This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft File: ajXs8V8abbPIJhCSrr4iEyWRNc4.mft (raw, json) Hash identifier: PwGtoqOvKP4wDFYFJPVDro/Ix4tIq4bgRw9nIhMcmp0= Subject key identifier: 50:19:43:6A:E1:58:15:08:70:D5:54:6C:75:8A:6F:7E:07:B0:9F:37 Authority key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE Certificate issuer: /CN=6a35ecf15f1a6db3c8261092aebe2213259135ce Certificate serial: 019B25BFA553F1817FD60177F7BFEE6919E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft Manifest number: 13 Signing time: Tue 16 Dec 2025 06:01:15 +0000 Manifest this update: Tue 16 Dec 2025 06:01:15 +0000 Manifest next update: Wed 17 Dec 2025 06:01:15 +0000 Files and hashes: 1: Lew-h_DR6pX_cLDKkCKKKvC30n4.asa (hash: d3xiU+jGcgBPAr/J+bp6R3hubPZue+FUp5GBeI9OOQw=) 2: ajXs8V8abbPIJhCSrr4iEyWRNc4.crl (hash: 11bcrSyZsj1KIensIIlJua7wLQpHvsJtzi5xvJgGQfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:a5:53:f1:81:7f:d6:01:77:f7:bf:ee:69:19:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce Validity Not Before: Dec 16 06:01:15 2025 GMT Not After : Dec 17 06:01:15 2025 GMT Subject: CN=5019436ae158150870d5546c758a6f7e07b09f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:77:b4:41:9f:31:4a:85:16:63:b3:6a:b2:f8: 2f:71:8a:4a:c8:24:bb:88:44:78:5b:55:c8:6d:38: c9:37:15:8b:df:dc:b8:c1:99:44:1e:51:c6:4a:63: b5:8b:b7:3d:f0:bc:88:9a:b6:e4:a0:5a:4e:49:a9: f3:e4:3a:ed:48:9e:52:ad:8d:45:f9:a4:85:13:99: b3:f3:b8:6f:ef:62:7d:4e:40:96:28:f0:35:eb:fa: 61:ab:e4:78:73:38:51:12:cf:b4:3e:27:46:2f:c8: ff:d1:53:75:61:c2:15:e3:cd:ed:b3:72:68:08:12: d7:7a:39:48:4c:92:c5:24:2a:67:6b:39:e6:da:dd: 76:13:5d:38:aa:8f:4e:8e:71:f9:cc:ba:8d:a9:ad: 5e:66:3b:c8:39:64:7b:dc:b5:ef:5c:2f:ce:ec:dc: e1:88:6e:d4:0e:1e:17:50:8c:63:16:af:c0:71:01: b1:c3:6b:0c:3f:af:ce:df:84:f6:74:ef:73:81:45: cd:7d:ed:4f:ae:dc:09:09:2f:36:a1:99:ab:50:61: d6:6d:54:60:a8:0b:ee:44:93:94:d8:ae:67:39:39: d9:08:ce:fe:87:d4:37:dd:83:d8:66:12:8a:99:98: 20:c6:39:8a:33:67:84:fb:a6:9d:bb:0a:a9:32:74: 70:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:19:43:6A:E1:58:15:08:70:D5:54:6C:75:8A:6F:7E:07:B0:9F:37 X509v3 Authority Key Identifier: keyid:6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:03:60:33:61:a8:4b:29:fc:9b:f8:14:3d:42:74:32:b3:c0: b0:24:2c:93:0a:69:89:04:01:44:0b:43:ca:f1:c7:26:02:ef: 