This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft File: Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json) Hash identifier: CUiom4dZoomQkXz/gFWUD0A8TLNHOLzQS6Z+pkSM8CI= Subject key identifier: 91:61:25:D3:9F:66:D2:4C:41:34:64:F1:0C:4B:4F:91:3F:80:D2:11 Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa Certificate serial: 019B10B7F4B3CB604C65181C6186D23D340B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft Manifest number: 124F Signing time: Fri 12 Dec 2025 04:00:49 +0000 Manifest this update: Fri 12 Dec 2025 04:00:49 +0000 Manifest next update: Sat 13 Dec 2025 04:00:49 +0000 Files and hashes: 1: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: nrhC6MWRa2FmyRVuIBYGyZisUGy/ajAZlt76H939eQU=) 2: fVmkukCoNZRcRoc3LS-TXPrqhnE.roa (hash: jN7loYTxoFJMSibKv+JC0+n6QXqAWoukHaK+yW79eHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b7:f4:b3:cb:60:4c:65:18:1c:61:86:d2:3d:34:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa Validity Not Before: Dec 12 04:00:49 2025 GMT Not After : Dec 13 04:00:49 2025 GMT Subject: CN=916125d39f66d24c413464f10c4b4f913f80d211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0d:9c:28:f8:3a:1a:db:c7:6b:73:80:d4:74: 23:e5:80:5a:af:3b:43:1a:89:78:83:9d:44:02:f0: 6a:5c:19:01:be:c6:81:99:96:a6:d0:04:e6:68:5e: 76:96:83:b8:04:b7:58:b7:5d:c1:0d:ef:15:33:eb: 01:08:d9:37:79:62:bf:05:53:ea:20:7e:21:15:b8: b9:32:ba:11:9f:9c:40:72:ec:cb:bb:1d:8b:f3:b5: 15:e9:ec:5f:bd:e2:d8:b1:13:ac:15:7c:a0:8a:cd: 2c:6a:20:04:30:33:9d:44:f7:9a:73:3c:96:6d:5c: ba:5a:80:20:84:6b:5d:ae:0a:e1:27:57:03:3d:d3: 98:4d:49:7c:0c:7c:57:2c:51:85:b3:8c:6c:f1:ce: 78:5a:ee:9b:ad:f2:67:73:c0:1e:03:00:b7:a6:6c: d7:9b:99:50:53:bd:76:c6:07:3b:46:6d:b9:45:4b: 89:17:7f:51:3b:83:7b:93:ef:2a:dd:53:01:7e:81: f3:1f:a2:10:f6:9b:0d:e6:a9:bd:ce:cb:6a:54:34: 85:2b:f0:ac:19:a8:b3:86:58:d8:f0:3d:02:5e:e8: b3:64:bb:5c:0c:c6:35:e4:d0:d3:6e:7a:92:b1:c1: 74:9a:da:f4:09:78:58:03:e4:d2:db:85:71:89:2c: 4d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:61:25:D3:9F:66:D2:4C:41:34:64:F1:0C:4B:4F:91:3F:80:D2:11 X509v3 Authority Key Identifier: keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:66:f6:56:22:12:fd:54:a1:20:1e:b6:0f:a9:88:ee:5c:6e: aa:1f:0e:e3:8a:db:3d:f8:0f:5c:3b:c4:0e:3c:90:9a:22:ea: 0b:18:6e:30:97:fa:e2:e6:d6:dc:b4:7c:f8:cc:62:35:4d:ea: f1:03:d1:b1:a8:e9:c1:f9:32:74:23:e9:62:5c:87:d0:fd:95: 32:1c:4e:70:2c:c7:a2:35:b1:09:b8:b1:aa:5b:ea:d3:83:37: 75:bd:7e:b4:44:09:d4:f3:e6:a5:74:d1:73:3a:5b:af:6c:ee: b6:f6:4a:2f:37:c8:1c:fb:67:f2:84:92:2b:c5:d7:52:9c:91: 85:3f:7a:a7:de:b8:f9:cf:0f:8e:87:e0:7d:0f:52:de:0e:bd: 06:32:6a:77:c9:b2:34:65:d6:ff:06:2c:c5:7b:2d:71:e8:e5: 87:12:fa:b8:ce:65:bd:71:28:7f:50:18:2e:2d:a1:21:f7:84: 4e:cf:af:02:b1:50:89:f4:c0:60:aa:42:1f:82:3c:a3:60:f0: ad:f9:30:b0:18:05:94:4a:77:98:fe:02:e5:a3:10:b2:bb:e1: c2:dd:a1:e0:cd:71:5a:ed:f7:a3:ee:c7:55:c5:0a:c1:a5:9e: f8:de:f1:26:7d:f8:a7:28:4d:d3:18:84:31:c0:5a:2f:6b:11: 71:47:bd:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQt/Szy2BMZRgcYYbSPTQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMWFiM2RkMjJjMzMzYTc5YjZmZjMwYWFiN2YyZTAzNmZj MzcwYWEwHhcNMjUxMjEyMDQwMDQ5WhcNMjUxMjEzMDQwMDQ5WjAzMTEwLwYDVQQD Eyg5MTYxMjVkMzlmNjZkMjRjNDEzNDY0ZjEwYzRiNGY5MTNmODBkMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A2cKPg6GtvHa3OA1HQj5YBarztD Gol4g51EAvBqXBkBvsaBmZam0ATmaF52loO4BLdYt13BDe8VM+sBCNk3eWK/BVPq IH4hFbi5MroRn5xAcuzLux2L87UV6exfveLYsROsFXygis0saiAEMDOdRPeaczyW bVy6WoAghGtdrgrhJ1cDPdOYTUl8DHxXLFGFs4xs8c54Wu6brfJnc8AeAwC3pmzX m5lQU712xgc7Rm25RUuJF39RO4N7k+8q3VMBfoHzH6IQ9psN5qm9zstqVDSFK/Cs GaizhljY8D0CXuizZLtcDMY15NDTbnqSscF0mtr0CXhYA+TS24VxiSxNLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFhJdOfZtJMQTRk8QxLT5E/gNIRMB8GA1UdIwQY MBaAFAIas90iwzOnm2/zCqt/LgNvw3CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMGZiYjYtZGVhMi00YzdiLWFmYWQt NGFjZWM2NDc1NzJkLzEvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMGZiYjYtZGVhMi00YzdiLWFmYWQtNGFjZWM2NDc1NzJk LzEvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWb2ViIS /VShIB62D6mI7lxuqh8O44rbPfgPXDvEDjyQmiLqCxhuMJf64ubW3LR8+MxiNU3q 8QPRsajpwfkydCPpYlyH0P2VMhxOcCzHojWxCbixqlvq04M3db1+tEQJ1PPmpXTR czpbr2zutvZKLzfIHPtn8oSSK8XXUpyRhT96p964+c8PjofgfQ9S3g69BjJqd8my NGXW/wYsxXstcejlhxL6uM5lvXEof1AYLi2hIfeETs+vArFQifTAYKpCH4I8o2Dw rfkwsBgFlEp3mP4C5aMQsrvhwt2h4M1xWu33o+7HVcUKwaWe+N7xJn34pyhN0xiE McBaL2sRcUe9PA== -----END CERTIFICATE-----Generated at Fri Dec 12 10:36:27 2025 by rpki-client