This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft File: AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json) Hash identifier: MbjJtqfjscTAfrOLE54LOWnJfoVG0j0bFsULACMY4RA= Subject key identifier: F1:EB:F6:51:93:17:91:0B:76:C9:81:02:51:25:69:90:E4:5F:3A:BF Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43 Certificate issuer: /CN=0241063b2d57e4efaef6824f623d465a1c37b843 Certificate serial: 019B3C7F9F65EB02218B5A4B6C3C018DBF72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft Manifest number: 0E79 Signing time: Sat 20 Dec 2025 16:02:35 +0000 Manifest this update: Sat 20 Dec 2025 16:02:35 +0000 Manifest next update: Sun 21 Dec 2025 16:02:35 +0000 Files and hashes: 1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: gYmvANabq0rl1QqrFRE/LSJHpFiJVfZHX5NEzEteTnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:9f:65:eb:02:21:8b:5a:4b:6c:3c:01:8d:bf:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843 Validity Not Before: Dec 20 16:02:35 2025 GMT Not After : Dec 21 16:02:35 2025 GMT Subject: CN=f1ebf6519317910b76c9810251256990e45f3abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:5b:38:e8:6d:cf:42:9b:14:fe:c1:6f:f5: 23:96:10:98:08:2b:fb:a5:c4:29:7e:74:6d:10:e7: cb:53:06:18:40:69:e1:6f:94:0f:6d:30:ba:e7:d4: 88:33:c8:c3:16:e9:f4:cf:b4:d0:ce:dd:00:04:a3: 2c:a9:0f:02:f2:1e:dd:0a:41:ca:39:fe:b1:58:9d: b7:36:58:37:19:9a:cb:7d:69:97:e4:e6:6e:dd:26: 6b:65:93:bb:42:e9:a3:8c:ee:32:7f:bd:6f:82:b6: c8:00:d4:84:d7:ac:f3:a3:10:a0:bf:b1:5e:08:94: 47:95:e2:07:f9:ed:74:53:08:2c:81:b8:db:8d:7c: 0d:e1:82:c4:8c:e5:63:ca:ed:b6:94:4d:e3:80:ca: fc:fa:45:d7:ed:5b:50:dc:4d:1f:65:89:be:3b:eb: 6a:b2:42:d4:ed:6f:4b:a0:54:03:5a:bc:d1:9d:49: 25:c5:88:c4:68:55:5a:67:9d:3e:c2:9d:3f:12:68: 52:fd:d7:31:72:2a:10:7b:2c:2e:f6:47:b5:18:e9: 93:95:a5:ca:40:f2:f1:86:0b:e0:30:ef:76:48:31: b6:cf:38:bc:e9:b9:f2:50:18:d4:bf:0c:f0:7a:20: 7d:cb:84:8c:30:df:e0:e9:40:05:a7:56:1b:78:51: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EB:F6:51:93:17:91:0B:76:C9:81:02:51:25:69:90:E4:5F:3A:BF X509v3 Authority Key Identifier: keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:35:61:82:8f:d7:5d:2c:a4:be:bf:b7:c1:01:37:19:4c:2c: 0c:06:6d:05:1f:f8:b4:6c:4b:14:f7:e4:a3:07:20:0c:b1:66: 02:38:94:66:46:0c:0a:25:38:95:fa:82:ad:ee:f0:82:81:77: 76:7d:70:37:b5:23:9e:16:26:5c:09:5c:61:df:ef:da:a3:6f: 2d:88:45:26:94:2a:89:02:24:fc:4f:1f:1b:19:23:1f:19:0d: c8:f4:99:cd:d5:3a:6c:08:df:90:f1:2e:b0:67:ae:db:41:3f: 50:f7:69:d2:dd:e1:e2:bd:90:6c:07:e0:f5:ea:c3:90:36:1a: 5e:1b:21:9e:92:02:11:cd:23:25:77:b9:91:4d:7d:ff:2b:2c: d2:bf:3c:6d:81:41:60:86:49:6a:0d:2b:75:56:a6:24:ee:2c: 43:9b:87:e4:01:c0:6a:b8:91:fe:96:d9:eb:51:04:4b:f0:35: a0:4a:d9:d3:ea:31:0b:b7:a4:2f:b6:fb:8b:17:b0:31:14:29: 44:74:41:21:b9:b9:b1:06:db:7d:ce:fc:36:8c:54:86:a7:d0: 26:d8:53:44:ac:d3:f6:11:8d:f0:70:63:b5:18:7b:40:5f:32: 0c:6d:0d:ea:8b:11:d3:a4:55:a9:d7:76:1c:f7:e8:13:8c:b6: ed:b3:ff:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f59l6wIhi1pLbDwBjb9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNDEwNjNiMmQ1N2U0ZWZhZWY2ODI0ZjYyM2Q0NjVhMWMz N2I4NDMwHhcNMjUxMjIwMTYwMjM1WhcNMjUxMjIxMTYwMjM1WjAzMTEwLwYDVQQD EyhmMWViZjY1MTkzMTc5MTBiNzZjOTgxMDI1MTI1Njk5MGU0NWYzYWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0RbOOhtz0KbFP7Bb/UjlhCYCCv7 pcQpfnRtEOfLUwYYQGnhb5QPbTC659SIM8jDFun0z7TQzt0ABKMsqQ8C8h7dCkHK Of6xWJ23Nlg3GZrLfWmX5OZu3SZrZZO7QumjjO4yf71vgrbIANSE16zzoxCgv7Fe CJRHleIH+e10UwgsgbjbjXwN4YLEjOVjyu22lE3jgMr8+kXX7VtQ3E0fZYm+O+tq skLU7W9LoFQDWrzRnUklxYjEaFVaZ50+wp0/EmhS/dcxcioQeywu9ke1GOmTlaXK QPLxhgvgMO92SDG2zzi86bnyUBjUvwzweiB9y4SMMN/g6UAFp1YbeFFSIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHr9lGTF5ELdsmBAlElaZDkXzq/MB8GA1UdIwQY MBaAFAJBBjstV+TvrvaCT2I9RlocN7hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQt Y2IwNzVlMjM5YTU2LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQtY2IwNzVlMjM5YTU2 LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTVhgo/X XSykvr+3wQE3GUwsDAZtBR/4tGxLFPfkowcgDLFmAjiUZkYMCiU4lfqCre7wgoF3 dn1wN7UjnhYmXAlcYd/v2qNvLYhFJpQqiQIk/E8fGxkjHxkNyPSZzdU6bAjfkPEu sGeu20E/UPdp0t3h4r2QbAfg9erDkDYaXhshnpICEc0jJXe5kU19/yss0r88bYFB YIZJag0rdVamJO4sQ5uH5AHAariR/pbZ61EES/A1oErZ0+oxC7ekL7b7ixewMRQp RHRBIbm5sQbbfc78NoxUhqfQJthTRKzT9hGN8HBjtRh7QF8yDG0N6osR06RVqdd2 HPfoE4y27bP/Ow== -----END CERTIFICATE-----Generated at Sat Dec 20 20:26:20 2025 by rpki-client