This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft File: AKTVv_pzY0hD6QPjexj97g2sWFs.mft (raw, json) Hash identifier: l+3YvLbbi4kFgcDtXIWQTiDegDOJ2LCrAuP/t+R/TDg= Subject key identifier: 9D:FF:C5:89:AE:D6:CA:3A:36:DC:16:DA:19:A4:91:A7:78:C0:E0:F0 Authority key identifier: 00:A4:D5:BF:FA:73:63:48:43:E9:03:E3:7B:18:FD:EE:0D:AC:58:5B Certificate issuer: /CN=00a4d5bffa73634843e903e37b18fdee0dac585b Certificate serial: 019B5B64C739D30C62FD25A0CE200DCDE300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft Manifest number: 02BC Signing time: Fri 26 Dec 2025 16:01:29 +0000 Manifest this update: Fri 26 Dec 2025 16:01:29 +0000 Manifest next update: Sat 27 Dec 2025 16:01:29 +0000 Files and hashes: 1: AKTVv_pzY0hD6QPjexj97g2sWFs.crl (hash: DQYjz/Qpjw0R+daNhYpoFqY8sMA9xN2MTugDU4CtJeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:c7:39:d3:0c:62:fd:25:a0:ce:20:0d:cd:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00a4d5bffa73634843e903e37b18fdee0dac585b Validity Not Before: Dec 26 16:01:29 2025 GMT Not After : Dec 27 16:01:29 2025 GMT Subject: CN=9dffc589aed6ca3a36dc16da19a491a778c0e0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:09:2e:6e:0c:08:4d:9c:58:6d:62:cc:15: bd:48:dd:0f:cc:83:01:72:e8:47:46:66:09:68:2f: 0f:1f:95:77:49:97:ca:e1:78:63:28:c4:2c:84:84: 22:c0:ee:ad:42:a1:fb:73:6a:8f:cd:3e:c5:82:05: ae:6f:50:bd:35:98:7b:19:ff:d1:82:67:72:0e:37: 83:a6:e5:0e:bd:b2:58:b9:2d:05:a3:ff:a5:90:92: 4c:8d:30:15:bf:88:cb:2a:f5:66:54:87:6a:d6:79: fd:a6:7b:07:d3:03:ef:75:29:0f:d9:20:e1:4e:6b: 1f:76:8b:73:d2:bd:34:12:42:52:6d:cd:1a:e1:86: a1:6b:59:52:e3:41:4d:e9:2b:9d:2c:02:f2:47:af: 11:40:35:e2:f0:bb:b9:f6:30:53:0c:de:c4:85:ed: b8:72:06:c3:e1:a1:42:16:8b:dc:3d:b5:77:78:aa: e0:23:9f:68:5a:78:bf:53:b7:fb:6b:0e:04:a1:f1: 07:18:95:0a:f9:3a:ed:8d:25:8f:28:e2:48:e7:18: e8:d3:da:53:0e:50:66:66:a1:69:c3:01:f6:fc:a6: 64:7b:1c:13:e6:7e:ed:71:9a:bf:3d:c0:61:0a:c6: f1:92:cb:22:6b:4e:be:20:e7:1e:16:9c:7b:d4:e5: cf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FF:C5:89:AE:D6:CA:3A:36:DC:16:DA:19:A4:91:A7:78:C0:E0:F0 X509v3 Authority Key Identifier: keyid:00:A4:D5:BF:FA:73:63:48:43:E9:03:E3:7B:18:FD:EE:0D:AC:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4b:d6:36:d3:0d:1f:cf:d1:45:88:23:cc:c8:b5:a5:e9:48: 75:93:94:70:eb:0a:c7:f2:a5:17:18:2a:87:80:86:e7:70:78: 