This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft File: AMAJiEz5L9xqDS6hJ7619MyMDcc.mft (raw, json) Hash identifier: s+MVk5izwQYRjEFtt+65pvcQqNwS8KEfZTxHgR9Wyc0= Subject key identifier: 1A:74:E7:5C:F9:B6:13:9D:39:51:CF:A5:D1:27:CB:1A:26:C0:71:97 Authority key identifier: 00:C0:09:88:4C:F9:2F:DC:6A:0D:2E:A1:27:BE:B5:F4:CC:8C:0D:C7 Certificate issuer: /CN=00c009884cf92fdc6a0d2ea127beb5f4cc8c0dc7 Certificate serial: 019B41A469FF25658A68E900D53C3FE01965 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft Manifest number: 16EB Signing time: Sun 21 Dec 2025 16:00:52 +0000 Manifest this update: Sun 21 Dec 2025 16:00:52 +0000 Manifest next update: Mon 22 Dec 2025 16:00:52 +0000 Files and hashes: 1: AMAJiEz5L9xqDS6hJ7619MyMDcc.crl (hash: mb4Ge3Qq6ZjCsyB+IwgH8xHjcdwgeQmwljB3UxlTsAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:69:ff:25:65:8a:68:e9:00:d5:3c:3f:e0:19:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00c009884cf92fdc6a0d2ea127beb5f4cc8c0dc7 Validity Not Before: Dec 21 16:00:52 2025 GMT Not After : Dec 22 16:00:52 2025 GMT Subject: CN=1a74e75cf9b6139d3951cfa5d127cb1a26c07197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:08:58:c4:d2:fd:65:26:e9:70:e6:c1:f8:11: 6b:0a:86:1d:b9:8e:7b:dc:a4:55:51:5c:cc:b4:3b: 3d:4a:7b:7c:43:d5:dc:f5:e2:94:54:d0:f7:73:7b: ca:66:c2:42:27:94:c9:71:00:f5:d0:3b:61:c9:84: 29:9f:bd:b0:a7:45:26:7a:0e:2b:c6:60:99:7e:30: 73:f9:1d:09:dd:9f:80:55:9b:1e:c2:61:93:41:b2: 12:27:6b:e7:62:71:1e:58:26:7c:1b:60:37:d7:1c: 31:3d:b7:b1:0a:2d:34:e0:05:77:c4:91:20:21:42: 65:8c:ab:ee:3c:a4:5d:f2:cc:21:4d:0f:5a:c6:48: 76:31:d0:f0:4d:a2:a7:25:ba:b3:a8:42:5c:22:5d: 22:1f:7f:a2:a2:2e:45:81:36:32:ec:51:78:e6:25: 75:db:0b:ad:7d:3a:d2:34:2c:58:e2:21:ed:a1:ce: a6:42:05:10:01:02:d3:2e:8f:f0:cf:0c:b1:42:ca: 2c:34:5a:a6:59:4b:08:76:30:c1:e4:64:9f:8e:af: e3:a7:8f:5c:7b:b3:2f:d7:77:4a:20:5c:e3:0f:ed: c8:67:fb:13:1b:f2:c0:11:d0:c0:d9:58:fb:ac:dd: 48:7b:32:09:13:40:94:b0:3d:e5:2e:48:20:02:9e: ff:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:74:E7:5C:F9:B6:13:9D:39:51:CF:A5:D1:27:CB:1A:26:C0:71:97 X509v3 Authority Key Identifier: keyid:00:C0:09:88:4C:F9:2F:DC:6A:0D:2E:A1:27:BE:B5:F4:CC:8C:0D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:bf:4b:10:c0:3f:bd:ed:f6:04:cd:06:18:2f:02:13:74:9c: 60:cf:25:b9:0b:a9:20:12:01:8f:56:d7:92:23:8b:5a:96:79: