This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json) Hash identifier: G5lIZ4V514YEFS67tDBBoqqS+zf3QULc+UA6J3od0Mo= Subject key identifier: BC:E4:F7:8C:4E:D3:84:8C:83:B8:32:48:D9:99:F1:91:5B:DB:93:7B Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61 Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261 Certificate serial: 019B3C7F256E1AF59ECC6059B7ECFA5777D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft Manifest number: 0E2C Signing time: Sat 20 Dec 2025 16:02:04 +0000 Manifest this update: Sat 20 Dec 2025 16:02:04 +0000 Manifest next update: Sun 21 Dec 2025 16:02:04 +0000 Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: Jhazl/Qnye0Lv6qp27ITTUa4du9Vfl3ocWU0QGbskGU=) 2: qzSVGtS_jWsXuo115ysr12jv81o.roa (hash: 6sU/7Xohp1bS1zbTFVnz4YbGVdQCm8u0BmBoUOstkdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:25:6e:1a:f5:9e:cc:60:59:b7:ec:fa:57:77:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261 Validity Not Before: Dec 20 16:02:04 2025 GMT Not After : Dec 21 16:02:04 2025 GMT Subject: CN=bce4f78c4ed3848c83b83248d999f1915bdb937b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dd:cd:37:6c:3c:90:5c:ab:12:0a:5e:f6:01: 09:bf:d3:17:a3:d6:3c:ff:f0:5e:4b:48:d3:a1:d4: b3:57:33:d9:71:ec:70:c2:c7:28:0c:96:fd:38:fd: 53:eb:fe:bb:c2:37:d6:d4:0e:e8:91:5d:05:48:c2: 83:4a:ac:0d:ed:f0:93:1c:03:0f:c4:90:2a:48:aa: 2a:d2:ef:3a:e2:71:45:b3:bb:1d:0c:f9:25:8a:88: 44:a5:9f:aa:e7:77:ed:dc:54:af:44:2f:0a:af:39: 9e:d5:54:bb:df:46:b8:92:5a:b6:94:90:d6:9c:02: 6c:be:62:f6:66:49:24:11:0d:1f:e7:08:46:f5:84: e2:f9:9c:2a:9e:74:3a:f2:4d:a1:84:24:2b:60:a5: cf:6a:ce:2e:1c:67:fc:64:3e:ce:4f:29:c4:32:a5: c5:c0:1f:04:a9:8a:4c:50:b8:a7:7d:fd:e9:32:3f: c9:e0:80:5a:39:48:fd:d4:1b:e2:a6:85:33:7c:49: 1d:1f:5a:61:99:a5:93:18:26:bc:e1:2b:b6:5d:ce: a1:0b:67:d3:42:d2:a0:0e:26:45:68:45:ce:cf:72: e6:9a:c2:ed:c8:08:a8:26:ce:57:0c:25:1d:12:d3: 19:8c:d9:2c:6b:2c:4c:02:55:4c:5b:b0:8a:f1:e2: c6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E4:F7:8C:4E:D3:84:8C:83:B8:32:48:D9:99:F1:91:5B:DB:93:7B X509v3 Authority Key Identifier: keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption eb:20:56:ad:87:96:b9:04:d3:e8:20:5f:f9:66:5a:87:92:69: 5e:0a:c2:a3:7f:1b:3a:78:f6:f8:3b:ff:ca:ed:70:20:9d:5c: 60:df:0f:ee:10:19:fd:fa:d5:30:8f:05:cd:37:77:80:de:ca: 3a:0b:ca:ea:d4:23:e2:f3:11:fb:41:17:8d:45:96:17:ee:25: 89:62:0e:ef:65:71:bc:e8:82:ac:c5:86:bd:2c:ff:e8:57:45: 99:85:d1:6b:ae:26:b0:ab:fd:94:50:fe:47:a7:cc:40:d8:17: ac:ff:e2:5d:95:52:56:16:f9:1a:7e:cd:ba:b6:12:92:14:ae: d1:0e:0f:38:0c:a2:92:48:2f:7d:2a:09:d6:33:b5:ff:20:d1: 17:19:b5:67:4b:02:4a:fe:ec:90:0c:f9:2f:28:cc:7a:36:0b: 27:9a:63:f7:3c:df:aa:70:85:26:a9:11:b5:f6:1e:0d:bd:f0: 8a:b0:0a:c7:bf:5e:f2:af:18:7a:9b:14:ab:fc:12:8e:32:45: 7c:d4:df:ab:9f:37:64:1b:7c:ed:0d:f8:0b:76:37:0c:81:d4: 14:a3:50:ea:e3:8a:04:20:36:59:76:b5:6a:47:8a:c1:34:1e: ac:02:aa:df:f6:a5:87:1b:af:54:36:e2:66:d1:26:ec:b4:69: 72:cd:4b:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fyVuGvWezGBZt+z6V3fRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYmYyMzAwNDQ2NDljMDZkNzVlMzAyYzUxNzUwMDRkYmZj NjcyNjEwHhcNMjUxMjIwMTYwMjA0WhcNMjUxMjIxMTYwMjA0WjAzMTEwLwYDVQQD EyhiY2U0Zjc4YzRlZDM4NDhjODNiODMyNDhkOTk5ZjE5MTViZGI5MzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut3NN2w8kFyrEgpe9gEJv9MXo9Y8 //BeS0jTodSzVzPZcexwwscoDJb9OP1T6/67wjfW1A7okV0FSMKDSqwN7fCTHAMP xJAqSKoq0u864nFFs7sdDPkliohEpZ+q53ft3FSvRC8Krzme1VS730a4klq2lJDW nAJsvmL2ZkkkEQ0f5whG9YTi+ZwqnnQ68k2hhCQrYKXPas4uHGf8ZD7OTynEMqXF wB8EqYpMULinff3pMj/J4IBaOUj91BvipoUzfEkdH1phmaWTGCa84Su2Xc6hC2fT QtKgDiZFaEXOz3LmmsLtyAioJs5XDCUdEtMZjNksayxMAlVMW7CK8eLGowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzk94xO04SMg7gySNmZ8ZFb25N7MB8GA1UdIwQY MBaAFAC/IwBEZJwG114wLFF1AE2/xnJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUw4akFFUmtuQWJYWGpBc1VYVUFUYl9HY21FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kODgxMjItZGVkYS00ZmQwLTlhNjct NmVmMWQ5NjgxM2EyLzEvQUw4akFFUmtuQWJYWGpBc1VYVUFUYl9HY21FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9kODgxMjItZGVkYS00ZmQwLTlhNjctNmVmMWQ5NjgxM2Ey LzEvQUw4akFFUmtuQWJYWGpBc1VYVUFUYl9HY21FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6yBWrYeW uQTT6CBf+WZah5JpXgrCo38bOnj2+Dv/yu1wIJ1cYN8P7hAZ/frVMI8FzTd3gN7K OgvK6tQj4vMR+0EXjUWWF+4liWIO72VxvOiCrMWGvSz/6FdFmYXRa64msKv9lFD+ R6fMQNgXrP/iXZVSVhb5Gn7NurYSkhSu0Q4POAyikkgvfSoJ1jO1/yDRFxm1Z0sC Sv7skAz5LyjMejYLJ5pj9zzfqnCFJqkRtfYeDb3wirAKx79e8q8YepsUq/wSjjJF fNTfq583ZBt87Q34C3Y3DIHUFKNQ6uOKBCA2WXa1akeKwTQerAKq3/alhxuvVDbi ZtEm7LRpcs1LRw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:43:59 2025 by rpki-client