52:02:fc:ff:f0:f3:5d:15:49:db:b6:1c:b9:de:1d:94:bb:73: 59:74:52:26:a1:bf:c2:5b:29:be:1c:84:25:86:4b:15:7c:24: 0e:50:49:52:53:8d:c8:06:32:28:88:25:02:bf:b4:b6:84:1c: bd:36:3c:ac:06:e0:db:64:f4:b5:ca:d0:53:32:76:17:4c:af: 84:b7:9e:0d:68:a8:15:19:9f:ea:87:e6:c5:3f:af:9a:78:fc: fc:e3:4c:d7:1f:2b:fe:32:12:ab:5f:0b:fe:e7:35:af:e9:cf: 84:bd:02:54:30:56:1a:21:c0:f5:49:1e:6d:cb:80:06:e4:04: de:a0:fb:c8:77:af:92:80:e4:c5:69:2c:fd:1e:88:d7:2e:f5: 87:42:c3:8b:26:54:17:4f:35:f5:a0:72:54:c0:47:33:fc:8d: 5d:f2:1e:be:5b:e3:70:8f:30:7d:b2:e4:33:c3:a3:19:e2:11: f1:ff:e6:b2:cb:99:ba:6f:4e:fe:4b:6e:44:d8:e9:30:a0:20: c2:be:11:f2:1e:22:28:8c:35:1e:83:94:07:33:fd:e9:1a:ee: f6:74:44:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZMc50wxi/SWgziANzeMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYTRkNWJmZmE3MzYzNDg0M2U5MDNlMzdiMThmZGVlMGRh YzU4NWIwHhcNMjUxMjI2MTYwMTI5WhcNMjUxMjI3MTYwMTI5WjAzMTEwLwYDVQQD Eyg5ZGZmYzU4OWFlZDZjYTNhMzZkYzE2ZGExOWE0OTFhNzc4YzBlMGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodAJLm4MCE2cWG1izBW9SN0PzIMB cuhHRmYJaC8PH5V3SZfK4XhjKMQshIQiwO6tQqH7c2qPzT7FggWub1C9NZh7Gf/R gmdyDjeDpuUOvbJYuS0Fo/+lkJJMjTAVv4jLKvVmVIdq1nn9pnsH0wPvdSkP2SDh Tmsfdotz0r00EkJSbc0a4Yaha1lS40FN6SudLALyR68RQDXi8Lu59jBTDN7Ehe24 cgbD4aFCFovcPbV3eKrgI59oWni/U7f7aw4EofEHGJUK+TrtjSWPKOJI5xjo09pT DlBmZqFpwwH2/KZkexwT5n7tcZq/PcBhCsbxkssia06+IOceFpx71OXPqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3/xYmu1so6NtwW2hmkkad4wODwMB8GA1UdIwQY MBaAFACk1b/6c2NIQ+kD43sY/e4NrFhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUtUVnZfcHpZMGhENlFQamV4ajk3ZzJzV0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85NmU2NDAtODVhNS00NzViLTk0Y2It ODRlZTY5ZWQ5M2E0LzEvQUtUVnZfcHpZMGhENlFQamV4ajk3ZzJzV0ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC85NmU2NDAtODVhNS00NzViLTk0Y2ItODRlZTY5ZWQ5M2E0 LzEvQUtUVnZfcHpZMGhENlFQamV4ajk3ZzJzV0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkvWNtMN H8/RRYgjzMi1pelIdZOUcOsKx/KlFxgqh4CG53B4UgL8//DzXRVJ27Ycud4dlLtz WXRSJqG/wlspvhyEJYZLFXwkDlBJUlONyAYyKIglAr+0toQcvTY8rAbg22T0tcrQ UzJ2F0yvhLeeDWioFRmf6ofmxT+vmnj8/ONM1x8r/jISq18L/uc1r+nPhL0CVDBW GiHA9UkebcuABuQE3qD7yHevkoDkxWks/R6I1y71h0LDiyZUF0819aByVMBHM/yN XfIevlvjcI8wfbLkM8OjGeIR8f/mssuZum9O/ktuRNjpMKAgwr4R8h4iKIw1HoOU BzP96Rru9nREJw== -----END CERTIFICATE-----Generated at Fri Dec 26 19:29:44 2025 by rpki-client