This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json) Hash identifier: srjmwdXJafwuXFqP87nI6nNTVmGw4omFneqTpNuDs9c= Subject key identifier: 78:F7:6C:BE:7E:92:23:21:50:B4:B9:10:81:6A:1F:1A:EE:7A:F3:B2 Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90 Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090 Certificate serial: 019B3343F7C4419A175D322D69D498E2CD7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 21:00:50 +0000 Manifest this update: Thu 18 Dec 2025 21:00:50 +0000 Manifest next update: Fri 19 Dec 2025 21:00:50 +0000 Files and hashes: 1: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: VXMBSTN5NMKPZsD178Lo1OG/7AzQil0HFtGZOTxvl0M=) 2: PuRCtZYS1zb-l6-lSbqSBFwnqhM.roa (hash: AbBVF9kyhgAnkvzoIY9J9QbGE309UtyTbrK9vyLj9EM=) 3: sAkyj21t8-IWELVSrcuIx5gPSVk.roa (hash: iR95lFASykLAMl0dgv405uAOE69TMGevQ+/+DeWufdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:f7:c4:41:9a:17:5d:32:2d:69:d4:98:e2:cd:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090 Validity Not Before: Dec 18 21:00:50 2025 GMT Not After : Dec 19 21:00:50 2025 GMT Subject: CN=78f76cbe7e92232150b4b910816a1f1aee7af3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:ca:92:0b:09:40:5c:c0:b2:67:ba:49:9b: c1:c0:92:4e:fa:1c:53:23:0c:67:ba:04:d2:bf:eb: 92:34:64:49:2c:68:61:63:5a:bb:63:bd:c4:a3:c3: cb:b6:ac:dc:99:19:ea:fb:cb:ae:84:6d:fa:53:78: 9c:d5:b0:93:63:0d:35:fc:a3:5a:03:e5:2d:c1:eb: a6:6b:3c:14:f5:d4:3e:46:b2:3c:18:d2:93:5c:87: 57:1d:9a:7c:27:33:f2:a7:29:1b:ba:64:f4:dd:42: 3a:26:3d:21:20:a6:39:53:a4:4f:8b:fd:8c:96:04: 1f:ee:c3:67:34:f1:f9:1d:64:f1:28:74:1c:4d:79: a5:1e:0e:b1:85:a8:ed:87:98:c7:4a:6a:10:f7:b1: 64:ad:ce:6c:f4:c2:d9:81:e4:cf:3d:3c:db:1a:ee: 9d:b9:4e:b7:0d:a9:8d:ef:5a:af:26:64:39:2d:7b: 26:29:0a:53:f8:94:c4:05:70:86:18:39:f2:fc:65: f8:78:39:f0:45:44:ee:fc:96:01:96:39:fc:ec:55: aa:2f:5c:8c:de:ce:d7:02:e6:d0:bf:a7:43:f3:fc: 68:2e:08:c5:51:25:d4:48:4a:2d:1d:16:c0:66:a2: 03:e2:e9:79:c8:47:39:3c:b9:b6:d0:e2:53:11:0d: 83:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F7:6C:BE:7E:92:23:21:50:B4:B9:10:81:6A:1F:1A:EE:7A:F3:B2 X509v3 Authority Key Identifier: keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f9:1f:ce:14:98:69:e5:9c:d4:8f:2a:65:37:a8:69:da:bd: d9:7c:df:cf:99:6f:1e:fa:10:51:10:ca:99:4d:41:0b:f1:ba: 0a:bc:e2:d1:81:ca:7d:77:e2:58:35:32:1a:a6:09:40:00:0f: e8:e5:e8:c9:90:b3:9e:7a:0d:55:58:88:32:7b:2f:c0:6f:a6: 85:89:88:67:6a:eb:f9:d4:52:8b:22:34:f8:03:77:ac:09:9e: 30:2f:bf:2e:59:75:fb:11:13:60:41:8c:cb:e6:0d:2d:71:6a: 74:e0:a1:33:5d:c9:66:29:25:05:86:2e:eb:b4:8d:4f:64:72: 65:59:32:1a:0e:95:a7:ca:ff:dd:ad:1a:69:ff:94:70:ea:b7: 44:9f:1e:46:1f:2f:1e:a2:9b:a9:42:c0:6c:35:0d:58:b9:3b: eb:22:96:45:83:3a:78:2a:85:6d:b2:72:ac:8d:00:5b:12:f7: c5:39:21:38:bf:3a:40:7d:2d:f6:6e:3d:77:94:fc:52:62:dc: cf:ea:45:97:32:fe:48:84:c8:56:64:0f:f9:2c:16:f7:65:02: 21:86:ba:17:2a:ca:2c:e3:82:99:85:fd:46:5a:7b:ac:87:57: 3f:80:d3:3c:bf:ab:80:ff:a8:e6:e7:4f:6b:ae:38:2e:f8:e3: bd:15:1c:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ/fEQZoXXTItadSY4s19MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOTExNzc5Yzc2N2QyMzY0ZTg2ZjRlMjdlZjhjNWZlOWJi MDEwOTAwHhcNMjUxMjE4MjEwMDUwWhcNMjUxMjE5MjEwMDUwWjAzMTEwLwYDVQQD Eyg3OGY3NmNiZTdlOTIyMzIxNTBiNGI5MTA4MTZhMWYxYWVlN2FmM2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiHKkgsJQFzAsme6SZvBwJJO+hxT IwxnugTSv+uSNGRJLGhhY1q7Y73Eo8PLtqzcmRnq+8uuhG36U3ic1bCTYw01/KNa A+UtweumazwU9dQ+RrI8GNKTXIdXHZp8JzPypykbumT03UI6Jj0hIKY5U6RPi/2M lgQf7sNnNPH5HWTxKHQcTXmlHg6xhajth5jHSmoQ97Fkrc5s9MLZgeTPPTzbGu6d uU63DamN71qvJmQ5LXsmKQpT+JTEBXCGGDny/GX4eDnwRUTu/JYBljn87FWqL1yM 3s7XAubQv6dD8/xoLgjFUSXUSEotHRbAZqID4ul5yEc5PLm20OJTEQ2D1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHj3bL5+kiMhULS5EIFqHxruevOyMB8GA1UdIwQY MBaAFACRF3nHZ9I2Tob04n74xf6bsBCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYt NjJjMWIxZmYzYTI2LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYtNjJjMWIxZmYzYTI2 LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfkfzhSY aeWc1I8qZTeoadq92Xzfz5lvHvoQURDKmU1BC/G6Crzi0YHKfXfiWDUyGqYJQAAP 6OXoyZCznnoNVViIMnsvwG+mhYmIZ2rr+dRSiyI0+AN3rAmeMC+/Lll1+xETYEGM y+YNLXFqdOChM13JZiklBYYu67SNT2RyZVkyGg6Vp8r/3a0aaf+UcOq3RJ8eRh8v HqKbqULAbDUNWLk76yKWRYM6eCqFbbJyrI0AWxL3xTkhOL86QH0t9m49d5T8UmLc z+pFlzL+SITIVmQP+SwW92UCIYa6FyrKLOOCmYX9Rlp7rIdXP4DTPL+rgP+o5udP a644LvjjvRUcTg== -----END CERTIFICATE-----Generated at Fri Dec 19 04:54:52 2025 by rpki-client