This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft File: AK26S0B03hPZjWSBmm7IX4Eqeek.mft (raw, json) Hash identifier: d78iYQdXG05Qt8GJqfb/aEbCScdwkqIm7qrhsBJmWjY= Subject key identifier: 6D:BA:5D:73:C6:3B:51:BB:55:1B:B0:A8:B2:E9:33:6F:EA:FF:73:0A Authority key identifier: 00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9 Certificate issuer: /CN=00adba4b4074de13d98d64819a6ec85f812a79e9 Certificate serial: 019B59E443927E8407C04B3DD7CC742213FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 09:01:30 +0000 Manifest this update: Fri 26 Dec 2025 09:01:30 +0000 Manifest next update: Sat 27 Dec 2025 09:01:30 +0000 Files and hashes: 1: 6MYFp39ARHMq2YJE5lHJSxTEL30.roa (hash: 5gVWBuoSK8Y4bSXsVg//9ioaebm5O8SmIGV4l8p9YZY=) 2: AK26S0B03hPZjWSBmm7IX4Eqeek.crl (hash: 23tfm7plWfFEXSw53QHtRWg0ZwZmmZFqxFUr1fsvhjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:43:92:7e:84:07:c0:4b:3d:d7:cc:74:22:13:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00adba4b4074de13d98d64819a6ec85f812a79e9 Validity Not Before: Dec 26 09:01:30 2025 GMT Not After : Dec 27 09:01:30 2025 GMT Subject: CN=6dba5d73c63b51bb551bb0a8b2e9336feaff730a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:1b:98:a9:4c:09:dd:10:e0:97:fc:ee:e0: 79:aa:2c:19:95:e9:a9:8b:b9:dc:12:2c:73:ad:0e: 78:b2:57:e0:9d:ac:ae:60:31:e7:42:9d:9f:1b:a2: 5c:bb:67:92:72:78:99:88:0b:91:f6:6c:64:2d:70: a7:ab:3f:bd:90:f3:bf:84:ab:b0:8c:62:fa:ea:08: 1e:5a:e0:fc:86:33:bc:68:d1:58:cc:2e:2f:e7:49: a4:50:40:51:61:16:17:fc:8f:e0:7f:19:9e:af:e5: 1f:b7:3d:de:be:ed:74:87:18:f8:43:30:2f:df:58: 81:79:04:7c:49:74:46:36:52:d9:5d:cf:2d:94:2d: a9:a6:e9:41:39:05:92:5f:07:d4:bd:c5:a3:8a:e3: 3f:48:d1:e9:4d:25:10:29:38:30:bc:e4:23:29:48: b7:b0:31:df:ad:6a:8a:3e:92:05:4b:29:da:65:d1: 4c:05:79:fc:36:09:a8:79:40:54:12:19:ce:7a:fe: bc:70:3b:10:5e:13:1b:ed:8d:df:e0:0f:35:1b:7f: 57:6e:33:08:b1:41:c4:42:21:04:34:51:7c:03:2b: 95:fa:4a:7c:6a:dc:8d:d3:8c:83:98:d5:0a:c7:b4: a2:ec:54:53:11:1c:1d:83:25:cc:53:4d:31:e2:d0: 8d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BA:5D:73:C6:3B:51:BB:55:1B:B0:A8:B2:E9:33:6F:EA:FF:73:0A X509v3 Authority Key Identifier: keyid:00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c3:b0:d4:a0:17:07:f3:e7:2a:ef:38:b4:72:c3:73:d3:da: fe:12:12:aa:ce:3c:e9:b4:33:a3:f8:06:a2:d5:c2:b3:e9:95: 