This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft File: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft (raw, json) Hash identifier: Oi5Yge0cszgP10ha/wiXGk0qiCAwnB9XIirHD+NhomY= Subject key identifier: D8:9D:19:03:32:8C:DB:FF:24:BD:73:82:EB:50:50:CE:52:F4:F9:AD Authority key identifier: 02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF Certificate issuer: /CN=023c397109340b767bcb324515f6d1f82c8cc7cf Certificate serial: 019B3720915DE1F0A849AF179E09DC05F76A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft Manifest number: 13F1 Signing time: Fri 19 Dec 2025 15:00:39 +0000 Manifest this update: Fri 19 Dec 2025 15:00:39 +0000 Manifest next update: Sat 20 Dec 2025 15:00:39 +0000 Files and hashes: 1: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl (hash: xUm5Cf14g3fFGpabrlxRnJYRikR4dB1JAewGBUkY2Fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:91:5d:e1:f0:a8:49:af:17:9e:09:dc:05:f7:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023c397109340b767bcb324515f6d1f82c8cc7cf Validity Not Before: Dec 19 15:00:39 2025 GMT Not After : Dec 20 15:00:39 2025 GMT Subject: CN=d89d1903328cdbff24bd7382eb5050ce52f4f9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1a:58:e3:21:2e:eb:43:ce:34:f2:8a:1d:32: ab:36:14:ff:c4:e6:12:d9:6a:fc:fd:23:1a:71:3a: a5:1a:cb:a5:24:c4:83:b7:1f:b3:35:c2:b5:2f:75: 30:28:4b:42:9d:07:0a:0e:d7:81:27:70:88:c8:cc: cf:84:86:37:ab:c8:d4:54:61:d6:37:a8:47:9a:bf: e3:2e:ab:3b:bd:d9:6b:ab:fb:25:d4:60:e4:fb:d3: af:2d:f9:4f:05:e2:4f:75:0a:ca:ce:de:a4:08:98: 6e:08:7c:a9:a5:01:05:25:ad:f1:8f:fc:02:37:8a: dc:35:51:74:2e:b5:ba:c0:4b:10:57:2a:b1:89:7a: a0:1b:90:73:e1:9b:b0:6c:3e:d7:04:ff:15:bd:8c: b3:22:bf:21:1c:15:2a:be:78:9d:77:a3:e7:e0:17: 1e:45:f2:7f:c2:44:cd:55:64:b7:96:b1:c6:75:ca: b1:6a:b0:f5:76:55:51:7b:c7:4d:da:ba:9e:ee:eb: 3b:10:9a:e0:8f:07:30:26:cb:93:f9:a1:bb:f5:ad: ee:e5:73:70:18:6e:aa:e7:2d:c2:c4:ce:78:3a:ea: 42:5f:ed:9d:87:15:09:3b:85:35:15:46:00:93:77: 71:df:51:56:be:60:1a:d7:01:ff:3b:e3:bc:66:1c: ea:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9D:19:03:32:8C:DB:FF:24:BD:73:82:EB:50:50:CE:52:F4:F9:AD X509v3 Authority Key Identifier: keyid:02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:42:9b:8e:0f:27:27:d1:6d:06:6d:6d:67:fa:e1:a5:85:94: c4:85:ca:43:1e:6a:04:72:c4:74:9d:3b:39:b8:8f:32:81:de: ec:fd:fb:7c:5e:74:94:e2:7b:6d:c6:ef:da:7c:c2:d9:7f:bb: d1:52:c9:d8:fd:90:d8:59:91:ae:c3:a2:80:dc:65:6a:07:c3: fa:dd:a0:b0:5a:f7:9a:2c:0a:50:ad:61:92:05:6c:01:f0:ac: 82:42:1e:ec:33:66:5b:99:da:da:35:88:62:4b:b5:97:0b:c8: 7c:d4:b7:49:51:de:8f:9e:a9:31:9f:f4:eb:46:e2:a5:96:cc: 2e:74:34:97:33:b2:b3:b3:69:62:5f:ad:cf:bd:52:23:0e:56: 91:cf:6d:a3:93:75:b1:4f:37:ba:6b:70:8e:28:67:87:14:e8: d2:ca:ed:2f:ff:f4:6c:22:5d:3d:39:6f:63:78:f2:9f:ee:e2: 05:75:ad:89:d3:2a:57:4f:aa:a6:e6:ae:6c:a8:68:ea:de:e5: 39:c3:40:eb:d7:c5:1f:15:8d:b1:4a:52:1b:50:85:e6:27:79: 1c:40:38:56:d1:65:0a:32:ee:ea:36:40:77:dc:a4:07:77:d1: 2d:31:10:d9:41:40:f8:d6:0c:8b:47:e6:6d:fe:b4:19:48:14: 3e:6f:60:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IJFd4fCoSa8XngncBfdqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyM2MzOTcxMDkzNDBiNzY3YmNiMzI0NTE1ZjZkMWY4MmM4 Y2M3Y2YwHhcNMjUxMjE5MTUwMDM5WhcNMjUxMjIwMTUwMDM5WjAzMTEwLwYDVQQD EyhkODlkMTkwMzMyOGNkYmZmMjRiZDczODJlYjUwNTBjZTUyZjRmOWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBpY4yEu60PONPKKHTKrNhT/xOYS 2Wr8/SMacTqlGsulJMSDtx+zNcK1L3UwKEtCnQcKDteBJ3CIyMzPhIY3q8jUVGHW N6hHmr/jLqs7vdlrq/sl1GDk+9OvLflPBeJPdQrKzt6kCJhuCHyppQEFJa3xj/wC N4rcNVF0LrW6wEsQVyqxiXqgG5Bz4ZuwbD7XBP8VvYyzIr8hHBUqvnidd6Pn4Bce RfJ/wkTNVWS3lrHGdcqxarD1dlVRe8dN2rqe7us7EJrgjwcwJsuT+aG79a3u5XNw GG6q5y3CxM54OupCX+2dhxUJO4U1FUYAk3dx31FWvmAa1wH/O+O8ZhzqxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNidGQMyjNv/JL1zgutQUM5S9PmtMB8GA1UdIwQY MBaAFAI8OXEJNAt2e8syRRX20fgsjMfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWp3NWNRazBDM1o3eXpKRkZmYlItQ3lNeDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hNTU5MzUtNTJiZi00ZDZmLThiOTAt ZTkwZWVmZGIzYWM1LzEvQWp3NWNRazBDM1o3eXpKRkZmYlItQ3lNeDg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9hNTU5MzUtNTJiZi00ZDZmLThiOTAtZTkwZWVmZGIzYWM1 LzEvQWp3NWNRazBDM1o3eXpKRkZmYlItQ3lNeDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUKbjg8n J9FtBm1tZ/rhpYWUxIXKQx5qBHLEdJ07ObiPMoHe7P37fF50lOJ7bcbv2nzC2X+7 0VLJ2P2Q2FmRrsOigNxlagfD+t2gsFr3miwKUK1hkgVsAfCsgkIe7DNmW5na2jWI Yku1lwvIfNS3SVHej56pMZ/060bipZbMLnQ0lzOys7NpYl+tz71SIw5Wkc9to5N1 sU83umtwjihnhxTo0srtL//0bCJdPTlvY3jyn+7iBXWtidMqV0+qpuaubKho6t7l OcNA69fFHxWNsUpSG1CF5id5HEA4VtFlCjLu6jZAd9ykB3fRLTEQ2UFA+NYMi0fm bf60GUgUPm9gHw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:15:00 2025 by rpki-client