This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json) Hash identifier: 8Pjg1/F5Zr/g39wQrfXXSWpHxL/DgzG1QI3nH99xa/s= Subject key identifier: CB:C9:79:80:17:9D:60:F4:98:94:10:D2:A8:F3:07:4C:99:78:15:26 Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f Certificate serial: 019B4582062533E378196F1381BC721675D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft Manifest number: 0853 Signing time: Mon 22 Dec 2025 10:01:47 +0000 Manifest this update: Mon 22 Dec 2025 10:01:47 +0000 Manifest next update: Tue 23 Dec 2025 10:01:47 +0000 Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: G3LXeypkxWjZKfrP3ZH014+NETDCBsDAOL2LW19UihM=) 2: F2c_uapmp4EWBvth9YsoExmggYE.roa (hash: F+OHkAH0cbjuGBPEpniF6/AR3wbSHhM+96aLypnHnng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:82:06:25:33:e3:78:19:6f:13:81:bc:72:16:75:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f Validity Not Before: Dec 22 10:01:47 2025 GMT Not After : Dec 23 10:01:47 2025 GMT Subject: CN=cbc97980179d60f4989410d2a8f3074c99781526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f0:6d:80:c0:bd:11:4a:eb:52:a9:00:e6:7a: 77:42:57:a8:29:6f:10:22:46:a8:c7:8f:37:82:e1: 74:7b:54:8e:be:d7:ca:ce:ee:3d:28:2d:00:69:2d: bd:52:31:2a:a5:9b:d1:41:e4:4b:44:7c:d0:3f:c7: d5:03:38:0d:09:c5:ac:0c:98:8b:c0:be:e6:8c:90: b3:41:40:f7:cf:25:35:36:d8:5a:23:1f:88:aa:27: ce:b3:90:d1:05:e8:a8:9e:28:3d:21:01:65:2c:50: e7:4e:db:9c:25:49:33:5c:fd:23:92:22:97:a7:db: de:ee:5e:6b:fb:c0:ce:9a:b6:84:fb:c6:9e:33:fd: 42:3b:49:d4:06:00:f1:21:7f:62:b5:e4:bd:41:28: 64:33:ca:78:b2:b1:00:98:5e:f0:5d:43:8d:0c:46: b4:e9:95:6e:6b:54:a3:7e:8c:ec:b6:28:e2:af:c6: bb:84:aa:56:bf:eb:1d:fd:3b:cd:d5:59:17:0f:6b: 56:7f:ff:d3:a7:7a:e4:ce:8b:8a:d1:75:fb:9e:2c: 0c:73:82:e2:a8:76:8d:5f:9f:08:23:05:40:09:64: 63:d5:28:81:72:16:2e:24:e1:85:d9:d9:26:34:11: 9d:2e:8e:cb:fa:cb:fb:15:28:56:1c:71:12:7f:b1: fc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C9:79:80:17:9D:60:F4:98:94:10:D2:A8:F3:07:4C:99:78:15:26 X509v3 Authority Key Identifier: keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:af:1a:e6:7e:93:8e:9b:65:e1:a9:5b:40:10:3b:25:1c:cd: 36:0d:09:6c:bf:d6:e6:e0:20:e7:02:0a:2d:e0:15:02:e2:c6: 7d:c9:be:75:94:89:38:91:77:d8:2c:89:2f:d9:9f:36:86:35: 84:7e:9e:b6:36:0b:09:4a:42:97:8b:12:70:2a:77:29:c4:8f: 98:eb:95:46:16:9a:bf:52:d8:fa:4a:42:c7:bb:88:6e:fd:8b: a6:82:1d:20:e3:a4:56:0a:f4:5c:48:17:19:67:29:9a:34:bd: 54:89:15:a3:94:74:f5:87:2e:6a:1d:d8:65:e8:c1:e5:74:c3: 2e:65:dd:48:cb:fd:c8:1b:e5:f8:ad:90:93:8c:d5:8e:cb:18: 81:c9:c7:ab:e6:2e:4b:38:1f:10:db:bb:0f:9d:7c:c2:44:80: 38:48:f9:ac:44:bc:88:00:47:e8:2f:1e:a6:2b:78:17:12:fb: c9:0f:ea:8f:ad:30:ef:9e:d2:ed:ed:de:cd:a4:e9:69:f0:6c: 83:db:2d:14:d3:ab:22:58:df:18:37:1c:65:c9:8b:30:2b:8d: 57:7a:ad:ee:54:00:1b:8c:37:5a:ae:ef:f2:10:6b:76:f0:ab: e8:9b:0f:c6:27:29:f1:6e:e3:8d:33:f8:38:11:65:19:d8:ec: 37:20:ad:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFggYlM+N4GW8TgbxyFnXWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMmU3NmU4OTk0YjY2NjEzNzQ4ZTAyMWI1ZjQwMDdmMDFi NTRkNGYwHhcNMjUxMjIyMTAwMTQ3WhcNMjUxMjIzMTAwMTQ3WjAzMTEwLwYDVQQD EyhjYmM5Nzk4MDE3OWQ2MGY0OTg5NDEwZDJhOGYzMDc0Yzk5NzgxNTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vBtgMC9EUrrUqkA5np3QleoKW8Q Ikaox483guF0e1SOvtfKzu49KC0AaS29UjEqpZvRQeRLRHzQP8fVAzgNCcWsDJiL wL7mjJCzQUD3zyU1NthaIx+IqifOs5DRBeionig9IQFlLFDnTtucJUkzXP0jkiKX p9ve7l5r+8DOmraE+8aeM/1CO0nUBgDxIX9iteS9QShkM8p4srEAmF7wXUONDEa0 6ZVua1Sjfozstijir8a7hKpWv+sd/TvN1VkXD2tWf//Tp3rkzouK0XX7niwMc4Li qHaNX58IIwVACWRj1SiBchYuJOGF2dkmNBGdLo7L+sv7FShWHHESf7H8AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvJeYAXnWD0mJQQ0qjzB0yZeBUmMB8GA1UdIwQY MBaAFAIuduiZS2ZhN0jgIbX0AH8BtU1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjIt OTcxYjBjMDY1NDYwLzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjItOTcxYjBjMDY1NDYw LzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOK8a5n6T jptl4albQBA7JRzNNg0JbL/W5uAg5wIKLeAVAuLGfcm+dZSJOJF32CyJL9mfNoY1 hH6etjYLCUpCl4sScCp3KcSPmOuVRhaav1LY+kpCx7uIbv2LpoIdIOOkVgr0XEgX GWcpmjS9VIkVo5R09Ycuah3YZejB5XTDLmXdSMv9yBvl+K2Qk4zVjssYgcnHq+Yu SzgfENu7D518wkSAOEj5rES8iABH6C8epit4FxL7yQ/qj60w757S7e3ezaTpafBs g9stFNOrIljfGDccZcmLMCuNV3qt7lQAG4w3Wq7v8hBrdvCr6JsPxicp8W7jjTP4 OBFlGdjsNyCt0A== -----END CERTIFICATE-----Generated at Mon Dec 22 16:08:21 2025 by rpki-client