZcjRBAWrcyVDgZGJJCbk/X/4PfInmK34/oZQnPydYqEuoKtnIHW2Mc PrNFUI7fOYxgo7BhMw6Y8p9JrBrzclAnaVu8sDHj4JOgqyIEKeVhPfAbevtzzlcK T+iFydi5OhTbTgDIwCMwDu0uNISQ0Cp3ZoR4dWHnGOPJizXnQoJMZ0yHWMgsWBWb lUNcl1Zv0Dyw2KsLNh2SFGRsTl6YxMhh8TvUuNlcA0w9XcAJr8vd2Qa8AOyi5psv YnK5AHU6y9r9Ug== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:48 2025 by rpki-client