This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json) Hash identifier: pFWA0Yx+xvuts1fZdVQ1SZ0bTy7+9I6aQlV/OLAp56E= Subject key identifier: 72:14:F3:A8:93:74:3D:94:D5:36:E5:48:9D:09:4F:67:75:1A:6F:A5 Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b Certificate serial: 019B3E6CB7B689222C388CE893AB9CD6C8FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:01:10 +0000 Manifest this update: Sun 21 Dec 2025 01:01:10 +0000 Manifest next update: Mon 22 Dec 2025 01:01:10 +0000 Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: gUFBnNVTAuiEArNvWoKx/EICheCorWKretHuRDFPWWU=) 2: Oh-npebKNll7vvyYtRrj-cg_Nd4.roa (hash: VvG7KPmbGgCRtlU1cK6JWKQbIKFRicXjsb5mCW827Cs=) 3: dUHtzdOigEdCMJb0gXsKu7_CR9E.roa (hash: qHPvPZRfGsBNL2Al0WMsavpV3isIJ/xgOqxOV/q3Zgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:b7:b6:89:22:2c:38:8c:e8:93:ab:9c:d6:c8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0239ae11188088547eb3e523483cca98556c115b Validity Not Before: Dec 21 01:01:10 2025 GMT Not After : Dec 22 01:01:10 2025 GMT Subject: CN=7214f3a893743d94d536e5489d094f67751a6fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:05:27:54:6e:a6:de:fa:c0:f7:76:ab:b3:4a: b3:23:d9:02:27:59:bd:a9:03:94:69:d4:d7:06:9c: 13:70:55:d7:ff:46:31:67:4d:7a:4b:49:fd:f5:e4: d6:1e:20:f3:ba:ac:18:c0:d1:89:45:3f:fd:5f:14: 8c:4b:71:84:18:aa:aa:24:45:42:30:34:b3:69:bf: 52:65:db:23:53:87:92:1d:e7:7f:fa:f2:69:ed:5e: 3f:d3:f4:69:90:7b:09:58:c4:dc:7b:42:dc:00:35: 07:2a:18:5f:64:22:59:1f:2d:d1:57:4e:53:53:15: 83:a9:ba:cb:28:a9:5b:14:b7:eb:2e:34:3f:b5:55: b0:54:ff:be:bc:f7:24:7b:95:a4:01:6d:c2:3a:a8: 2b:c0:64:62:3d:27:4a:0c:15:d9:e6:8b:cd:04:d4: 7f:3c:2f:2e:71:41:09:78:df:31:15:81:43:cd:26: 7b:3f:e7:08:8f:b4:27:fd:93:27:a3:55:2f:20:52: 53:cb:7f:0c:8b:83:22:f0:11:e8:77:d4:5a:f9:fd: 57:1a:8f:37:18:e0:f2:7c:5d:af:92:60:dc:dc:56: a8:c9:8b:72:0d:1d:27:f9:0f:b9:c2:50:8f:d7:5f: 05:ba:b6:8f:23:9b:a9:45:07:eb:4d:50:4a:5e:30: 4d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:14:F3:A8:93:74:3D:94:D5:36:E5:48:9D:09:4F:67:75:1A:6F:A5 X509v3 Authority Key Identifier: keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a9:a4:f8:cf:dd:12:d8:a1:5b:6d:b6:19:fd:42:ea:64:e8: 17:fa:b5:2c:e9:6e:c4:22:98:05:b7:1c:bd:8d:6c:a0:ba:94: 29:8a:d8:02:fe:33:50:86:ab:a1:9d:ec:12:af:0a:74:89:73: 41:99:3b:bf:99:6e:b2:6e:f1:d2:2c:cc:e6:89:7b:71:fd:ae: 3a:55:44:3c:36:ec:40:30:64:ba:e1:66:14:0f:2a:cd:4d:41: 34:08:df:5f:b4:bc:88:89:e5:78:2d:26:1e:64:fc:cb:a5:76: 12:9c:b8:6a:e9:64:c2:14:54:f7:9a:90:e5:2b:aa:24:c9:43: 34:bb:21:9e:40:0b:eb:6b:b5:8c:e2:74:be:61:4e:3e:cc:60: 1c:0d:60:8c:ad:f5:f4:99:5f:86:23:70:38:9c:35:10:ac:68: e1:60:ca:7c:1e:d1:10:dd:75:bc:f9:26:b3:08:68:16:7a:fb: 94:2a:16:89:87:4b:61:75:80:b8:16:02:4b:90:13:52:ae:fc: 0f:fb:30:f3:94:5d:36:71:e8:e8:29:1a:d9:62:0a:fa:c7:ec: b9:9c:68:49:6e:62:53:d7:54:b9:7a:ac:f9:11:98:89:0e:08: 9f:14:82:f6:d5:7e:ed:6a:0a:10:17:63:f1:03:14:51:38:8f: 94:37:ed:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bLe2iSIsOIzok6uc1sj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzlhZTExMTg4MDg4NTQ3ZWIzZTUyMzQ4M2NjYTk4NTU2 YzExNWIwHhcNMjUxMjIxMDEwMTEwWhcNMjUxMjIyMDEwMTEwWjAzMTEwLwYDVQQD Eyg3MjE0ZjNhODkzNzQzZDk0ZDUzNmU1NDg5ZDA5NGY2Nzc1MWE2ZmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9QUnVG6m3vrA93ars0qzI9kCJ1m9 qQOUadTXBpwTcFXX/0YxZ016S0n99eTWHiDzuqwYwNGJRT/9XxSMS3GEGKqqJEVC MDSzab9SZdsjU4eSHed/+vJp7V4/0/RpkHsJWMTce0LcADUHKhhfZCJZHy3RV05T UxWDqbrLKKlbFLfrLjQ/tVWwVP++vPcke5WkAW3COqgrwGRiPSdKDBXZ5ovNBNR/ PC8ucUEJeN8xFYFDzSZ7P+cIj7Qn/ZMno1UvIFJTy38Mi4Mi8BHod9Ra+f1XGo83 GODyfF2vkmDc3FaoyYtyDR0n+Q+5wlCP118FuraPI5upRQfrTVBKXjBNowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIU86iTdD2U1TblSJ0JT2d1Gm+lMB8GA1UdIwQY MBaAFAI5rhEYgIhUfrPlI0g8yphVbBFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMt NjcyODBjOGJiYWI4LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMtNjcyODBjOGJiYWI4 LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6mk+M/d EtihW222Gf1C6mToF/q1LOluxCKYBbccvY1soLqUKYrYAv4zUIaroZ3sEq8KdIlz QZk7v5lusm7x0izM5ol7cf2uOlVEPDbsQDBkuuFmFA8qzU1BNAjfX7S8iInleC0m HmT8y6V2Epy4aulkwhRU95qQ5SuqJMlDNLshnkAL62u1jOJ0vmFOPsxgHA1gjK31 9JlfhiNwOJw1EKxo4WDKfB7REN11vPkmswhoFnr7lCoWiYdLYXWAuBYCS5ATUq78 D/sw85RdNnHo6Cka2WIK+sfsuZxoSW5iU9dUuXqs+RGYiQ4InxSC9tV+7WoKEBdj 8QMUUTiPlDftGQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:16:18 2025 by rpki-client