This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft File: AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft (raw, json) Hash identifier: DcicTtdkvK67BjI7eFL39h2ErjNd9nZf/Teq3X5zydU= Subject key identifier: 2C:89:F1:49:E2:A0:8F:92:A1:C3:66:76:2E:91:E5:53:97:57:03:29 Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2 Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2 Certificate serial: 019B0FA5CCD1ACDC187DE0E1DA078EB0B4EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft Manifest number: 1776 Signing time: Thu 11 Dec 2025 23:01:22 +0000 Manifest this update: Thu 11 Dec 2025 23:01:22 +0000 Manifest next update: Fri 12 Dec 2025 23:01:22 +0000 Files and hashes: 1: 7Ns-2cBnKCoAvvMfhajIUsqOfRM.roa (hash: xGbT8/8kQTWGMRGlRdu/Jth3qb8PIWWDn9MA5RF+54k=) 2: AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl (hash: KRVGF8JfzgXgMWErJ9FvTJyhoxSbGcuQKGI3fzomNK8=) 3: aElB0_w7iL_LUpRU29R2Y75Dhrc.roa (hash: 1LiV/+sY4qGsrVLFK70gELnTzz3VangyIqPY1yxftrc=) 4: hAKkzIf2oiJNVc7cq9BOLAqtAwk.roa (hash: 3RbNRO/4bn+lvyxkoMHSxqNiv9S4Xn+bWprhvyyRHQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:cc:d1:ac:dc:18:7d:e0:e1:da:07:8e:b0:b4:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2 Validity Not Before: Dec 11 23:01:22 2025 GMT Not After : Dec 12 23:01:22 2025 GMT Subject: CN=2c89f149e2a08f92a1c366762e91e55397570329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:34:c8:e3:c7:30:4c:ce:94:c8:68:fc:7a:1c: 49:60:61:48:dd:67:80:f7:a3:ec:0e:4e:b2:02:d4: bc:1c:8c:36:0d:c9:e2:02:e2:f9:52:a8:58:1f:49: 9a:71:cc:d8:ff:80:cf:94:52:12:2a:6f:b8:5e:9a: 11:09:f4:21:86:eb:f2:f2:0b:61:c0:87:6a:83:22: 6d:4d:2c:79:06:9b:85:39:46:5f:ec:09:46:ce:c1: e3:4e:a9:88:16:01:44:79:fe:80:3a:3f:41:b9:3a: 0a:2e:b9:bc:e7:a0:7d:fa:a7:26:61:20:64:49:7b: 11:6b:98:44:b3:db:94:37:19:7c:28:be:f7:ab:9e: 99:5a:ae:e9:e1:f4:f2:99:a1:fe:f6:39:63:dd:0b: ca:27:8c:5b:48:a6:10:d3:91:a7:61:74:1f:8a:64: 69:1f:bd:eb:1c:8d:6e:a6:12:fb:c2:3b:a9:96:93: 45:d1:aa:b1:0d:df:6c:3c:16:38:df:06:fe:48:d4: 4e:63:82:7f:3c:41:47:f5:09:00:20:7d:14:de:d4: bb:f5:e5:e7:01:60:87:d8:73:aa:9b:99:1d:a1:3b: 0c:3a:fd:bd:d8:7e:49:5a:cd:a3:79:d1:08:38:ef: 32:de:56:eb:a0:aa:f1:d7:59:8f:1a:f1:62:d2:78: 5b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:89:F1:49:E2:A0:8F:92:A1:C3:66:76:2E:91:E5:53:97:57:03:29 X509v3 