This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json) Hash identifier: 9jur2ouvrp7x0pgQEOC/TrgRa4ep5xxzKUPbwOTG/mM= Subject key identifier: C6:3A:89:0C:58:E7:68:84:EE:D9:AA:E5:6D:46:97:BC:C2:26:3B:9C Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50 Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750 Certificate serial: 019B6C57E055D6493C0565E9BAFF156B0968 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 23:00:56 +0000 Manifest this update: Mon 29 Dec 2025 23:00:56 +0000 Manifest next update: Tue 30 Dec 2025 23:00:56 +0000 Files and hashes: 1: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: vnqNg6GQxPSClJr/0meFDeZc40+9LkNF2wMG+ERTwi0=) 2: oyTiWJ913wVTjnCcw6Q4RBUZbq8.roa (hash: /NMMdoNH5sZWYkg6OnNqyz5087fDkPkdrRkbme1onLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:57:e0:55:d6:49:3c:05:65:e9:ba:ff:15:6b:09:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750 Validity Not Before: Dec 29 23:00:56 2025 GMT Not After : Dec 30 23:00:56 2025 GMT Subject: CN=c63a890c58e76884eed9aae56d4697bcc2263b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1f:f2:70:0e:be:6f:9d:f9:ea:49:e5:76:18: f8:74:43:3f:1f:ad:2d:f2:24:76:68:7b:c5:ec:b3: 71:b9:d5:1f:2b:37:bc:d8:ca:40:e8:00:55:00:41: 0e:f3:47:8e:91:61:83:0f:30:94:e4:d0:7f:ab:ca: f1:66:ac:10:c7:c2:4e:45:6e:e4:72:98:73:b2:a3: 86:5a:e5:a3:3d:d8:d3:5c:89:05:be:a0:86:bb:aa: ba:c1:2e:8b:f6:30:81:33:c9:0d:bd:53:25:1e:2c: 67:3e:07:84:e7:89:d4:52:c5:5b:95:2c:6f:45:3c: 7e:48:26:48:9e:e3:65:92:c2:54:1c:ab:4b:d8:d2: 4b:eb:43:57:84:a5:08:1e:11:0f:4a:b5:5a:0d:6a: 63:fb:23:ac:8d:9a:f4:ec:4f:f9:d6:e4:84:21:00: 58:7e:aa:24:0d:12:eb:43:58:e4:99:ae:87:2d:71: 56:00:0c:13:e6:2d:60:45:d4:8b:78:00:89:cd:3f: bb:46:73:b4:51:e2:a3:19:38:34:c0:a4:4c:b7:dc: 9b:fc:2b:ee:49:86:bf:cd:3c:2d:47:be:c3:21:24: 96:49:ab:d3:96:bb:0f:97:fa:0f:b1:16:e3:f1:aa: 42:35:e0:6d:73:e7:c8:05:ff:80:be:66:2c:93:07: b7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3A:89:0C:58:E7:68:84:EE:D9:AA:E5:6D:46:97:BC:C2:26:3B:9C X509v3 Authority Key Identifier: keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:e2:27:ee:f4:4b:9c:c3:9d:8e:72:c1:a7:72:04:f6:33:8c: 2c:6f:31:2a:b5:1d:10:d9:60:49:bd:7e:c8:52:30:4e:dd:f4: 17:09:e4:a9:8c:27:7f:3e:9e:34:09:66:04:65:17:2b:89:05: 81:e3:f9:bd:29:7c:a8:a0:04:b5:48:9b:fe:1a:c1:f2:df:56: bd:28:aa:82:e2:68:21:2f:d3:c7:ad:bc:d2:a0:bc:63:fe:1f: f6:96:99:8b:fc:15:ef:0f:08:64:29:f8:f3:18:6d:43:09:f4: 89:cd:29:91:99:23:d5:cb:ea:b0:58:c6:c8:19:4a:2b:2c:3e: 8b:02:7d:c2:34:e8:47:35:7a:c1:aa:7f:23:be:a9:b9:d3:c8: e4:56:98:5b:ad:37:85:36:a1:91:f8:f7:af:42:cb:c2:11:b4: ac:95:42:ae:02:54:89:9d:67:39:7e:9e:0c:ff:57:06:c5:0b: 90:d2:2b:02:fa:62:ca:89:0d:32:6c:75:99:95:83:3f:db:cf: 74:b7:d8:02:67:9d:d1:5c:3c:fc:20:7b:fa:91:28:a5:f5:a8: 75:14:3c:6c:87:b5:47:7d:45:5d:66:55:f2:82:ea:81:a6:e0: 65:37:ff:e7:64:df:3c:67:c1:0c:f4:d0:5c:ce:bc:33:b2:68: 8a:66:5a:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsV+BV1kk8BWXpuv8VawloMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNjQwYmNjYjcxNzFmMTk5YzQzYTBhOTc0Y2FiODI3ZWQx OGU3NTAwHhcNMjUxMjI5MjMwMDU2WhcNMjUxMjMwMjMwMDU2WjAzMTEwLwYDVQQD EyhjNjNhODkwYzU4ZTc2ODg0ZWVkOWFhZTU2ZDQ2OTdiY2MyMjYzYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h/ycA6+b5356knldhj4dEM/H60t 8iR2aHvF7LNxudUfKze82MpA6ABVAEEO80eOkWGDDzCU5NB/q8rxZqwQx8JORW7k cphzsqOGWuWjPdjTXIkFvqCGu6q6wS6L9jCBM8kNvVMlHixnPgeE54nUUsVblSxv RTx+SCZInuNlksJUHKtL2NJL60NXhKUIHhEPSrVaDWpj+yOsjZr07E/51uSEIQBY fqokDRLrQ1jkma6HLXFWAAwT5i1gRdSLeACJzT+7RnO0UeKjGTg0wKRMt9yb/Cvu SYa/zTwtR77DISSWSavTlrsPl/oPsRbj8apCNeBtc+fIBf+AvmYskwe3pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMY6iQxY52iE7tmq5W1Gl7zCJjucMB8GA1UdIwQY MBaAFAJkC8y3Fx8ZnEOgqXTKuCftGOdQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80MjRiZDEtOTUzYi00MjYyLTgzOTYt YzdiZjk1ZTVhYjdiLzEvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80MjRiZDEtOTUzYi00MjYyLTgzOTYtYzdiZjk1ZTVhYjdi LzEvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArOIn7vRL nMOdjnLBp3IE9jOMLG8xKrUdENlgSb1+yFIwTt30FwnkqYwnfz6eNAlmBGUXK4kF geP5vSl8qKAEtUib/hrB8t9WvSiqguJoIS/Tx6280qC8Y/4f9paZi/wV7w8IZCn4 8xhtQwn0ic0pkZkj1cvqsFjGyBlKKyw+iwJ9wjToRzV6wap/I76pudPI5FaYW603 hTahkfj3r0LLwhG0rJVCrgJUiZ1nOX6eDP9XBsULkNIrAvpiyokNMmx1mZWDP9vP dLfYAmed0Vw8/CB7+pEopfWodRQ8bIe1R31FXWZV8oLqgabgZTf/52TfPGfBDPTQ XM68M7JoimZaBQ== -----END CERTIFICATE-----Generated at Tue Dec 30 07:14:04 2025 by rpki-client