This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft File: AMAJiEz5L9xqDS6hJ7619MyMDcc.mft (raw, json) Hash identifier: /FCvr5uhXrAgKr92GJQSUxBaHNafJszhoF5m9ryLS1w= Subject key identifier: BA:28:A5:37:18:6C:63:4D:E1:1D:9C:73:0B:11:E1:EE:7C:50:69:DC Authority key identifier: 00:C0:09:88:4C:F9:2F:DC:6A:0D:2E:A1:27:BE:B5:F4:CC:8C:0D:C7 Certificate issuer: /CN=00c009884cf92fdc6a0d2ea127beb5f4cc8c0dc7 Certificate serial: 019B7B93EC96A37661EA3123084E4F91F942 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft Manifest number: 1709 Signing time: Thu 01 Jan 2026 22:00:50 +0000 Manifest this update: Thu 01 Jan 2026 22:00:50 +0000 Manifest next update: Fri 02 Jan 2026 22:00:50 +0000 Files and hashes: 1: AMAJiEz5L9xqDS6hJ7619MyMDcc.crl (hash: YfvBEAjq80HLeMQhZsAsSujGfd9V7XstLNqo2FQ0RUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:93:ec:96:a3:76:61:ea:31:23:08:4e:4f:91:f9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00c009884cf92fdc6a0d2ea127beb5f4cc8c0dc7 Validity Not Before: Jan 1 22:00:50 2026 GMT Not After : Jan 2 22:00:50 2026 GMT Subject: CN=ba28a537186c634de11d9c730b11e1ee7c5069dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:40:f0:15:39:78:86:fa:45:f8:df:c3:9c:23: 62:3e:cd:6f:44:a4:9a:b4:7a:8c:1d:3f:b1:dc:ce: 55:1b:e4:f7:43:4a:ff:82:10:ca:b5:80:e3:cc:d2: 7b:8b:7a:d5:24:9a:99:67:72:d1:10:07:85:b5:a6: fc:83:1f:01:4e:99:e9:c8:1a:39:49:b2:21:67:de: 35:e8:e1:25:13:4f:1e:be:4e:77:84:20:8f:9f:70: 0a:29:e2:c1:92:7e:71:3d:a0:65:95:02:f8:b6:68: 15:8e:fc:ad:20:31:21:c8:51:a9:26:ad:23:66:07: 07:25:45:7f:9c:1f:20:bd:c6:33:6b:74:bd:d6:0d: ca:1b:e5:40:4d:15:31:d8:39:74:a8:96:a8:e7:6f: 87:b1:35:a1:31:60:f0:d2:b6:2a:a7:1f:ea:c0:1c: 6f:fd:a4:fe:25:a4:c1:70:1c:dc:83:f0:b3:a8:ac: 3d:ab:83:25:b5:83:d6:c5:b5:60:ef:d6:be:29:73: 37:31:be:e9:47:00:80:83:2a:af:14:5f:9d:34:d8: 81:29:5f:ba:b9:c5:dc:27:65:62:47:75:2b:b7:c2: 33:78:99:fc:a4:21:2d:ab:13:5d:1d:b8:a7:86:ec: d6:43:dd:68:87:3b:4a:ed:a3:8a:e1:d6:5f:34:27: 2c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:28:A5:37:18:6C:63:4D:E1:1D:9C:73:0B:11:E1:EE:7C:50:69:DC X509v3 Authority Key Identifier: keyid:00:C0:09:88:4C:F9:2F:DC:6A:0D:2E:A1:27:BE:B5:F4:CC:8C:0D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c3:eb:72:25:11:c5:bd:28:a7:81:69:25:a1:c4:e3:e3:dd: 51:4c:9a:61:51:d6:98:fd:b1:ab:a1:b5:7b:92:e6:2c:88:1a: