This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json) Hash identifier: vE9PRVyPE5l+yvNR/BNCofXUA2XNZaAuItruDtjUdJ8= Subject key identifier: AD:5C:DE:CD:1E:87:07:B7:05:7D:44:12:A7:C3:23:80:EB:D1:65:BA Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f Certificate serial: 019B5E9C9A04CCAD86A05240454553919766 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft Manifest number: 0860 Signing time: Sat 27 Dec 2025 07:01:19 +0000 Manifest this update: Sat 27 Dec 2025 07:01:19 +0000 Manifest next update: Sun 28 Dec 2025 07:01:19 +0000 Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: BaJsccRYp2fVM0PQf/jObCIZgJhsZP9ofN4YrAB1Yt0=) 2: F2c_uapmp4EWBvth9YsoExmggYE.roa (hash: F+OHkAH0cbjuGBPEpniF6/AR3wbSHhM+96aLypnHnng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 07:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:9c:9a:04:cc:ad:86:a0:52:40:45:45:53:91:97:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f Validity Not Before: Dec 27 07:01:19 2025 GMT Not After : Dec 28 07:01:19 2025 GMT Subject: CN=ad5cdecd1e8707b7057d4412a7c32380ebd165ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:01:71:cd:86:de:97:a4:94:05:96:c2:6f:c9: e9:da:a9:b3:46:79:50:35:5f:6d:7f:ad:9e:ed:b5: 59:78:40:0f:7a:bb:27:d3:4e:65:c7:07:56:14:b2: ce:ab:fd:53:29:73:aa:b8:ee:2f:0b:07:4a:0d:61: 15:4d:97:85:a4:f0:97:01:2e:32:0f:94:b9:c0:22: ad:73:99:84:7b:72:a7:ea:e5:2b:96:6a:98:ec:e4: 20:f1:85:ce:1a:ba:cf:23:d2:a9:34:02:bc:c9:62: 36:20:a6:e1:f1:7c:38:ff:f6:84:c4:44:3d:a5:6c: d8:21:d8:4c:4c:90:a4:d3:ee:f2:5a:a7:72:ae:f0: e4:aa:35:e2:22:ee:64:a1:71:69:f0:f6:6d:e7:ae: d8:0f:f8:68:e2:d9:ec:4e:5e:0f:0e:bd:74:48:89: a7:31:6c:3c:bf:09:49:2e:85:a3:87:db:2a:a6:9c: cc:e1:9c:2f:3c:19:ec:59:ed:90:4b:eb:f2:61:e1: db:bd:de:28:80:03:db:93:c4:11:0e:3f:89:a0:97: bc:46:67:48:f1:76:4d:ba:fe:e5:54:43:e5:5d:39: b5:ce:e5:0b:05:a0:00:5e:5c:65:56:63:e2:96:91: 73:1c:4c:bd:72:eb:49:d8:a5:ef:f7:fc:08:6a:7d: 20:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5C:DE:CD:1E:87:07:B7:05:7D:44:12:A7:C3:23:80:EB:D1:65:BA X509v3 Authority Key Identifier: keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:5e:c7:a1:db:60:f0:ee:e8:c2:ba:c0:3c:82:3d:88:5d:96: e8:fa:5a:36:89:da:96:59:64:86:4e:fb:27:ae:7b:9c:50:65: ff:9c:30:99:cb:a6:6b:05:c7:7a:6d:35:c0:14:0f:bd:22:f4: 8c:91:d5:e5:e9:f3:ae:ac:a3:14:fd:29:c9:c0:d6:44:1f:2b: 2b:35:c9:90:6b:f4:78:fe:dd:54:40:c1:25:3b:9f:4e:b9:32: c3:36:32:72:a4:88:0c:d8:64:65:85:ff:b1:d2:25:4b:67:6f: 38:d1:0c:10:d1:06:f1:55:71:e0:dc:80:8b:ea:61:83:20:4c: 39:6d:88:3c:4b:e2:f7:c6:e0:6b:23:fd:09:55:4c:3f:e4:64: 3d:1a:ab:a5:4f:dd:31:9d:f0:58:4b:34:5e:fe:f7:b9:6d:d1: 7e:45:1d:e9:4b:13:2a:65:78:b2:28:e1:51:03:5b:fc:54:a4: 3b:c3:9b:c1:bb:7a:6d:e9:58:2e:22:19:d6:aa:da:6e:bf:35: 26:db:fa:46:f3:c8:55:bc:16:61:88:69:3e:22:b5:47:89:38: 6c:22:7a:0e:69:13:bb:91:0d:b4:e5:f2:06:5d:07:96:7b:bb: ff:b7:c7:3c:aa:87:35:56:f0:4c:1b:b8:1a:23:cd:e4:57:85: eb:56:5d:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtenJoEzK2GoFJARUVTkZdmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMmU3NmU4OTk0YjY2NjEzNzQ4ZTAyMWI1ZjQwMDdmMDFi NTRkNGYwHhcNMjUxMjI3MDcwMTE5WhcNMjUxMjI4MDcwMTE5WjAzMTEwLwYDVQQD EyhhZDVjZGVjZDFlODcwN2I3MDU3ZDQ0MTJhN2MzMjM4MGViZDE2NWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wFxzYbel6SUBZbCb8np2qmzRnlQ NV9tf62e7bVZeEAPersn005lxwdWFLLOq/1TKXOquO4vCwdKDWEVTZeFpPCXAS4y D5S5wCKtc5mEe3Kn6uUrlmqY7OQg8YXOGrrPI9KpNAK8yWI2IKbh8Xw4//aExEQ9 pWzYIdhMTJCk0+7yWqdyrvDkqjXiIu5koXFp8PZt567YD/ho4tnsTl4PDr10SImn MWw8vwlJLoWjh9sqppzM4ZwvPBnsWe2QS+vyYeHbvd4ogAPbk8QRDj+JoJe8RmdI 8XZNuv7lVEPlXTm1zuULBaAAXlxlVmPilpFzHEy9cutJ2KXv9/wIan0g/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1c3s0ehwe3BX1EEqfDI4Dr0WW6MB8GA1UdIwQY MBaAFAIuduiZS2ZhN0jgIbX0AH8BtU1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjIt OTcxYjBjMDY1NDYwLzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjItOTcxYjBjMDY1NDYw LzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM17Hodtg 8O7owrrAPII9iF2W6PpaNonalllkhk77J657nFBl/5wwmcumawXHem01wBQPvSL0 jJHV5enzrqyjFP0pycDWRB8rKzXJkGv0eP7dVEDBJTufTrkywzYycqSIDNhkZYX/ sdIlS2dvONEMENEG8VVx4NyAi+phgyBMOW2IPEvi98bgayP9CVVMP+RkPRqrpU/d MZ3wWEs0Xv73uW3RfkUd6UsTKmV4sijhUQNb/FSkO8Obwbt6belYLiIZ1qrabr81 Jtv6RvPIVbwWYYhpPiK1R4k4bCJ6DmkTu5ENtOXyBl0Hlnu7/7fHPKqHNVbwTBu4 GiPN5FeF61ZdBA== -----END CERTIFICATE-----Generated at Sat Dec 27 16:04:33 2025 by rpki-client