This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft File: AkhBfH_pzOxbnarMCPznmdZzCIw.mft (raw, json) Hash identifier: lZjnwOKvO7QjhpeyoeKejIsSg7zHoafSZW0NDFwvvLU= Subject key identifier: AE:9E:87:BE:5C:87:00:36:55:DC:04:3E:73:66:06:85:7A:40:EF:B5 Authority key identifier: 02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C Certificate issuer: /CN=0248417c7fe9ccec5b9daacc08fce799d673088c Certificate serial: 019B2174B55DECF7FAD5E488EC92E99DFFA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft Manifest number: 0FB0 Signing time: Mon 15 Dec 2025 10:00:55 +0000 Manifest this update: Mon 15 Dec 2025 10:00:55 +0000 Manifest next update: Tue 16 Dec 2025 10:00:55 +0000 Files and hashes: 1: AkhBfH_pzOxbnarMCPznmdZzCIw.crl (hash: b96KurtSHO6R4HgrBJryIpaqad1hpA+kXgTvh1GE+XY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:b5:5d:ec:f7:fa:d5:e4:88:ec:92:e9:9d:ff:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0248417c7fe9ccec5b9daacc08fce799d673088c Validity Not Before: Dec 15 10:00:55 2025 GMT Not After : Dec 16 10:00:55 2025 GMT Subject: CN=ae9e87be5c87003655dc043e736606857a40efb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:b5:7b:ae:cd:e8:b6:ba:37:dd:45:d3:93: 02:27:9a:ed:79:f9:71:34:2d:ca:44:0d:84:99:1d: dd:44:31:36:c2:6c:f0:ec:4b:b7:b9:91:b1:73:0d: 5c:08:3e:f3:44:f6:d2:ee:cc:cd:96:12:e9:b0:54: 0b:61:22:06:b6:fd:02:27:d4:4b:e5:00:a5:0e:e2: de:02:4d:da:60:49:9b:44:c6:16:35:99:c7:3f:c2: fe:d4:d5:09:7e:2c:15:73:31:47:18:3a:5e:66:5f: bb:c7:9a:3a:d2:01:7a:43:75:e7:43:59:dc:d4:dd: ad:94:95:82:93:2a:9d:a6:90:d2:de:5c:a8:c6:ee: 45:b8:7f:70:ad:6b:14:41:0d:7f:7f:ce:16:88:4f: b7:7c:3e:7b:c4:6c:03:33:a0:8a:ae:a1:f5:6c:72: 64:39:40:ec:89:6c:db:b2:3d:50:f9:9e:ec:45:72: 0d:c8:7f:48:db:09:f4:7d:47:a8:e3:cf:fa:b5:4c: 16:93:95:00:e9:40:22:be:f8:d9:0d:49:bc:af:15: ea:02:44:ea:71:a1:61:2e:6c:d6:9b:7c:dd:0c:b2: 0a:c1:b4:c3:58:45:61:be:88:62:b2:62:08:cd:d3: c3:fc:2b:70:d8:5d:1e:ce:19:e6:33:73:81:2a:cf: 0e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9E:87:BE:5C:87:00:36:55:DC:04:3E:73:66:06:85:7A:40:EF:B5 X509v3 Authority Key Identifier: keyid:02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:13:88:8e:d5:4f:53:90:a0:30:00:a0:62:8b:ba:ad:31:be: 92:7b:d7:49:44:b4:08:ce:b9:52:76:30:bc:5a:25:93:27:ac: 81:7c:7d:56:4d:76:30:9c:f0:29:a5:15:48:37:63:33:cc:90: 15:c2:dc:d7:0c:74:22:17:e9:f6:6a:86:66:93:d3:9f:d3:3b: 3b:bd:9a:f4:43:6a:ab:7a:9c:c3:99:e4:2d:01:ca:03:66:e7: b8:47:36:27:3c:43:35:82:5f:63:0e:67:c9:6f:4b:18:32:de: 4c:60:96:13:c8:d3:96:fb:98:48:87:4c:fe:9c:e5:ed:8b:c6: 78:73:33:f0:0a:45:1a:80:66:91:88:c9:01:28:4d:29:11:9f: d4:ce:fe:ef:13:84:e8:3b:ad:32:d2:41:ac:ac:47:78:e5:ec: 3d:a1:e9:e1:fa:7c:25:67:e1:3e:13:6a:8a:da:36:aa:7a:00: 53:f5:4a:de:d6:cf:d8:2c:54:e8:61:59:92:c1:fd:ff:98:32: 9d:bf:47:e4:08:b5:36:f6:cb:2b:36:e0:e0:72:21:ff:14:0a: 94:4f:12:75:0b:78:1e:78:d6:93:94:e3:78:e1:d0:a0:e9:4c: 8f:0a:6e:79:26:d3:e0:81:56:aa:31:38:7f:57:59:df:2c:4d: c3:de:bd:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdLVd7Pf61eSI7JLpnf+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNDg0MTdjN2ZlOWNjZWM1YjlkYWFjYzA4ZmNlNzk5ZDY3 MzA4OGMwHhcNMjUxMjE1MTAwMDU1WhcNMjUxMjE2MTAwMDU1WjAzMTEwLwYDVQQD EyhhZTllODdiZTVjODcwMDM2NTVkYzA0M2U3MzY2MDY4NTdhNDBlZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0G1e67N6La6N91F05MCJ5rteflx NC3KRA2EmR3dRDE2wmzw7Eu3uZGxcw1cCD7zRPbS7szNlhLpsFQLYSIGtv0CJ9RL 5QClDuLeAk3aYEmbRMYWNZnHP8L+1NUJfiwVczFHGDpeZl+7x5o60gF6Q3XnQ1nc 1N2tlJWCkyqdppDS3lyoxu5FuH9wrWsUQQ1/f84WiE+3fD57xGwDM6CKrqH1bHJk OUDsiWzbsj1Q+Z7sRXINyH9I2wn0fUeo48/6tUwWk5UA6UAivvjZDUm8rxXqAkTq caFhLmzWm3zdDLIKwbTDWEVhvohismIIzdPD/Ctw2F0ezhnmM3OBKs8OOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6eh75chwA2VdwEPnNmBoV6QO+1MB8GA1UdIwQY MBaAFAJIQXx/6czsW52qzAj855nWcwiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWtoQmZIX3B6T3hibmFyTUNQem5tZFp6Q0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mMTY3OGMtZGRjYy00MjUzLTg1OTUt NjNjNzA3NDQxYmE2LzEvQWtoQmZIX3B6T3hibmFyTUNQem5tZFp6Q0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9mMTY3OGMtZGRjYy00MjUzLTg1OTUtNjNjNzA3NDQxYmE2 LzEvQWtoQmZIX3B6T3hibmFyTUNQem5tZFp6Q0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkROIjtVP U5CgMACgYou6rTG+knvXSUS0CM65UnYwvFolkyesgXx9Vk12MJzwKaUVSDdjM8yQ FcLc1wx0Ihfp9mqGZpPTn9M7O72a9ENqq3qcw5nkLQHKA2bnuEc2JzxDNYJfYw5n yW9LGDLeTGCWE8jTlvuYSIdM/pzl7YvGeHMz8ApFGoBmkYjJAShNKRGf1M7+7xOE 6DutMtJBrKxHeOXsPaHp4fp8JWfhPhNqito2qnoAU/VK3tbP2CxU6GFZksH9/5gy nb9H5Ai1NvbLKzbg4HIh/xQKlE8SdQt4HnjWk5TjeOHQoOlMjwpueSbT4IFWqjE4 f1dZ3yxNw969Tg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:52:28 2025 by rpki-client