This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft File: AM0TenUCPWcunw4UQ8sOjPU7A9M.mft (raw, json) Hash identifier: gXe0qk9gx4MVzFk7ZmV8IDbvR67x2XlAAJv30IBoplc= Subject key identifier: EA:58:F4:D7:F6:0F:7B:03:B6:4B:8C:5E:01:C5:5E:39:52:26:CF:6B Authority key identifier: 00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3 Certificate issuer: /CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3 Certificate serial: 019B24E399E466D32B1029DDC81D334EABEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft Manifest number: 24 Signing time: Tue 16 Dec 2025 02:00:54 +0000 Manifest this update: Tue 16 Dec 2025 02:00:54 +0000 Manifest next update: Wed 17 Dec 2025 02:00:54 +0000 Files and hashes: 1: AM0TenUCPWcunw4UQ8sOjPU7A9M.crl (hash: 2YwoxOcmETdCMbYOWirROJFBUJko3OgV1It5aX2L/lw=) 2: QRmb5YrXwDriaT2dAaAU-pHwvNQ.asa (hash: SD+gQNGtNRHX6vzbmlJIKYTNd1x65ITQz0EzQSUqHQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:99:e4:66:d3:2b:10:29:dd:c8:1d:33:4e:ab:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3 Validity Not Before: Dec 16 02:00:54 2025 GMT Not After : Dec 17 02:00:54 2025 GMT Subject: CN=ea58f4d7f60f7b03b64b8c5e01c55e395226cf6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d9:95:18:0f:a6:f0:19:c5:b7:2e:55:ba:55: 0f:bc:96:a8:62:99:f5:d6:38:4e:4f:47:1b:69:3b: dc:12:57:73:a0:b2:09:ca:69:ff:12:12:39:3e:6c: 51:2c:c7:f3:92:cb:aa:f1:e3:34:af:80:a8:b0:9f: f9:d4:25:bd:2e:f9:58:50:d4:50:2f:67:e5:ba:c6: d5:b9:a6:c3:41:be:ea:31:51:07:f7:e5:1c:1a:81: 3a:1a:6a:57:e2:b2:77:8d:1a:8f:4e:52:db:3a:9f: 3a:64:1a:87:f7:30:97:bf:54:3d:8a:24:66:b9:c2: 4c:bb:3c:50:10:91:ba:42:d7:71:2f:a3:ab:11:36: 22:4d:0f:8c:13:40:1e:35:a7:13:28:fb:fa:9d:36: 0b:07:31:80:1d:d7:9d:54:c4:6a:d5:62:47:f0:b6: a2:5b:b8:21:b1:6b:56:0d:64:4e:42:75:52:c4:a5: 7b:f0:fd:ad:98:2f:cb:12:01:5a:25:4b:91:8c:69: a1:c2:a9:50:21:e6:8a:e7:68:46:8c:e2:c0:9f:33: 0c:ba:62:46:5e:57:b2:6a:25:5c:4e:2b:1d:29:e6: 50:ba:46:4d:41:e8:6a:e3:aa:18:16:30:e9:8e:ba: 2c:0c:41:99:08:1c:6b:a3:90:52:70:b3:5d:47:ee: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:58:F4:D7:F6:0F:7B:03:B6:4B:8C:5E:01:C5:5E:39:52:26:CF:6B X509v3 Authority Key Identifier: keyid:00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:38:7c:1e:03:cf:69:93:01:1b:56:1e:5d:1d:9d:10:55:75: 91:7c:5c:cb:ef:46:3f:34:ec:9f:02:dd:a5:bb:63:e7:a1:be: 2f:73:82:ed:71:cb:1a:fa:4a:be:1b:d7:ed:45:03:17:dd:11: 21:ad:4b:a3:a7:28:a9:fd:de:b3:57:e7:6c:16:56:f5:65:b4: 45:3f:0f:2c:bc:67:c9:a5:d3:d6:19:26:a9:52:2e:2b:40:e8: 3d:ed:20:a3:e6:08:83:84:6e:6a:4e:48:8a:47:0f:b3:72:62: 45:86:50:8e:c6:7a:48:65:0b:90:91:5b:df:58:9f:4a:05:a3: e1:cc:35:8c:50:d1:16:1d:ec:c4:95:ff:49:91:49:2b:00:ff: 94:c6:25:7e:ec:59:5d:c7:3a:f3:e6:35:66:b0:a0:a6:76:0c: c8:78:b1:65:05:ec:e3:f4:68:f3:ee:a8:2e:da:ec:ae:f9:f4: 61:fa:ac:d8:16:11:4c:a1:03:04:5a:e9:1e:cb:4b:ef:f7:a5: ae:4e:9a:51:57:4e:fd:97:f7:2f:c7:04:11:ea:c5:46:ad:90: 3e:58:c6:c6:9f:49:91:54:48:a9:e2:e3:ff:00:4b:95:c7:23: 73:21:8f:94:e0:02:cc:0a:3b:3d:79:89:3f:07:c2:7f:e8:16: 75:bb:4c:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk45nkZtMrECndyB0zTqvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwY2QxMzdhNzUwMjNkNjcyZTlmMGUxNDQzY2IwZThjZjUz YjAzZDMwHhcNMjUxMjE2MDIwMDU0WhcNMjUxMjE3MDIwMDU0WjAzMTEwLwYDVQQD EyhlYTU4ZjRkN2Y2MGY3YjAzYjY0YjhjNWUwMWM1NWUzOTUyMjZjZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tmVGA+m8BnFty5VulUPvJaoYpn1 1jhOT0cbaTvcEldzoLIJymn/EhI5PmxRLMfzksuq8eM0r4CosJ/51CW9LvlYUNRQ L2flusbVuabDQb7qMVEH9+UcGoE6GmpX4rJ3jRqPTlLbOp86ZBqH9zCXv1Q9iiRm ucJMuzxQEJG6QtdxL6OrETYiTQ+ME0AeNacTKPv6nTYLBzGAHdedVMRq1WJH8Lai W7ghsWtWDWROQnVSxKV78P2tmC/LEgFaJUuRjGmhwqlQIeaK52hGjOLAnzMMumJG XleyaiVcTisdKeZQukZNQehq46oYFjDpjrosDEGZCBxro5BScLNdR+6NzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpY9Nf2D3sDtkuMXgHFXjlSJs9rMB8GA1UdIwQY MBaAFADNE3p1Aj1nLp8OFEPLDoz1OwPTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mODMxMzYtMTg2ZC00OTA0LWI4MWMt Yzc5ODgxZjMxNWUyLzEvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mODMxMzYtMTg2ZC00OTA0LWI4MWMtYzc5ODgxZjMxNWUy LzEvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzh8HgPP aZMBG1YeXR2dEFV1kXxcy+9GPzTsnwLdpbtj56G+L3OC7XHLGvpKvhvX7UUDF90R Ia1Lo6coqf3es1fnbBZW9WW0RT8PLLxnyaXT1hkmqVIuK0DoPe0go+YIg4Ruak5I ikcPs3JiRYZQjsZ6SGULkJFb31ifSgWj4cw1jFDRFh3sxJX/SZFJKwD/lMYlfuxZ Xcc68+Y1ZrCgpnYMyHixZQXs4/Ro8+6oLtrsrvn0Yfqs2BYRTKEDBFrpHstL7/el rk6aUVdO/Zf3L8cEEerFRq2QPljGxp9JkVRIqeLj/wBLlccjcyGPlOACzAo7PXmJ PwfCf+gWdbtMZQ== -----END CERTIFICATE-----Generated at Tue Dec 16 12:41:36 2025 by rpki-client