Authority Key Identifier: keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ea:73:e1:62:d9:c2:4b:1b:8e:2c:92:f9:da:d5:96:a7:4c: 97:2b:70:29:bb:29:da:31:d4:91:9f:3d:e4:25:63:c9:e2:9a: c5:e3:1a:2f:72:21:2a:3b:1f:61:9d:c1:34:f7:39:75:4a:12: 43:b6:df:ae:dc:25:cd:26:ec:6f:77:23:1b:26:19:7e:3a:df: 32:5a:91:4e:fb:70:4f:1f:28:9c:b8:09:0d:92:ea:11:05:ce: 9b:07:ea:38:4b:27:4b:c5:f9:af:1a:61:a7:89:9f:5e:c8:0b: d8:d7:92:da:f9:0f:d1:a7:5e:e7:c3:2e:e3:d9:d2:1a:11:3c: 72:cb:40:53:ef:46:66:4f:e6:9d:24:bb:e8:24:79:88:d0:d5: 73:6c:eb:10:a8:57:8c:d4:25:4b:a4:1d:19:a9:ce:3b:e9:b8: ec:df:07:a7:e9:b8:7c:04:41:7d:6a:a9:63:27:06:61:55:12: dc:42:74:5c:51:0c:83:fe:d8:0b:79:98:53:8a:9b:ff:4c:59: 4d:ed:b1:53:ac:8d:ad:21:07:18:d0:bd:05:86:03:82:2d:2a: 8b:0d:c2:5e:b9:75:b5:b9:12:0a:f2:da:86:9c:01:eb:4d:21: af:10:75:ca:c2:54:e3:72:42:15:e9:81:4e:e7:01:9c:67:3c: 15:5c:45:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpczRrNwYfeDh2geOsLTuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzM5NDAyYzQyYjNmODQ5OTVjNGQ1OGVmNjcwZThkMTZj MmFmZTIwHhcNMjUxMjExMjMwMTIyWhcNMjUxMjEyMjMwMTIyWjAzMTEwLwYDVQQD EygyYzg5ZjE0OWUyYTA4ZjkyYTFjMzY2NzYyZTkxZTU1Mzk3NTcwMzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTTI48cwTM6UyGj8ehxJYGFI3WeA 96PsDk6yAtS8HIw2DcniAuL5UqhYH0macczY/4DPlFISKm+4XpoRCfQhhuvy8gth wIdqgyJtTSx5BpuFOUZf7AlGzsHjTqmIFgFEef6AOj9BuToKLrm856B9+qcmYSBk SXsRa5hEs9uUNxl8KL73q56ZWq7p4fTymaH+9jlj3QvKJ4xbSKYQ05GnYXQfimRp H73rHI1uphL7wjuplpNF0aqxDd9sPBY43wb+SNROY4J/PEFH9QkAIH0U3tS79eXn AWCH2HOqm5kdoTsMOv292H5JWs2jedEIOO8y3lbroKrx11mPGvFi0nhbdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyJ8UnioI+SocNmdi6R5VOXVwMpMB8GA1UdIwQY MBaAFAIzlALEKz+EmVxNWO9nDo0Wwq/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2It ZmM2NGJmYzNkMmY5LzEvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2ItZmM2NGJmYzNkMmY5 LzEvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPepz4WLZ wksbjiyS+drVlqdMlytwKbsp2jHUkZ895CVjyeKaxeMaL3IhKjsfYZ3BNPc5dUoS Q7bfrtwlzSbsb3cjGyYZfjrfMlqRTvtwTx8onLgJDZLqEQXOmwfqOEsnS8X5rxph p4mfXsgL2NeS2vkP0ade58Mu49nSGhE8cstAU+9GZk/mnSS76CR5iNDVc2zrEKhX jNQlS6QdGanOO+m47N8Hp+m4fARBfWqpYycGYVUS3EJ0XFEMg/7YC3mYU4qb/0xZ Te2xU6yNrSEHGNC9BYYDgi0qiw3CXrl1tbkSCvLahpwB600hrxB1ysJU43JCFemB TucBnGc8FVxF+A== -----END CERTIFICATE-----Generated at Fri Dec 12 05:31:49 2025 by rpki-client