This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft File: AM0TenUCPWcunw4UQ8sOjPU7A9M.mft (raw, json) Hash identifier: NXoFqT/ic2Iei2uQ4G4iOClZRdmpGozKnT2/WKV6pEI= Subject key identifier: AF:6C:34:20:0B:57:08:86:47:8A:9D:F0:E2:A8:AA:ED:6B:40:89:BA Authority key identifier: 00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3 Certificate issuer: /CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3 Certificate serial: 019AEED1593CFDA72213DD6CBC4B2F1F80E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft Manifest number: 08 Signing time: Fri 05 Dec 2025 14:01:28 +0000 Manifest this update: Fri 05 Dec 2025 14:01:28 +0000 Manifest next update: Sat 06 Dec 2025 14:01:28 +0000 Files and hashes: 1: AM0TenUCPWcunw4UQ8sOjPU7A9M.crl (hash: RG4Gf31jFJfAFUtgNDkEKVGGNGHHpO/IAb4rvr+26I8=) 2: QRmb5YrXwDriaT2dAaAU-pHwvNQ.asa (hash: SD+gQNGtNRHX6vzbmlJIKYTNd1x65ITQz0EzQSUqHQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:d1:59:3c:fd:a7:22:13:dd:6c:bc:4b:2f:1f:80:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3 Validity Not Before: Dec 5 14:01:28 2025 GMT Not After : Dec 6 14:01:28 2025 GMT Subject: CN=af6c34200b570886478a9df0e2a8aaed6b4089ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:c2:18:63:61:ad:77:15:c4:37:f2:d7:15: 7f:7b:68:df:de:63:f6:40:36:01:37:32:12:a6:9c: ca:58:74:ec:a0:14:3e:4b:bb:dc:f7:4c:8e:d0:75: 15:76:bf:c9:f2:35:f8:73:30:1d:fd:6f:ee:f6:95: 16:d9:f1:5c:db:18:2c:7c:bd:6a:4f:d0:4c:cb:7f: af:cc:31:63:92:7c:33:f7:1f:c3:81:f8:a6:93:35: 2f:87:ea:86:26:c1:07:08:86:51:d3:88:c4:98:11: 8b:bc:94:c7:0e:f9:b3:c2:9e:b3:27:a7:72:87:57: 71:09:40:cb:06:83:85:0d:27:61:77:fc:3f:40:4c: 51:1f:26:ca:85:90:f5:3d:a1:92:df:45:cb:77:35: 0f:79:5b:57:40:52:fa:86:ed:45:aa:fa:c6:e6:f0: 61:89:df:43:38:5d:54:22:f6:e1:22:30:2d:e4:2a: 52:4e:be:fe:00:06:eb:0e:0f:15:93:52:c3:45:d2: 50:81:99:41:c5:9a:b8:51:9a:8d:80:8a:51:a9:1d: a0:29:6e:23:31:19:84:e0:98:ad:b3:aa:0c:2c:59: 88:e2:e0:37:a8:ec:7e:f1:c8:8c:91:21:47:88:2c: 61:f7:86:25:d4:c7:4b:07:ea:b3:cf:5d:97:2e:1e: d6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6C:34:20:0B:57:08:86:47:8A:9D:F0:E2:A8:AA:ED:6B:40:89:BA X509v3 Authority Key Identifier: keyid:00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:38:38:20:7b:90:6a:68:f4:d9:4d:3b:4f:e6:7a:b2:78:19: 25:9b:96:8b:57:5c:eb:85:e4:90:21:d4:54:5b:44:c3:f6:a6: df:0d:72:ca:fd:60:7e:13:f8:52:28:fa:52:37:07:15:76:fc: df:fc:ad:05:d7:3e:7b:21:7a:4a:2a:e4:18:a7:22:62:0b:9b: 96:0b:eb:e6:2c:6b:be:fc:ae:c6:b8:e9:10:73:40:19:40:80: 2c:04:57:a0:be:3e:b0:16:7b:0d:04:bb:10:98:64:87:07:6d: a2:7a:58:fa:91:2e:8c:4b:a3:c1:aa:b1:b8:fb:bc:2b:78:d8: 60:b7:2b:9a:43:8d:44:df:32:02:82:45:0f:e1:ff:3c:8d:0f: 2b:b5:c1:75:9f:c5:0a:e3:64:96:83:72:f5:df:15:6f:c0:1f: cc:6d:9d:c0:9e:ef:f0:25:a8:d1:88:8e:9a:eb:b3:17:52:63: 1e:76:44:7c:d2:4d:e1:b3:ef:22:2e:0e:71:dd:de:e6:e0:c3: a8:22:69:67:db:d9:ed:fb:de:f0:8b:b5:dc:10:3d:ba:fa:d5: bd:ce:57:ec:35:64:f0:ab:9b:a6:4e:68:e2:d9:2e:13:73:6b: d6:2b:ce:29:69:ef:ef:3b:2a:20:ce:47:cd:ec:73:dc:c1:bb: 2d:36:f8:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZru0Vk8/aciE91svEsvH4DoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwY2QxMzdhNzUwMjNkNjcyZTlmMGUxNDQzY2IwZThjZjUz YjAzZDMwHhcNMjUxMjA1MTQwMTI4WhcNMjUxMjA2MTQwMTI4WjAzMTEwLwYDVQQD EyhhZjZjMzQyMDBiNTcwODg2NDc4YTlkZjBlMmE4YWFlZDZiNDA4OWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVXCGGNhrXcVxDfy1xV/e2jf3mP2 QDYBNzISppzKWHTsoBQ+S7vc90yO0HUVdr/J8jX4czAd/W/u9pUW2fFc2xgsfL1q T9BMy3+vzDFjknwz9x/DgfimkzUvh+qGJsEHCIZR04jEmBGLvJTHDvmzwp6zJ6dy h1dxCUDLBoOFDSdhd/w/QExRHybKhZD1PaGS30XLdzUPeVtXQFL6hu1FqvrG5vBh id9DOF1UIvbhIjAt5CpSTr7+AAbrDg8Vk1LDRdJQgZlBxZq4UZqNgIpRqR2gKW4j MRmE4Jits6oMLFmI4uA3qOx+8ciMkSFHiCxh94Yl1MdLB+qzz12XLh7WewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9sNCALVwiGR4qd8OKoqu1rQIm6MB8GA1UdIwQY MBaAFADNE3p1Aj1nLp8OFEPLDoz1OwPTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mODMxMzYtMTg2ZC00OTA0LWI4MWMt Yzc5ODgxZjMxNWUyLzEvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mODMxMzYtMTg2ZC00OTA0LWI4MWMtYzc5ODgxZjMxNWUy LzEvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDg4IHuQ amj02U07T+Z6sngZJZuWi1dc64XkkCHUVFtEw/am3w1yyv1gfhP4Uij6UjcHFXb8 3/ytBdc+eyF6SirkGKciYgublgvr5ixrvvyuxrjpEHNAGUCALARXoL4+sBZ7DQS7 EJhkhwdtonpY+pEujEujwaqxuPu8K3jYYLcrmkONRN8yAoJFD+H/PI0PK7XBdZ/F CuNkloNy9d8Vb8AfzG2dwJ7v8CWo0YiOmuuzF1JjHnZEfNJN4bPvIi4Ocd3e5uDD qCJpZ9vZ7fve8Iu13BA9uvrVvc5X7DVk8Kubpk5o4tkuE3Nr1ivOKWnv7zsqIM5H zexz3MG7LTb4kQ== -----END CERTIFICATE-----Generated at Fri Dec 5 18:54:22 2025 by rpki-client