This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json) Hash identifier: Zc1ZSP3Zpmj2VU62Vcqeu/GvClgtf8UqEs8WJ2GQmw8= Subject key identifier: 93:F3:7D:AE:DA:AE:B3:23:DA:88:C4:93:93:01:0C:F6:46:D6:B6:27 Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37 Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537 Certificate serial: 019B638BB28F8E132B664309B45FBB83B6BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft Manifest number: 0903 Signing time: Sun 28 Dec 2025 06:00:58 +0000 Manifest this update: Sun 28 Dec 2025 06:00:58 +0000 Manifest next update: Mon 29 Dec 2025 06:00:58 +0000 Files and hashes: 1: 5Wr3s3710WFh-gqqnOC5HRfGhqo.roa (hash: mRv9qva0cARo5/cUdT7w241MszdGWtnBv2czFRm61Yk=) 2: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: b2WvZaiEBrgqAwfPvZlfPCysx20B+6qz1brqD7xZBro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:8b:b2:8f:8e:13:2b:66:43:09:b4:5f:bb:83:b6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537 Validity Not Before: Dec 28 06:00:58 2025 GMT Not After : Dec 29 06:00:58 2025 GMT Subject: CN=93f37daedaaeb323da88c49393010cf646d6b627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:7a:46:74:4a:ee:c5:47:64:d8:a5:07:22: c9:ec:07:69:ee:6b:89:2f:fe:bf:fa:9a:3a:a2:93: ed:5b:95:f2:b7:b4:17:f1:d3:fa:ff:47:c7:9e:3c: 99:31:dd:fc:a7:6d:b7:19:23:be:29:4a:7d:7e:bb: 06:00:69:1f:e0:6f:d2:71:c0:06:71:01:43:37:60: e6:a3:96:a8:54:d4:69:aa:67:f1:42:6c:a6:fb:82: 66:23:36:d4:ae:8a:04:2d:30:83:ed:55:e3:d5:7a: 26:f3:97:f1:11:6d:f0:b1:f6:08:dd:b7:9c:e7:f6: 34:15:3a:31:dd:16:df:98:95:eb:62:24:b8:0e:04: b3:d9:a4:a4:f7:c9:ee:b6:c2:1d:e4:41:c7:e7:86: 94:a2:85:0b:1e:f8:21:06:7f:ec:34:d4:9b:b8:b1: 27:4d:7f:92:d0:ed:c5:80:1b:48:85:c1:ac:3d:aa: 1f:b9:b3:9b:f7:f9:0d:0d:32:43:8d:18:57:dd:ce: 3e:3e:3d:33:7e:cf:28:17:d1:ad:6a:db:ef:c6:71: 92:78:51:8b:22:67:64:12:23:64:45:4e:56:df:4c: 17:b7:e5:c7:92:f0:3d:e0:05:6e:5a:8b:d4:6e:d9: 59:2b:59:19:03:75:1b:d4:3f:19:5a:a2:a3:7d:87: 01:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F3:7D:AE:DA:AE:B3:23:DA:88:C4:93:93:01:0C:F6:46:D6:B6:27 X509v3 Authority Key Identifier: keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e7:b8:e3:98:c8:5b:00:c9:b7:c6:43:90:73:2e:1d:52:b2: 91:e2:ff:e5:cd:e7:6b:a9:dd:78:f9:0a:33:41:68:ea:80:c1: a1:e1:c3:fc:0b:55:26:e9:68:df:e8:b3:43:9f:9e:4e:15:f5: bb:4d:4f:c1:66:f6:3f:b4:0c:01:0a:3a:98:3a:57:54:43:ba: 42:c1:a1:21:4b:e9:05:f0:67:f4:2b:7e:07:92:fe:79:8b:2c: d9:72:45:90:98:b8:cf:87:2c:40:45:55:59:ae:85:aa:52:0a: 38:63:0e:64:86:eb:bc:94:d5:4b:b8:df:d7:b9:b3:b5:ab:bc: bc:7b:c9:00:28:8a:49:05:ef:f1:62:11:95:79:a0:b8:f8:32: 5a:6f:0e:79:07:1a:28:de:70:be:b2:b1:02:10:09:6f:3c:24: f9:5f:93:2c:1c:13:cc:4f:1f:d6:cc:6f:8b:66:78:2a:25:6e: ac:e9:3c:50:c8:29:28:dc:ce:77:3a:61:64:00:4d:7c:35:51: dd:cd:7a:5b:af:38:db:d8:f8:fa:b3:2f:24:a3:5b:ad:64:4f: c3:eb:6e:9a:69:b6:b0:23:92:ac:86:81:e7:d4:b7:ee:fe:d3: 1e:af:9e:ac:5a:b6:48:91:44:76:6b:2e:31:dd:1a:34:f9:44: 62:08:a8:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtji7KPjhMrZkMJtF+7g7a7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNDExNTQ0NjJlNWFkY2NhOWQyYmNiZDE0NDNmY2M2Mzc4 Nzk1MzcwHhcNMjUxMjI4MDYwMDU4WhcNMjUxMjI5MDYwMDU4WjAzMTEwLwYDVQQD Eyg5M2YzN2RhZWRhYWViMzIzZGE4OGM0OTM5MzAxMGNmNjQ2ZDZiNjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCJ6RnRK7sVHZNilByLJ7Adp7muJ L/6/+po6opPtW5Xyt7QX8dP6/0fHnjyZMd38p223GSO+KUp9frsGAGkf4G/SccAG cQFDN2Dmo5aoVNRpqmfxQmym+4JmIzbUrooELTCD7VXj1Xom85fxEW3wsfYI3bec 5/Y0FTox3RbfmJXrYiS4DgSz2aSk98nutsId5EHH54aUooULHvghBn/sNNSbuLEn TX+S0O3FgBtIhcGsPaofubOb9/kNDTJDjRhX3c4+Pj0zfs8oF9GtatvvxnGSeFGL ImdkEiNkRU5W30wXt+XHkvA94AVuWovUbtlZK1kZA3Ub1D8ZWqKjfYcB0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPzfa7arrMj2ojEk5MBDPZG1rYnMB8GA1UdIwQY MBaAFAJBFURi5a3MqdK8vRRD/MY3h5U3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wOTc2MWQtNmU1Yy00NTFiLThlOGEt ZTkyZWU1ZWVkMjI2LzEvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8wOTc2MWQtNmU1Yy00NTFiLThlOGEtZTkyZWU1ZWVkMjI2 LzEvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGue445jI WwDJt8ZDkHMuHVKykeL/5c3na6ndePkKM0Fo6oDBoeHD/AtVJulo3+izQ5+eThX1 u01PwWb2P7QMAQo6mDpXVEO6QsGhIUvpBfBn9Ct+B5L+eYss2XJFkJi4z4csQEVV Wa6FqlIKOGMOZIbrvJTVS7jf17mztau8vHvJACiKSQXv8WIRlXmguPgyWm8OeQca KN5wvrKxAhAJbzwk+V+TLBwTzE8f1sxvi2Z4KiVurOk8UMgpKNzOdzphZABNfDVR 3c16W68429j4+rMvJKNbrWRPw+tummm2sCOSrIaB59S37v7THq+erFq2SJFEdmsu Md0aNPlEYgioDA== -----END CERTIFICATE-----Generated at Sun Dec 28 09:06:26 2025 by rpki-client