This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft File: ahfeGIf8-pJEuTHZbagmeMAUdmM.mft (raw, json) Hash identifier: ulO5zljzEwKwZP0LK3UupgymbznvG6c/JX/1hE2+0h0= Subject key identifier: B8:5C:49:8B:00:B9:A2:AB:0F:AB:A5:02:D6:9D:72:BF:19:7E:A1:CD Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63 Certificate issuer: /CN=6a17de1887fcfa9244b931d96da82678c0147663 Certificate serial: 019B36B35955806113E50C2E9FE7BB0FA109 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 13:01:22 +0000 Manifest this update: Fri 19 Dec 2025 13:01:22 +0000 Manifest next update: Sat 20 Dec 2025 13:01:22 +0000 Files and hashes: 1: BX5R5amdcio3WuT_y5iUpVj2ums.roa (hash: pwGrkwLGbzotd2slolQ5A3oax/Mg/fo6nb/3FvvTnt0=) 2: KfO5I4Cw1MaFsOF7zxOfQ4tIIJA.roa (hash: 4CuGd2v/2n5Lf/n++Esai12zLsblsU9sM0Lw5FSyTzA=) 3: SaXO2k_RD79NU2l7XYSpiLJj45Y.roa (hash: dDxX4ZRGdILDnfmTeHjmX1mfXPW3FoR3IByWvO/xwLc=) 4: ahfeGIf8-pJEuTHZbagmeMAUdmM.crl (hash: N6kqZYBTJMxh25zvJ5RnDE9OgczuDsnI35pBhQZWclo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:59:55:80:61:13:e5:0c:2e:9f:e7:bb:0f:a1:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663 Validity Not Before: Dec 19 13:01:22 2025 GMT Not After : Dec 20 13:01:22 2025 GMT Subject: CN=b85c498b00b9a2ab0faba502d69d72bf197ea1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c2:94:46:92:2c:20:52:8c:8c:7c:78:c0:05: 00:d0:7c:6b:2a:b9:0f:1e:3a:e3:3e:dd:95:11:99: 6c:fd:20:ee:9d:7e:96:9c:88:9e:f3:8a:84:cf:af: 30:89:01:5f:a5:c7:fc:6d:6b:fa:c5:5f:e9:c1:8c: 0f:93:b6:30:66:26:67:01:e7:01:86:b9:30:83:cc: 48:cb:ce:14:1a:50:9d:bd:30:26:21:7b:01:cb:f1: 47:a1:27:50:93:01:94:0b:45:53:a1:17:09:71:6f: bc:d5:fb:53:d0:09:e7:da:e2:8c:fd:db:d2:18:27: 17:68:a9:f6:89:22:2e:d9:b3:9f:82:64:ee:33:26: 0e:1f:73:52:07:0e:cf:15:c8:bb:02:b5:7d:8f:42: 66:bd:8d:cb:2c:f0:10:6a:a8:07:d7:18:7b:45:f8: 72:75:e0:e3:2d:6b:f9:26:d8:48:e5:23:6a:f1:38: 8f:d3:66:99:fb:8e:93:e5:75:f9:75:d3:8f:c2:61: 23:5a:b8:fb:60:c1:58:e4:1a:b5:ed:80:e6:56:2f: 75:b3:69:15:cb:cc:63:d5:13:c6:7d:dd:40:5d:3a: 6c:38:a3:56:de:08:ab:3a:e2:3a:a4:77:24:7e:55: 80:4c:d2:66:86:3d:31:c4:75:bd:78:19:61:fe:a1: 71:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5C:49:8B:00:B9:A2:AB:0F:AB:A5:02:D6:9D:72:BF:19:7E:A1:CD X509v3 Authority Key Identifier: keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:75:f8:df:1c:f1:60:6e:4d:05:b6:91:0b:bd:ee:c1:c4:b7: f4:d7:b2:12:73:53:da:eb:81:e6:83:7f:45:c8:31:45:31:1e: 33:a6:e1:f8:a8:ec:0e:24:13:04:6e:f7:6e:08:fb:c4:bb:a1: 42:ba:aa:9b:0f:f2:04:83:f3:15:8e:93:cd:fb:a1:55:12:d1: 71:be:36:95:ef:c8:c6:83:41:f4:b4:7e:d5:9c:4a:8c:18:ae: ac:6c:bf:e8:20:fc:0a:df:46:a1:ab:f2:98:89:02:84:78:57: f5:18:99:7e:4e:02:b0:7f:74:d8:16:ae:24:d4:7d:b5:5b:4a: 46:de:f0:cd:05:5c:7c:67:e8:a8:93:48:91:c0:c0:75:e0:86: 0d:72:76:bc:91:ed:ac:0d:8c:bd:0e:5e:da:5c:da:a0:f3:81: 0f:7d:3a:b4:30:3f:af:a5:52:3c:38:f8:e2:8a:7d:f5:f4:24: e9:91:11:ee:72:70:0d:95:67:3b:f3:a9:9b:75:bb:93:80:1a: 85:03:d3:57:12:24:c2:68:47:c7:ed:67:80:bd:07:79:d4:30: ae:b6:95:2d:16:9f:d5:fb:6d:11:70:01:63:0b:98:86:0d:82: f9:cc:72:78:e4:1a:69:a0:4e:66:b4:d4:3e:47:34:77:71:34: e4:f8:e2:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s1lVgGET5Qwun+e7D6EJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMTdkZTE4ODdmY2ZhOTI0NGI5MzFkOTZkYTgyNjc4YzAx NDc2NjMwHhcNMjUxMjE5MTMwMTIyWhcNMjUxMjIwMTMwMTIyWjAzMTEwLwYDVQQD EyhiODVjNDk4YjAwYjlhMmFiMGZhYmE1MDJkNjlkNzJiZjE5N2VhMWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sKURpIsIFKMjHx4wAUA0HxrKrkP HjrjPt2VEZls/SDunX6WnIie84qEz68wiQFfpcf8bWv6xV/pwYwPk7YwZiZnAecB hrkwg8xIy84UGlCdvTAmIXsBy/FHoSdQkwGUC0VToRcJcW+81ftT0Ann2uKM/dvS GCcXaKn2iSIu2bOfgmTuMyYOH3NSBw7PFci7ArV9j0JmvY3LLPAQaqgH1xh7Rfhy deDjLWv5JthI5SNq8TiP02aZ+46T5XX5ddOPwmEjWrj7YMFY5Bq17YDmVi91s2kV y8xj1RPGfd1AXTpsOKNW3girOuI6pHckflWATNJmhj0xxHW9eBlh/qFxSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhcSYsAuaKrD6ulAtadcr8ZfqHNMB8GA1UdIwQY MBaAFGoX3hiH/PqSRLkx2W2oJnjAFHZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lYzI1YmQtMjE5ZS00ZDAyLWE1MzIt MDc5OWE1MmE2Mzg3LzEvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9lYzI1YmQtMjE5ZS00ZDAyLWE1MzItMDc5OWE1MmE2Mzg3 LzEvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3X43xzx YG5NBbaRC73uwcS39NeyEnNT2uuB5oN/RcgxRTEeM6bh+KjsDiQTBG73bgj7xLuh Qrqqmw/yBIPzFY6TzfuhVRLRcb42le/IxoNB9LR+1ZxKjBiurGy/6CD8Ct9Goavy mIkChHhX9RiZfk4CsH902BauJNR9tVtKRt7wzQVcfGfoqJNIkcDAdeCGDXJ2vJHt rA2MvQ5e2lzaoPOBD306tDA/r6VSPDj44op99fQk6ZER7nJwDZVnO/Opm3W7k4Aa hQPTVxIkwmhHx+1ngL0HedQwrraVLRaf1fttEXABYwuYhg2C+cxyeOQaaaBOZrTU Pkc0d3E05PjiUw== -----END CERTIFICATE-----Generated at Fri Dec 19 20:27:15 2025 by rpki-client