This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft File: Ahs-o17f3ROMFVBtdKdgIt03aUs.mft (raw, json) Hash identifier: R37ATES/MQ8QIg3FexDYXY55xzFQ84p/TmJXP2CydUI= Subject key identifier: 95:4F:73:1D:2B:DD:91:CB:26:60:55:24:87:C7:47:FD:CF:5D:05:39 Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b Certificate serial: 019B1F185CD0535B641B95DF7EBA916D0B99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft Manifest number: 177E Signing time: Sun 14 Dec 2025 23:00:48 +0000 Manifest this update: Sun 14 Dec 2025 23:00:48 +0000 Manifest next update: Mon 15 Dec 2025 23:00:48 +0000 Files and hashes: 1: Ahs-o17f3ROMFVBtdKdgIt03aUs.crl (hash: UDiN14D5ExPLulDpL0vWwh3INrqjn7uw7FFfzEFZqP0=) 2: KAFC3cLT9QH5ScoLRsIonvwUhMU.roa (hash: whbGIDYtnScT7kdeeSbgI7fHOy+PdfaxJL9lQqTD7kk=) 3: M8dYp-L4dw1v-tRfvEaBeetOZDM.asa (hash: BxKqO0ZY48OCWqUnkol0bWVuXrmCWGF4F2EIRoXKyLI=) 4: aFjBtMgAkCdur0LAp1zKSd39ajk.roa (hash: k5sQSrUZApP+C12qAI5rWT2beBv2HXfS7efknu8qI8M=) 5: fc1Tc2Vdh2udhGPhrIhiUsNRmh8.roa (hash: an6cVXKMyV249udKkEMio/99yuvp5X9umnLVJSDoDVM=) 6: keIeKvMj5GFcFpqn4YnewTjX5AI.roa (hash: LybLvk7YVa5Nzz7hllr9jrHmTPWaVPacnhSof9pKAqc=) 7: n6Wyt3faNKWbYMKkn5PEP-ye3uo.roa (hash: dY4BYFMUjOYkYHFpRXEolqHG+4jJetToXOTWdXYn9Ao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:18:5c:d0:53:5b:64:1b:95:df:7e:ba:91:6d:0b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b Validity Not Before: Dec 14 23:00:48 2025 GMT Not After : Dec 15 23:00:48 2025 GMT Subject: CN=954f731d2bdd91cb2660552487c747fdcf5d0539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f7:5c:63:c7:15:9a:b8:bc:84:63:f7:16:0b: 5c:60:80:37:77:d9:bb:56:d2:54:34:9f:ac:eb:fb: 16:6d:85:a3:7e:ee:5f:e1:34:09:0e:ae:73:14:97: 69:79:10:7c:c6:b6:b4:70:de:f6:44:37:5c:6a:75: c2:e6:b0:66:a9:a1:33:52:c5:27:2d:bb:6d:73:f2: 3e:38:04:f4:cc:3d:39:e8:d9:81:3a:a4:68:31:57: 89:5a:5e:05:73:df:2a:35:a3:94:4e:0c:c7:7b:ad: 26:85:5f:1d:e9:be:a5:4a:99:b7:87:04:96:6e:41: a6:d2:bf:14:d4:74:1f:26:24:a5:8b:b7:16:c2:03: 65:7d:bb:c9:90:16:cd:7c:52:39:a1:12:c3:b1:00: dc:76:8f:f1:27:fb:da:fc:45:cc:14:0b:a8:a8:f8: ab:48:d5:05:2b:34:2d:8e:27:f1:a0:e5:94:12:23: d0:cf:da:f1:10:df:49:c6:ee:11:27:2a:3a:47:3b: 93:92:8b:f9:4f:e9:34:68:8a:ae:d1:b0:e9:77:d7: d2:f9:07:4d:b1:2e:35:66:c9:16:68:10:74:c6:e9: d7:54:1d:08:9e:a0:f4:5d:9f:d5:18:58:31:b9:06: c5:99:df:c4:4d:c7:32:56:49:b8:30:ae:eb:c4:b6: 8a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4F:73:1D:2B:DD:91:CB:26:60:55:24:87:C7:47:FD:CF:5D:05:39 