This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft File: ahfeGIf8-pJEuTHZbagmeMAUdmM.mft (raw, json) Hash identifier: okHsjWkcuQlf9NmrZOjc9wbLIQHbur4lzHEDO8tejYo= Subject key identifier: 2E:9D:59:A1:98:DB:FE:D7:A5:85:7A:C7:DD:85:02:64:BB:6C:47:56 Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63 Certificate issuer: /CN=6a17de1887fcfa9244b931d96da82678c0147663 Certificate serial: 019B747FA57BEC1654B0CD681EA1C3CEA061 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft Manifest number: 17A5 Signing time: Wed 31 Dec 2025 13:01:20 +0000 Manifest this update: Wed 31 Dec 2025 13:01:20 +0000 Manifest next update: Thu 01 Jan 2026 13:01:20 +0000 Files and hashes: 1: BX5R5amdcio3WuT_y5iUpVj2ums.roa (hash: pwGrkwLGbzotd2slolQ5A3oax/Mg/fo6nb/3FvvTnt0=) 2: KfO5I4Cw1MaFsOF7zxOfQ4tIIJA.roa (hash: 4CuGd2v/2n5Lf/n++Esai12zLsblsU9sM0Lw5FSyTzA=) 3: SaXO2k_RD79NU2l7XYSpiLJj45Y.roa (hash: dDxX4ZRGdILDnfmTeHjmX1mfXPW3FoR3IByWvO/xwLc=) 4: ahfeGIf8-pJEuTHZbagmeMAUdmM.crl (hash: mZNcJ353L562++R8ssWQa7OVXRZKsUA33qa7VXPuf+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:7f:a5:7b:ec:16:54:b0:cd:68:1e:a1:c3:ce:a0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663 Validity Not Before: Dec 31 13:01:20 2025 GMT Not After : Jan 1 13:01:20 2026 GMT Subject: CN=2e9d59a198dbfed7a5857ac7dd850264bb6c4756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8b:0d:1c:1d:e3:bf:e7:d8:b2:82:24:20:cb: 99:fa:f7:ed:3e:d4:aa:a6:6a:0f:69:f3:28:58:4e: ee:65:d3:47:69:67:75:9b:9e:dc:d9:aa:37:e2:64: 20:31:fb:ae:67:bd:8e:dc:2b:da:b9:59:e5:6d:fb: ea:08:a3:5e:94:56:2c:1a:51:5b:99:97:3b:c4:2a: f4:d1:1a:9f:4d:bb:ef:51:b3:f0:83:55:a5:0b:1d: f2:ce:63:24:67:37:7d:34:de:db:d1:02:16:55:76: e0:1b:dc:8a:f3:41:be:8d:41:06:91:07:d6:ce:96: d5:4a:b6:12:de:59:7f:c2:18:99:26:7f:8e:86:21: 1e:ff:c2:46:40:69:7e:75:3c:7d:ca:48:87:32:05: 0b:a1:d5:1c:1e:66:2c:21:63:3b:2a:06:17:66:98: f1:0e:43:c9:d9:dc:72:ab:ca:a8:9e:68:52:7a:84: fb:71:4d:f7:2d:f2:1d:fc:f6:35:4d:63:4e:35:42: bf:38:14:3e:d6:0c:20:c7:00:1e:02:fa:74:30:6f: a2:3d:36:a2:82:92:09:c4:49:73:fb:8b:0a:18:7b: 05:22:f8:74:d7:bf:df:43:01:6e:88:ba:ea:f1:65: 49:b1:42:cb:99:35:d3:f2:11:9f:ce:18:fb:2d:a7: 49:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9D:59:A1:98:DB:FE:D7:A5:85:7A:C7:DD:85:02:64:BB:6C:47:56 X509v3 Authority Key Identifier: keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:af:09:6e:fc:36:b7:0c:81:8c:42:06:d3:1f:c4:7d:8e:da: 05:02:a9:1a:cd:c6:6b:7a:36:08:b9:dc:ee:2c:3c:c4:dd:db: 63:6d:d9:0b:cb:23:f9:7f:a9:5a:8c:5d:ef:c2:46:9d:c9:bd: 0e:f2:d2:b5:b4:e9:02:c8:1c:ee:8d:28:44:8a:c8:f5:40:83: 1c:94:c6:24:4e:2e:f2:49:45:b6:b9:f6:04:e4:5f:42:cb:ad: 15:30:a7:39:c3:53:23:fb:99:02:fe:7d:01:15:be:43:02:76: 6f:7b:2f:d4:d3:86:20:b0:16:fb:43:07:18:e7:68:95:7c:dd: 4b:d9:c0:b9:e9:d0:27:e4:18:f1:ba:0d:5b:16:ab:3c:81:40: 35:1a:5f:e1:d9:f0:26:59:87:54:78:08:cd:73:f8:c9:d9:98: 08:00:c1:84:0b:35:01:84:0f:8d:14:0a:7d:de:47:cf:16:6d: 05:5d:35:69:6c:c4:76:47:16:3a:22:41:72:2f:f8:6f:a0:b9: 9a:50:82:04:71:a1:d9:a5:56:c5:8a:19:9c:14:9e:17:9a:8e: 15:4f:b6:6e:d8:a3:72:3d:95:71:f3:f9:f4:16:3b:eb:41:0e: 47:61:3d:62:6a:e4:e3:59:6f:60:8a:9e:c2:b3:df:02:33:07: 47:38:ad:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0f6V77BZUsM1oHqHDzqBhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMTdkZTE4ODdmY2ZhOTI0NGI5MzFkOTZkYTgyNjc4YzAx NDc2NjMwHhcNMjUxMjMxMTMwMTIwWhcNMjYwMTAxMTMwMTIwWjAzMTEwLwYDVQQD EygyZTlkNTlhMTk4ZGJmZWQ3YTU4NTdhYzdkZDg1MDI2NGJiNmM0NzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IsNHB3jv+fYsoIkIMuZ+vftPtSq pmoPafMoWE7uZdNHaWd1m57c2ao34mQgMfuuZ72O3CvauVnlbfvqCKNelFYsGlFb mZc7xCr00RqfTbvvUbPwg1WlCx3yzmMkZzd9NN7b0QIWVXbgG9yK80G+jUEGkQfW zpbVSrYS3ll/whiZJn+OhiEe/8JGQGl+dTx9ykiHMgULodUcHmYsIWM7KgYXZpjx DkPJ2dxyq8qonmhSeoT7cU33LfId/PY1TWNONUK/OBQ+1gwgxwAeAvp0MG+iPTai gpIJxElz+4sKGHsFIvh017/fQwFuiLrq8WVJsULLmTXT8hGfzhj7LadJuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6dWaGY2/7XpYV6x92FAmS7bEdWMB8GA1UdIwQY MBaAFGoX3hiH/PqSRLkx2W2oJnjAFHZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lYzI1YmQtMjE5ZS00ZDAyLWE1MzIt MDc5OWE1MmE2Mzg3LzEvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9lYzI1YmQtMjE5ZS00ZDAyLWE1MzItMDc5OWE1MmE2Mzg3 LzEvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMa8Jbvw2 twyBjEIG0x/EfY7aBQKpGs3Ga3o2CLnc7iw8xN3bY23ZC8sj+X+pWoxd78JGncm9 DvLStbTpAsgc7o0oRIrI9UCDHJTGJE4u8klFtrn2BORfQsutFTCnOcNTI/uZAv59 ARW+QwJ2b3sv1NOGILAW+0MHGOdolXzdS9nAuenQJ+QY8boNWxarPIFANRpf4dnw JlmHVHgIzXP4ydmYCADBhAs1AYQPjRQKfd5HzxZtBV01aWzEdkcWOiJBci/4b6C5 mlCCBHGh2aVWxYoZnBSeF5qOFU+2btijcj2VcfP59BY760EOR2E9Ymrk41lvYIqe wrPfAjMHRzitkQ== -----END CERTIFICATE-----Generated at Wed Dec 31 23:04:29 2025 by rpki-client