This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json) Hash identifier: AK+oHWPkFc/eo3CivygZJ+6gNxperz7WBB8a5TU7pqs= Subject key identifier: 29:02:B8:7D:EF:2F:79:DB:68:57:EE:56:87:55:70:1E:BB:6D:A5:1E Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90 Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090 Certificate serial: 019B5DC0C2DF0ECBB14744E55C3514E6ACE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft Manifest number: 179A Signing time: Sat 27 Dec 2025 03:01:12 +0000 Manifest this update: Sat 27 Dec 2025 03:01:12 +0000 Manifest next update: Sun 28 Dec 2025 03:01:12 +0000 Files and hashes: 1: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: DSXF/eJOTouHV9AQqobeNIjwc9AtDXKtCAa5iBjLyQk=) 2: PuRCtZYS1zb-l6-lSbqSBFwnqhM.roa (hash: AbBVF9kyhgAnkvzoIY9J9QbGE309UtyTbrK9vyLj9EM=) 3: sAkyj21t8-IWELVSrcuIx5gPSVk.roa (hash: iR95lFASykLAMl0dgv405uAOE69TMGevQ+/+DeWufdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:c0:c2:df:0e:cb:b1:47:44:e5:5c:35:14:e6:ac:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090 Validity Not Before: Dec 27 03:01:12 2025 GMT Not After : Dec 28 03:01:12 2025 GMT Subject: CN=2902b87def2f79db6857ee568755701ebb6da51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:87:09:ae:c6:57:89:33:d9:e8:25:12:5a:56: 24:2f:45:f0:74:a7:db:d7:3a:ea:d5:93:6f:af:9b: f3:27:bc:b0:31:aa:27:cb:24:c6:27:c1:a5:63:f2: cc:ca:9f:e7:7f:1e:5a:00:34:74:2b:00:e2:72:85: 60:8a:6d:71:68:7b:0a:f7:e2:ff:f0:a5:e2:33:80: 08:d4:ee:20:bd:4a:f4:c0:ae:7f:80:86:26:cd:dd: 5e:11:d1:05:19:f1:f5:7f:7f:bd:98:f3:a5:18:ca: 49:97:95:88:a3:0f:8a:19:b4:fc:80:dc:e5:68:63: 0d:e6:f6:5b:06:97:aa:d2:9f:33:09:fc:36:cb:f5: 3e:31:07:03:b6:c7:3a:21:1d:e9:3a:af:51:a6:74: b9:a3:27:bf:7d:df:df:3c:1c:d2:61:07:d8:46:9d: a7:0c:dd:13:55:83:8c:21:b2:a4:d2:63:03:71:65: 9e:ba:8b:a6:28:ab:61:38:97:1d:c2:fd:4c:9f:99: 5a:d3:65:98:64:a5:4c:31:1a:22:03:89:e5:4d:33: b2:47:2d:6d:30:8d:40:47:e6:b0:7f:72:54:a1:f2: 69:d6:26:a8:a2:4c:b5:14:31:22:bc:01:31:06:fb: c3:23:30:ff:49:1e:7d:97:a1:5a:74:ee:9c:a6:c9: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:02:B8:7D:EF:2F:79:DB:68:57:EE:56:87:55:70:1E:BB:6D:A5:1E X509v3 Authority Key Identifier: keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c1:0d:67:b2:cc:a1:f5:f3:04:1d:32:c5:29:d8:68:90:ca: 99:8b:d4:c6:1d:06:9f:d2:2d:03:f6:54:d6:5b:b8:1e:21:cb: 7e:25:ad:fa:10:27:8a:24:5d:54:5c:70:a2:5f:e3:2d:e1:79: 0c:bf:c4:d6:38:c2:ac:b4:ba:6d:18:15:fc:03:df:a4:9c:17: ec:cd:9a:81:9b:ea:e5:d4:91:91:2a:12:17:e2:91:2d:5c:d7: 99:6a:d3:42:73:81:34:35:3a:8d:39:cb:23:b9:8d:1f:d7:59: d8:3b:86:2b:df:b5:1d:0e:31:94:fd:52:9a:b2:de:79:cc:cb: b0:67:4e:fe:cf:af:a0:72:14:d6:a4:9f:70:c1:82:98:67:3a: 83:b7:07:30:0d:7d:5d:ee:b7:f1:d6:7f:e1:63:af:2e:b4:35: 93:0c:5a:cf:5e:b6:57:63:be:4d:b2:a4:2e:21:48:a5:ce:b1: c3:d8:2f:7e:9f:68:69:a9:30:6a:ad:38:ea:8a:87:65:c9:5e: 29:4f:85:a5:71:20:b4:68:fb:02:6c:c2:39:d9:8b:30:0c:8f: 1c:1e:c2:1e:79:35:87:26:55:01:31:21:49:f8:2a:d1:b9:44: a3:ea:22:de:85:ac:69:dc:2b:4d:72:93:04:19:a2:1b:54:c3: 57:e6:1e:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdwMLfDsuxR0TlXDUU5qzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOTExNzc5Yzc2N2QyMzY0ZTg2ZjRlMjdlZjhjNWZlOWJi MDEwOTAwHhcNMjUxMjI3MDMwMTEyWhcNMjUxMjI4MDMwMTEyWjAzMTEwLwYDVQQD EygyOTAyYjg3ZGVmMmY3OWRiNjg1N2VlNTY4NzU1NzAxZWJiNmRhNTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4cJrsZXiTPZ6CUSWlYkL0XwdKfb 1zrq1ZNvr5vzJ7ywMaonyyTGJ8GlY/LMyp/nfx5aADR0KwDicoVgim1xaHsK9+L/ 8KXiM4AI1O4gvUr0wK5/gIYmzd1eEdEFGfH1f3+9mPOlGMpJl5WIow+KGbT8gNzl aGMN5vZbBpeq0p8zCfw2y/U+MQcDtsc6IR3pOq9RpnS5oye/fd/fPBzSYQfYRp2n DN0TVYOMIbKk0mMDcWWeuoumKKthOJcdwv1Mn5la02WYZKVMMRoiA4nlTTOyRy1t MI1AR+awf3JUofJp1iaooky1FDEivAExBvvDIzD/SR59l6FadO6cpsn2AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkCuH3vL3nbaFfuVodVcB67baUeMB8GA1UdIwQY MBaAFACRF3nHZ9I2Tob04n74xf6bsBCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYt NjJjMWIxZmYzYTI2LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYtNjJjMWIxZmYzYTI2 LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMENZ7LM ofXzBB0yxSnYaJDKmYvUxh0Gn9ItA/ZU1lu4HiHLfiWt+hAniiRdVFxwol/jLeF5 DL/E1jjCrLS6bRgV/APfpJwX7M2agZvq5dSRkSoSF+KRLVzXmWrTQnOBNDU6jTnL I7mNH9dZ2DuGK9+1HQ4xlP1SmrLeeczLsGdO/s+voHIU1qSfcMGCmGc6g7cHMA19 Xe638dZ/4WOvLrQ1kwxaz162V2O+TbKkLiFIpc6xw9gvfp9oaakwaq046oqHZcle KU+FpXEgtGj7AmzCOdmLMAyPHB7CHnk1hyZVATEhSfgq0blEo+oi3oWsadwrTXKT BBmiG1TDV+Ye3g== -----END CERTIFICATE-----Generated at Sat Dec 27 04:42:46 2025 by rpki-client