This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft File: AhfGZs2iPpINFLkK6TY3EzUKrB4.mft (raw, json) Hash identifier: kFczC3x1icOicThzZjWXOZNyJ3esFiDq/LvBByVr/hc= Subject key identifier: 3A:85:45:F0:5F:57:42:D1:14:2F:28:EF:6E:E8:79:13:C9:6D:6C:48 Authority key identifier: 02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E Certificate issuer: /CN=0217c666cda23e920d14b90ae9363713350aac1e Certificate serial: 019B378F4243FAB55FCDB96703D781876F88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 17:01:34 +0000 Manifest this update: Fri 19 Dec 2025 17:01:34 +0000 Manifest next update: Sat 20 Dec 2025 17:01:34 +0000 Files and hashes: 1: AhfGZs2iPpINFLkK6TY3EzUKrB4.crl (hash: 0gv2TN52tH6CNWs9UvUxmrVvW6x9AZflsdh1TsMy03E=) 2: osyzbtU7GZmaeY_CNmdQy5Vz8jw.roa (hash: /Wf83f8E6EuxQUr3auZsag/VGfFdi1UD8Jonkresr4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:42:43:fa:b5:5f:cd:b9:67:03:d7:81:87:6f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0217c666cda23e920d14b90ae9363713350aac1e Validity Not Before: Dec 19 17:01:34 2025 GMT Not After : Dec 20 17:01:34 2025 GMT Subject: CN=3a8545f05f5742d1142f28ef6ee87913c96d6c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:22:e2:f7:dd:4a:7f:24:0f:74:41:da:45:99: 82:93:fa:da:7d:8c:29:84:79:eb:5e:4b:54:31:5a: df:5e:33:13:53:2b:bb:da:44:4d:b9:0f:0d:52:4d: 9f:f6:7a:d7:b5:e7:b2:7e:99:c4:5b:46:22:4f:f3: 6d:e9:47:48:4b:7b:40:22:ae:c9:87:3d:fd:80:35: 17:3f:b3:90:08:e6:9b:13:7d:b6:4d:74:ba:0d:47: 63:6a:53:cf:b6:3f:f6:c0:35:3a:83:6e:43:98:a3: fd:f3:25:87:1e:1c:70:3a:a2:dd:52:b5:d8:d1:4c: 54:4d:12:7a:b6:55:98:93:f2:a1:bc:52:ec:40:80: 31:05:2e:5a:50:b1:b3:55:b4:4c:54:cb:f7:0f:c3: 02:b0:8a:0c:2f:61:19:5e:5a:1b:cb:37:ab:2d:da: 95:fd:df:13:66:7e:46:ac:43:13:6b:c7:4a:7d:3e: 2e:f2:98:fa:00:de:5d:a3:45:e1:41:fb:b1:62:86: 03:f6:ff:ae:39:ad:41:59:d7:d7:0e:18:7b:23:f9: ab:8a:c7:60:69:3d:66:b4:2f:0e:9a:fb:04:e5:89: 37:e3:6c:87:f2:dd:70:cb:b5:1a:57:23:d3:0b:a7: 8b:f9:11:46:68:18:28:22:0e:61:ec:32:ba:2a:0b: af:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:85:45:F0:5F:57:42:D1:14:2F:28:EF:6E:E8:79:13:C9:6D:6C:48 X509v3 Authority Key Identifier: keyid:02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:47:46:ca:97:5a:42:bf:f6:66:19:60:21:a1:e2:37:6c:7f: b2:d8:2e:a7:59:95:70:27:60:81:fb:38:f2:94:45:75:29:bd: 