This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft File: AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json) Hash identifier: 7rex2eujT3M3DsntySDBmlz+qyM/ZIVocbD62lPYEnk= Subject key identifier: B0:96:C0:E4:EB:43:EA:2C:A6:E1:14:CB:15:57:EA:C9:CA:8E:31:11 Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5 Certificate issuer: /CN=007e6b5aa437d3693151502a211496e37d4ae2c5 Certificate serial: 019B38332F90DC7B0F9350EE6A08E793483D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft Manifest number: 1504 Signing time: Fri 19 Dec 2025 20:00:37 +0000 Manifest this update: Fri 19 Dec 2025 20:00:37 +0000 Manifest next update: Sat 20 Dec 2025 20:00:37 +0000 Files and hashes: 1: 6F_Q4XpRKgEexZcCv84M_kGGwx8.roa (hash: jzUe5knYI2NZSGwBtOwn1dJh+2wMTZvaI6KEnoCDN6M=) 2: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: ZsVhR9b8mN6+YWaSmmCJy/nG+VNHhpSh1B4TIa2wpqU=) 3: Ry-o6BvHlNuOD_d14wdLVmhDsgM.roa (hash: S/jHrYJPbAAtdA+RZZOotd+GpMfWfmGdhS0b8Kc0V30=) 4: VFSqRzcGMZ3Y2JFZb1Fsblb27nQ.roa (hash: UUfcXkF0GWrqVSNu+3z9VDCb/uLRbXj4ZsTEe5POQ7M=) 5: W_b0Ax5Mpx_fhvv-92F8GttV04I.roa (hash: y/SVVGY3IuSmMubg1JbInzxD9q8qop1Ol37UDvpp3pE=) 6: gZrmTs3ukQIINjYb9akCKLL_iZM.roa (hash: WbSg2tywBgMqpLgEuUZPOKgd7CPp10c7QuJJvyuvaco=) 7: mV18Ah11BcP39CQhLtpf79pVug8.roa (hash: RGt06BrejPetx9+VOGQ2Y1/RTWPMTF5VhkkYrYGyW40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:2f:90:dc:7b:0f:93:50:ee:6a:08:e7:93:48:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5 Validity Not Before: Dec 19 20:00:37 2025 GMT Not After : Dec 20 20:00:37 2025 GMT Subject: CN=b096c0e4eb43ea2ca6e114cb1557eac9ca8e3111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:55:f8:68:91:b7:1e:62:8b:bf:d0:51:27:c5: 83:e8:b7:29:35:c5:80:ff:51:3e:d5:40:3e:d4:2b: bb:14:9c:fc:f3:17:c3:f9:5e:db:6c:ac:cb:77:de: f3:50:4c:b1:9c:c0:51:d2:1a:96:b7:2a:f7:23:8a: 3e:f1:c4:cf:b4:e9:f0:39:b1:d2:ae:85:d6:30:51: e6:60:1b:a6:15:ae:88:46:00:b5:ab:4a:c3:2e:fc: 2b:e4:a2:a3:5f:02:d0:55:21:31:6a:07:49:ff:d7: d8:bf:ff:8e:b9:c9:96:3c:43:a6:84:d5:ff:3b:a6: 17:e6:2e:ca:63:89:5c:9d:1a:ed:bb:ce:c3:df:d2: 1c:0c:1a:10:53:06:33:22:12:37:7f:01:4c:69:0d: 39:15:61:cd:ba:9e:70:74:af:28:d0:8e:21:54:5e: 2c:43:d4:26:9c:44:7c:b9:9c:b1:d6:97:49:32:d6: 89:cf:f3:e2:56:8c:4f:f4:06:c1:59:a7:40:8d:72: b2:fe:ee:6b:14:be:e7:04:0f:a2:5c:d5:a5:c5:6f: 58:e7:43:5e:9d:e4:4e:fc:19:6f:b6:2b:b3:a3:01: cf:19:3b:bf:2f:a2:d7:c3:5b:34:1d:c1:4a:07:db: fd:04:83:b7:fb:bc:d0:6c:04:1f:d3:f8:2b:f1:d9: ed:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:96:C0:E4:EB:43:EA:2C:A6:E1:14:CB:15:57:EA:C9:CA:8E:31:11 X509v3 Authority Key Identifier: keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f8:62:dd:85:78:9d:3c:22:d1:53:55:45:e8:f9:77:f7:df: f9:01:3a:c2:a9:b3:8c:03:de:72:44:4d:36:9a:cb:32:9b:e0: dc:02:47:35:62:ef:6f:31:a9:3b:3d:5a:2b:91:a1:29:7f:98: f9:e4:ea:a1:22:88:cc:20:d5:c4:58:6b:e3:36:7d:90:8c:60: c6:76:8c:cb:b5:fc:59:9a:4d:f0:fe:9b:76:13:e5:44:d5:b2: 4c:a1:7a:d2:b6:ca:f9:be:a5:c3:bd:01:d8:7e:00:2a:d0:a3: 7b:76:57:8e:87:e1:f9:6b:69:6a:78:05:f2:f0:a1:24:28:7c: 05:43:c3:86:74:88:de:c9:5b:b4:6f:df:4c:33:9c:82:88:80: 19:64:34:7d:82:61:d9:28:16:ae:8a:da:79:73:65:94:5b:90: 15:71:fb:45:dd:df:c4:9c:02:ae:f1:c5:20:e1:9c:84:50:8d: 9e:25:3e:0d:52:04:cd:f8:d5:6b:12:0e:d9:69:d5:d8:51:ba: 10:fa:7d:3d:3b:76:61:9e:90:1f:e1:41:04:b6:7c:40:47:80: 5e:f5:c8:46:db:e7:5b:38:c1:74:be:ab:e1:e1:67:fe:4e:ce: 31:59:35:3f:9d:cc:8a:f3:c9:d6:05:c1:41:f9:8a:e4:99:bb: 6e:2d:c5:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4My+Q3HsPk1Duagjnk0g9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwN2U2YjVhYTQzN2QzNjkzMTUxNTAyYTIxMTQ5NmUzN2Q0 YWUyYzUwHhcNMjUxMjE5MjAwMDM3WhcNMjUxMjIwMjAwMDM3WjAzMTEwLwYDVQQD EyhiMDk2YzBlNGViNDNlYTJjYTZlMTE0Y2IxNTU3ZWFjOWNhOGUzMTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51X4aJG3HmKLv9BRJ8WD6LcpNcWA /1E+1UA+1Cu7FJz88xfD+V7bbKzLd97zUEyxnMBR0hqWtyr3I4o+8cTPtOnwObHS roXWMFHmYBumFa6IRgC1q0rDLvwr5KKjXwLQVSExagdJ/9fYv/+OucmWPEOmhNX/ O6YX5i7KY4lcnRrtu87D39IcDBoQUwYzIhI3fwFMaQ05FWHNup5wdK8o0I4hVF4s Q9QmnER8uZyx1pdJMtaJz/PiVoxP9AbBWadAjXKy/u5rFL7nBA+iXNWlxW9Y50Ne neRO/BlvtiuzowHPGTu/L6LXw1s0HcFKB9v9BIO3+7zQbAQf0/gr8dntswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCWwOTrQ+ospuEUyxVX6snKjjERMB8GA1UdIwQY MBaAFAB+a1qkN9NpMVFQKiEUluN9SuLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYt NWE4YzY3ODQyMzg5LzEvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYtNWE4YzY3ODQyMzg5 LzEvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvhi3YV4 nTwi0VNVRej5d/ff+QE6wqmzjAPeckRNNprLMpvg3AJHNWLvbzGpOz1aK5GhKX+Y +eTqoSKIzCDVxFhr4zZ9kIxgxnaMy7X8WZpN8P6bdhPlRNWyTKF60rbK+b6lw70B 2H4AKtCje3ZXjofh+WtpangF8vChJCh8BUPDhnSI3slbtG/fTDOcgoiAGWQ0fYJh 2SgWroraeXNllFuQFXH7Rd3fxJwCrvHFIOGchFCNniU+DVIEzfjVaxIO2WnV2FG6 EPp9PTt2YZ6QH+FBBLZ8QEeAXvXIRtvnWzjBdL6r4eFn/k7OMVk1P53MivPJ1gXB QfmK5Jm7bi3Fiw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:00:24 2025 by rpki-client