This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft File: AmC3ClCt6tObcJtZAEbFLgzGkps.mft (raw, json) Hash identifier: sNJ7g6uwAyzImclZJFfClONheHn7F+cLHBiMp4EEBL4= Subject key identifier: FD:F0:43:3C:44:02:89:70:8B:96:E0:13:94:AC:2A:6F:74:E2:C8:D4 Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B Certificate issuer: /CN=0260b70a50adead39b709b590046c52e0cc6929b Certificate serial: 019B593EDAD7BEB29967D62AC01E2A747900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 06:00:50 +0000 Manifest this update: Fri 26 Dec 2025 06:00:50 +0000 Manifest next update: Sat 27 Dec 2025 06:00:50 +0000 Files and hashes: 1: AmC3ClCt6tObcJtZAEbFLgzGkps.crl (hash: yOKtvv/wvXP7dWP9enaJIb82ccYm3ChTb7p6eNxjlc4=) 2: BsiQkly5iU4gw1q2lU_R_QYiUVI.roa (hash: GSu5+TouG087KCKliG/UXdeib+u9Od4yfNdV1aL8UDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:da:d7:be:b2:99:67:d6:2a:c0:1e:2a:74:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b Validity Not Before: Dec 26 06:00:50 2025 GMT Not After : Dec 27 06:00:50 2025 GMT Subject: CN=fdf0433c440289708b96e01394ac2a6f74e2c8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:4c:ba:c1:49:73:e7:6e:5c:4a:f1:9f:b2:53: 62:71:e1:6c:18:7d:6b:a9:3a:b6:21:b0:9d:00:3d: dc:67:de:af:c1:ab:d3:41:70:b7:59:2e:67:e7:cf: 91:84:a3:b7:3f:af:cf:71:66:66:ab:a7:b2:ed:23: 2f:65:88:1d:5a:fd:b9:a4:04:c5:06:56:49:24:f2: 20:94:32:84:bc:a7:d1:32:41:2d:37:ad:08:fb:c9: 7e:a6:dc:e6:95:bd:5b:68:6b:17:4d:bf:38:cf:09: 95:88:54:06:7c:f8:2c:4d:74:39:22:32:fa:2b:2c: e2:07:b2:96:bf:38:eb:d8:80:f0:92:27:c6:45:be: 74:f9:cc:28:c5:b8:70:2c:cd:44:29:54:b8:49:bc: 27:2a:25:2a:f0:aa:a6:99:6b:9c:3e:8c:43:8f:c5: 0a:c2:e7:9b:dc:dd:97:9a:36:22:cb:31:5d:ab:50: 69:7f:72:3f:b4:de:27:36:6c:93:2c:1d:87:84:1b: d8:4b:cb:f0:46:81:df:86:07:75:a9:d7:2c:ed:38: 98:c6:42:27:5a:89:da:87:4d:1d:9e:a2:9e:fe:c1: 47:bb:71:70:57:28:ed:d2:e9:b0:3f:7f:49:b7:7b: 8b:71:9e:17:91:b8:3a:2c:92:43:16:8e:b6:7e:30: 58:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F0:43:3C:44:02:89:70:8B:96:E0:13:94:AC:2A:6F:74:E2:C8:D4 X509v3 Authority Key Identifier: keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e2:dd:00:76:ee:f3:a6:1d:d0:74:4c:b2:2f:ac:da:12:22: 9f:25:7f:08:bb:97:e7:22:3c:a2:9b:53:fe:2c:79:9a:b3:87: 7e:5f:e0:95:6b:c6:65:d4:5c:4a:a4:b2:de:01:42:15:c2:85: 