This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft File: AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json) Hash identifier: GgOxLGiyXKymoAydgEu8Tu5asd2mJU2Vr4BHfH8WEsQ= Subject key identifier: 60:03:23:75:96:27:39:A9:36:A8:9F:C7:55:CB:68:43:7D:BF:15:DA Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5 Certificate issuer: /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5 Certificate serial: 019B58D179994E7D3EB9DCBC0AB9966FC11D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft Manifest number: 0D02 Signing time: Fri 26 Dec 2025 04:01:21 +0000 Manifest this update: Fri 26 Dec 2025 04:01:21 +0000 Manifest next update: Sat 27 Dec 2025 04:01:21 +0000 Files and hashes: 1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: QKn60SUmiyDiyeGIrmWu1TCRDMZtgYD6TGHHVUkK+OI=) 2: Zu7qmPE7Yu9qaSBN9WsSyKAeY2Y.roa (hash: 6EpeKHcevQPaPF9U/VGXI0S4HRJnkl5xIMQ3xA5Np4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:79:99:4e:7d:3e:b9:dc:bc:0a:b9:96:6f:c1:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5 Validity Not Before: Dec 26 04:01:21 2025 GMT Not After : Dec 27 04:01:21 2025 GMT Subject: CN=60032375962739a936a89fc755cb68437dbf15da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c5:1a:dc:33:4a:a5:7b:11:b5:9f:07:ee:49: 5e:42:83:49:a9:0a:ee:d5:d7:3e:eb:69:ed:7e:d0: b9:bc:71:55:b6:7a:8e:b4:d4:87:36:f4:d7:77:9f: fe:8b:4d:19:fc:f8:72:bc:45:04:e5:22:3a:ca:f6: 0c:f8:05:f2:c2:f8:d1:28:e7:dd:ef:21:cf:78:54: 1a:8a:89:ed:85:25:03:e5:22:a2:24:b8:9d:8d:21: 99:1c:0a:46:2c:9e:c8:b9:f8:a8:80:5c:d8:e7:82: 1c:b0:79:fc:fc:d9:c4:0f:b2:9c:16:a0:48:07:dd: 6a:01:6b:b3:3b:7b:d7:20:4d:75:6c:0e:ea:b5:eb: ea:7c:fa:57:f7:89:40:76:c4:40:79:21:a2:e2:49: 14:8d:ac:2f:d6:98:2d:da:63:1b:a7:5e:09:e5:74: 84:d7:8a:b1:9e:b4:74:7e:80:65:d7:b8:35:12:2b: 48:25:a7:ba:38:63:69:af:b4:65:9f:12:1c:b0:f5: 94:6d:c9:d2:9a:24:cf:7f:ce:ae:96:f5:54:51:53: 6e:bf:e7:d5:5c:19:a3:11:1b:3c:13:23:84:f6:7a: 2e:3f:55:f7:9a:b5:88:70:c5:60:ca:71:33:f2:8f: d2:2b:e9:2f:4e:75:e9:75:1f:0b:35:8e:5c:53:40: 00:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:03:23:75:96:27:39:A9:36:A8:9F:C7:55:CB:68:43:7D:BF:15:DA X509v3 Authority Key Identifier: keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c8:cc:c7:ca:24:c0:7b:01:86:a8:c9:e4:43:65:95:b8:63: 14:2a:82:20:47:1e:fd:30:6d:46:c6:2d:5a:65:51:32:a9:c7: e9:91:1a:bc:56:4d:0e:4f:51:11:c6:e4:04:c8:fb:15:81:8a: 60:e0:19:69:fc:04:28:d7:df:1f:51:b3:d4:fd:9c:6b:d0:e2: 95:9f:cb:66:27:1d:e4:c7:8c:79:b9:a0:55:5d:62:15:78:5b: 31:12:2a:f9:4e:e1:70:18:8d:f4:e9:17:cb:4b:96:c2:36:46: 66:eb:0a:33:fb:e3:a6:ac:fc:c9:7a:69:2c:ac:16:4a:ee:c5: cc:1f:56:d1:86:f9:ce:c8:0b:20:80:43:92:ba:d0:9a:81:ca: f2:64:92:4c:ac:db:9f:d5:f3:71:b5:8f:b6:6b:60:43:65:72: 94:2f:34:d0:bd:7b:c7:d4:09:d0:d3:32:6c:00:cd:9d:f8:24: eb:58:06:8a:06:90:cc:ef:a9:23:e7:5a:29:e7:43:d6:62:21: ba:cf:3c:02:7a:eb:9e:dc:ac:80:f7:8b:94:f9:b2:0b:24:64: 10:73:d1:81:cb:d0:3a:6f:ea:75:2a:b8:21:dc:1b:e2:1f:48: c7:2f:0c:b6:0d:65:03:9b:36:40:36:3c:67:cd:58:2b:c1:b6: 66:7c:68:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0XmZTn0+udy8CrmWb8EdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNGE3NThhMmIwYTdlOTM4YTlmMGRlZTY0MmNlYzVlNDEw Mjc2YjUwHhcNMjUxMjI2MDQwMTIxWhcNMjUxMjI3MDQwMTIxWjAzMTEwLwYDVQQD Eyg2MDAzMjM3NTk2MjczOWE5MzZhODlmYzc1NWNiNjg0MzdkYmYxNWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8Ua3DNKpXsRtZ8H7kleQoNJqQru 1dc+62ntftC5vHFVtnqOtNSHNvTXd5/+i00Z/PhyvEUE5SI6yvYM+AXywvjRKOfd 7yHPeFQaionthSUD5SKiJLidjSGZHApGLJ7IufiogFzY54IcsHn8/NnED7KcFqBI B91qAWuzO3vXIE11bA7qtevqfPpX94lAdsRAeSGi4kkUjawv1pgt2mMbp14J5XSE 14qxnrR0foBl17g1EitIJae6OGNpr7RlnxIcsPWUbcnSmiTPf86ulvVUUVNuv+fV XBmjERs8EyOE9nouP1X3mrWIcMVgynEz8o/SK+kvTnXpdR8LNY5cU0AAiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGADI3WWJzmpNqifx1XLaEN9vxXaMB8GA1UdIwQY MBaAFABKdYorCn6Tip8N7mQs7F5BAna1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjU5MTUtOTZhYS00ZGFkLWFmMmEt MDExMDI3MmRlYzE3LzEvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iZjU5MTUtOTZhYS00ZGFkLWFmMmEtMDExMDI3MmRlYzE3 LzEvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMjMx8ok wHsBhqjJ5ENllbhjFCqCIEce/TBtRsYtWmVRMqnH6ZEavFZNDk9REcbkBMj7FYGK YOAZafwEKNffH1Gz1P2ca9DilZ/LZicd5MeMebmgVV1iFXhbMRIq+U7hcBiN9OkX y0uWwjZGZusKM/vjpqz8yXppLKwWSu7FzB9W0Yb5zsgLIIBDkrrQmoHK8mSSTKzb n9XzcbWPtmtgQ2VylC800L17x9QJ0NMybADNnfgk61gGigaQzO+pI+daKedD1mIh us88AnrrntysgPeLlPmyCyRkEHPRgcvQOm/qdSq4Idwb4h9Ixy8Mtg1lA5s2QDY8 Z81YK8G2Znxorw== -----END CERTIFICATE-----Generated at Fri Dec 26 11:05:40 2025 by rpki-client