This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft File: AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json) Hash identifier: LIjVARU4kQ+oSoKqPMIcB6VaIFAIv+Cvn0TEbiMOIN0= Subject key identifier: DE:E2:A6:BD:7D:E3:86:74:46:19:46:AA:F5:EE:E9:A4:F5:98:D9:30 Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B Certificate issuer: /CN=00a856a4173895af44b8fd34455469a5c4d6173b Certificate serial: 019B42B6C0AF1144685C14F278719D83ABFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft Manifest number: 02D0 Signing time: Sun 21 Dec 2025 21:00:31 +0000 Manifest this update: Sun 21 Dec 2025 21:00:31 +0000 Manifest next update: Mon 22 Dec 2025 21:00:31 +0000 Files and hashes: 1: 4mezRfHPXPaCo28qoJyolX64C48.roa (hash: QHUvtDK2DiCjdwwLpsM73EoVrUrKJFVkLwmkkTWUE3k=) 2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: xHYz/EogYBUFn8i5QsG6yGvQoirR7WU51r8s/j46V74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:c0:af:11:44:68:5c:14:f2:78:71:9d:83:ab:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b Validity Not Before: Dec 21 21:00:31 2025 GMT Not After : Dec 22 21:00:31 2025 GMT Subject: CN=dee2a6bd7de38674461946aaf5eee9a4f598d930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:14:ad:56:99:32:3e:a3:d5:cd:2b:41:ab:ae: 66:c0:2e:b2:e0:4e:35:35:fd:b1:1e:a9:6e:43:33: d3:20:ae:e1:cd:4b:2c:85:98:26:ad:cf:a5:e8:33: 29:82:d5:79:32:3c:fc:37:8f:1d:ca:14:3a:a9:18: bf:15:a7:d9:34:bf:b0:2c:b3:6c:d3:c4:ec:89:4a: 92:d7:2a:c6:6b:1e:59:19:ac:63:18:73:b9:3e:fb: 79:05:26:1f:4b:40:ae:c4:64:20:10:58:9d:3f:47: 87:0a:d2:76:3d:2c:fe:3a:4e:7a:38:0a:72:31:e8: cb:f3:fa:2e:98:44:29:51:df:47:0b:27:4f:6f:03: f6:ae:d9:fd:c6:12:66:01:1c:2f:04:24:bb:86:b3: c0:8f:38:1f:86:7f:05:0b:ac:32:f3:eb:f7:3d:56: 1d:a0:93:14:e6:b7:a4:37:cb:7e:a1:39:6a:80:f3: 57:11:be:51:35:42:d3:b1:29:19:5e:9a:ca:35:03: e9:99:9f:ef:bb:82:b7:6a:96:25:de:c7:e7:0d:be: 98:c1:f8:f9:29:43:32:d2:d0:0b:f8:d0:15:65:21: 0a:e6:c4:6a:1f:81:a5:73:71:6d:5e:e1:ad:b1:60: e6:91:3f:aa:0d:ac:a6:bf:02:6b:a4:c0:39:3a:ea: 15:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E2:A6:BD:7D:E3:86:74:46:19:46:AA:F5:EE:E9:A4:F5:98:D9:30 X509v3 Authority Key Identifier: keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:64:e0:91:eb:3d:0b:3a:cf:2d:77:6d:7a:e2:11:6a:f6:01: 73:a2:3e:88:eb:3f:2c:06:ef:98:9a:0a:e0:d5:92:02:3a:ad: f8:6b:ec:75:fc:1f:65:53:aa:30:d8:8f:20:cf:4e:4e:97:e8: 8f:fe:83:a3:c9:88:76:7a:5e:00:e0:cf:9b:a4:cf:04:2d:d5: 86:4c:2f:34:b4:60:f5:00:17:3d:66:98:83:26:7e:51:4a:15: 63:20:9a:54:b1:cf:75:11:6b:fa:5e:1e:da:14:12:3b:fd:73: fb:32:56:d5:87:82:a4:37:5d:e9:db:2f:55:37:93:34:fe:cc: db:e4:3c:01:49:93:4a:27:4f:a2:c9:0c:8a:fe:a1:eb:48:07: bd:a8:3c:ad:b5:8b:02:6d:3e:0a:e3:4e:5c:dc:28:c9:f5:50: e9:33:f5:e1:7a:e0:92:73:77:c5:ba:5e:9f:07:b4:7f:58:7d: f8:86:cb:32:63:10:4a:24:ea:9a:8e:3d:c4:6e:54:89:bf:4d: 3f:81:7d:86:d8:90:e8:26:26:34:fc:c5:f0:0a:c6:7e:bc:ab: 59:52:32:0f:5e:ab:d9:56:f0:90:cc:6b:e8:38:35:57:88:a2: 9d:0a:10:53:31:9d:0a:a1:98:dc:6d:96:88:e2:2b:01:62:d8: b0:66:7a:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtsCvEURoXBTyeHGdg6v8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYTg1NmE0MTczODk1YWY0NGI4ZmQzNDQ1NTQ2OWE1YzRk NjE3M2IwHhcNMjUxMjIxMjEwMDMxWhcNMjUxMjIyMjEwMDMxWjAzMTEwLwYDVQQD EyhkZWUyYTZiZDdkZTM4Njc0NDYxOTQ2YWFmNWVlZTlhNGY1OThkOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxStVpkyPqPVzStBq65mwC6y4E41 Nf2xHqluQzPTIK7hzUsshZgmrc+l6DMpgtV5Mjz8N48dyhQ6qRi/FafZNL+wLLNs 08TsiUqS1yrGax5ZGaxjGHO5Pvt5BSYfS0CuxGQgEFidP0eHCtJ2PSz+Ok56OApy MejL8/oumEQpUd9HCydPbwP2rtn9xhJmARwvBCS7hrPAjzgfhn8FC6wy8+v3PVYd oJMU5rekN8t+oTlqgPNXEb5RNULTsSkZXprKNQPpmZ/vu4K3apYl3sfnDb6Ywfj5 KUMy0tAL+NAVZSEK5sRqH4Glc3FtXuGtsWDmkT+qDaymvwJrpMA5OuoV4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7ipr1944Z0RhlGqvXu6aT1mNkwMB8GA1UdIwQY MBaAFACoVqQXOJWvRLj9NEVUaaXE1hc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82Yjc1MTItOTJjYS00OWY5LTk4NzAt Y2I5ZTdkZGFkMTg5LzEvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82Yjc1MTItOTJjYS00OWY5LTk4NzAtY2I5ZTdkZGFkMTg5 LzEvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGTgkes9 CzrPLXdteuIRavYBc6I+iOs/LAbvmJoK4NWSAjqt+GvsdfwfZVOqMNiPIM9OTpfo j/6Do8mIdnpeAODPm6TPBC3VhkwvNLRg9QAXPWaYgyZ+UUoVYyCaVLHPdRFr+l4e 2hQSO/1z+zJW1YeCpDdd6dsvVTeTNP7M2+Q8AUmTSidPoskMiv6h60gHvag8rbWL Am0+CuNOXNwoyfVQ6TP14XrgknN3xbpenwe0f1h9+IbLMmMQSiTqmo49xG5Uib9N P4F9htiQ6CYmNPzF8ArGfryrWVIyD16r2VbwkMxr6Dg1V4iinQoQUzGdCqGY3G2W iOIrAWLYsGZ6eA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:43:38 2025 by rpki-client