This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft File: AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json) Hash identifier: GC4yxSs3j9bkdzKbSXi4/85J44MIN1VCD3KPZvwvowY= Subject key identifier: 64:30:F5:80:0C:8A:EF:84:6A:E4:09:97:6D:18:10:96:4A:9D:AF:33 Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62 Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362 Certificate serial: 019B2A0A90E371789E68EFAB0822CFF129A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft Manifest number: 0B Signing time: Wed 17 Dec 2025 02:01:34 +0000 Manifest this update: Wed 17 Dec 2025 02:01:34 +0000 Manifest next update: Thu 18 Dec 2025 02:01:34 +0000 Files and hashes: 1: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: g96YRI56bHEgGOFNB6jLV2LG4/geYPiiDMdYzVNh+TQ=) 2: Lbm30kMieYd721PV2KHSvhBUOqA.asa (hash: Xj6tX5jAtIAUBTLTJ0Ax6ulkGTmiNIvhT+c2crJgPQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:0a:90:e3:71:78:9e:68:ef:ab:08:22:cf:f1:29:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362 Validity Not Before: Dec 17 02:01:34 2025 GMT Not After : Dec 18 02:01:34 2025 GMT Subject: CN=6430f5800c8aef846ae409976d1810964a9daf33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:30:0c:4c:55:1a:0f:2a:a9:7c:a2:83:6e:2a: b0:d7:84:60:fe:74:fa:35:32:45:7f:c4:85:19:f4: 74:a7:de:2a:b8:5a:39:a6:6a:9a:b7:1a:4c:ff:b8: 31:01:94:31:11:d3:c5:2e:38:98:15:1c:d3:4f:b9: d1:1e:0e:4e:fc:43:43:1c:10:ab:89:d6:19:c8:f1: f5:75:0d:91:46:4e:75:fb:cc:d8:e4:a5:13:d6:0e: 44:ed:ce:af:55:5c:3c:72:85:e7:b4:7f:7a:56:e8: 64:a5:d0:ab:bf:b4:d2:0e:20:04:81:f3:8d:fd:bc: c5:c6:38:7b:e2:0c:30:79:0a:24:a6:b7:f7:0a:bc: 56:47:9b:0e:31:d2:43:6e:37:31:18:ae:19:be:85: 5e:62:f4:d9:1f:96:7c:e6:fb:b0:38:5f:39:55:d6: fe:52:b5:2c:40:68:7b:40:4e:67:23:60:cd:71:18: 9b:be:dd:52:dc:da:61:91:6c:e6:09:6f:df:c9:4f: 5c:80:a4:42:5f:b1:e1:50:3d:99:6c:a6:ab:7d:83: f7:30:fd:f2:ef:10:fb:ff:6f:bf:04:34:70:37:21: a7:49:e1:4b:b4:d9:8e:32:47:98:cf:8d:a9:85:7b: f1:45:fe:6f:d5:5b:4d:9e:b5:e6:f3:ac:69:a6:08: f3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:30:F5:80:0C:8A:EF:84:6A:E4:09:97:6D:18:10:96:4A:9D:AF:33 X509v3 Authority Key Identifier: keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:17:78:8b:cb:f4:bc:30:ba:7a:f7:76:4f:1c:a3:0f:92:90: da:f5:af:9b:a6:ad:22:ad:15:da:99:21:16:d7:f1:db:54:b9: db:78:9a:bd:8b:b1:74:a7:e3:ae:d4:5e:40:73:88:15:7e:3b: c1:3d:e8:23:c5:98:01:37:22:ce:7c:9d:dd:ee:9a:52:cf:cd: e4:ea:e0:6a:0c:95:8c:8d:9b:46:96:15:18:55:69:fa:59:1c: 85:9f:41:95:cf:c7:78:79:05:6e:cd:30:e5:ae:06:f4:52:4b: 23:83:70:e6:d8:c1:35:ff:f8:b0:2e:86:b3:32:53:48:c7:6b: eb:e3:68:d6:bc:58:c5:3b:8f:48:e8:7d:e8:88:ce:9e:db:39: 8d:ac:f4:98:61:53:4a:fa:9b:02:87:85:6e:c4:85:0a:27:eb: 7c:74:8e:d6:44:c3:a4:8d:03:e5:fd:67:e3:8b:b0:71:4f:9b: ec:0b:15:de:61:e7:80:d1:50:26:c5:a9:d9:5f:af:40:69:22: c2:9e:28:3b:d1:5a:21:00:c2:17:95:fc:01:73:ca:0d:ec:46: 14:c1:61:7f:b4:da:19:fa:0a:7d:24:83:57:a6:1b:4e:b2:00: 07:db:08:5a:a8:bb:fb:6b:f9:86:4d:5f:dc:88:a5:da:6e:6f: a5:a0:44:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqCpDjcXieaO+rCCLP8SmhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOTRjMGY3MzY4YzA0NzY0M2U5MWM1N2Q2Y2ZkYTlmOTk4 OTczNjIwHhcNMjUxMjE3MDIwMTM0WhcNMjUxMjE4MDIwMTM0WjAzMTEwLwYDVQQD Eyg2NDMwZjU4MDBjOGFlZjg0NmFlNDA5OTc2ZDE4MTA5NjRhOWRhZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjAMTFUaDyqpfKKDbiqw14Rg/nT6 NTJFf8SFGfR0p94quFo5pmqatxpM/7gxAZQxEdPFLjiYFRzTT7nRHg5O/ENDHBCr idYZyPH1dQ2RRk51+8zY5KUT1g5E7c6vVVw8coXntH96VuhkpdCrv7TSDiAEgfON /bzFxjh74gwweQokprf3CrxWR5sOMdJDbjcxGK4ZvoVeYvTZH5Z85vuwOF85Vdb+ UrUsQGh7QE5nI2DNcRibvt1S3NphkWzmCW/fyU9cgKRCX7HhUD2ZbKarfYP3MP3y 7xD7/2+/BDRwNyGnSeFLtNmOMkeYz42phXvxRf5v1VtNnrXm86xppgjz3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQw9YAMiu+EauQJl20YEJZKna8zMB8GA1UdIwQY MBaAFACUwPc2jAR2Q+kcV9bP2p+ZiXNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82M2VmYmItZmUwMi00NjhhLTk2MGQt M2MyNzQyZjI4YTNjLzEvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82M2VmYmItZmUwMi00NjhhLTk2MGQtM2MyNzQyZjI4YTNj LzEvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBd4i8v0 vDC6evd2TxyjD5KQ2vWvm6atIq0V2pkhFtfx21S523iavYuxdKfjrtReQHOIFX47 wT3oI8WYATciznyd3e6aUs/N5OrgagyVjI2bRpYVGFVp+lkchZ9Blc/HeHkFbs0w 5a4G9FJLI4Nw5tjBNf/4sC6GszJTSMdr6+No1rxYxTuPSOh96IjOnts5jaz0mGFT SvqbAoeFbsSFCifrfHSO1kTDpI0D5f1n44uwcU+b7AsV3mHngNFQJsWp2V+vQGki wp4oO9FaIQDCF5X8AXPKDexGFMFhf7TaGfoKfSSDV6YbTrIAB9sIWqi7+2v5hk1f 3Iil2m5vpaBEyg== -----END CERTIFICATE-----Generated at Wed Dec 17 06:38:41 2025 by rpki-client