This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft File: Ahs-o17f3ROMFVBtdKdgIt03aUs.mft (raw, json) Hash identifier: 2I0E8ChJENqeD3f352sEWDPjUhBFdsJEonP332Qaiqs= Subject key identifier: 8A:4B:40:4E:FF:94:F4:9B:04:36:23:B9:28:92:98:21:14:AE:15:66 Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b Certificate serial: 019B3A218970680B49C747F7A64B90EF8328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 05:00:34 +0000 Manifest this update: Sat 20 Dec 2025 05:00:34 +0000 Manifest next update: Sun 21 Dec 2025 05:00:34 +0000 Files and hashes: 1: Ahs-o17f3ROMFVBtdKdgIt03aUs.crl (hash: SSQ3N0d1106Du3U+oTv71JpMesfDnlryL/bR0MYtA5Y=) 2: KAFC3cLT9QH5ScoLRsIonvwUhMU.roa (hash: whbGIDYtnScT7kdeeSbgI7fHOy+PdfaxJL9lQqTD7kk=) 3: M8dYp-L4dw1v-tRfvEaBeetOZDM.asa (hash: BxKqO0ZY48OCWqUnkol0bWVuXrmCWGF4F2EIRoXKyLI=) 4: aFjBtMgAkCdur0LAp1zKSd39ajk.roa (hash: k5sQSrUZApP+C12qAI5rWT2beBv2HXfS7efknu8qI8M=) 5: fc1Tc2Vdh2udhGPhrIhiUsNRmh8.roa (hash: an6cVXKMyV249udKkEMio/99yuvp5X9umnLVJSDoDVM=) 6: keIeKvMj5GFcFpqn4YnewTjX5AI.roa (hash: LybLvk7YVa5Nzz7hllr9jrHmTPWaVPacnhSof9pKAqc=) 7: n6Wyt3faNKWbYMKkn5PEP-ye3uo.roa (hash: dY4BYFMUjOYkYHFpRXEolqHG+4jJetToXOTWdXYn9Ao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:89:70:68:0b:49:c7:47:f7:a6:4b:90:ef:83:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b Validity Not Before: Dec 20 05:00:34 2025 GMT Not After : Dec 21 05:00:34 2025 GMT Subject: CN=8a4b404eff94f49b043623b92892982114ae1566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:33:9a:7d:34:3d:37:2b:fb:5b:ef:5d:d7:76: 4d:7b:c6:ed:e9:0e:79:cb:e0:8d:58:a5:1f:1e:e4: 73:80:42:59:06:7f:81:aa:fe:db:78:14:65:f3:8a: 0b:0d:cd:66:af:b8:c6:3d:e3:3e:0f:fa:28:87:f8: b7:fd:92:f4:dc:e9:4e:59:a7:59:09:39:e8:fc:f5: b4:8a:bc:a6:4e:91:fd:c3:56:ed:62:82:64:7c:b5: 76:fc:37:45:27:13:ba:6a:3e:82:08:c3:bf:66:b7: 5b:4e:02:7b:d1:e3:41:33:45:34:bc:ca:5a:2d:cc: de:e4:c9:fe:3f:98:a3:59:c3:bf:c5:c0:bb:05:2a: da:21:34:67:c9:fe:11:ab:a8:cf:49:0b:6d:10:e3: c0:d4:15:0b:c3:0a:f2:0f:c1:6d:55:6b:7b:6c:4b: b8:01:65:93:a6:d5:4e:a6:2d:ff:e7:f4:46:e7:e2: 44:04:72:71:fd:e4:c0:f6:71:f6:ca:e9:06:37:6f: 89:c0:30:2d:19:ec:e1:58:20:e1:29:58:e5:1f:3a: 80:4a:7c:3e:b9:2d:01:75:c2:95:d2:c6:f5:eb:a5: b4:d6:f4:fb:d6:d9:83:4e:27:81:2f:37:65:6f:0d: 7e:8d:9a:df:cd:ea:31:ac:b0:84:00:56:84:28:99: 64:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4B:40:4E:FF:94:F4:9B:04:36:23:B9:28:92:98:21:14:AE:15:66 