This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json) Hash identifier: Au21riCu7z0wnH12biM5GSh2Y4qGyzyCh4qwcg+QPoc= Subject key identifier: 94:FA:48:CA:64:F4:6C:F3:52:D0:C9:99:77:7E:99:87:6F:0D:6F:DB Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6 Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6 Certificate serial: 019B74B5C882A4E064DCAE29B9731A012FE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft Manifest number: 11C1 Signing time: Wed 31 Dec 2025 14:00:28 +0000 Manifest this update: Wed 31 Dec 2025 14:00:28 +0000 Manifest next update: Thu 01 Jan 2026 14:00:28 +0000 Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: +QDT1sQVDnuBXbgJ0jTo5dT7p1qhXVFBn1rk6oDAr7Q=) 2: QQdNezXcd1-hIhXGU4Qn8ucBV9Q.roa (hash: WaSlkfe1MwojG0zscntSp+2Lok4NRbwf50hshXXL8jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 14:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:b5:c8:82:a4:e0:64:dc:ae:29:b9:73:1a:01:2f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00933848021d3888860dadf7188094d792af6ae6 Validity Not Before: Dec 31 14:00:28 2025 GMT Not After : Jan 1 14:00:28 2026 GMT Subject: CN=94fa48ca64f46cf352d0c999777e99876f0d6fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ed:13:05:37:e0:2d:b2:b5:a5:29:c5:68:1d: 42:1c:dc:bc:35:ee:da:e3:3b:23:95:ef:67:b8:cc: b9:a4:e9:c8:e5:ac:ad:21:48:32:3f:89:16:66:70: a8:4f:5c:8b:01:d6:99:c5:fd:6c:2b:ec:f0:3d:c0: d1:ec:30:5f:58:ec:86:aa:34:60:29:98:0d:b8:83: 40:e6:3a:3b:20:d6:8b:7d:d2:c3:70:c1:bd:f4:5b: 6f:b7:fb:d2:87:3b:21:89:a1:82:30:49:ac:82:60: c6:36:72:b1:9c:cc:59:68:e8:44:58:46:4e:5f:db: a2:d0:a6:45:a8:67:88:bf:fb:c3:a1:ae:a8:cc:fe: 5f:ec:07:7e:47:a9:d7:a8:cb:31:3d:55:ed:f8:53: f5:12:f1:5f:6c:63:8b:39:e4:6f:eb:c3:e3:01:18: 9b:23:28:bf:34:95:5b:5a:5a:32:fb:1c:96:35:89: 3e:01:a7:be:49:85:a7:ab:8a:fe:cc:e2:af:9b:aa: ea:06:c3:83:a1:a8:09:4a:7f:69:64:6a:fc:97:6d: cc:ed:52:fe:43:81:60:78:b2:25:03:e0:8b:da:38: 05:84:5a:91:ab:2e:74:56:8e:e6:cd:ed:3d:b0:e1: b1:bf:1d:c0:30:de:6c:6e:6b:5a:8c:eb:92:7c:78: e6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FA:48:CA:64:F4:6C:F3:52:D0:C9:99:77:7E:99:87:6F:0D:6F:DB X509v3 Authority Key Identifier: keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3a:8e:8a:78:1e:63:4e:73:87:b2:66:cd:cb:48:d9:8f:de: ca:24:9f:02:79:a5:66:4f:cc:f2:55:ae:95:57:57:fa:4a:ef: fb:2f:65:a7:fd:5e:2c:68:05:96:ab:62:99:5e:25:77:eb:da: 08:c1:9f:12:2c:48:cd:db:f0:64:09:83:f2:7e:32:bd:18:3c: 49:5f:8f:6c:ed:5f:de:ff:ab:40:2e:47:83:63:8f:33:c3:24: 52:c1:e5:67:71:76:af:4a:1f:3d:30:fb:86:f3:2d:28:ba:27: fe:88:22:cd:28:f7:b4:76:b4:dd:05:fa:d9:a3:84:95:e0:96: 41:ee:3d:b9:3e:c4:b8:73:17:06:03:bd:14:70:6b:b1:81:36: 59:6d:dc:ff:89:7c:75:e1:ac:cd:b8:3f:a8:0e:53:19:67:2d: 18:b3:75:f2:32:67:7a:5c:63:d8:d6:0f:34:de:8e:8d:16:da: ad:0a:2a:96:72:d5:92:b6:05:5c:b7:b6:3e:d7:9d:05:33:d7: 38:8b:d8:1b:42:bb:3e:c0:11:b0:7e:48:84:80:f8:4f:2b:e6: 99:91:9d:30:83:9b:f0:84:00:1f:2d:65:21:e4:b8:2a:47:d2: 61:74:9e:7b:89:d5:91:7f:fc:06:f9:08:bc:ad:58:b4:9c:7a: ed:12:bd:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0tciCpOBk3K4puXMaAS/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOTMzODQ4MDIxZDM4ODg4NjBkYWRmNzE4ODA5NGQ3OTJh ZjZhZTYwHhcNMjUxMjMxMTQwMDI4WhcNMjYwMTAxMTQwMDI4WjAzMTEwLwYDVQQD Eyg5NGZhNDhjYTY0ZjQ2Y2YzNTJkMGM5OTk3NzdlOTk4NzZmMGQ2ZmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu0TBTfgLbK1pSnFaB1CHNy8Ne7a 4zsjle9nuMy5pOnI5aytIUgyP4kWZnCoT1yLAdaZxf1sK+zwPcDR7DBfWOyGqjRg KZgNuINA5jo7INaLfdLDcMG99Ftvt/vShzshiaGCMEmsgmDGNnKxnMxZaOhEWEZO X9ui0KZFqGeIv/vDoa6ozP5f7Ad+R6nXqMsxPVXt+FP1EvFfbGOLOeRv68PjARib Iyi/NJVbWloy+xyWNYk+Aae+SYWnq4r+zOKvm6rqBsODoagJSn9pZGr8l23M7VL+ Q4FgeLIlA+CL2jgFhFqRqy50Vo7mze09sOGxvx3AMN5sbmtajOuSfHjmnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJT6SMpk9GzzUtDJmXd+mYdvDW/bMB8GA1UdIwQY MBaAFACTOEgCHTiIhg2t9xiAlNeSr2rmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84Njc2MmItYWE2MS00ODRhLWIxNTkt OTdmMzliYjEzMzJkLzEvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84Njc2MmItYWE2MS00ODRhLWIxNTktOTdmMzliYjEzMzJk LzEvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjqOinge Y05zh7JmzctI2Y/eyiSfAnmlZk/M8lWulVdX+krv+y9lp/1eLGgFlqtimV4ld+va CMGfEixIzdvwZAmD8n4yvRg8SV+PbO1f3v+rQC5Hg2OPM8MkUsHlZ3F2r0ofPTD7 hvMtKLon/ogizSj3tHa03QX62aOEleCWQe49uT7EuHMXBgO9FHBrsYE2WW3c/4l8 deGszbg/qA5TGWctGLN18jJnelxj2NYPNN6OjRbarQoqlnLVkrYFXLe2PtedBTPX OIvYG0K7PsARsH5IhID4TyvmmZGdMIOb8IQAHy1lIeS4KkfSYXSee4nVkX/8BvkI vK1YtJx67RK9hw== -----END CERTIFICATE-----Generated at Wed Dec 31 21:06:18 2025 by rpki-client