This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft File: AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json) Hash identifier: GIHlXK/OjjMBKYmZWjHm+/rC+OyZ+m6ZLvB5emGEmcY= Subject key identifier: A7:9C:22:75:AD:3A:FA:96:56:B6:D1:6E:79:BC:F2:1F:78:5E:1F:E3 Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43 Certificate issuer: /CN=0241063b2d57e4efaef6824f623d465a1c37b843 Certificate serial: 019B2EF9D3642807C2D85B4E21D6923CF987 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft Manifest number: 0E72 Signing time: Thu 18 Dec 2025 01:01:23 +0000 Manifest this update: Thu 18 Dec 2025 01:01:23 +0000 Manifest next update: Fri 19 Dec 2025 01:01:23 +0000 Files and hashes: 1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: +CRcQs5/1mR8TVBinUCQ60ZDO70QC6+t3iO+5nLLKXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:d3:64:28:07:c2:d8:5b:4e:21:d6:92:3c:f9:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843 Validity Not Before: Dec 18 01:01:23 2025 GMT Not After : Dec 19 01:01:23 2025 GMT Subject: CN=a79c2275ad3afa9656b6d16e79bcf21f785e1fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:97:b1:14:16:35:c3:69:6d:ad:cb:06:77: 78:3a:a5:23:f3:80:1d:3a:35:be:01:01:aa:38:35: 37:a0:5f:12:75:ec:70:a4:b0:bf:de:08:7d:2f:3a: 27:69:38:95:d6:77:c0:d8:b5:f8:24:28:57:69:33: 0a:89:96:e9:28:40:5d:21:5d:4e:24:06:ae:a5:62: 27:62:7c:c5:dc:b7:89:23:2a:41:e8:a5:fe:f0:5e: 66:69:49:6d:99:44:e6:89:19:3f:dc:9c:d8:1c:5c: b4:7e:f4:23:cf:7f:da:79:b9:9e:fc:8b:a1:90:10: de:8a:30:79:f9:ba:41:03:4c:32:fe:6b:4a:81:8b: f0:4a:5d:85:0d:1b:8f:53:36:67:b7:76:dc:77:b1: 16:29:13:25:e4:6d:7d:f2:f3:d6:c1:3c:85:7c:6c: de:87:da:4b:b8:5e:10:8f:f7:03:1a:09:83:aa:42: cc:5c:d9:f0:03:2d:27:bd:98:43:86:fd:18:9a:ec: 9d:f4:6f:09:cf:50:2d:1f:29:66:f9:b0:f8:ea:de: 34:c1:96:c2:e1:b9:0e:98:d1:21:78:5d:c0:71:c0: c5:a8:c0:58:d7:26:78:c5:8c:6b:3f:5b:14:95:e9: 7b:44:0e:6c:f0:1d:66:d4:7d:56:58:8e:dc:47:79: 5a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9C:22:75:AD:3A:FA:96:56:B6:D1:6E:79:BC:F2:1F:78:5E:1F:E3 X509v3 Authority Key Identifier: keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:a0:22:3d:ba:13:9e:29:d5:5e:28:99:33:30:50:3a:42:2a: 9c:4c:b3:f7:5a:cc:1b:65:12:6b:f9:54:f2:96:d5:f8:d9:75: f5:9b:b2:55:cc:90:3c:df:e0:3c:4d:2a:2a:36:3a:2c:8d:e0: 39:6f:47:1c:91:30:ee:c3:10:ad:75:fd:f8:08:38:de:0c:ab: 2b:ea:ac:a8:f3:c5:0b:73:27:9e:56:c5:c3:63:f5:7a:86:ce: bf:b5:fd:19:37:a5:4a:d9:70:98:cb:26:76:49:af:ed:48:38: a3:44:a4:f8:ba:e4:2a:8d:8e:fb:38:b0:e9:a3:f0:24:68:b2: fa:e4:47:31:53:08:b0:68:09:fd:fa:64:c3:31:fc:c7:44:9c: 1f:fb:d4:eb:75:10:1f:f9:3a:3e:15:1e:dc:2a:fa:19:2f:ef: 5c:c3:80:c4:8b:84:6c:51:27:e1:b4:4a:c6:03:2f:15:ed:f4: a2:0b:b0:e6:11:78:20:91:b0:e5:d0:11:4b:e2:dd:17:3c:07: f1:96:85:c3:7c:f4:6b:d4:dc:a5:d7:3a:94:98:c6:4e:0a:fc: d4:36:39:2a:04:30:23:b6:66:a2:b4:2c:20:0e:2a:23:2e:41: b3:24:c5:2e:42:8e:43:cf:31:17:f8:92:a1:64:9e:f7:ac:0a: 8c:68:55:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+dNkKAfC2FtOIdaSPPmHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNDEwNjNiMmQ1N2U0ZWZhZWY2ODI0ZjYyM2Q0NjVhMWMz N2I4NDMwHhcNMjUxMjE4MDEwMTIzWhcNMjUxMjE5MDEwMTIzWjAzMTEwLwYDVQQD EyhhNzljMjI3NWFkM2FmYTk2NTZiNmQxNmU3OWJjZjIxZjc4NWUxZmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUuXsRQWNcNpba3LBnd4OqUj84Ad OjW+AQGqODU3oF8SdexwpLC/3gh9LzonaTiV1nfA2LX4JChXaTMKiZbpKEBdIV1O JAaupWInYnzF3LeJIypB6KX+8F5maUltmUTmiRk/3JzYHFy0fvQjz3/aebme/Iuh kBDeijB5+bpBA0wy/mtKgYvwSl2FDRuPUzZnt3bcd7EWKRMl5G198vPWwTyFfGze h9pLuF4Qj/cDGgmDqkLMXNnwAy0nvZhDhv0Ymuyd9G8Jz1AtHylm+bD46t40wZbC 4bkOmNEheF3AccDFqMBY1yZ4xYxrP1sUlel7RA5s8B1m1H1WWI7cR3la6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKecInWtOvqWVrbRbnm88h94Xh/jMB8GA1UdIwQY MBaAFAJBBjstV+TvrvaCT2I9RlocN7hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQt Y2IwNzVlMjM5YTU2LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQtY2IwNzVlMjM5YTU2 LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKAiPboT ninVXiiZMzBQOkIqnEyz91rMG2USa/lU8pbV+Nl19ZuyVcyQPN/gPE0qKjY6LI3g OW9HHJEw7sMQrXX9+Ag43gyrK+qsqPPFC3MnnlbFw2P1eobOv7X9GTelStlwmMsm dkmv7Ug4o0Sk+LrkKo2O+ziw6aPwJGiy+uRHMVMIsGgJ/fpkwzH8x0ScH/vU63UQ H/k6PhUe3Cr6GS/vXMOAxIuEbFEn4bRKxgMvFe30oguw5hF4IJGw5dARS+LdFzwH 8ZaFw3z0a9Tcpdc6lJjGTgr81DY5KgQwI7ZmorQsIA4qIy5BsyTFLkKOQ88xF/iS oWSe96wKjGhVtQ== -----END CERTIFICATE-----Generated at Thu Dec 18 08:00:43 2025 by rpki-client