This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft File: AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft (raw, json) Hash identifier: DqXycTEQxVMBSFo+D7bwhQZuHRZHDKmGiK3WFnHu2ZY= Subject key identifier: 26:AA:6A:17:C3:E8:42:E5:25:E9:94:40:1C:C5:F9:EB:33:FE:02:C3 Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F Certificate issuer: /CN=02558509e1c0ec160de2e074177213de30615d6f Certificate serial: 019B507327BB5509CECBF241CD6DD70D5379 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft Manifest number: 1698 Signing time: Wed 24 Dec 2025 13:01:22 +0000 Manifest this update: Wed 24 Dec 2025 13:01:22 +0000 Manifest next update: Thu 25 Dec 2025 13:01:22 +0000 Files and hashes: 1: AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl (hash: d2vWbr1UEWaV1O644KhkVT/nNmklJaa2nFWB1Ha8fBw=) 2: kSz4LlQ62tJYPQQ8qxacl2uxsCY.roa (hash: 8GdPcvKpfPL7jxJZaxJa9Y6MJqoF7wYY1b8gzsfXwWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:73:27:bb:55:09:ce:cb:f2:41:cd:6d:d7:0d:53:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f Validity Not Before: Dec 24 13:01:22 2025 GMT Not After : Dec 25 13:01:22 2025 GMT Subject: CN=26aa6a17c3e842e525e994401cc5f9eb33fe02c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:76:a2:e2:4d:17:bf:8f:f8:33:98:09:f9:21: bc:c2:50:ea:6e:28:3c:85:4d:47:02:b7:10:08:b0: 77:d6:ab:23:f4:97:c8:87:b5:30:e2:9a:99:c2:92: cf:ba:a8:c1:08:94:9e:24:41:d6:52:f6:b8:6c:41: 4d:ce:c9:37:1c:ee:eb:e8:9b:a8:20:17:d1:8a:b4: cc:f5:19:47:4f:97:13:f9:61:35:fe:5d:b8:e2:c3: ad:8b:39:b2:90:12:34:09:4d:05:41:7b:97:78:00: 30:35:94:1b:19:ff:06:c2:44:3d:2a:d2:68:eb:12: a7:23:45:d5:6e:37:50:e7:d7:29:b6:10:b6:ca:ec: a0:fb:5c:aa:03:45:72:43:6e:82:39:d7:4e:b9:ab: 5e:ae:3f:a0:a9:67:4a:53:0b:aa:9a:9f:11:68:ef: b5:b2:62:1d:01:10:6d:2e:23:a7:81:58:37:15:b3: 3b:d0:d2:af:5d:ce:ea:e0:54:f3:28:28:b6:a5:71: 1e:47:ad:69:75:ff:79:77:d9:cc:cc:ec:e4:68:9d: 82:41:5f:36:95:91:04:b6:4c:1b:d6:0d:d0:cf:1c: 63:26:67:cc:9a:b7:69:8d:3b:e0:ed:ff:39:cf:44: 72:61:bb:a9:bf:bc:0f:12:37:0c:fe:82:27:db:8d: 5e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AA:6A:17:C3:E8:42:E5:25:E9:94:40:1C:C5:F9:EB:33:FE:02:C3 X509v3 Authority Key Identifier: keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:7d:de:33:6f:26:17:1c:14:d2:08:77:74:42:f2:b6:2d:23: 31:e7:22:6c:95:ea:8f:a1:15:22:51:99:7e:02:39:c5:a0:d8: 74:44:02:27:ca:31:22:7d:93:c1:44:52:4f:fb:78:80:78:9d: 1e:be:4b:6f:fc:35:83:4d:6f:dd:1c:2f:b5:94:b7:96:f3:68: 11:ab:af:19:47:0d:e7:fe:16:0f:86:ce:58:ce:d4:ae:25:f0: 6e:41:55:33:f2:0d:cd:70:19:f9:79:34:32:af:ae:3b:ef:12: 51:eb:00:05:17:fb:ab:e8:8c:a4:0f:e8:b3:e1:dd:16:c6:66: c4:f8:ee:e1:75:ca:cf:8a:e7:e5:1b:c8:f6:8f:a3:8d:78:63: 1d:9a:1f:1f:d0:b3:09:57:79:f5:ba:5d:36:cb:57:2e:c0:06: ec:71:a1:ab:0a:8d:82:7a:5c:9b:a4:9b:0b:c0:74:70:bc:fc: 6e:13:27:1e:d0:e9:fb:52:13:a1:8f:8f:75:d9:ca:ff:1c:ef: 47:2c:83:4b:1b:fd:06:22:53:f3:e1:f4:39:94:81:47:e6:1f: e9:55:23:99:e5:a6:d6:38:44:6a:6e:97:eb:e3:41:f7:29:3b: 65:b0:01:83:9f:65:9f:fc:2c:de:12:bf:4b:17:2e:82:89:1b: 7a:75:c7:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcye7VQnOy/JBzW3XDVN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNTU4NTA5ZTFjMGVjMTYwZGUyZTA3NDE3NzIxM2RlMzA2 MTVkNmYwHhcNMjUxMjI0MTMwMTIyWhcNMjUxMjI1MTMwMTIyWjAzMTEwLwYDVQQD EygyNmFhNmExN2MzZTg0MmU1MjVlOTk0NDAxY2M1ZjllYjMzZmUwMmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnai4k0Xv4/4M5gJ+SG8wlDqbig8 hU1HArcQCLB31qsj9JfIh7Uw4pqZwpLPuqjBCJSeJEHWUva4bEFNzsk3HO7r6Juo IBfRirTM9RlHT5cT+WE1/l244sOtizmykBI0CU0FQXuXeAAwNZQbGf8GwkQ9KtJo 6xKnI0XVbjdQ59cpthC2yuyg+1yqA0VyQ26COddOuaterj+gqWdKUwuqmp8RaO+1 smIdARBtLiOngVg3FbM70NKvXc7q4FTzKCi2pXEeR61pdf95d9nMzOzkaJ2CQV82 lZEEtkwb1g3QzxxjJmfMmrdpjTvg7f85z0RyYbupv7wPEjcM/oIn241ePwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaqahfD6ELlJemUQBzF+esz/gLDMB8GA1UdIwQY MBaAFAJVhQnhwOwWDeLgdBdyE94wYV1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWxXRkNlSEE3QllONHVCMEYzSVQzakJoWFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hODYwYmYtMWEyNy00ZjBmLWJkOTEt N2FlNjkxMWNhMTI2LzEvQWxXRkNlSEE3QllONHVCMEYzSVQzakJoWFc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9hODYwYmYtMWEyNy00ZjBmLWJkOTEtN2FlNjkxMWNhMTI2 LzEvQWxXRkNlSEE3QllONHVCMEYzSVQzakJoWFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT33eM28m FxwU0gh3dELyti0jMecibJXqj6EVIlGZfgI5xaDYdEQCJ8oxIn2TwURST/t4gHid Hr5Lb/w1g01v3RwvtZS3lvNoEauvGUcN5/4WD4bOWM7UriXwbkFVM/INzXAZ+Xk0 Mq+uO+8SUesABRf7q+iMpA/os+HdFsZmxPju4XXKz4rn5RvI9o+jjXhjHZofH9Cz CVd59bpdNstXLsAG7HGhqwqNgnpcm6SbC8B0cLz8bhMnHtDp+1IToY+PddnK/xzv RyyDSxv9BiJT8+H0OZSBR+Yf6VUjmeWm1jhEam6X6+NB9yk7ZbABg59ln/ws3hK/ SxcugokbenXHRQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:55:43 2025 by rpki-client