This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft File: AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json) Hash identifier: eh3F1Bae2Dtz+qzOUF3ty7TVptBW8qEcmNE5EuCZkq4= Subject key identifier: 0D:55:A5:9E:EC:20:5D:97:22:F8:27:CE:17:0E:21:F9:FD:EE:E0:71 Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81 Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681 Certificate serial: 019B3F4813E0491B85A77FE634489BF09EA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft Manifest number: 12AB Signing time: Sun 21 Dec 2025 05:00:46 +0000 Manifest this update: Sun 21 Dec 2025 05:00:46 +0000 Manifest next update: Mon 22 Dec 2025 05:00:46 +0000 Files and hashes: 1: 1-bTG4fJ9woZmiRnGA3mMnt-HFQU.roa (hash: sBL1HNYrxZcmkezvdPWd49u3uAN+SQyINP0GsQYDsEg=) 2: 1qEPEFv1rtnBwjLrj05KhcsiGsw.roa (hash: efBys1jy+DGmejYCRhYEDwHiZZBi2kJ2HO+RtvkHBG0=) 3: 4Kk7BT4GOtX1l3OKm7jdPAKUhF4.roa (hash: tjLnA4xx6xW2o8o0Nxj0RULJ3oVpDUty6jhv+XOFzV8=) 4: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: cepVhNZ7s3pAtWetN9qvl7Lx0s9WC2WXg4mT6AnZeA8=) 5: KSQbuvMpaNtmYtn-yiQgu6gs4Xg.roa (hash: rY+o5Ow6fjFdTk2as4zdZu/IZVXbQNeVsHdG3L6c1Us=) 6: ZOyHJ4Yqv0XVd9AATFKr91oKlKQ.roa (hash: UP88f3uzMOFhKaWDsZtlJomj/zgPQgChtV7gCg0+LOM=) 7: hBIi_DQsTzzAePmcqEi9LIfGgEo.roa (hash: ixi/61RXmNoCNxlk1fG+litk/y7jlZcj22aPdgR7sWs=) 8: qsCfBgY2cAUIcPFcqfJPHH6e1Us.roa (hash: Tt7WpuJis2cX5dodwxLP2jzWdn56/MoMnk4lBKcxlds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:13:e0:49:1b:85:a7:7f:e6:34:48:9b:f0:9e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681 Validity Not Before: Dec 21 05:00:46 2025 GMT Not After : Dec 22 05:00:46 2025 GMT Subject: CN=0d55a59eec205d9722f827ce170e21f9fdeee071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:22:79:03:71:08:b0:c4:1e:dd:31:d6:57:8d: 8f:fb:fe:b0:08:de:8e:e0:eb:a9:c4:8e:42:c6:3f: 10:b0:9c:d1:b7:71:cc:0d:fc:66:db:f6:87:d3:87: 66:50:2d:9d:11:24:a9:8f:3e:2a:1c:fd:0e:31:42: a4:ca:0a:ad:14:b2:19:a6:fe:2f:91:60:85:18:c1: 0a:5c:39:6d:25:45:ec:1a:49:9b:8d:54:7a:a9:0c: 78:ad:be:96:d4:32:4b:1c:c5:43:46:fb:71:fb:23: 6b:7e:dc:1f:f1:fd:37:80:3e:9f:14:ea:6a:8b:8e: d5:0d:fb:51:ff:68:ea:f8:10:02:aa:ef:d8:64:14: 98:a6:7e:e2:83:58:d2:f0:a4:26:02:b9:a2:7f:1f: 61:08:88:43:d1:f4:40:d9:cf:4f:e4:1c:c9:49:20: 09:10:0b:66:56:fc:62:67:7d:43:e0:54:8e:d3:97: db:7c:8b:b5:76:7f:20:1e:d3:b9:34:7e:b5:29:03: 22:c6:59:d0:2b:9c:20:e2:a7:08:4d:f5:3c:28:6e: 36:4c:80:4b:75:a0:33:b0:67:31:c5:83:53:d0:bb: 