This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft File: ajXs8V8abbPIJhCSrr4iEyWRNc4.mft (raw, json) Hash identifier: 5zxZRPhiityXnUznDn2zG4nof791R9vcn+41FDn17Jo= Subject key identifier: D0:36:7D:A5:87:26:BA:08:59:54:05:02:60:7B:A7:84:9F:C8:4F:4E Authority key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE Certificate issuer: /CN=6a35ecf15f1a6db3c8261092aebe2213259135ce Certificate serial: 019B299C73262378C74E5EF614C31223CCAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft Manifest number: 15 Signing time: Wed 17 Dec 2025 00:01:17 +0000 Manifest this update: Wed 17 Dec 2025 00:01:17 +0000 Manifest next update: Thu 18 Dec 2025 00:01:17 +0000 Files and hashes: 1: Lew-h_DR6pX_cLDKkCKKKvC30n4.asa (hash: d3xiU+jGcgBPAr/J+bp6R3hubPZue+FUp5GBeI9OOQw=) 2: ajXs8V8abbPIJhCSrr4iEyWRNc4.crl (hash: lXR5tYhWVbyRA/2Sn8Gj38w18yVnBHp1JB/ta1z9evw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:9c:73:26:23:78:c7:4e:5e:f6:14:c3:12:23:cc:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce Validity Not Before: Dec 17 00:01:17 2025 GMT Not After : Dec 18 00:01:17 2025 GMT Subject: CN=d0367da58726ba0859540502607ba7849fc84f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:a0:fd:7e:c8:2d:b9:98:89:a2:a5:b4:ec: 35:fd:60:ec:9a:ac:54:97:e6:b0:14:93:36:06:58: cb:ac:65:ac:e5:93:2a:ae:1b:7c:36:93:74:6f:80: 49:94:c0:a9:df:85:3d:bd:d4:8a:40:1e:1e:28:8e: 8a:80:04:96:92:f0:31:61:8a:f0:f0:b9:22:f7:bf: 32:cb:19:91:db:ca:98:65:9f:a3:b6:8a:c1:f5:15: 9d:ac:79:1b:04:25:a4:9f:84:ac:4a:d8:40:8a:7a: 6a:23:91:d6:e4:d4:a8:c9:09:21:90:9a:3e:2e:c2: 29:90:d2:f7:e9:a2:28:2c:14:d5:ac:a6:4a:63:c5: d0:fb:43:5b:07:a5:02:95:f2:ee:83:3e:37:d7:fd: 3e:51:e4:c2:6c:5f:a3:2a:b4:a5:63:d8:89:16:85: b0:4e:ac:24:0b:da:14:1e:35:fd:15:19:0c:87:a7: 6e:bc:56:8f:80:66:b4:df:22:fd:eb:55:2c:58:04: d2:5a:72:bd:f3:82:84:96:9a:9b:eb:57:16:50:0a: 64:7e:c4:55:b8:e4:68:c0:99:16:ec:b5:54:b1:ee: 1a:f9:a6:e0:fb:64:3f:bf:0c:39:6b:46:06:5c:52: 28:14:4a:29:c1:6f:b5:6c:05:8d:f3:3b:67:96:aa: b3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:36:7D:A5:87:26:BA:08:59:54:05:02:60:7B:A7:84:9F:C8:4F:4E X509v3 Authority Key Identifier: keyid:6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c9:66:a1:8d:a9:a1:1d:be:31:19:09:02:ad:4d:06:3f:42: bf:d2:60:3a:80:68:c3:78:ec:78:1e:64:33:8c:ef:22:c4:2a: 