3c:21:45:eb:05:88:eb:95:55:f2:66:f8:c3:b9:6d:a1:ef:28: 3a:8e:98:cf:cf:05:2f:07:d9:5e:2d:61:0b:bc:84:5d:a8:70: 74:d8:91:27:66:fa:a7:3d:1f:9c:b4:a0:a5:7b:be:90:d4:48: dd:65:01:9b:05:a5:cf:75:93:df:43:56:7f:6d:14:11:2d:82: 0a:bf:eb:28:57:91:da:9c:3b:43:e2:46:ba:9c:76:ca:df:2c: 0e:4b:78:4b:e6:32:eb:81:20:25:36:33:b8:45:65:62:90:50: d4:6e:4e:3d:34:f9:07:6e:aa:80:cd:ff:2c:a1:3e:3a:3b:65: cd:5b:52:80:40:28:90:4b:b3:6d:3e:ac:17:6c:b0:52:54:ec: 78:85:71:60:3c:a1:83:fd:48:73:bf:a5:c0:d4:18:4c:e5:12: a2:69:2d:60:ea:c3:39:11:46:ed:a9:27:3e:47:54:28:14:48: 4c:92:28:84:bf:4e:2e:4c:88:aa:3f:08:7a:84:dc:7c:98:c3: cf:ad:5c:f5:e1:19:67:01:89:ed:1a:c8:27:18:c7:27:d3:b4: 05:96:e1:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv6VT8YF/1gF397/uaRniMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMzVlY2YxNWYxYTZkYjNjODI2MTA5MmFlYmUyMjEzMjU5 MTM1Y2UwHhcNMjUxMjE2MDYwMTE1WhcNMjUxMjE3MDYwMTE1WjAzMTEwLwYDVQQD Eyg1MDE5NDM2YWUxNTgxNTA4NzBkNTU0NmM3NThhNmY3ZTA3YjA5ZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAone0QZ8xSoUWY7NqsvgvcYpKyCS7 iER4W1XIbTjJNxWL39y4wZlEHlHGSmO1i7c98LyImrbkoFpOSanz5DrtSJ5SrY1F +aSFE5mz87hv72J9TkCWKPA16/phq+R4czhREs+0PidGL8j/0VN1YcIV483ts3Jo CBLXejlITJLFJCpnaznm2t12E104qo9OjnH5zLqNqa1eZjvIOWR73LXvXC/O7Nzh iG7UDh4XUIxjFq/AcQGxw2sMP6/O34T2dO9zgUXNfe1PrtwJCS82oZmrUGHWbVRg qAvuRJOU2K5nOTnZCM7+h9Q33YPYZhKKmZggxjmKM2eE+6aduwqpMnRwYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAZQ2rhWBUIcNVUbHWKb34HsJ83MB8GA1UdIwQY MBaAFGo17PFfGm2zyCYQkq6+IhMlkTXOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWpYczhWOGFiYlBJSmhDU3JyNGlFeVdSTmM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yYTY5NDMtMTA2MC00YmFlLWE3YTQt N2EyODg0OTZlZDY2LzEvYWpYczhWOGFiYlBJSmhDU3JyNGlFeVdSTmM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8yYTY5NDMtMTA2MC00YmFlLWE3YTQtN2EyODg0OTZlZDY2 LzEvYWpYczhWOGFiYlBJSmhDU3JyNGlFeVdSTmM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgNgM2Go Syn8m/gUPUJ0MrPAsCQskwppiQQBRAtDyvHHJgLvPCFF6wWI65VV8mb4w7ltoe8o Oo6Yz88FLwfZXi1hC7yEXahwdNiRJ2b6pz0fnLSgpXu+kNRI3WUBmwWlz3WT30NW f20UES2CCr/rKFeR2pw7Q+JGupx2yt8sDkt4S+Yy64EgJTYzuEVlYpBQ1G5OPTT5 B26qgM3/LKE+OjtlzVtSgEAokEuzbT6sF2ywUlTseIVxYDyhg/1Ic7+lwNQYTOUS omktYOrDORFG7aknPkdUKBRITJIohL9OLkyIqj8IeoTcfJjDz61c9eEZZwGJ7RrI JxjHJ9O0BZbh0Q== -----END CERTIFICATE-----Generated at Tue Dec 16 14:15:08 2025 by rpki-client