4b:0f:53:00:c0:c3:b1:76:32:d3:f9:da:22:ea:8b:1e:1e:bf: 51:1b:c8:44:ee:e0:b9:6d:14:e6:08:b8:dd:6b:bf:06:d0:7b: 96:0a:05:cd:8d:90:b6:de:8c:22:b9:93:4d:41:82:44:16:1f: b5:86:8f:98:ec:a5:71:5f:1a:03:a9:e0:69:e6:c0:51:40:f6: c3:4d:e9:87:63:23:b3:81:7a:11:e2:74:cd:30:e8:01:16:6f: 5b:9a:e8:ea:27:83:e2:08:e8:1f:04:77:10:a1:9f:31:d8:ef: 08:21:6e:eb:a8:dc:4c:0a:3d:82:43:c2:f4:a5:0a:39:85:e5: e3:30:e7:7f:9c:2b:e6:35:0f:05:67:e5:88:f0:df:a2:cd:f8: d1:c5:d5:fb:75:66:28:0c:ae:87:dd:65:e7:38:6a:97:86:81: db:a8:72:89:33:c7:99:2c:72:e1:45:28:26:54:8a:55:2a:c2: be:37:6f:f2:ca:94:29:c1:ec:72:97:41:00:82:9f:b5:ef:b8: bd:34:16:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPtrXvrKZZ9YqwB4qdHkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNjBiNzBhNTBhZGVhZDM5YjcwOWI1OTAwNDZjNTJlMGNj NjkyOWIwHhcNMjUxMjI2MDYwMDUwWhcNMjUxMjI3MDYwMDUwWjAzMTEwLwYDVQQD EyhmZGYwNDMzYzQ0MDI4OTcwOGI5NmUwMTM5NGFjMmE2Zjc0ZTJjOGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Uy6wUlz525cSvGfslNiceFsGH1r qTq2IbCdAD3cZ96vwavTQXC3WS5n58+RhKO3P6/PcWZmq6ey7SMvZYgdWv25pATF BlZJJPIglDKEvKfRMkEtN60I+8l+ptzmlb1baGsXTb84zwmViFQGfPgsTXQ5IjL6 KyziB7KWvzjr2IDwkifGRb50+cwoxbhwLM1EKVS4SbwnKiUq8KqmmWucPoxDj8UK wueb3N2XmjYiyzFdq1Bpf3I/tN4nNmyTLB2HhBvYS8vwRoHfhgd1qdcs7TiYxkIn Wonah00dnqKe/sFHu3FwVyjt0umwP39Jt3uLcZ4Xkbg6LJJDFo62fjBYewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3wQzxEAolwi5bgE5SsKm904sjUMB8GA1UdIwQY MBaAFAJgtwpQrerTm3CbWQBGxS4MxpKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW1DM0NsQ3Q2dE9iY0p0WkFFYkZMZ3pHa3BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81ZWIxMzAtYTBmNy00OWFmLWEyNzEt ZWJlYzJhNDJlNjBkLzEvQW1DM0NsQ3Q2dE9iY0p0WkFFYkZMZ3pHa3BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy81ZWIxMzAtYTBmNy00OWFmLWEyNzEtZWJlYzJhNDJlNjBk LzEvQW1DM0NsQ3Q2dE9iY0p0WkFFYkZMZ3pHa3BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuLdAHbu 86Yd0HRMsi+s2hIinyV/CLuX5yI8optT/ix5mrOHfl/glWvGZdRcSqSy3gFCFcKF Sw9TAMDDsXYy0/naIuqLHh6/URvIRO7guW0U5gi43Wu/BtB7lgoFzY2Qtt6MIrmT TUGCRBYftYaPmOylcV8aA6ngaebAUUD2w03ph2Mjs4F6EeJ0zTDoARZvW5ro6ieD 4gjoHwR3EKGfMdjvCCFu66jcTAo9gkPC9KUKOYXl4zDnf5wr5jUPBWfliPDfos34 0cXV+3VmKAyuh91l5zhql4aB26hyiTPHmSxy4UUoJlSKVSrCvjdv8sqUKcHscpdB AIKfte+4vTQWKQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:30 2025 by rpki-client