This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft File: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft (raw, json) Hash identifier: 0/RrCgXIsjVT1KIwmoconcmWODIochGAJB9r7fdo93g= Subject key identifier: 89:DE:8C:54:67:2C:7B:9B:E3:CA:49:23:EC:40:68:8B:95:35:C7:F5 Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 019B17CD71A8855350D3E19B3BF527072CA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft Manifest number: 1781 Signing time: Sat 13 Dec 2025 13:01:38 +0000 Manifest this update: Sat 13 Dec 2025 13:01:38 +0000 Manifest next update: Sun 14 Dec 2025 13:01:38 +0000 Files and hashes: 1: 2MTpcYnM1k7_eZxG4JM1vyDTgyk.roa (hash: ymmdwaUbb6XKWmKTfQm4pWw8ouzRa7gwqokbxv+gmWU=) 2: 3CW8ZrBicXZ-3Xo2rFwfHtSekAs.roa (hash: 7ay6ExNqGjacU7HN/bzX0dJI8r/LlyrNhedhAiFT9ik=) 3: 4MiALt5VQvZmZRNJbgiFndSZM4w.roa (hash: GJAf7lhefseebsxtLfvA2JkOrit3YnALqwfo2sORCvw=) 4: 7XLrZeKON3mi_Y8HbdkwhdOJHZM.roa (hash: uPZBCvQWdyX5oSW3u+GYq0zKOz3VqYp/42l/kQKgi6Y=) 5: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl (hash: eJM6Extk7HgtR4y+lwhTgIpGrJqBBufTj7cpmrDeF3k=) 6: Woo9uQ4ucTRYjMh9ah88cw5clxk.roa (hash: WrdAqZeK7ES2+LIoGcfX11G6G4YXGyd2qn4CZO/jQsA=) 7: Xih-EfVQ2lODpeM1Ya_8fjlb3e0.roa (hash: l4FttRaMYnWfbRGN1GiO7VFVJgCvU1nAC+1h/ttWafI=) 8: Z2PHW8LvacSdhO2HpcioR4D6P_g.roa (hash: kHWtIvwFttg31Y3IHOia+gnD127BKytZFvvHo2JKuAw=) 9: gbjyDe1jMzAx-GtGqvOl5rcNw2Y.roa (hash: bZY4frDqpa0VtHIgDLvz2UTVVluMMplhW24wn9Ofe38=) 10: kSocueKI3xqrxYrVlgp46XPJhoY.roa (hash: 38MoDqAostLgesLzGLlzSF6QuxV0tRHQ2WgTUcouUvI=) 11: zDn6BG65-N44C0uDlJe3RzkiUTs.roa (hash: EM6Uwy/Us+r0AtgVlMQcbmCbt0K/tS3jHqszI1mZVYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:cd:71:a8:85:53:50:d3:e1:9b:3b:f5:27:07:2c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Dec 13 13:01:38 2025 GMT Not After : Dec 14 13:01:38 2025 GMT Subject: CN=89de8c54672c7b9be3ca4923ec40688b9535c7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:30:ab:f3:3a:2d:3d:03:ce:1a:23:82:a8:44: ec:52:25:47:51:2b:38:1b:28:e4:80:8b:ac:b2:b9: 8d:f3:2c:84:8f:1a:32:1d:da:69:b6:2a:63:28:6d: 87:70:eb:99:53:d6:30:59:e6:34:61:61:8b:7b:d8: 92:7a:ef:a2:2c:0f:1f:fa:8f:75:98:2e:84:1c:2d: f5:d4:e0:8b:80:36:0f:4c:db:28:1e:2d:75:2a:0e: 80:78:c8:b4:d4:d8:63:50:aa:d2:30:41:c8:c3:82: 82:76:66:f4:08:0a:eb:05:e1:eb:5b:a3:60:d8:a7: 0d:07:53:a9:84:45:06:26:28:be:1d:c7:1d:2e:70: e0:1b:63:db:8d:4c:41:96:c9:e7:9f:5c:10:e1:e2: f3:7d:62:8d:2b:fa:c7:d0:9f:8d:d6:e3:ad:a1:7c: 