This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json) Hash identifier: DAA/7yCS90cF3BPKDmwljFUKXKsy0oM9oL2A/ifQPVM= Subject key identifier: FD:1D:44:57:F2:C5:F2:E5:AC:F7:1F:AE:A2:1E:1F:BA:D1:95:C5:AC Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef Certificate serial: 019B4A70B568C41DECCD8DE26B78FB3C2005 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft Manifest number: 1427 Signing time: Tue 23 Dec 2025 09:00:59 +0000 Manifest this update: Tue 23 Dec 2025 09:00:59 +0000 Manifest next update: Wed 24 Dec 2025 09:00:59 +0000 Files and hashes: 1: NCqzEDAkcdOF_5QXBG8yJjG5C8E.roa (hash: 3y6ZaPdmVv7AeJPbPV9rY47Ckca5BlO8ayxRNoPx1Jg=) 2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: Y3UraKdeMOHH8n0SN+7vEf9YtSPpi8eIWJRmGjko4Ec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:70:b5:68:c4:1d:ec:cd:8d:e2:6b:78:fb:3c:20:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef Validity Not Before: Dec 23 09:00:59 2025 GMT Not After : Dec 24 09:00:59 2025 GMT Subject: CN=fd1d4457f2c5f2e5acf71faea21e1fbad195c5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9f:92:1e:70:60:df:86:38:4d:e6:09:01:35: 75:a3:f8:b5:50:f0:74:2c:98:6f:dd:05:4e:a7:0e: 15:45:18:40:ab:78:fa:8a:aa:d6:4f:11:71:17:25: 8b:f6:6d:78:c0:7d:bb:21:bd:bd:04:b3:ad:3a:7d: fe:3a:f9:9e:3f:f2:89:f2:8c:94:eb:70:8f:5b:e8: 3a:77:ef:83:07:ec:b5:5b:55:8a:7a:06:a8:b8:84: a6:f3:d0:0b:ab:e2:ca:56:8a:21:02:d1:35:8c:2f: 83:cc:97:90:74:fb:fc:45:10:55:ac:f7:93:fd:f0: c8:ae:7a:78:1c:e0:59:a8:3a:50:a7:14:23:1a:2f: 27:81:77:b6:ea:aa:f2:79:70:75:6e:74:5c:f2:ce: 58:c5:2e:4f:a3:f5:3b:25:e3:79:d1:a7:4c:b7:43: 11:61:d1:6a:ff:8f:a6:e1:9e:d6:70:68:81:56:2e: 07:97:84:0f:74:9f:61:59:5e:c7:ef:40:c6:53:27: 76:49:33:c3:f4:5f:d8:d0:87:68:61:1b:98:8a:57: 47:66:a2:5a:e8:a4:78:0f:2a:4f:09:12:db:82:a4: 71:4c:78:fd:f1:da:3a:af:fc:8d:43:ce:d7:68:f1: 22:c1:03:cf:61:fc:25:3f:b6:2c:cf:82:3b:c0:cd: a5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1D:44:57:F2:C5:F2:E5:AC:F7:1F:AE:A2:1E:1F:BA:D1:95:C5:AC X509v3 Authority Key Identifier: keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:75:7b:ac:53:10:c8:19:6d:4b:54:80:1a:99:77:f1:22:d4: c6:04:3a:bd:33:34:a4:ff:7c:a5:87:64:70:1a:c0:16:e4:71: 5f:ae:80:8f:53:6a:51:d0:4c:dc:e1:46:03:d5:7b:6b:0a:b2: 0b:ee:8d:d7:c0:00:29:af:66:b3:a9:d5:9b:88:f6:94:46:85: 27:18:be:0d:76:f6:39:0d:bc:33:bc:00:b2:b0:e1:c5:56:86: 15:54:6e:63:c5:e7:ff:0c:95:54:7b:80:8c:6b:1c:ad:f8:b1: 48:bf:25:6c:4b:0a:4d:ab:bc:21:f2:9d:85:64:6a:40:71:c3: 01:e6:e0:e2:a0:4f:78:68:46:22:35:bb:8c:88:77:64:b3:e7: 44:a2:3a:e9:f0:6d:23:06:3d:9f:f8:1b:37:53:f8:03:10:53: dc:08:c3:9d:ef:d4:95:c6:b5:bf:04:35:60:a5:be:c1:e6:da: 9c:f2:e7:25:66:0e:43:c8:0d:1f:0d:b1:de:e0:17:81:f6:95: 68:98:f4:46:fa:76:80:36:11:80:f9:1d:8b:5c:12:c3:ba:42: 7f:64:c3:42:87:b8:0a:aa:df:d7:9a:e0:86:23:2a:42:8a:e9: 51:46:2d:59:b4:fd:1c:b2:f4:2a:9e:43:0c:4f:0d:c1:f8:43: 6e:4b:7a:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcLVoxB3szY3ia3j7PCAFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMTg3Y2E1YjhhZWUxOTVjYzhjYWRjZmI0OGM1NDRiMTgx NDc3ZWYwHhcNMjUxMjIzMDkwMDU5WhcNMjUxMjI0MDkwMDU5WjAzMTEwLwYDVQQD EyhmZDFkNDQ1N2YyYzVmMmU1YWNmNzFmYWVhMjFlMWZiYWQxOTVjNWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ+SHnBg34Y4TeYJATV1o/i1UPB0 LJhv3QVOpw4VRRhAq3j6iqrWTxFxFyWL9m14wH27Ib29BLOtOn3+OvmeP/KJ8oyU 63CPW+g6d++DB+y1W1WKegaouISm89ALq+LKVoohAtE1jC+DzJeQdPv8RRBVrPeT /fDIrnp4HOBZqDpQpxQjGi8ngXe26qryeXB1bnRc8s5YxS5Po/U7JeN50adMt0MR YdFq/4+m4Z7WcGiBVi4Hl4QPdJ9hWV7H70DGUyd2STPD9F/Y0IdoYRuYildHZqJa 6KR4DypPCRLbgqRxTHj98do6r/yNQ87XaPEiwQPPYfwlP7Ysz4I7wM2lsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0dRFfyxfLlrPcfrqIeH7rRlcWsMB8GA1UdIwQY MBaAFGoYfKW4ruGVzIytz7SMVEsYFHfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NWMwOGItNTA1Ni00Mzg2LWE0MmIt YmYwM2RjODM3OTAwLzEvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85NWMwOGItNTA1Ni00Mzg2LWE0MmItYmYwM2RjODM3OTAw LzEvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnV7rFMQ yBltS1SAGpl38SLUxgQ6vTM0pP98pYdkcBrAFuRxX66Aj1NqUdBM3OFGA9V7awqy C+6N18AAKa9ms6nVm4j2lEaFJxi+DXb2OQ28M7wAsrDhxVaGFVRuY8Xn/wyVVHuA jGscrfixSL8lbEsKTau8IfKdhWRqQHHDAebg4qBPeGhGIjW7jIh3ZLPnRKI66fBt IwY9n/gbN1P4AxBT3AjDne/Ulca1vwQ1YKW+webanPLnJWYOQ8gNHw2x3uAXgfaV aJj0Rvp2gDYRgPkdi1wSw7pCf2TDQoe4Cqrf15rghiMqQorpUUYtWbT9HLL0Kp5D DE8NwfhDbkt6mQ== -----END CERTIFICATE-----Generated at Tue Dec 23 10:57:46 2025 by rpki-client