This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json) Hash identifier: mRJPviUpi45hLRHoUVl66jzcw9CoxKT2tUd7B/iUXgw= Subject key identifier: C8:38:B6:7D:D7:7C:74:8E:1A:8A:8B:3E:C2:6F:AF:09:37:47:F0:05 Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd Certificate serial: 019B21759EE436351F175BE26CE29CFD6515 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft Manifest number: 0E61 Signing time: Mon 15 Dec 2025 10:01:54 +0000 Manifest this update: Mon 15 Dec 2025 10:01:54 +0000 Manifest next update: Tue 16 Dec 2025 10:01:54 +0000 Files and hashes: 1: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: I03OPTBMt8Ucw+XuF8mhJKfncTs3qndC8m5VSlQlQWU=) 2: epNs1frSSHg0k8RApfvyiS1o3e4.roa (hash: EqfynGitiIuAYCHQvy1uEOFIiGIwRJnEdzdFNRHUcpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:9e:e4:36:35:1f:17:5b:e2:6c:e2:9c:fd:65:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd Validity Not Before: Dec 15 10:01:54 2025 GMT Not After : Dec 16 10:01:54 2025 GMT Subject: CN=c838b67dd77c748e1a8a8b3ec26faf093747f005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:71:44:fe:c8:3f:5b:c1:7a:aa:6a:13:bb: 2c:0d:84:7f:a8:a9:80:ff:2f:bc:eb:fe:85:ea:04: b5:c8:1c:e3:3f:76:22:ce:de:58:eb:99:52:72:a1: 7c:e2:d5:96:59:27:7f:f3:74:4f:a1:61:90:69:c0: cd:df:b6:db:1d:a9:17:b1:c4:58:a3:2a:e6:66:29: db:6a:81:b0:be:0b:5a:8c:be:92:1d:04:a4:aa:80: 84:f9:bd:97:03:3a:c9:56:11:5b:bc:91:67:bf:d8: f0:5f:d5:b6:43:0c:cc:07:a9:1a:a7:ec:ef:db:9e: 98:a3:d7:29:88:27:04:32:c3:ba:44:08:a3:bc:85: 12:38:b1:8b:ee:e8:ba:6f:d5:9b:83:1b:7f:0b:dd: 5e:9e:89:8e:bb:58:9e:5a:a9:9e:e0:3c:ed:f0:04: 52:30:ad:b5:43:ee:e2:db:d0:f5:75:00:ed:f8:c6: de:d3:e6:44:e5:94:03:ae:2b:ab:43:89:eb:dc:99: d2:c7:e7:a7:69:79:a8:3a:c4:97:2a:fa:b6:9e:f7: b1:fc:9b:aa:cd:e7:ac:91:f6:54:64:e8:3f:12:60: 6e:61:a5:a5:c5:12:53:74:1e:ec:c2:73:c6:c3:9d: c8:09:a2:ac:95:73:6d:0f:19:43:d8:b6:56:7e:e7: 7f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:38:B6:7D:D7:7C:74:8E:1A:8A:8B:3E:C2:6F:AF:09:37:47:F0:05 X509v3 Authority Key Identifier: keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:cd:a7:15:c4:54:df:f8:1c:f3:61:ea:13:40:fa:bc:6f:9b: aa:80:30:6f:b9:fd:89:19:aa:55:eb:45:85:cd:fa:50:88:82: 9c:44:20:5a:8a:49:2a:3e:de:45:d0:2d:40:bb:07:31:af:dc: 33:ce:54:f9:c0:74:7c:a5:ca:bf:c5:fa:84:9d:c3:a5:8b:83: 98:5d:c1:4e:02:c0:73:9b:ba:3f:d4:81:35:91:00:43:a9:5f: 01:0d:8a:3a:87:00:b3:92:36:a1:1a:d1:9d:56:38:ed:83:ab: 89:ef:f6:f2:82:82:a7:64:89:0b:0d:7d:8a:22:19:de:b1:06: 2f:c8:2d:d1:62:d3:14:7f:62:5d:e2:68:99:1a:29:a8:77:2e: b7:c5:28:59:86:b5:03:2d:6f:57:cd:9c:90:1e:a3:16:1c:0c: 8b:98:60:05:f9:c1:7a:1c:40:48:c6:f0:62:7e:c5:46:ec:08: ce:5e:36:ea:c6:f7:6f:e2:1f:48:96:cf:db:3c:48:08:72:64: fe:b3:d8:d9:df:0d:94:4a:69:06:2c:bc:cb:9c:2c:6d:11:b1: 6c:db:a5:7f:f0:c7:5a:7d:6a:03:18:a6:d5:36:6f:c5:99:1d: d5:8c:1d:7b:bb:7f:ae:ff:24:f4:ce:24:98:74:ca:0e:52:a6: 2b:e9:dc:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdZ7kNjUfF1vibOKc/WUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyM2FkNmM0NDU4ZmU2OWY0NTkxZmFjY2I1NmJkYzMzMWFm NmI0Y2QwHhcNMjUxMjE1MTAwMTU0WhcNMjUxMjE2MTAwMTU0WjAzMTEwLwYDVQQD EyhjODM4YjY3ZGQ3N2M3NDhlMWE4YThiM2VjMjZmYWYwOTM3NDdmMDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF5xRP7IP1vBeqpqE7ssDYR/qKmA /y+86/6F6gS1yBzjP3Yizt5Y65lScqF84tWWWSd/83RPoWGQacDN37bbHakXscRY oyrmZinbaoGwvgtajL6SHQSkqoCE+b2XAzrJVhFbvJFnv9jwX9W2QwzMB6kap+zv 256Yo9cpiCcEMsO6RAijvIUSOLGL7ui6b9Wbgxt/C91enomOu1ieWqme4Dzt8ARS MK21Q+7i29D1dQDt+Mbe0+ZE5ZQDriurQ4nr3JnSx+enaXmoOsSXKvq2nvex/Juq zeeskfZUZOg/EmBuYaWlxRJTdB7swnPGw53ICaKslXNtDxlD2LZWfud/mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMg4tn3XfHSOGoqLPsJvrwk3R/AFMB8GA1UdIwQY MBaAFAI61sRFj+afRZH6zLVr3DMa9rTNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQt MjRmMjg3YzlhNWY0LzEvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQtMjRmMjg3YzlhNWY0 LzEvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiM2nFcRU 3/gc82HqE0D6vG+bqoAwb7n9iRmqVetFhc36UIiCnEQgWopJKj7eRdAtQLsHMa/c M85U+cB0fKXKv8X6hJ3DpYuDmF3BTgLAc5u6P9SBNZEAQ6lfAQ2KOocAs5I2oRrR nVY47YOrie/28oKCp2SJCw19iiIZ3rEGL8gt0WLTFH9iXeJomRopqHcut8UoWYa1 Ay1vV82ckB6jFhwMi5hgBfnBehxASMbwYn7FRuwIzl426sb3b+IfSJbP2zxICHJk /rPY2d8NlEppBiy8y5wsbRGxbNulf/DHWn1qAxim1TZvxZkd1Ywde7t/rv8k9M4k mHTKDlKmK+nc/w== -----END CERTIFICATE-----Generated at Mon Dec 15 16:48:20 2025 by rpki-client