7c:04:49:26:b5:29:35:48:26:37:60:03:44:ef:53: a1:6a:ef:60:71:14:0e:76:64:31:a8:9b:01:95:bd: 3c:96:10:af:85:21:7b:73:86:15:90:c6:54:35:53: de:b3:c1:fb:80:58:59:19:36:48:2c:09:59:21:22: 42:63:a0:44:40:96:7e:ed:7b:b7:29:27:ce:61:be: 83:cf:92:2a:38:ee:29:bf:dc:0c:05:97:3c:13:5c: 67:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DE:8C:54:67:2C:7B:9B:E3:CA:49:23:EC:40:68:8B:95:35:C7:F5 X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:39:d8:71:d0:1e:18:3a:0b:97:71:b9:41:f1:bd:76:69:f0: 0d:66:f6:ec:66:43:0c:eb:99:cf:2c:c9:40:b5:63:26:06:43: 8a:c6:48:9a:1f:4e:bd:e9:f5:1c:0c:a3:db:d1:c9:0f:c9:21: ed:65:2b:3a:b9:2d:80:f3:a1:f7:15:ce:bf:9c:73:90:2f:c1: b9:e7:13:b1:b1:46:01:33:f5:0c:54:71:56:2b:8e:45:13:d6: 4d:0d:6f:b2:97:6a:03:e2:2d:af:d0:a8:86:86:bb:07:3b:3c: 2c:f3:48:12:53:d7:1f:96:1c:67:45:3a:f2:ab:05:ab:61:20: 26:3e:1f:58:a4:ed:70:ff:42:4b:cc:f6:e0:25:11:fd:29:31: 0e:79:70:b2:26:d3:c3:21:03:0d:b8:35:eb:58:50:4e:5f:58: f7:d6:3b:16:95:54:dc:4e:ba:1f:45:42:5f:a1:05:8b:f3:2c: 9c:af:6c:9b:a0:fd:8c:de:ba:98:b9:8d:6d:45:73:26:e6:e0: 52:db:ce:8b:0b:5f:91:04:9b:d2:eb:55:94:2a:c6:ae:4e:94: cd:71:d8:e5:56:60:3d:15:d5:f5:f7:d8:cf:4a:ca:01:ed:3f: d8:21:94:d3:9d:dc:98:c6:6d:95:67:54:eb:44:fb:cf:29:a0: 7a:f3:6f:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXzXGohVNQ0+GbO/UnByyoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjUxMjEzMTMwMTM4WhcNMjUxMjE0MTMwMTM4WjAzMTEwLwYDVQQD Eyg4OWRlOGM1NDY3MmM3YjliZTNjYTQ5MjNlYzQwNjg4Yjk1MzVjN2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDCr8zotPQPOGiOCqETsUiVHUSs4 GyjkgIussrmN8yyEjxoyHdpptipjKG2HcOuZU9YwWeY0YWGLe9iSeu+iLA8f+o91 mC6EHC311OCLgDYPTNsoHi11Kg6AeMi01NhjUKrSMEHIw4KCdmb0CArrBeHrW6Ng 2KcNB1OphEUGJii+HccdLnDgG2PbjUxBlsnnn1wQ4eLzfWKNK/rH0J+N1uOtoXx8 BEkmtSk1SCY3YANE71Ohau9gcRQOdmQxqJsBlb08lhCvhSF7c4YVkMZUNVPes8H7 gFhZGTZILAlZISJCY6BEQJZ+7Xu3KSfOYb6Dz5IqOO4pv9wMBZc8E1xnDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInejFRnLHub48pJI+xAaIuVNcf1MB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTnYcdAe GDoLl3G5QfG9dmnwDWb27GZDDOuZzyzJQLVjJgZDisZImh9Oven1HAyj29HJD8kh 7WUrOrktgPOh9xXOv5xzkC/BuecTsbFGATP1DFRxViuORRPWTQ1vspdqA+Itr9Co hoa7Bzs8LPNIElPXH5YcZ0U68qsFq2EgJj4fWKTtcP9CS8z24CUR/SkxDnlwsibT wyEDDbg161hQTl9Y99Y7FpVU3E66H0VCX6EFi/MsnK9sm6D9jN66mLmNbUVzJubg UtvOiwtfkQSb0utVlCrGrk6UzXHY5VZgPRXV9ffYz0rKAe0/2CGU053cmMZtlWdU 60T7zymgevNvkQ== -----END CERTIFICATE-----Generated at Sat Dec 13 19:16:44 2025 by rpki-client