This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json) Hash identifier: 2/pA7BGKYrgli4ydP0zV/k2fUwAKJOtbi9BdiG17oZo= Subject key identifier: DC:76:88:0B:5F:1F:9F:60:53:77:77:63:30:FC:EA:43:C5:A6:E0:E2 Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6 Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6 Certificate serial: 019B5D895322673FBABEA442D3897D377FB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft Manifest number: 11B5 Signing time: Sat 27 Dec 2025 02:00:39 +0000 Manifest this update: Sat 27 Dec 2025 02:00:39 +0000 Manifest next update: Sun 28 Dec 2025 02:00:39 +0000 Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: DCxojF9LKQpz3ZFGSSq6OYM7cWck2bn/z+PDDusGrLA=) 2: QQdNezXcd1-hIhXGU4Qn8ucBV9Q.roa (hash: WaSlkfe1MwojG0zscntSp+2Lok4NRbwf50hshXXL8jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 02:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:53:22:67:3f:ba:be:a4:42:d3:89:7d:37:7f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00933848021d3888860dadf7188094d792af6ae6 Validity Not Before: Dec 27 02:00:39 2025 GMT Not After : Dec 28 02:00:39 2025 GMT Subject: CN=dc76880b5f1f9f605377776330fcea43c5a6e0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:c0:08:65:b2:0f:8f:c7:52:f8:10:33:6e: aa:f6:cb:d8:da:a3:6f:51:ae:c5:8e:5f:0a:6f:6e: d3:f9:66:4d:55:2d:25:8d:14:e1:a4:c2:b3:52:46: a3:bb:a8:cb:0d:e1:27:1b:00:f9:78:3d:0a:36:de: b6:16:a1:f0:80:95:50:37:71:a8:1f:b4:79:1b:d1: a7:90:60:3a:f6:87:52:fb:67:b2:6a:20:23:5d:d6: 5a:4d:9c:02:05:cf:4b:73:c2:81:7c:85:05:e7:51: 10:21:4d:5c:97:5a:02:ea:9a:6f:86:93:05:12:fb: 99:7d:05:d9:b6:77:38:8b:a6:ed:1f:b6:b7:c8:e4: b6:0d:16:c1:5f:f5:b8:40:0b:f4:f4:f8:60:8e:2f: 85:e2:18:b7:08:dd:f0:20:16:27:83:5b:8f:3f:ea: 4d:a0:8c:9f:bb:ed:f6:a4:44:8d:36:1b:73:e8:bd: 96:05:f5:5a:73:68:e2:d2:18:49:ef:ec:e8:4b:fd: f3:3f:95:86:19:d1:9a:fc:c2:0d:f3:d2:bf:8a:e6: 7a:0b:15:b2:6b:cc:09:a6:6b:6c:43:e8:65:a7:99: b4:53:b5:c2:ba:5a:51:ec:0e:f4:90:4b:2c:33:f0: 87:64:4c:f9:8c:bf:0c:4b:4d:8b:84:55:58:39:6c: a1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:76:88:0B:5F:1F:9F:60:53:77:77:63:30:FC:EA:43:C5:A6:E0:E2 X509v3 Authority Key Identifier: keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f5:3d:99:a7:b4:60:a3:79:d0:0f:e9:e1:38:cb:26:15:2f: 6a:39:cd:92:81:95:b3:bc:68:fc:3f:d5:87:cd:68:8b:aa:7d: f6:d2:68:63:54:84:f2:f0:10:be:01:8a:ae:16:bb:37:01:f8: 1e:bb:8b:85:ea:0c:e2:54:18:e3:02:2c:37:6e:02:e1:ab:22: f7:f6:2c:8a:f5:55:1f:5f:13:29:87:c0:47:d1:a6:60:3c:ac: da:07:e1:59:f5:1f:2b:f2:8c:44:71:95:be:85:a4:af:8f:8b: c1:ab:c4:3d:b5:89:2a:e6:8e:f6:0d:c5:c7:f8:68:28:89:08: b0:61:0b:7d:19:99:72:ab:d2:e8:7f:48:fe:56:3c:4d:76:b9: 6e:cd:d3:2c:18:18:73:81:29:70:9c:53:21:b2:25:6a:45:5c: 96:fa:57:7e:5f:8d:ba:21:24:bb:37:8f:b6:94:a8:e8:bc:ed: 4a:eb:a1:ce:03:4d:b3:c4:60:1e:1b:86:8d:a8:17:a5:22:4a: 34:02:56:45:e2:0c:4c:9e:04:74:ae:ec:f7:e2:6c:46:9c:9c: da:1d:52:22:06:04:d0:9e:08:21:2d:8c:e0:b8:b4:97:93:8a: fe:f1:20:f4:67:38:36:7e:4c:c4:f6:fb:f9:9c:af:b0:20:30: 55:3a:11:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdiVMiZz+6vqRC04l9N3+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOTMzODQ4MDIxZDM4ODg4NjBkYWRmNzE4ODA5NGQ3OTJh ZjZhZTYwHhcNMjUxMjI3MDIwMDM5WhcNMjUxMjI4MDIwMDM5WjAzMTEwLwYDVQQD EyhkYzc2ODgwYjVmMWY5ZjYwNTM3Nzc3NjMzMGZjZWE0M2M1YTZlMGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQPACGWyD4/HUvgQM26q9svY2qNv Ua7Fjl8Kb27T+WZNVS0ljRThpMKzUkaju6jLDeEnGwD5eD0KNt62FqHwgJVQN3Go H7R5G9GnkGA69odS+2eyaiAjXdZaTZwCBc9Lc8KBfIUF51EQIU1cl1oC6ppvhpMF EvuZfQXZtnc4i6btH7a3yOS2DRbBX/W4QAv09Phgji+F4hi3CN3wIBYng1uPP+pN oIyfu+32pESNNhtz6L2WBfVac2ji0hhJ7+zoS/3zP5WGGdGa/MIN89K/iuZ6CxWy a8wJpmtsQ+hlp5m0U7XCulpR7A70kEssM/CHZEz5jL8MS02LhFVYOWyh7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNx2iAtfH59gU3d3YzD86kPFpuDiMB8GA1UdIwQY MBaAFACTOEgCHTiIhg2t9xiAlNeSr2rmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84Njc2MmItYWE2MS00ODRhLWIxNTkt OTdmMzliYjEzMzJkLzEvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84Njc2MmItYWE2MS00ODRhLWIxNTktOTdmMzliYjEzMzJk LzEvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvU9mae0 YKN50A/p4TjLJhUvajnNkoGVs7xo/D/Vh81oi6p99tJoY1SE8vAQvgGKrha7NwH4 HruLheoM4lQY4wIsN24C4asi9/YsivVVH18TKYfAR9GmYDys2gfhWfUfK/KMRHGV voWkr4+LwavEPbWJKuaO9g3Fx/hoKIkIsGELfRmZcqvS6H9I/lY8TXa5bs3TLBgY c4EpcJxTIbIlakVclvpXfl+NuiEkuzePtpSo6LztSuuhzgNNs8RgHhuGjagXpSJK NAJWReIMTJ4EdK7s9+JsRpyc2h1SIgYE0J4IIS2M4Li0l5OK/vEg9Gc4Nn5MxPb7 +ZyvsCAwVToRdw== -----END CERTIFICATE-----Generated at Sat Dec 27 10:04:12 2025 by rpki-client