f3:9a:44:a0:eb:72:cc:d7:b8:de:9d:6a:45:2a:24:ab:92:ca: 81:29:22:91:b1:95:66:58:e0:86:f7:21:a1:b4:8d:0f:38:41: f4:60:1f:b1:32:97:e2:ca:b3:3d:77:6f:a9:1b:90:b1:91:97: b2:e6:cc:f7:61:e8:ea:35:85:3c:1c:4a:a2:bc:f5:fe:60:52: 72:5d:3e:76:8c:9a:5a:77:92:c8:1b:ad:a8:04:9e:22:89:dc: 12:b3:6a:31:fc:14:3a:bb:10:5e:53:d7:23:ac:25:8f:fa:7a: 13:ca:4b:2f:c0:cd:50:ee:7f:f7:73:30:66:a7:a3:92:20:52: 1e:ec:93:36:ec:20:71:49:1a:2e:a3:f6:03:18:b2:60:7b:14: e4:4b:7e:5e:50:6c:e3:1c:1e:76:b8:b7:68:c1:dc:29:96:51: d0:d6:5c:98:8d:91:49:d7:37:2d:33:0b:b3:de:67:2d:4b:e4: 01:80:a3:d4:d4:22:08:de:4f:ca:72:99:bf:30:72:74:eb:42: 83:ec:69:54:be:c7:86:29:d0:d9:6b:b9:e4:9d:66:78:ec:b2: ad:a0:8c:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpGn/JWWKaOkA1Tw/4BllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYzAwOTg4NGNmOTJmZGM2YTBkMmVhMTI3YmViNWY0Y2M4 YzBkYzcwHhcNMjUxMjIxMTYwMDUyWhcNMjUxMjIyMTYwMDUyWjAzMTEwLwYDVQQD EygxYTc0ZTc1Y2Y5YjYxMzlkMzk1MWNmYTVkMTI3Y2IxYTI2YzA3MTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxghYxNL9ZSbpcObB+BFrCoYduY57 3KRVUVzMtDs9Snt8Q9Xc9eKUVND3c3vKZsJCJ5TJcQD10DthyYQpn72wp0Umeg4r xmCZfjBz+R0J3Z+AVZsewmGTQbISJ2vnYnEeWCZ8G2A31xwxPbexCi004AV3xJEg IUJljKvuPKRd8swhTQ9axkh2MdDwTaKnJbqzqEJcIl0iH3+ioi5FgTYy7FF45iV1 2wutfTrSNCxY4iHtoc6mQgUQAQLTLo/wzwyxQsosNFqmWUsIdjDB5GSfjq/jp49c e7Mv13dKIFzjD+3IZ/sTG/LAEdDA2Vj7rN1IezIJE0CUsD3lLkggAp7/TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBp051z5thOdOVHPpdEnyxomwHGXMB8GA1UdIwQY MBaAFADACYhM+S/cag0uoSe+tfTMjA3HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU1BSmlFejVMOXhxRFM2aEo3NjE5TXlNRGNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yNzc1NDgtZGRiZi00MDlhLTgyY2Ut ZGM2NmNiOTI5NjdjLzEvQU1BSmlFejVMOXhxRFM2aEo3NjE5TXlNRGNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yNzc1NDgtZGRiZi00MDlhLTgyY2UtZGM2NmNiOTI5Njdj LzEvQU1BSmlFejVMOXhxRFM2aEo3NjE5TXlNRGNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj79LEMA/ ve32BM0GGC8CE3ScYM8luQupIBIBj1bXkiOLWpZ585pEoOtyzNe43p1qRSokq5LK gSkikbGVZljghvchobSNDzhB9GAfsTKX4sqzPXdvqRuQsZGXsubM92Ho6jWFPBxK orz1/mBScl0+doyaWneSyButqASeIoncErNqMfwUOrsQXlPXI6wlj/p6E8pLL8DN UO5/93MwZqejkiBSHuyTNuwgcUkaLqP2AxiyYHsU5Et+XlBs4xwedri3aMHcKZZR 0NZcmI2RSdc3LTMLs95nLUvkAYCj1NQiCN5PynKZvzBydOtCg+xpVL7HhinQ2Wu5 5J1meOyyraCM3g== -----END CERTIFICATE-----Generated at Sun Dec 21 18:03:41 2025 by rpki-client