This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft File: AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json) Hash identifier: 1LBOpQjDn90Z9WHC2cLI0Jtmx69FBJQ3pJJmLNi/944= Subject key identifier: 21:E8:E9:45:6C:EB:1D:81:B7:92:4D:85:77:41:1A:89:B1:56:C0:19 Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62 Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362 Certificate serial: 019B262DF89C1A909384D750ECEBE3C6719C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft Manifest number: 09 Signing time: Tue 16 Dec 2025 08:01:45 +0000 Manifest this update: Tue 16 Dec 2025 08:01:45 +0000 Manifest next update: Wed 17 Dec 2025 08:01:45 +0000 Files and hashes: 1: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: sAYFxPws061GFpBRTLrXapEkY9KU9PsOVxgr8dpA4Y0=) 2: Lbm30kMieYd721PV2KHSvhBUOqA.asa (hash: Xj6tX5jAtIAUBTLTJ0Ax6ulkGTmiNIvhT+c2crJgPQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:f8:9c:1a:90:93:84:d7:50:ec:eb:e3:c6:71:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362 Validity Not Before: Dec 16 08:01:45 2025 GMT Not After : Dec 17 08:01:45 2025 GMT Subject: CN=21e8e9456ceb1d81b7924d8577411a89b156c019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a5:d8:23:79:b0:95:1d:69:83:cb:cc:79:1c: 58:20:56:e9:73:17:89:46:e2:b1:6d:f8:cd:0e:d4: a0:58:76:53:78:11:f2:c0:a5:08:df:79:e8:28:90: 08:03:e5:42:d4:46:c4:62:ae:79:f0:ee:4d:0a:45: 59:a4:82:55:ce:5e:b1:d3:dd:86:c6:8e:1e:2f:ad: 9d:ec:cf:85:92:fd:2e:0a:c3:4d:15:18:78:f8:81: c4:cf:bf:48:5d:5f:e2:8d:90:ef:e3:b4:d8:f8:65: b1:e8:f6:29:a3:33:5b:58:89:48:31:41:b1:e9:26: bc:07:2a:17:f7:77:24:77:44:b4:08:57:69:23:d3: cb:51:67:98:3d:98:18:95:28:d2:b2:a2:24:db:88: ed:88:34:59:1f:7f:c6:49:ba:9f:cc:6c:84:27:96: 68:8e:9f:df:3c:e4:03:70:2c:38:b2:4b:ec:bc:75: 2a:f6:a6:9b:fc:fc:b6:92:6e:9f:f9:0c:26:32:28: 61:9e:be:47:f4:a0:a5:cb:00:51:45:dd:c1:87:af: 3d:18:ec:ba:19:64:ce:b2:70:59:c4:fc:a8:8a:43: 69:2c:c5:cd:ea:ba:46:0d:33:d3:4c:c0:d3:54:54: ca:97:1a:a4:a5:4e:b8:18:f4:3d:16:ac:24:37:08: aa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E8:E9:45:6C:EB:1D:81:B7:92:4D:85:77:41:1A:89:B1:56:C0:19 X509v3 Authority Key Identifier: keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:6b:e8:28:ea:f5:e0:47:47:38:db:88:bb:94:0a:47:5f:93: 5a:9b:5c:5a:e8:5e:a0:19:ba:3c:8e:6c:89:7d:11:35:50:23: 83:82:2d:73:c3:d0:bc:37:46:8b:aa:b0:16:26:68:70:1d:87: 44:07:b1:e4:09:98:5b:1d:2d:ed:8f:17:9a:0d:69:56:b9:36: 24:3b:3a:b4:fe:1b:2b:df:e4:0f:67:e1:19:da:ae:ba:63:aa: af:45:3f:15:f6:ab:99:97:ce:63:19:6e:90:d3:54:2c:d1:93: c0:0f:74:77:f9:a5:b8:b0:df:79:b6:99:b3:b8:72:eb:db:77: 83:e1:ec:21:be:42:19:49:fc:5b:ab:f3:55:d1:c8:e3:0a:e7: 3b:9d:45:b1:e5:5a:39:d3:67:2a:47:b7:3d:00:97:54:c4:90: 87:2a:6a:76:f7:c1:ab:eb:ce:0e:99:99:f7:f8:f4:3a:40:bd: 18:38:53:df:45:ac:6d:68:5a:94:3a:04:cf:84:e6:40:d0:ae: d8:59:1a:e8:d1:90:ce:24:3b:f8:fa:26:5f:7d:96:53:5c:59: 3c:62:18:a5:f6:8a:78:f3:eb:ff:4c:43:ad:7b:7e:2e:e1:c3: 66:4a:c3:98:8a:15:ef:34:83:cf:4e:3a:7b:4b:6f:86:26:cd: 31:44:ef:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLficGpCThNdQ7OvjxnGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOTRjMGY3MzY4YzA0NzY0M2U5MWM1N2Q2Y2ZkYTlmOTk4 OTczNjIwHhcNMjUxMjE2MDgwMTQ1WhcNMjUxMjE3MDgwMTQ1WjAzMTEwLwYDVQQD EygyMWU4ZTk0NTZjZWIxZDgxYjc5MjRkODU3NzQxMWE4OWIxNTZjMDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56XYI3mwlR1pg8vMeRxYIFbpcxeJ RuKxbfjNDtSgWHZTeBHywKUI33noKJAIA+VC1EbEYq558O5NCkVZpIJVzl6x092G xo4eL62d7M+Fkv0uCsNNFRh4+IHEz79IXV/ijZDv47TY+GWx6PYpozNbWIlIMUGx 6Sa8ByoX93ckd0S0CFdpI9PLUWeYPZgYlSjSsqIk24jtiDRZH3/GSbqfzGyEJ5Zo jp/fPOQDcCw4skvsvHUq9qab/Py2km6f+QwmMihhnr5H9KClywBRRd3Bh689GOy6 GWTOsnBZxPyoikNpLMXN6rpGDTPTTMDTVFTKlxqkpU64GPQ9FqwkNwiqwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHo6UVs6x2Bt5JNhXdBGomxVsAZMB8GA1UdIwQY MBaAFACUwPc2jAR2Q+kcV9bP2p+ZiXNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82M2VmYmItZmUwMi00NjhhLTk2MGQt M2MyNzQyZjI4YTNjLzEvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82M2VmYmItZmUwMi00NjhhLTk2MGQtM2MyNzQyZjI4YTNj LzEvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmvoKOr1 4EdHONuIu5QKR1+TWptcWuheoBm6PI5siX0RNVAjg4Itc8PQvDdGi6qwFiZocB2H RAex5AmYWx0t7Y8Xmg1pVrk2JDs6tP4bK9/kD2fhGdquumOqr0U/FfarmZfOYxlu kNNULNGTwA90d/mluLDfebaZs7hy69t3g+HsIb5CGUn8W6vzVdHI4wrnO51FseVa OdNnKke3PQCXVMSQhypqdvfBq+vODpmZ9/j0OkC9GDhT30WsbWhalDoEz4TmQNCu 2Fka6NGQziQ7+PomX32WU1xZPGIYpfaKePPr/0xDrXt+LuHDZkrDmIoV7zSDz046 e0tvhibNMUTvJQ== -----END CERTIFICATE-----Generated at Tue Dec 16 09:38:04 2025 by rpki-client