This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json) Hash identifier: joHf4IoBpjiaS3Fgxo6SHj2g95nFUL4BrtPxskoZCg4= Subject key identifier: A3:34:D6:6C:BC:6D:DE:6E:09:F0:DB:85:40:FB:78:0B:28:F5:6B:40 Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82 Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082 Certificate serial: 019B5DF7BE61564567F53253BB514C828C59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft Manifest number: 179A Signing time: Sat 27 Dec 2025 04:01:15 +0000 Manifest this update: Sat 27 Dec 2025 04:01:15 +0000 Manifest next update: Sun 28 Dec 2025 04:01:15 +0000 Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: 6Dv3OS3RD8b8QPectqxhjEXAFX0nlhgiTHlAfYOWyg8=) 2: TEkUtdSJlCwJOLmZGlc_aRWHYHQ.roa (hash: 6v28t0X8IRT5vkPcD+0Ak9J7sxuHKDaxDcFCFxn0jgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:f7:be:61:56:45:67:f5:32:53:bb:51:4c:82:8c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082 Validity Not Before: Dec 27 04:01:15 2025 GMT Not After : Dec 28 04:01:15 2025 GMT Subject: CN=a334d66cbc6dde6e09f0db8540fb780b28f56b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:01:d9:a9:82:7f:53:f7:77:e3:07:43:04:fd: d2:2f:c5:c5:8c:4a:43:4d:32:67:36:2f:d2:89:a4: 80:86:5f:bd:00:e4:b3:6f:52:9a:11:02:60:6f:73: 1d:a3:c3:7d:0f:2b:d0:04:f8:f7:c3:0a:67:d6:00: 88:83:f2:bf:2e:08:09:43:8e:8b:d0:05:f4:c5:40: 96:6c:00:1a:3b:22:e5:51:1b:8a:2e:9b:d3:d5:7c: 76:e0:f2:57:40:4e:8d:79:57:a1:5a:31:bd:e1:73: a9:76:95:1e:74:a6:55:e6:42:c7:d1:7b:9c:09:3b: 02:8b:a6:2d:94:e5:35:37:55:1e:ff:9b:ee:58:43: e5:00:7e:b7:94:3c:aa:28:8b:51:c4:13:86:aa:b5: 6f:fd:fb:02:c6:1a:ce:20:0d:2f:ca:9f:7a:e7:a5: 51:81:af:7d:97:47:e5:d8:44:3f:57:ae:ea:d9:83: 79:66:43:27:e8:11:b2:d4:d5:ec:13:42:32:0b:5a: d2:4d:35:dc:d2:20:38:d5:3d:6a:5b:61:24:d1:3d: d9:12:c0:17:08:b3:8c:00:64:e9:ed:14:cd:08:aa: 09:90:61:71:2e:84:0c:c4:25:df:ee:0c:e8:55:30: 7f:f1:78:23:58:c0:82:3c:3c:e9:04:2b:72:70:13: 86:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:34:D6:6C:BC:6D:DE:6E:09:F0:DB:85:40:FB:78:0B:28:F5:6B:40 X509v3 Authority Key Identifier: keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a5:17:2b:ae:15:c8:41:07:1f:1e:d5:96:6e:93:95:a9:43: 57:72:08:42:46:5b:39:1e:70:72:f6:fe:2c:fa:fa:b6:24:9a: 1b:77:d8:9e:2d:ca:35:26:3d:47:99:be:ce:eb:bc:b9:38:79: a1:02:48:e7:16:fd:92:ff:31:5f:c5:bf:b3:2d:dc:6f:d2:3e: 4a:57:64:26:c9:85:23:85:ae:35:8c:c8:38:3c:b0:4e:fb:8a: 8f:02:f6:66:7f:c4:01:f2:14:da:e3:1b:03:a2:d7:02:16:68: 3e:a0:42:f5:32:42:c4:50:e7:16:5f:5a:92:97:1f:26:39:e3: ce:49:d3:92:ae:9a:d4:87:21:a3:e4:0f:0a:c2:a2:1c:18:17: 6b:f3:70:68:78:ac:33:74:1d:d6:27:a2:57:de:08:24:97:21: df:22:2e:cf:57:85:61:8e:50:e0:ce:39:4f:2d:72:bf:38:31: b6:95:15:6e:4e:ae:26:b6:c8:d1:f8:2a:5d:5e:b2:c6:10:0a: 28:e0:b5:a4:10:d4:b4:66:97:f1:e3:c6:49:74:fa:fd:b5:30: 68:97:2c:b7:95:bd:8b:ed:55:25:72:4c:ce:16:33:4d:56:ba: 5a:ca:f7:f5:29:d8:e9:fe:39:5c:20:79:60:01:e7:06:6f:9c: 28:90:ef:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtd975hVkVn9TJTu1FMgoxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZDk0NmE1MzQwYjdmMGZmNTBkOWFmYTY1MTlhZGU3ZjNh NGEwODIwHhcNMjUxMjI3MDQwMTE1WhcNMjUxMjI4MDQwMTE1WjAzMTEwLwYDVQQD EyhhMzM0ZDY2Y2JjNmRkZTZlMDlmMGRiODU0MGZiNzgwYjI4ZjU2YjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wHZqYJ/U/d34wdDBP3SL8XFjEpD TTJnNi/SiaSAhl+9AOSzb1KaEQJgb3Mdo8N9DyvQBPj3wwpn1gCIg/K/LggJQ46L 0AX0xUCWbAAaOyLlURuKLpvT1Xx24PJXQE6NeVehWjG94XOpdpUedKZV5kLH0Xuc CTsCi6YtlOU1N1Ue/5vuWEPlAH63lDyqKItRxBOGqrVv/fsCxhrOIA0vyp9656VR ga99l0fl2EQ/V67q2YN5ZkMn6BGy1NXsE0IyC1rSTTXc0iA41T1qW2Ek0T3ZEsAX CLOMAGTp7RTNCKoJkGFxLoQMxCXf7gzoVTB/8XgjWMCCPDzpBCtycBOGkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKM01my8bd5uCfDbhUD7eAso9WtAMB8GA1UdIwQY MBaAFADZRqU0C38P9Q2a+mUZrefzpKCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAt NTVkZGY4MGU5YTlkLzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTlkNjItODgyYS00NDNkLWJkODAtNTVkZGY4MGU5YTlk LzEvQU5sR3BUUUxmd18xRFpyNlpSbXQ1X09rb0lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaUXK64V yEEHHx7Vlm6TlalDV3IIQkZbOR5wcvb+LPr6tiSaG3fYni3KNSY9R5m+zuu8uTh5 oQJI5xb9kv8xX8W/sy3cb9I+SldkJsmFI4WuNYzIODywTvuKjwL2Zn/EAfIU2uMb A6LXAhZoPqBC9TJCxFDnFl9akpcfJjnjzknTkq6a1Icho+QPCsKiHBgXa/NwaHis M3Qd1ieiV94IJJch3yIuz1eFYY5Q4M45Ty1yvzgxtpUVbk6uJrbI0fgqXV6yxhAK KOC1pBDUtGaX8ePGSXT6/bUwaJcst5W9i+1VJXJMzhYzTVa6Wsr39SnY6f45XCB5 YAHnBm+cKJDv8w== -----END CERTIFICATE-----Generated at Sat Dec 27 09:03:03 2025 by rpki-client