This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json) Hash identifier: lM14I8PKLjyjah4YJtqWAxEbDZnzrItshnHhj716H8c= Subject key identifier: 2E:54:FB:B4:93:C5:CA:60:0E:04:18:3A:5E:91:DF:88:68:F7:7D:76 Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50 Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750 Certificate serial: 019B3FECFF851FC3539BD22A05D8C80FFAD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 08:00:55 +0000 Manifest this update: Sun 21 Dec 2025 08:00:55 +0000 Manifest next update: Mon 22 Dec 2025 08:00:55 +0000 Files and hashes: 1: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: PAOMBM7KUHm+K76NA73UaSsgkuogkwOTPSQoxK9CEO0=) 2: oyTiWJ913wVTjnCcw6Q4RBUZbq8.roa (hash: /NMMdoNH5sZWYkg6OnNqyz5087fDkPkdrRkbme1onLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:ff:85:1f:c3:53:9b:d2:2a:05:d8:c8:0f:fa:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750 Validity Not Before: Dec 21 08:00:55 2025 GMT Not After : Dec 22 08:00:55 2025 GMT Subject: CN=2e54fbb493c5ca600e04183a5e91df8868f77d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cc:61:4c:ae:8a:c4:f7:f2:04:10:61:82:6a: 5b:63:20:d4:42:97:62:7d:c9:65:09:c4:77:ea:08: 7d:cb:cd:90:ca:d0:d6:d3:dd:aa:91:4b:95:c6:55: 5c:3b:8c:95:07:09:1c:c5:a9:79:0f:57:1c:bf:1a: 81:eb:1a:b5:04:31:cc:ca:88:9e:27:7d:6c:46:67: eb:57:d4:37:b5:2c:54:dc:f1:f8:b9:a1:2b:ec:9b: 7b:e1:0a:6d:0b:7f:fd:3b:8b:21:7e:cc:86:b7:a4: 4c:46:53:c7:05:5b:a5:3c:e0:40:21:5e:f0:f2:15: ea:ca:4a:eb:ee:54:f5:fc:d3:1c:64:70:90:1a:44: c6:98:57:8c:7f:c7:8b:8a:f2:05:b3:4d:ea:60:5c: b2:87:0a:88:de:8b:3e:fc:73:5c:87:d2:9f:ea:e4: 66:36:c0:28:d0:4e:b5:40:da:7c:f6:64:72:c2:a8: 68:95:aa:15:97:c5:df:26:5e:c2:61:47:51:a2:bc: 21:94:5a:74:89:b5:47:01:19:bd:9f:ec:af:d5:e9: 4b:48:94:57:3c:18:c4:5c:34:95:8e:74:c1:64:4d: cf:4a:a5:64:5e:f3:e3:11:21:94:e0:7a:2f:00:30: ee:73:46:a5:48:72:92:3a:a8:fc:d8:2a:cc:b0:21: d9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:54:FB:B4:93:C5:CA:60:0E:04:18:3A:5E:91:DF:88:68:F7:7D:76 X509v3 Authority Key Identifier: keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:70:e4:f3:e1:b3:d1:ee:53:fc:f5:8f:67:53:9f:4a:7a:5a: a6:54:ce:9c:9d:46:19:cb:27:ca:e1:3f:1e:1e:8c:a3:e9:d1: 27:91:ff:01:75:d9:3d:e7:c5:eb:8e:e1:ea:0e:8a:c1:f0:44: 25:0c:a4:46:ab:a7:70:15:6e:dd:f4:7e:5e:82:2d:e0:b9:17: 82:8b:b1:9b:50:92:4d:e7:98:c6:41:7a:04:c5:9a:55:7b:01: c6:49:87:bf:8d:de:8b:09:ff:27:50:d9:5b:30:5f:c1:9b:55: 4e:03:77:61:21:cf:f4:13:5f:3f:b7:fa:d1:38:88:50:8b:16: b3:fd:18:bf:ae:16:fd:82:cf:65:1c:81:d1:5a:15:9b:93:e8: 02:78:64:02:5c:a5:56:46:83:32:bb:86:af:01:34:fa:a1:79: 57:f8:29:68:67:13:90:20:ca:ca:d5:44:e3:0a:c6:8c:a3:04: 7e:67:8c:60:f6:95:6d:65:11:50:27:e1:10:55:17:f3:ab:80: d6:c7:ac:2b:49:50:17:99:97:8f:f9:84:59:3b:e6:6c:1e:f0: 7f:fd:63:9d:e5:cb:94:27:dc:c4:ba:7b:d7:2c:30:78:37:d7: 5e:2d:41:e7:6e:bd:ca:11:af:cd:73:84:4c:b7:f8:1d:59:a7: 7d:81:7c:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7P+FH8NTm9IqBdjID/rXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNjQwYmNjYjcxNzFmMTk5YzQzYTBhOTc0Y2FiODI3ZWQx OGU3NTAwHhcNMjUxMjIxMDgwMDU1WhcNMjUxMjIyMDgwMDU1WjAzMTEwLwYDVQQD EygyZTU0ZmJiNDkzYzVjYTYwMGUwNDE4M2E1ZTkxZGY4ODY4Zjc3ZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MxhTK6KxPfyBBBhgmpbYyDUQpdi fcllCcR36gh9y82QytDW092qkUuVxlVcO4yVBwkcxal5D1ccvxqB6xq1BDHMyoie J31sRmfrV9Q3tSxU3PH4uaEr7Jt74QptC3/9O4shfsyGt6RMRlPHBVulPOBAIV7w 8hXqykrr7lT1/NMcZHCQGkTGmFeMf8eLivIFs03qYFyyhwqI3os+/HNch9Kf6uRm NsAo0E61QNp89mRywqholaoVl8XfJl7CYUdRorwhlFp0ibVHARm9n+yv1elLSJRX PBjEXDSVjnTBZE3PSqVkXvPjESGU4HovADDuc0alSHKSOqj82CrMsCHZDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5U+7STxcpgDgQYOl6R34ho9312MB8GA1UdIwQY MBaAFAJkC8y3Fx8ZnEOgqXTKuCftGOdQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80MjRiZDEtOTUzYi00MjYyLTgzOTYt YzdiZjk1ZTVhYjdiLzEvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80MjRiZDEtOTUzYi00MjYyLTgzOTYtYzdiZjk1ZTVhYjdi LzEvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnXDk8+Gz 0e5T/PWPZ1OfSnpaplTOnJ1GGcsnyuE/Hh6Mo+nRJ5H/AXXZPefF647h6g6KwfBE JQykRquncBVu3fR+XoIt4LkXgouxm1CSTeeYxkF6BMWaVXsBxkmHv43eiwn/J1DZ WzBfwZtVTgN3YSHP9BNfP7f60TiIUIsWs/0Yv64W/YLPZRyB0VoVm5PoAnhkAlyl VkaDMruGrwE0+qF5V/gpaGcTkCDKytVE4wrGjKMEfmeMYPaVbWURUCfhEFUX86uA 1sesK0lQF5mXj/mEWTvmbB7wf/1jneXLlCfcxLp71ywweDfXXi1B5269yhGvzXOE TLf4HVmnfYF8mQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:15:23 2025 by rpki-client