This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft File: ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft (raw, json) Hash identifier: YdhTc37rv1mk5N7X20kuWRZZrCCIAqwDuqWuevd2XQs= Subject key identifier: 4F:96:37:C8:29:59:E0:95:39:FC:FD:00:02:94:12:0E:AB:41:38:F6 Authority key identifier: 6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E Certificate issuer: /CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e Certificate serial: 019B552B2F468ECAC9A767823DF02931968C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft Manifest number: 0393 Signing time: Thu 25 Dec 2025 11:00:52 +0000 Manifest this update: Thu 25 Dec 2025 11:00:52 +0000 Manifest next update: Fri 26 Dec 2025 11:00:52 +0000 Files and hashes: 1: ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl (hash: 4h8J11Tetgf7TMkI+XQIip+r2bqF0pS2GTvpuIsoOgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:2f:46:8e:ca:c9:a7:67:82:3d:f0:29:31:96:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e Validity Not Before: Dec 25 11:00:52 2025 GMT Not After : Dec 26 11:00:52 2025 GMT Subject: CN=4f9637c82959e09539fcfd000294120eab4138f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:58:b3:ce:95:07:de:6e:50:18:ca:8e:97: 1d:02:a5:1d:0d:f4:61:55:e5:89:6d:12:2d:05:8e: f8:f2:8d:e7:89:fd:89:9d:5a:2a:c8:da:74:91:62: 32:fd:8e:99:08:32:15:90:10:af:11:ad:1c:41:aa: 5b:c7:f6:52:c8:d4:aa:2b:85:ae:81:92:6e:54:79: 7a:ab:76:32:a1:f5:80:ca:c8:70:73:a0:fc:58:ae: 51:8e:9f:e9:48:e2:50:0d:31:a0:31:63:7f:17:b3: 00:86:0a:5d:0a:a1:c9:0e:77:18:16:43:a9:b3:0e: 37:34:65:e5:38:0b:a2:de:c6:9f:f6:ad:06:8c:f4: d6:c8:e7:80:7b:01:87:0e:f5:fe:de:11:ef:cf:7a: 69:b7:a0:25:66:06:a5:db:5b:ec:ff:6a:aa:78:58: ff:ef:b4:1a:98:c4:8b:c1:5a:f9:e3:73:a1:5b:51: cc:81:10:a8:a4:09:d5:1a:04:e3:c2:ea:52:47:62: fe:b3:58:eb:f2:b0:88:2f:8a:eb:7e:f1:6d:90:48: f8:92:b8:64:ec:75:12:03:27:f2:08:56:6c:af:da: b3:eb:74:42:41:b4:b3:4e:00:a6:6f:dc:0a:23:17: 89:30:5c:da:5f:40:18:ea:f5:3e:7e:f4:dd:39:81: 48:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:96:37:C8:29:59:E0:95:39:FC:FD:00:02:94:12:0E:AB:41:38:F6 X509v3 Authority Key Identifier: keyid:6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:80:2d:ee:3d:40:b6:ac:5d:58:4e:a7:ac:91:7c:e3:1c:41: 60:94:b0:92:5b:cd:da:d5:70:51:b9:0b:0d:39:89:59:f4:a8: 73:8a:e5:b3:c8:06:be:6e:3a:75:3d:96:35:f6:60:9a:31:68: 35:dc:cf:8b:1c:51:a3:e1:52:e7:8e:12:50:4e:ae:a8:fb:2a: a6:e2:c5:9b:5f:10:3e:c6:1c:9a:ab:33:7f:18:67:96:92:50: b9:cb:40:84:d9:3e:40:ec:e5:26:0c:cb:9a:a0:3b:86:5b:f5: cd:eb:ec:44:1e:2b:00:e2:08:05:ba:54:19:0b:bc:58:8b:71: 3a:1c:fb:71:ee:2d:4c:ae:e3:26:34:7c:3b:ba:fc:3b:4a:33: e0:37:aa:10:cd:52:f6:4a:bb:d6:63:81:fb:f5:22:74:9d:db: 78:db:17:8a:ae:e5:a3:e3:21:f3:b8:73:12:66:86:8c:88:bd: 01:90:c7:74:45:18:82:40:81:5f:1a:75:ad:92:c0:a4:75:2b: 73:a9:c0:bf:dd:fc:60:f5:b3:39:4c:ee:ef:f7:74:9f:17:a5: 78:c2:ff:2c:4d:c7:cf:b6:bf:02:d7:8d:ee:c2:01:5b:7d:3e: 72:86:b1:22:c9:a3:95:16:b8:08:4f:ac:7c:e8:69:39:fe:39: 1e:2a:10:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVKy9GjsrJp2eCPfApMZaMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMWM0ODE5ZDBlMTlkZmE3NDBkODQ1MWFmMTM5OGQyMzBj NmQ4NGUwHhcNMjUxMjI1MTEwMDUyWhcNMjUxMjI2MTEwMDUyWjAzMTEwLwYDVQQD Eyg0Zjk2MzdjODI5NTllMDk1MzlmY2ZkMDAwMjk0MTIwZWFiNDEzOGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYhYs86VB95uUBjKjpcdAqUdDfRh VeWJbRItBY748o3nif2JnVoqyNp0kWIy/Y6ZCDIVkBCvEa0cQapbx/ZSyNSqK4Wu gZJuVHl6q3YyofWAyshwc6D8WK5Rjp/pSOJQDTGgMWN/F7MAhgpdCqHJDncYFkOp sw43NGXlOAui3saf9q0GjPTWyOeAewGHDvX+3hHvz3ppt6AlZgal21vs/2qqeFj/ 77QamMSLwVr543OhW1HMgRCopAnVGgTjwupSR2L+s1jr8rCIL4rrfvFtkEj4krhk 7HUSAyfyCFZsr9qz63RCQbSzTgCmb9wKIxeJMFzaX0AY6vU+fvTdOYFIkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+WN8gpWeCVOfz9AAKUEg6rQTj2MB8GA1UdIwQY MBaAFGocSBnQ4Z36dA2EUa8TmNIwxthOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWh4SUdkRGhuZnAwRFlSUnJ4T1kwakRHMkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xYTNmNGItYjA4YS00NWFiLWE0NzYt ZDdiMjhkMmE4MmIxLzEvYWh4SUdkRGhuZnAwRFlSUnJ4T1kwakRHMkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xYTNmNGItYjA4YS00NWFiLWE0NzYtZDdiMjhkMmE4MmIx LzEvYWh4SUdkRGhuZnAwRFlSUnJ4T1kwakRHMkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYAt7j1A tqxdWE6nrJF84xxBYJSwklvN2tVwUbkLDTmJWfSoc4rls8gGvm46dT2WNfZgmjFo NdzPixxRo+FS544SUE6uqPsqpuLFm18QPsYcmqszfxhnlpJQuctAhNk+QOzlJgzL mqA7hlv1zevsRB4rAOIIBbpUGQu8WItxOhz7ce4tTK7jJjR8O7r8O0oz4DeqEM1S 9kq71mOB+/UidJ3beNsXiq7lo+Mh87hzEmaGjIi9AZDHdEUYgkCBXxp1rZLApHUr c6nAv938YPWzOUzu7/d0nxeleML/LE3Hz7a/AteN7sIBW30+coaxIsmjlRa4CE+s fOhpOf45HioQZA== -----END CERTIFICATE-----Generated at Thu Dec 25 13:05:15 2025 by rpki-client