This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json) Hash identifier: St7NhRfbBO/jG9UNnAv5dxT8S7wThBUy+fz5s68gDxU= Subject key identifier: 9D:EC:38:91:5E:65:B0:F7:74:B5:83:E1:05:8C:F5:47:75:99:35:AB Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90 Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90 Certificate serial: 019B1201CBB1967766EDAC356311A79E9BF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft Manifest number: 03EA Signing time: Fri 12 Dec 2025 10:01:06 +0000 Manifest this update: Fri 12 Dec 2025 10:01:06 +0000 Manifest next update: Sat 13 Dec 2025 10:01:06 +0000 Files and hashes: 1: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: leOk3g5NxuRsQSVuDAXP1GrssznxgTrOTzr5y5JFGGQ=) 2: PinfW_YHyw5uymC7Qg5_e_ihs1A.roa (hash: pxez1kR2olajgq0bPf5GWwA/2mx0CN85t2SDcizNJFk=) 3: q6pqSEbcTlqmRayyanV7tPyo7fs.roa (hash: EC2KtAOMCahopm9kPSQwxVqEk8+Lm5s50v5gQFz0rN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:01:cb:b1:96:77:66:ed:ac:35:63:11:a7:9e:9b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90 Validity Not Before: Dec 12 10:01:06 2025 GMT Not After : Dec 13 10:01:06 2025 GMT Subject: CN=9dec38915e65b0f774b583e1058cf547759935ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6d:66:d5:5d:d8:45:b5:6a:ea:d8:66:62:cb: b7:cd:54:80:bf:6a:18:e7:0e:03:b6:e7:02:e7:20: 99:63:35:52:57:67:37:c4:27:0e:6e:35:9f:d9:73: 9a:50:5f:4b:30:9c:66:d5:19:c8:b1:42:5d:2c:ae: ce:0e:c5:8b:f0:e6:95:c5:1c:fd:ee:10:e5:dc:5a: cb:bb:d1:d8:8b:69:64:4a:00:ac:ee:47:33:d9:b6: da:d1:7e:61:c0:2d:f4:10:79:47:f4:98:85:02:3b: 99:5f:5b:5c:8b:4e:6f:00:94:3e:75:08:ec:02:f1: c5:17:9a:c0:01:d5:18:56:69:38:5f:ca:53:bd:ca: cd:68:cc:e3:b2:c5:50:91:36:33:f8:04:cb:e2:94: 09:94:e4:a5:68:a3:4c:69:ce:35:02:3c:37:13:d5: fb:1d:11:03:4e:c3:88:5a:91:26:af:18:8c:07:68: a3:17:45:90:fe:e5:79:20:d8:ad:42:84:b9:f8:35: 01:4a:87:7f:40:72:f7:b1:d7:a7:28:df:be:f5:12: c6:85:f8:ca:40:92:ca:eb:21:2a:36:14:39:49:2d: b7:f8:cb:d3:7c:c6:df:1b:60:f5:22:4a:64:8f:9b: 8e:5c:0e:3e:f1:27:de:18:24:49:7c:69:dd:26:f7: 2b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EC:38:91:5E:65:B0:F7:74:B5:83:E1:05:8C:F5:47:75:99:35:AB X509v3 Authority Key Identifier: keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:81:8f:a3:d7:46:ee:88:9a:28:24:6c:b2:8f:32:8b:c6:bc: f1:7e:44:85:0b:79:00:c3:58:3d:a4:14:5e:0f:1f:4b:64:96: 94:85:31:50:1d:d9:fc:01:34:1f:b2:af:ca:c6:88:84:73:9a: a1:23:d3:41:28:44:26:a5:38:97:7b:3a:6d:ae:e6:0a:fb:56: 18:cb:02:88:48:cd:b7:54:a2:77:53:27:80:72:b1:7b:73:92: 6b:d4:ea:17:65:a5:45:b7:d3:03:a0:90:d6:f4:89:7d:d9:64: ef:07:60:9f:22:df:9c:43:b3:86:f2:a4:b7:cc:cb:23:d7:f9: 71:19:4a:85:62:61:15:af:af:f4:29:6d:30:9b:24:7c:e6:70: 5e:10:87:6b:42:de:a3:d6:aa:19:3f:09:b9:3f:b8:71:7f:79: 7e:a9:1f:a9:0e:fb:f5:49:72:18:81:20:61:39:1c:7b:28:88: 1b:e5:3e:75:66:69:b2:31:c4:87:89:73:e9:93:a1:75:64:ee: 18:78:73:c3:55:5d:a8:32:30:46:35:cd:53:00:bf:91:78:c9: fc:3e:d5:f1:4c:39:79:3b:d7:8c:e2:90:bb:9b:38:51:b8:87: 3b:ee:f0:09:d9:0c:8d:63:56:60:34:aa:32:b9:d1:4e:34:46: 64:0a:f7:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAcuxlndm7aw1YxGnnpv1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNmQ1MTFjZTNhZjkwYzRkNjAxYzdjY2Y4MzYwNTIzNzEz ZTJjOTAwHhcNMjUxMjEyMTAwMTA2WhcNMjUxMjEzMTAwMTA2WjAzMTEwLwYDVQQD Eyg5ZGVjMzg5MTVlNjViMGY3NzRiNTgzZTEwNThjZjU0Nzc1OTkzNWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW1m1V3YRbVq6thmYsu3zVSAv2oY 5w4DtucC5yCZYzVSV2c3xCcObjWf2XOaUF9LMJxm1RnIsUJdLK7ODsWL8OaVxRz9 7hDl3FrLu9HYi2lkSgCs7kcz2bba0X5hwC30EHlH9JiFAjuZX1tci05vAJQ+dQjs AvHFF5rAAdUYVmk4X8pTvcrNaMzjssVQkTYz+ATL4pQJlOSlaKNMac41Ajw3E9X7 HREDTsOIWpEmrxiMB2ijF0WQ/uV5INitQoS5+DUBSod/QHL3sdenKN++9RLGhfjK QJLK6yEqNhQ5SS23+MvTfMbfG2D1Ikpkj5uOXA4+8SfeGCRJfGndJvcr+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3sOJFeZbD3dLWD4QWM9Ud1mTWrMB8GA1UdIwQY MBaAFAJtURzjr5DE1gHHzPg2BSNxPiyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMGM0MDItZTA5ZS00YzY5LWFjYzkt ODRkYTYyMDY2ZThhLzEvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iMGM0MDItZTA5ZS00YzY5LWFjYzktODRkYTYyMDY2ZThh LzEvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYGPo9dG 7oiaKCRsso8yi8a88X5EhQt5AMNYPaQUXg8fS2SWlIUxUB3Z/AE0H7KvysaIhHOa oSPTQShEJqU4l3s6ba7mCvtWGMsCiEjNt1Sid1MngHKxe3OSa9TqF2WlRbfTA6CQ 1vSJfdlk7wdgnyLfnEOzhvKkt8zLI9f5cRlKhWJhFa+v9CltMJskfOZwXhCHa0Le o9aqGT8JuT+4cX95fqkfqQ779UlyGIEgYTkceyiIG+U+dWZpsjHEh4lz6ZOhdWTu GHhzw1VdqDIwRjXNUwC/kXjJ/D7V8Uw5eTvXjOKQu5s4UbiHO+7wCdkMjWNWYDSq MrnRTjRGZAr3kw== -----END CERTIFICATE-----Generated at Fri Dec 12 14:21:19 2025 by rpki-client