This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json) Hash identifier: Sf1hTTUaCJSSSjfdrfEnMM3ewHNuJ7l0dV7+B06bMxI= Subject key identifier: BF:7F:F9:5D:BF:BE:4C:F2:7A:0D:77:54:EA:FD:57:0A:0F:A8:15:77 Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6 Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6 Certificate serial: 019B48F0586C4600982A13CDE54908AB3EAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft Manifest number: 0F04 Signing time: Tue 23 Dec 2025 02:01:09 +0000 Manifest this update: Tue 23 Dec 2025 02:01:09 +0000 Manifest next update: Wed 24 Dec 2025 02:01:09 +0000 Files and hashes: 1: RqntMWBDTAuHkvxXJRUQlBHvO0Y.roa (hash: rHf6WPLDzEiSy2rPCd2fdO2Jo+GQGQFkoNjCSTwwLww=) 2: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: 5UHMYxxcwiUPP1DG/Qvehe4hV1wYBoAcU1cHvTEnNNk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:58:6c:46:00:98:2a:13:cd:e5:49:08:ab:3e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6 Validity Not Before: Dec 23 02:01:09 2025 GMT Not After : Dec 24 02:01:09 2025 GMT Subject: CN=bf7ff95dbfbe4cf27a0d7754eafd570a0fa81577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4f:8e:92:d4:88:a2:7b:20:f4:23:50:20:71: fb:52:e5:7d:76:c0:66:4f:b5:6c:80:c3:59:91:22: 9e:74:92:24:f6:ef:02:eb:55:41:69:64:86:71:90: 88:1b:16:22:8f:37:ac:98:10:e4:e2:4e:44:db:f9: 3b:9f:64:46:ef:3f:ed:05:16:b6:16:c0:4d:77:25: 19:f3:3b:12:53:2e:25:6c:8d:0a:17:00:3c:2c:50: 9e:3b:04:0d:26:20:28:6f:3d:13:32:16:34:71:98: 63:5a:34:46:c0:70:8f:78:21:97:b7:7a:e0:04:5c: 72:a7:ff:c5:3a:f7:f1:e6:50:05:22:2c:87:11:56: 26:9b:c0:80:29:f1:0a:f5:08:14:43:86:65:66:4e: fd:62:fe:a1:7f:ba:70:92:3c:5f:81:f7:77:39:e0: 93:14:3b:fb:8e:a8:4a:3b:06:89:bd:44:90:b4:45: 7d:0f:9b:c4:78:5b:cb:93:57:2d:22:d2:f0:6e:15: 95:db:4d:b9:5c:5a:83:01:1b:15:a7:31:9f:bc:fe: f0:1d:f5:6f:41:91:37:34:87:6c:4d:2d:b9:2d:50: de:c5:07:0e:0f:23:26:19:19:b9:13:d9:7f:e3:9d: 3e:25:c0:60:35:41:46:91:20:0c:24:b3:24:44:62: be:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7F:F9:5D:BF:BE:4C:F2:7A:0D:77:54:EA:FD:57:0A:0F:A8:15:77 X509v3 Authority Key Identifier: keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:6b:23:50:60:0c:22:91:f8:aa:b4:d8:88:8e:6e:6c:37:1f: e2:3e:1e:cd:05:94:b6:a7:82:aa:6b:a2:b9:f3:a0:68:2a:18: 6b:8b:cb:05:5a:5d:ba:d9:5b:61:92:72:63:62:95:e4:3c:4b: 40:fc:9c:a0:dc:08:87:d4:e8:5e:61:7c:38:ab:83:f2:27:44: e3:4a:97:0f:8a:0c:d9:9c:7e:49:32:da:42:13:f0:99:f9:e4: d6:c2:ed:7f:d5:59:66:49:fe:3d:50:6b:9f:d1:b8:4d:0f:91: 5b:b4:ba:9c:de:d1:b8:b8:ed:e5:6e:cd:da:08:7e:39:40:1b: a5:32:f1:64:cf:6e:b6:13:be:58:bf:6c:99:48:d0:b1:0c:49: 21:25:df:36:18:8b:ec:0e:17:a8:8e:8e:37:85:83:8f:6f:64: 34:91:f6:47:f7:b5:09:50:18:42:68:ba:ee:d6:6a:11:ba:07: 47:a4:a2:27:b3:d9:01:dc:ca:c4:f7:b0:85:a6:ff:8d:94:37: 93:a3:7e:ce:d7:67:7a:e6:c7:e3:2e:94:c0:b3:f1:90:94:b8: da:ce:d5:59:e7:9d:e9:c8:0e:56:4f:6b:fc:ae:a6:2a:4f:ed: 26:7a:db:f8:9f:2c:93:b4:56:7e:3a:50:6b:1c:e1:c4:9a:f9: 77:1e:3a:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8FhsRgCYKhPN5UkIqz6uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMzc5ODIyMDdlNjJkZWQwNjkxZGNiMThlZjZlYTMyZDQx M2YzZjYwHhcNMjUxMjIzMDIwMTA5WhcNMjUxMjI0MDIwMTA5WjAzMTEwLwYDVQQD EyhiZjdmZjk1ZGJmYmU0Y2YyN2EwZDc3NTRlYWZkNTcwYTBmYTgxNTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU+OktSIonsg9CNQIHH7UuV9dsBm T7VsgMNZkSKedJIk9u8C61VBaWSGcZCIGxYijzesmBDk4k5E2/k7n2RG7z/tBRa2 FsBNdyUZ8zsSUy4lbI0KFwA8LFCeOwQNJiAobz0TMhY0cZhjWjRGwHCPeCGXt3rg BFxyp//FOvfx5lAFIiyHEVYmm8CAKfEK9QgUQ4ZlZk79Yv6hf7pwkjxfgfd3OeCT FDv7jqhKOwaJvUSQtEV9D5vEeFvLk1ctItLwbhWV2025XFqDARsVpzGfvP7wHfVv QZE3NIdsTS25LVDexQcODyMmGRm5E9l/450+JcBgNUFGkSAMJLMkRGK+bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9/+V2/vkzyeg13VOr9VwoPqBV3MB8GA1UdIwQY MBaAFGo3mCIH5i3tBpHcsY726jLUE/P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iODExZDUtYmEzNS00MjNkLTg2MmYt MjM1MzE2NTRlNTg5LzEvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9iODExZDUtYmEzNS00MjNkLTg2MmYtMjM1MzE2NTRlNTg5 LzEvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2sjUGAM IpH4qrTYiI5ubDcf4j4ezQWUtqeCqmuiufOgaCoYa4vLBVpdutlbYZJyY2KV5DxL QPycoNwIh9ToXmF8OKuD8idE40qXD4oM2Zx+STLaQhPwmfnk1sLtf9VZZkn+PVBr n9G4TQ+RW7S6nN7RuLjt5W7N2gh+OUAbpTLxZM9uthO+WL9smUjQsQxJISXfNhiL 7A4XqI6ON4WDj29kNJH2R/e1CVAYQmi67tZqEboHR6SiJ7PZAdzKxPewhab/jZQ3 k6N+ztdneubH4y6UwLPxkJS42s7VWeed6cgOVk9r/K6mKk/tJnrb+J8sk7RWfjpQ axzhxJr5dx46gA== -----END CERTIFICATE-----Generated at Tue Dec 23 05:06:30 2025 by rpki-client