53:8a:c2:95:e3:02:4f:b1:84:1a:3a:5c:fb:f4:ac: 75:b1:96:69:88:70:7a:60:cf:b6:98:6f:a9:2d:5d: 82:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:55:A5:9E:EC:20:5D:97:22:F8:27:CE:17:0E:21:F9:FD:EE:E0:71 X509v3 Authority Key Identifier: keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:84:b8:f8:33:4d:26:66:ab:e1:c7:22:d5:7e:ce:da:a9:b5: b4:25:9c:38:27:fe:52:ab:df:f5:bf:0b:8d:4c:c7:fd:7f:0e: c7:e9:22:cc:db:32:84:5d:b2:ff:02:99:42:a5:67:fe:57:fd: ff:30:65:0c:42:bb:bb:e7:ae:7e:ed:13:e3:9a:bd:69:cc:62: ff:1a:51:11:c9:4f:f9:5a:61:34:c1:cc:7a:fe:9b:fa:8f:d3: ac:42:28:8d:fb:b9:bf:50:17:fd:bf:df:ca:b5:f6:a8:55:24: 59:06:e6:16:03:4d:06:6e:51:b9:7f:29:5a:ab:83:06:dc:31: e5:a9:25:54:bc:c8:b0:96:2a:c7:d8:76:cd:e5:d6:cd:a0:4f: d7:53:fa:9e:1e:78:20:e6:f9:64:9b:7b:ee:51:2f:4a:74:f7: 82:19:c1:9f:53:bc:65:71:3d:06:4d:89:51:c3:8b:5a:88:5d: 51:42:26:75:80:d2:fe:96:60:20:fc:2d:88:e0:2b:49:36:f7: 9d:f7:4f:7a:f1:30:25:98:fa:0b:91:ff:7b:9f:e5:de:21:d5: 99:0e:6f:d6:1e:3b:6d:12:6b:3d:fe:52:ba:9c:20:2c:63:a1: 3a:75:a0:14:83:42:c1:6a:a4:d0:f3:5d:e4:25:19:74:2f:c4: 9c:f0:26:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SBPgSRuFp3/mNEib8J6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1 YmE2ODEwHhcNMjUxMjIxMDUwMDQ2WhcNMjUxMjIyMDUwMDQ2WjAzMTEwLwYDVQQD EygwZDU1YTU5ZWVjMjA1ZDk3MjJmODI3Y2UxNzBlMjFmOWZkZWVlMDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCJ5A3EIsMQe3THWV42P+/6wCN6O 4OupxI5Cxj8QsJzRt3HMDfxm2/aH04dmUC2dESSpjz4qHP0OMUKkygqtFLIZpv4v kWCFGMEKXDltJUXsGkmbjVR6qQx4rb6W1DJLHMVDRvtx+yNrftwf8f03gD6fFOpq i47VDftR/2jq+BACqu/YZBSYpn7ig1jS8KQmArmifx9hCIhD0fRA2c9P5BzJSSAJ EAtmVvxiZ31D4FSO05fbfIu1dn8gHtO5NH61KQMixlnQK5wg4qcITfU8KG42TIBL daAzsGcxxYNT0LtTisKV4wJPsYQaOlz79Kx1sZZpiHB6YM+2mG+pLV2CNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1VpZ7sIF2XIvgnzhcOIfn97uBxMB8GA1UdIwQY MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt YTg3NzNkZTc2OGY3LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3 LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYS4+DNN Jmar4cci1X7O2qm1tCWcOCf+Uqvf9b8LjUzH/X8Ox+kizNsyhF2y/wKZQqVn/lf9 /zBlDEK7u+eufu0T45q9acxi/xpREclP+VphNMHMev6b+o/TrEIojfu5v1AX/b/f yrX2qFUkWQbmFgNNBm5RuX8pWquDBtwx5aklVLzIsJYqx9h2zeXWzaBP11P6nh54 IOb5ZJt77lEvSnT3ghnBn1O8ZXE9Bk2JUcOLWohdUUImdYDS/pZgIPwtiOArSTb3 nfdPevEwJZj6C5H/e5/l3iHVmQ5v1h47bRJrPf5SupwgLGOhOnWgFINCwWqk0PNd 5CUZdC/EnPAmGw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:30:00 2025 by rpki-client