This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json) Hash identifier: pyjGU+ycT12Rcl2OEohkAtDM3Wyw1/UAvxSTmtJ5Zi8= Subject key identifier: FB:AF:F4:4D:AD:98:E6:E0:A8:9B:01:55:D9:06:B0:6E:E5:25:EA:29 Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd Certificate serial: 019B3C7FB396FAFD3B77C321E3E2ACE761DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft Manifest number: 148E Signing time: Sat 20 Dec 2025 16:02:40 +0000 Manifest this update: Sat 20 Dec 2025 16:02:40 +0000 Manifest next update: Sun 21 Dec 2025 16:02:40 +0000 Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: XrsA7vaeGCkZtAIBEdhU2BWBgzgFV7b9UyPBMuXoOxQ=) 2: C8VNDT0eLyU6a-BGSaat20kBt5Q.roa (hash: GVJtrMJUvAX+z3Z9hhGqUx0RMXPQ0og215klHN94fVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:b3:96:fa:fd:3b:77:c3:21:e3:e2:ac:e7:61:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd Validity Not Before: Dec 20 16:02:40 2025 GMT Not After : Dec 21 16:02:40 2025 GMT Subject: CN=fbaff44dad98e6e0a89b0155d906b06ee525ea29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:33:28:c0:1d:76:19:61:48:f7:7e:56:fe:58: b8:9f:43:13:ef:de:b4:ba:27:da:66:66:fd:e3:8b: f1:98:9a:c6:db:a0:38:f2:4c:6f:32:f7:16:c6:9b: ef:81:0e:5c:16:0d:2e:6b:7f:96:ba:4b:b2:a7:7e: 72:59:09:ab:dd:b7:8e:98:cf:60:25:3e:11:93:52: 0e:56:0d:a2:39:fe:f4:59:0a:3c:a3:58:d5:ee:67: 1a:79:d5:52:09:67:c8:e1:e7:e1:a6:cb:b7:8d:14: 33:d4:78:d9:5b:a5:a4:7d:c4:f1:fa:06:6c:87:da: 9c:21:a7:57:8b:62:fd:5f:2a:8b:c2:d4:99:f1:ef: 9b:4f:22:10:f0:3a:ec:0a:b1:9a:3f:0d:51:df:2a: 9c:18:14:24:20:63:22:af:23:2c:3f:22:0b:d2:6d: 3d:5d:54:57:0d:71:b5:db:b8:22:5e:37:93:93:06: 3f:67:92:26:37:ef:85:b0:31:5b:96:c4:d8:cc:06: 82:3c:fc:fb:a1:ed:72:50:20:c1:0d:b4:30:40:98: 96:5a:0e:c0:f1:07:1b:34:d2:e7:f8:e4:61:e8:9a: 05:44:f6:3c:f4:b2:d0:f1:6f:fc:4b:d1:cc:4a:fe: 53:4f:e6:c2:e8:a5:1e:95:5d:fe:5a:b4:d6:51:ca: b9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AF:F4:4D:AD:98:E6:E0:A8:9B:01:55:D9:06:B0:6E:E5:25:EA:29 X509v3 Authority Key Identifier: keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f9:58:ab:8a:aa:5c:63:f8:3a:92:91:b1:9d:e9:32:d2:28: 5e:b4:7b:23:a8:9a:7c:ca:14:b5:59:4c:20:fa:cd:82:d7:99: 0b:15:22:20:76:b8:14:21:29:e7:16:a1:1d:f4:e5:d5:e6:19: 27:4d:ca:15:b5:f7:41:cc:7f:34:c4:d0:25:32:24:12:e0:6d: 20:31:5c:10:ae:39:97:b7:6e:51:f3:3c:8d:7a:af:88:9a:e8: 2e:4b:34:da:f1:b7:2e:ac:2d:86:ca:02:45:80:4f:04:f2:75: d3:b1:98:bb:49:b8:dc:92:e1:8d:0d:68:be:b1:2f:76:3b:a5: a6:5c:46:54:a1:62:59:a4:24:c2:9a:fd:60:52:ca:df:b8:bd: b3:7d:2b:36:4b:64:1e:62:27:4f:2b:7c:52:43:07:56:d6:28: a2:51:1f:50:a1:7d:e4:00:4a:95:07:50:78:9c:2c:b9:7f:ea: d9:d4:15:8a:c3:f7:a5:cb:dc:3b:95:84:76:5f:fb:f7:3f:8f: 97:78:99:a4:d6:4f:41:f1:45:c4:43:ec:76:35:c4:3a:e1:d1: 61:b6:50:f9:ef:3a:99:c7:e4:62:db:8b:40:b5:dd:12:17:9a: 5e:b1:af:21:12:33:02:4a:37:70:1f:57:cf:5a:bb:1a:8c:5c: 2b:e1:41:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f7OW+v07d8Mh4+Ks52HcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwY2M0ZDUwODhkYjcxZTIxODc3N2Q5NzZkMGFhZGM0OThj NDZjZmQwHhcNMjUxMjIwMTYwMjQwWhcNMjUxMjIxMTYwMjQwWjAzMTEwLwYDVQQD EyhmYmFmZjQ0ZGFkOThlNmUwYTg5YjAxNTVkOTA2YjA2ZWU1MjVlYTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjMowB12GWFI935W/li4n0MT7960 uifaZmb944vxmJrG26A48kxvMvcWxpvvgQ5cFg0ua3+Wukuyp35yWQmr3beOmM9g JT4Rk1IOVg2iOf70WQo8o1jV7mcaedVSCWfI4efhpsu3jRQz1HjZW6WkfcTx+gZs h9qcIadXi2L9XyqLwtSZ8e+bTyIQ8DrsCrGaPw1R3yqcGBQkIGMiryMsPyIL0m09 XVRXDXG127giXjeTkwY/Z5ImN++FsDFblsTYzAaCPPz7oe1yUCDBDbQwQJiWWg7A 8QcbNNLn+ORh6JoFRPY89LLQ8W/8S9HMSv5TT+bC6KUelV3+WrTWUcq5OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuv9E2tmObgqJsBVdkGsG7lJeopMB8GA1UdIwQY MBaAFADMTVCI23HiGHd9l20KrcSYxGz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQt YTIzODFjMzZjMDU0LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQtYTIzODFjMzZjMDU0 LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkflYq4qq XGP4OpKRsZ3pMtIoXrR7I6iafMoUtVlMIPrNgteZCxUiIHa4FCEp5xahHfTl1eYZ J03KFbX3Qcx/NMTQJTIkEuBtIDFcEK45l7duUfM8jXqviJroLks02vG3LqwthsoC RYBPBPJ107GYu0m43JLhjQ1ovrEvdjulplxGVKFiWaQkwpr9YFLK37i9s30rNktk HmInTyt8UkMHVtYoolEfUKF95ABKlQdQeJwsuX/q2dQVisP3pcvcO5WEdl/79z+P l3iZpNZPQfFFxEPsdjXEOuHRYbZQ+e86mcfkYtuLQLXdEheaXrGvIRIzAko3cB9X z1q7GoxcK+FBuA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:24:58 2025 by rpki-client