This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json) Hash identifier: EikPSZiu8m90/UNyDxpEyFcTyJqG9krexWUMc/HxqHs= Subject key identifier: FD:48:48:EF:0B:33:08:86:D4:9A:6A:5C:CD:C1:BB:06:59:DD:2C:3E Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50 Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750 Certificate serial: 019B194DAFE38B1B1F8D2CCCB4B3EC8410EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft Manifest number: 1776 Signing time: Sat 13 Dec 2025 20:01:20 +0000 Manifest this update: Sat 13 Dec 2025 20:01:20 +0000 Manifest next update: Sun 14 Dec 2025 20:01:20 +0000 Files and hashes: 1: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: zhB8VIdGnrq2SkDtwmQ7SKx/wKJLaCQdjn4vRmY2U38=) 2: oyTiWJ913wVTjnCcw6Q4RBUZbq8.roa (hash: /NMMdoNH5sZWYkg6OnNqyz5087fDkPkdrRkbme1onLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:af:e3:8b:1b:1f:8d:2c:cc:b4:b3:ec:84:10:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750 Validity Not Before: Dec 13 20:01:20 2025 GMT Not After : Dec 14 20:01:20 2025 GMT Subject: CN=fd4848ef0b330886d49a6a5ccdc1bb0659dd2c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f0:6b:a2:6c:3f:93:b0:8d:23:d6:e6:a9:6f: 27:65:7b:53:76:91:48:4d:a0:7d:b4:3a:ce:c2:96: de:be:19:c1:25:f4:ff:45:7b:e0:bf:da:ef:bf:6a: 5e:d7:27:39:66:4d:38:ed:48:a1:15:87:23:cc:4a: 97:3c:db:b9:8f:18:06:64:06:ef:20:60:23:6f:fd: 36:eb:b9:dd:f7:09:31:cf:30:75:b8:f2:e8:25:06: 8d:2e:83:7a:d5:ed:c4:a0:8c:ce:38:db:f5:dc:80: 62:c8:a9:aa:18:52:99:e2:cb:7b:61:8a:97:25:ca: 85:ff:f4:7d:96:58:75:e3:32:7b:71:00:40:ad:83: 05:6e:9e:50:da:8b:fe:1f:9b:d7:0f:a1:64:90:60: c2:af:9e:d6:56:66:fc:77:2b:98:0d:4e:2a:5c:02: 2c:e3:e0:24:13:df:8d:e9:3c:e8:3b:87:b1:92:31: 35:52:e9:5b:b8:5d:a1:2f:d0:d8:48:c2:d9:3c:54: a3:2b:45:3c:5e:bb:16:e5:cf:72:75:ba:e3:25:d5: 4f:ea:54:ea:4b:ce:4c:a5:b6:77:c1:5e:cd:22:70: 6e:05:22:3c:c5:29:57:5c:3d:1b:42:02:0d:37:27: 8a:91:0a:f8:f7:65:67:e2:5e:b7:e9:e2:3e:99:a2: 70:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:48:48:EF:0B:33:08:86:D4:9A:6A:5C:CD:C1:BB:06:59:DD:2C:3E X509v3 Authority Key Identifier: keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:1a:27:fa:89:7d:59:95:e0:e2:8a:97:22:65:9c:52:72:83: 15:9a:da:56:38:cb:69:d4:fb:78:0e:ba:ae:9c:72:e3:24:72: 39:0b:9d:91:02:c0:f0:f3:b9:1b:68:fe:d4:77:9b:57:df:de: 24:1c:b6:a8:a4:cd:40:c0:3e:2d:e1:f8:6d:d0:cf:e6:e8:ab: e6:96:2f:e4:64:7c:0c:05:96:19:72:55:85:a0:0b:38:2a:02: c4:df:ea:e9:0c:d2:b2:37:9f:68:38:ef:91:ef:eb:c8:10:8c: 22:1f:67:d0:93:8b:db:58:57:03:89:eb:35:d8:d4:d9:cb:e8: 00:b9:6a:e5:ce:c7:bc:cb:c8:ce:c3:f4:33:ee:bf:ae:59:dc: 80:f9:8e:8c:93:c8:a1:58:12:b3:96:76:22:cc:57:d0:2f:69: cf:c1:cd:03:1e:bb:a0:c1:0e:eb:e5:bf:80:2c:23:5e:21:87: 2a:f1:34:13:d8:c3:ce:37:cf:74:37:62:5d:80:8c:a9:c1:65: fe:d5:0c:d4:02:64:46:61:14:ea:ba:9a:c3:6d:7f:4a:74:cf: 78:61:fb:36:05:3a:ab:e3:ee:4c:64:70:f2:4c:a7:4a:ea:07: 7d:4e:a2:c4:dd:91:fb:52:48:89:42:1a:02:d1:39:ec:9e:5f: 1f:5b:84:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTa/jixsfjSzMtLPshBDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNjQwYmNjYjcxNzFmMTk5YzQzYTBhOTc0Y2FiODI3ZWQx OGU3NTAwHhcNMjUxMjEzMjAwMTIwWhcNMjUxMjE0MjAwMTIwWjAzMTEwLwYDVQQD EyhmZDQ4NDhlZjBiMzMwODg2ZDQ5YTZhNWNjZGMxYmIwNjU5ZGQyYzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vBromw/k7CNI9bmqW8nZXtTdpFI TaB9tDrOwpbevhnBJfT/RXvgv9rvv2pe1yc5Zk047UihFYcjzEqXPNu5jxgGZAbv IGAjb/0267nd9wkxzzB1uPLoJQaNLoN61e3EoIzOONv13IBiyKmqGFKZ4st7YYqX JcqF//R9llh14zJ7cQBArYMFbp5Q2ov+H5vXD6FkkGDCr57WVmb8dyuYDU4qXAIs 4+AkE9+N6TzoO4exkjE1UulbuF2hL9DYSMLZPFSjK0U8XrsW5c9ydbrjJdVP6lTq S85MpbZ3wV7NInBuBSI8xSlXXD0bQgINNyeKkQr492Vn4l636eI+maJwtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1ISO8LMwiG1JpqXM3BuwZZ3Sw+MB8GA1UdIwQY MBaAFAJkC8y3Fx8ZnEOgqXTKuCftGOdQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80MjRiZDEtOTUzYi00MjYyLTgzOTYt YzdiZjk1ZTVhYjdiLzEvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80MjRiZDEtOTUzYi00MjYyLTgzOTYtYzdiZjk1ZTVhYjdi LzEvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphon+ol9 WZXg4oqXImWcUnKDFZraVjjLadT7eA66rpxy4yRyOQudkQLA8PO5G2j+1HebV9/e JBy2qKTNQMA+LeH4bdDP5uir5pYv5GR8DAWWGXJVhaALOCoCxN/q6QzSsjefaDjv ke/ryBCMIh9n0JOL21hXA4nrNdjU2cvoALlq5c7HvMvIzsP0M+6/rlncgPmOjJPI oVgSs5Z2IsxX0C9pz8HNAx67oMEO6+W/gCwjXiGHKvE0E9jDzjfPdDdiXYCMqcFl /tUM1AJkRmEU6rqaw21/SnTPeGH7NgU6q+PuTGRw8kynSuoHfU6ixN2R+1JIiUIa AtE57J5fH1uEyQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:05:15 2025 by rpki-client