d5:1b:1f:01:3a:68:6d:6b:b7:6d:2c:14:1b:b2:c7:ea:f4:dc: 94:d1:2c:ef:05:81:8b:d9:b1:ac:82:63:12:ff:a0:df:ea:cb: ff:7d:f7:4b:e7:fc:8f:b6:c6:e8:38:3c:94:59:4d:01:02:aa: 7c:26:60:02:1b:c7:0f:10:cd:71:d6:b3:75:97:31:0b:a8:46: 33:ef:06:c7:93:62:54:53:03:61:47:6d:eb:b7:d2:14:8b:9b: 95:16:62:33:e8:05:9f:37:fc:7a:cb:f2:38:71:fa:24:9c:d5: 44:68:9e:1a:5e:b8:db:ad:6b:f3:c2:eb:34:c9:f8:32:89:b3: e1:34:93:43:7b:4b:9d:ca:b1:3b:7f:35:b1:62:ff:87:ed:84: cc:03:ad:8b:83:90:41:de:f9:b5:46:9b:a5:8f:35:40:6b:33: dd:33:0c:c9:34:82:09:c8:59:78:6c:89:a6:3c:fe:71:1a:82: e4:98:27:cd:67:31:0c:e6:9a:11:c0:46:ee:c0:45:31:79:10: be:c5:14:67:17:f3:e3:5e:48:2a:0b:d9:d7:f7:1f:28:b1:dd: 86:44:db:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt7k+yWo3Zh6jEjCE5PkflCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYzAwOTg4NGNmOTJmZGM2YTBkMmVhMTI3YmViNWY0Y2M4 YzBkYzcwHhcNMjYwMTAxMjIwMDUwWhcNMjYwMTAyMjIwMDUwWjAzMTEwLwYDVQQD EyhiYTI4YTUzNzE4NmM2MzRkZTExZDljNzMwYjExZTFlZTdjNTA2OWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUDwFTl4hvpF+N/DnCNiPs1vRKSa tHqMHT+x3M5VG+T3Q0r/ghDKtYDjzNJ7i3rVJJqZZ3LREAeFtab8gx8BTpnpyBo5 SbIhZ9416OElE08evk53hCCPn3AKKeLBkn5xPaBllQL4tmgVjvytIDEhyFGpJq0j ZgcHJUV/nB8gvcYza3S91g3KG+VATRUx2Dl0qJao52+HsTWhMWDw0rYqpx/qwBxv /aT+JaTBcBzcg/CzqKw9q4MltYPWxbVg79a+KXM3Mb7pRwCAgyqvFF+dNNiBKV+6 ucXcJ2ViR3Urt8IzeJn8pCEtqxNdHbinhuzWQ91ohztK7aOK4dZfNCcsoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoopTcYbGNN4R2ccwsR4e58UGncMB8GA1UdIwQY MBaAFADACYhM+S/cag0uoSe+tfTMjA3HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU1BSmlFejVMOXhxRFM2aEo3NjE5TXlNRGNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yNzc1NDgtZGRiZi00MDlhLTgyY2Ut ZGM2NmNiOTI5NjdjLzEvQU1BSmlFejVMOXhxRFM2aEo3NjE5TXlNRGNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yNzc1NDgtZGRiZi00MDlhLTgyY2UtZGM2NmNiOTI5Njdj LzEvQU1BSmlFejVMOXhxRFM2aEo3NjE5TXlNRGNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsPrciUR xb0op4FpJaHE4+PdUUyaYVHWmP2xq6G1e5LmLIga1RsfATpobWu3bSwUG7LH6vTc lNEs7wWBi9mxrIJjEv+g3+rL/333S+f8j7bG6Dg8lFlNAQKqfCZgAhvHDxDNcdaz dZcxC6hGM+8Gx5NiVFMDYUdt67fSFIublRZiM+gFnzf8esvyOHH6JJzVRGieGl64 261r88LrNMn4Momz4TSTQ3tLncqxO381sWL/h+2EzAOti4OQQd75tUabpY81QGsz 3TMMyTSCCchZeGyJpjz+cRqC5JgnzWcxDOaaEcBG7sBFMXkQvsUUZxfz415IKgvZ 1/cfKLHdhkTbrw== -----END CERTIFICATE-----Generated at Fri Jan 2 08:15:08 2026 by rpki-client