7b:20:2f:90:10:ac:09:a4:04:0a:55:62:b6:2f:ae:57:de:aa: 56:64:8a:8c:e5:d9:45:50:c5:a8:99:40:53:9c:39:51:1d:0c: 36:e1:a5:87:91:a9:65:b1:35:e2:16:39:8c:75:02:00:41:df: 41:41:52:09:56:94:e4:b9:0c:cd:da:a9:3d:71:86:0f:4e:6b: bf:b9:5b:b8:22:bd:ed:3e:49:0a:ac:c5:ea:dd:37:47:d3:a7: 87:e9:98:d7:e8:9c:00:52:ce:69:9b:f6:c8:ea:f5:95:7f:94: 6d:b7:65:75:d7:0b:e7:02:4e:80:95:97:97:63:50:36:d4:99: c4:2f:31:36:01:8c:2e:4f:52:ff:a4:28:b8:22:19:9a:4c:ea: 3d:26:9e:7b:44:19:b2:a8:7c:60:5a:54:23:0b:82:15:7e:fd: 02:2d:b8:e2:f3:12:d8:b2:15:9b:71:19:a0:20:50:30:92:44: af:9d:fc:ac:54:e2:d2:34:1c:a4:38:23:2d:83:46:85:98:0f: 59:b2:25:a0:33:7c:60:51:04:44:88:ef:aa:cc:0a:6e:ce:e4: b8:eb:92:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5EOSfoQHwEs918x0IhP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYWRiYTRiNDA3NGRlMTNkOThkNjQ4MTlhNmVjODVmODEy YTc5ZTkwHhcNMjUxMjI2MDkwMTMwWhcNMjUxMjI3MDkwMTMwWjAzMTEwLwYDVQQD Eyg2ZGJhNWQ3M2M2M2I1MWJiNTUxYmIwYThiMmU5MzM2ZmVhZmY3MzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRkbmKlMCd0Q4Jf87uB5qiwZlemp i7ncEixzrQ54slfgnayuYDHnQp2fG6Jcu2eScniZiAuR9mxkLXCnqz+9kPO/hKuw jGL66ggeWuD8hjO8aNFYzC4v50mkUEBRYRYX/I/gfxmer+Uftz3evu10hxj4QzAv 31iBeQR8SXRGNlLZXc8tlC2ppulBOQWSXwfUvcWjiuM/SNHpTSUQKTgwvOQjKUi3 sDHfrWqKPpIFSynaZdFMBXn8NgmoeUBUEhnOev68cDsQXhMb7Y3f4A81G39XbjMI sUHEQiEENFF8AyuV+kp8atyN04yDmNUKx7Si7FRTERwdgyXMU00x4tCNhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG26XXPGO1G7VRuwqLLpM2/q/3MKMB8GA1UdIwQY MBaAFACtuktAdN4T2Y1kgZpuyF+BKnnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUsyNlMwQjAzaFBaaldTQm1tN0lYNEVxZWVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMTRhMGYtYzFkMi00MzRjLTg3MWUt YjM4OTViOTYyYzUyLzEvQUsyNlMwQjAzaFBaaldTQm1tN0lYNEVxZWVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMTRhMGYtYzFkMi00MzRjLTg3MWUtYjM4OTViOTYyYzUy LzEvQUsyNlMwQjAzaFBaaldTQm1tN0lYNEVxZWVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMOw1KAX B/PnKu84tHLDc9Pa/hISqs486bQzo/gGotXCs+mVeyAvkBCsCaQEClViti+uV96q VmSKjOXZRVDFqJlAU5w5UR0MNuGlh5GpZbE14hY5jHUCAEHfQUFSCVaU5LkMzdqp PXGGD05rv7lbuCK97T5JCqzF6t03R9Onh+mY1+icAFLOaZv2yOr1lX+UbbdlddcL 5wJOgJWXl2NQNtSZxC8xNgGMLk9S/6QouCIZmkzqPSaee0QZsqh8YFpUIwuCFX79 Ai244vMS2LIVm3EZoCBQMJJEr538rFTi0jQcpDgjLYNGhZgPWbIloDN8YFEERIjv qswKbs7kuOuSzw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:28 2025 by rpki-client