X509v3 Authority Key Identifier: keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:24:d8:0c:d6:e1:db:f5:2c:ac:5b:19:2d:5b:c7:2a:af:c6: e0:3e:6a:e4:5d:75:ea:ae:00:b0:3f:45:f7:5a:19:5b:cb:d4: f2:1c:17:e8:6b:5c:99:a7:9f:f2:66:90:a7:92:bd:82:e7:6d: fe:15:e9:3b:75:dc:9a:7f:3c:70:49:0f:d8:a8:15:13:40:35: bd:24:7a:ed:a7:b9:e1:da:89:56:a2:4f:97:ff:b6:85:84:7a: e5:dd:e9:9c:62:98:3e:9d:2b:9f:c2:db:4e:54:4f:5d:56:c6: 96:07:65:34:d2:49:85:b6:fe:b3:93:dd:63:a0:51:32:ba:2e: 05:4f:ec:71:ff:db:a1:6d:63:db:fb:4b:44:73:83:67:6b:c3: 7a:0f:a5:75:c2:7a:09:45:c2:00:65:ca:f6:a1:e1:fb:15:ba: 71:6b:33:f2:24:86:9c:b5:d7:aa:1a:96:7f:08:b4:1a:02:5e: cd:d7:1f:00:50:0c:a2:09:f5:fd:09:a0:65:54:8b:7b:52:4d: e3:f3:f1:64:41:e5:26:9a:fa:8b:14:d4:be:05:78:60:63:51: bd:57:57:26:96:f8:8e:a6:4f:b2:b1:0f:47:fe:6f:cb:db:0d: 84:d1:c2:0f:84:dd:6c:1f:07:a8:06:f7:af:ce:40:15:e3:89: 98:50:34:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IYlwaAtJx0f3pkuQ74MoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMWIzZWEzNWVkZmRkMTM4YzE1NTA2ZDc0YTc2MDIyZGQz NzY5NGIwHhcNMjUxMjIwMDUwMDM0WhcNMjUxMjIxMDUwMDM0WjAzMTEwLwYDVQQD Eyg4YTRiNDA0ZWZmOTRmNDliMDQzNjIzYjkyODkyOTgyMTE0YWUxNTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzOafTQ9Nyv7W+9d13ZNe8bt6Q55 y+CNWKUfHuRzgEJZBn+Bqv7beBRl84oLDc1mr7jGPeM+D/ooh/i3/ZL03OlOWadZ CTno/PW0irymTpH9w1btYoJkfLV2/DdFJxO6aj6CCMO/ZrdbTgJ70eNBM0U0vMpa Lcze5Mn+P5ijWcO/xcC7BSraITRnyf4Rq6jPSQttEOPA1BULwwryD8FtVWt7bEu4 AWWTptVOpi3/5/RG5+JEBHJx/eTA9nH2yukGN2+JwDAtGezhWCDhKVjlHzqASnw+ uS0BdcKV0sb166W01vT71tmDTieBLzdlbw1+jZrfzeoxrLCEAFaEKJlk7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpLQE7/lPSbBDYjuSiSmCEUrhVmMB8GA1UdIwQY MBaAFAIbPqNe390TjBVQbXSnYCLdN2lLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mODliNjQtODdiNy00OGY0LThiNjAt YzMyMDRiZGU3NzczLzEvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mODliNjQtODdiNy00OGY0LThiNjAtYzMyMDRiZGU3Nzcz LzEvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCTYDNbh 2/UsrFsZLVvHKq/G4D5q5F116q4AsD9F91oZW8vU8hwX6Gtcmaef8maQp5K9gudt /hXpO3Xcmn88cEkP2KgVE0A1vSR67ae54dqJVqJPl/+2hYR65d3pnGKYPp0rn8Lb TlRPXVbGlgdlNNJJhbb+s5PdY6BRMrouBU/scf/boW1j2/tLRHODZ2vDeg+ldcJ6 CUXCAGXK9qHh+xW6cWsz8iSGnLXXqhqWfwi0GgJezdcfAFAMogn1/QmgZVSLe1JN 4/PxZEHlJpr6ixTUvgV4YGNRvVdXJpb4jqZPsrEPR/5vy9sNhNHCD4TdbB8HqAb3 r85AFeOJmFA0Hw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:22:22 2025 by rpki-client