X509v3 Authority Key Identifier: keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:83:29:f5:5a:10:42:ea:cc:a1:f6:25:07:54:bc:c6:10:cd: 1b:56:62:78:de:8a:25:84:77:4c:5b:24:e6:7b:43:85:0f:04: 83:ae:41:e6:fc:9c:a8:90:f9:d0:29:31:a8:8d:fc:75:8d:97: 49:b5:20:d3:a1:1c:93:c2:5b:c1:2b:64:cd:b2:e4:ce:65:18: 5f:d6:ad:96:a0:e0:ec:39:aa:70:6c:f5:4c:ad:27:09:84:50: c9:79:d0:72:6c:3a:15:56:78:71:40:d9:9f:76:55:94:56:30: 92:22:37:e7:fc:64:b6:99:bf:e7:59:2f:f4:31:0a:50:44:14: 40:2a:6a:4f:29:e1:b5:38:5b:ec:ec:36:da:92:d1:42:3a:f2: 80:63:46:63:59:2c:df:e9:0b:80:00:2f:b4:65:97:6b:86:03: 38:00:bc:ca:eb:be:61:f5:68:29:c2:2d:66:f4:60:a9:15:58: fc:4d:a8:16:15:0f:2d:4d:db:5a:d2:63:4e:7b:41:12:d7:fb: be:ee:6c:87:c4:fb:97:d7:5e:98:fd:af:14:de:2d:08:d2:4c: 8c:fc:5c:5d:5b:a7:8d:39:36:da:72:28:36:f7:8e:22:9b:8b: 64:85:6d:8c:3f:f1:18:5b:d7:8e:e1:b8:7a:db:68:45:6f:67: 73:9c:9e:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfGFzQU1tkG5XffrqRbQuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMWIzZWEzNWVkZmRkMTM4YzE1NTA2ZDc0YTc2MDIyZGQz NzY5NGIwHhcNMjUxMjE0MjMwMDQ4WhcNMjUxMjE1MjMwMDQ4WjAzMTEwLwYDVQQD Eyg5NTRmNzMxZDJiZGQ5MWNiMjY2MDU1MjQ4N2M3NDdmZGNmNWQwNTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvdcY8cVmri8hGP3FgtcYIA3d9m7 VtJUNJ+s6/sWbYWjfu5f4TQJDq5zFJdpeRB8xra0cN72RDdcanXC5rBmqaEzUsUn Lbttc/I+OAT0zD056NmBOqRoMVeJWl4Fc98qNaOUTgzHe60mhV8d6b6lSpm3hwSW bkGm0r8U1HQfJiSli7cWwgNlfbvJkBbNfFI5oRLDsQDcdo/xJ/va/EXMFAuoqPir SNUFKzQtjifxoOWUEiPQz9rxEN9Jxu4RJyo6RzuTkov5T+k0aIqu0bDpd9fS+QdN sS41ZskWaBB0xunXVB0InqD0XZ/VGFgxuQbFmd/ETccyVkm4MK7rxLaKKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVPcx0r3ZHLJmBVJIfHR/3PXQU5MB8GA1UdIwQY MBaAFAIbPqNe390TjBVQbXSnYCLdN2lLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mODliNjQtODdiNy00OGY0LThiNjAt YzMyMDRiZGU3NzczLzEvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mODliNjQtODdiNy00OGY0LThiNjAtYzMyMDRiZGU3Nzcz LzEvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoMp9VoQ QurMofYlB1S8xhDNG1ZieN6KJYR3TFsk5ntDhQ8Eg65B5vycqJD50CkxqI38dY2X SbUg06Eck8JbwStkzbLkzmUYX9atlqDg7DmqcGz1TK0nCYRQyXnQcmw6FVZ4cUDZ n3ZVlFYwkiI35/xktpm/51kv9DEKUEQUQCpqTynhtThb7Ow22pLRQjrygGNGY1ks 3+kLgAAvtGWXa4YDOAC8yuu+YfVoKcItZvRgqRVY/E2oFhUPLU3bWtJjTntBEtf7 vu5sh8T7l9demP2vFN4tCNJMjPxcXVunjTk22nIoNveOIpuLZIVtjD/xGFvXjuG4 ettoRW9nc5yeIQ== -----END CERTIFICATE-----Generated at Mon Dec 15 06:38:46 2025 by rpki-client