20:ed:50:9f:f9:d6:ca:db:8c:59:7e:62:44:09:9b:93:01:35: 5c:73:55:56:42:12:74:e5:b9:4e:4a:c8:77:ee:40:3d:c5:32: 16:6c:cb:17:b8:f2:90:aa:7c:eb:33:91:10:c2:09:b8:d6:46: 1b:01:29:57:96:1a:b3:a0:12:21:42:ba:4d:eb:64:23:ce:01: 23:61:81:d5:26:92:9c:8e:fe:8b:db:2b:fb:59:24:be:0f:f1: 57:75:96:e8:2f:0b:5d:90:aa:1e:f1:15:ca:8e:95:a6:83:aa: 4e:a0:c4:6d:83:2b:49:2a:0c:48:61:15:f4:4c:ab:e5:a6:0d: 81:58:84:08:9c:9d:b0:f4:e2:ee:aa:0c:50:07:5c:ff:e5:8e: 8d:33:42:da:17:23:ab:4a:b0:0b:49:df:db:ba:d2:76:60:ad: f0:b8:a3:4e:42:09:89:d2:18:01:33:67:24:01:93:47:2b:b2: f5:6c:32:5a:9d:1b:02:31:ac:4d:7f:54:50:57:33:f5:6e:07: d9:0a:8e:b1:57:bc:e3:1e:9f:c5:5f:fe:33:a3:71:fc:e3:ed: a9:13:be:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3j0JD+rVfzblnA9eBh2+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMTdjNjY2Y2RhMjNlOTIwZDE0YjkwYWU5MzYzNzEzMzUw YWFjMWUwHhcNMjUxMjE5MTcwMTM0WhcNMjUxMjIwMTcwMTM0WjAzMTEwLwYDVQQD EygzYTg1NDVmMDVmNTc0MmQxMTQyZjI4ZWY2ZWU4NzkxM2M5NmQ2YzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiLi991KfyQPdEHaRZmCk/rafYwp hHnrXktUMVrfXjMTUyu72kRNuQ8NUk2f9nrXteeyfpnEW0YiT/Nt6UdIS3tAIq7J hz39gDUXP7OQCOabE322TXS6DUdjalPPtj/2wDU6g25DmKP98yWHHhxwOqLdUrXY 0UxUTRJ6tlWYk/KhvFLsQIAxBS5aULGzVbRMVMv3D8MCsIoML2EZXlobyzerLdqV /d8TZn5GrEMTa8dKfT4u8pj6AN5do0XhQfuxYoYD9v+uOa1BWdfXDhh7I/mrisdg aT1mtC8OmvsE5Yk342yH8t1wy7UaVyPTC6eL+RFGaBgoIg5h7DK6KguvNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqFRfBfV0LRFC8o727oeRPJbWxIMB8GA1UdIwQY MBaAFAIXxmbNoj6SDRS5Cuk2NxM1CqweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWhmR1pzMmlQcElORkxrSzZUWTNFelVLckI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jZmEwYjUtZTFhMS00MWZmLTg4Y2It MDI5NzE1ZGU0YzZmLzEvQWhmR1pzMmlQcElORkxrSzZUWTNFelVLckI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9jZmEwYjUtZTFhMS00MWZmLTg4Y2ItMDI5NzE1ZGU0YzZm LzEvQWhmR1pzMmlQcElORkxrSzZUWTNFelVLckI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0dGypda Qr/2ZhlgIaHiN2x/stgup1mVcCdggfs48pRFdSm9IO1Qn/nWytuMWX5iRAmbkwE1 XHNVVkISdOW5TkrId+5APcUyFmzLF7jykKp86zOREMIJuNZGGwEpV5Yas6ASIUK6 TetkI84BI2GB1SaSnI7+i9sr+1kkvg/xV3WW6C8LXZCqHvEVyo6VpoOqTqDEbYMr SSoMSGEV9Eyr5aYNgViECJydsPTi7qoMUAdc/+WOjTNC2hcjq0qwC0nf27rSdmCt 8LijTkIJidIYATNnJAGTRyuy9WwyWp0bAjGsTX9UUFcz9W4H2QqOsVe84x6fxV/+ M6Nx/OPtqRO+gg== -----END CERTIFICATE-----Generated at Sat Dec 20 01:54:06 2025 by rpki-client