7a:98:d4:35:e2:ee:95:33:0e:08:fc:b0:6a:02:1e:2d:1a:29: e7:ee:2e:c6:5b:d2:4e:4d:00:2d:54:04:48:5d:04:4a:79:e4: 13:c1:b7:16:50:40:a5:98:54:87:41:16:15:92:97:2c:e2:8a: b1:1c:d6:6b:84:ab:7d:57:ca:23:5d:11:76:e7:36:7d:04:3d: ea:5d:72:70:d9:83:56:ff:1f:81:d7:ad:a0:5e:99:bc:9d:42: 15:5f:a7:bb:58:74:a9:bf:d3:bf:6c:00:98:61:98:f2:74:96: 2c:30:cf:2c:be:48:c9:1c:19:3a:72:67:8f:61:5a:40:99:83: 45:cb:3d:e3:04:60:d9:a3:b2:a4:d3:ff:26:32:ae:21:4d:a9: 4d:c2:6c:f3:dd:25:83:36:dc:c4:63:69:e3:cb:f5:c1:6a:61: 41:b4:59:bd:ed:5f:3a:d6:d4:f1:35:73:ba:29:02:f9:2f:99: 29:21:d9:1a:c8:71:eb:c1:41:a0:cb:1f:c6:de:ee:6a:81:5f: c6:f8:46:0c:b8:85:88:81:74:54:ae:3f:83:42:c5:ec:d8:4f: 29:fb:09:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspnHMmI3jHTl72FMMSI8yrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMzVlY2YxNWYxYTZkYjNjODI2MTA5MmFlYmUyMjEzMjU5 MTM1Y2UwHhcNMjUxMjE3MDAwMTE3WhcNMjUxMjE4MDAwMTE3WjAzMTEwLwYDVQQD EyhkMDM2N2RhNTg3MjZiYTA4NTk1NDA1MDI2MDdiYTc4NDlmYzg0ZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL6g/X7ILbmYiaKltOw1/WDsmqxU l+awFJM2BljLrGWs5ZMqrht8NpN0b4BJlMCp34U9vdSKQB4eKI6KgASWkvAxYYrw 8Lki978yyxmR28qYZZ+jtorB9RWdrHkbBCWkn4SsSthAinpqI5HW5NSoyQkhkJo+ LsIpkNL36aIoLBTVrKZKY8XQ+0NbB6UClfLugz431/0+UeTCbF+jKrSlY9iJFoWw TqwkC9oUHjX9FRkMh6duvFaPgGa03yL961UsWATSWnK984KElpqb61cWUApkfsRV uORowJkW7LVUse4a+abg+2Q/vww5a0YGXFIoFEopwW+1bAWN8ztnlqqz2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNA2faWHJroIWVQFAmB7p4SfyE9OMB8GA1UdIwQY MBaAFGo17PFfGm2zyCYQkq6+IhMlkTXOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWpYczhWOGFiYlBJSmhDU3JyNGlFeVdSTmM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yYTY5NDMtMTA2MC00YmFlLWE3YTQt N2EyODg0OTZlZDY2LzEvYWpYczhWOGFiYlBJSmhDU3JyNGlFeVdSTmM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8yYTY5NDMtMTA2MC00YmFlLWE3YTQtN2EyODg0OTZlZDY2 LzEvYWpYczhWOGFiYlBJSmhDU3JyNGlFeVdSTmM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8lmoY2p oR2+MRkJAq1NBj9Cv9JgOoBow3jseB5kM4zvIsQqepjUNeLulTMOCPywagIeLRop 5+4uxlvSTk0ALVQESF0ESnnkE8G3FlBApZhUh0EWFZKXLOKKsRzWa4SrfVfKI10R duc2fQQ96l1ycNmDVv8fgdetoF6ZvJ1CFV+nu1h0qb/Tv2wAmGGY8nSWLDDPLL5I yRwZOnJnj2FaQJmDRcs94wRg2aOypNP/JjKuIU2pTcJs890lgzbcxGNp48v1wWph QbRZve1fOtbU8TVzuikC+S+ZKSHZGshx68FBoMsfxt7uaoFfxvhGDLiFiIF0VK4/ g0LF7NhPKfsJug== -----END CERTIFICATE-----Generated at Wed Dec 17 06:27:41 2025 by rpki-client