This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft File: AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json) Hash identifier: +7MhTyhFYm6+xjKhi/D37v0IvNQldC4uRwuJ/DJVRlg= Subject key identifier: EF:36:27:ED:86:4F:54:8C:71:73:01:25:1C:65:42:7C:DF:B5:F9:BC Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87 Certificate issuer: /CN=021692a695017fb5c4bf8c238078f303d8fbf087 Certificate serial: 019B59777C1EAA11FAAA4EFBCCD092C1406D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 07:02:41 +0000 Manifest this update: Fri 26 Dec 2025 07:02:41 +0000 Manifest next update: Sat 27 Dec 2025 07:02:41 +0000 Files and hashes: 1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: P+kvfYU/9SP5NsqVz7kFgtwAq5XTougT8OZ/thark18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:7c:1e:aa:11:fa:aa:4e:fb:cc:d0:92:c1:40:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087 Validity Not Before: Dec 26 07:02:41 2025 GMT Not After : Dec 27 07:02:41 2025 GMT Subject: CN=ef3627ed864f548c717301251c65427cdfb5f9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:85:10:de:5a:44:bf:89:da:e0:da:6f:58:ce: 39:41:a8:fd:a1:ff:6a:69:4d:95:fd:e5:d7:ce:b1: cd:91:55:46:9b:e8:4b:f4:11:3c:c3:37:eb:6b:0c: 6a:7e:ef:f0:0c:9e:49:93:64:1a:d1:e3:d9:84:53: 2f:7d:fa:42:06:50:bf:f0:db:36:56:ea:7d:c5:f9: 21:b8:dc:1e:c0:eb:b9:a2:c7:fd:bc:32:4d:45:75: 40:6c:26:40:dc:d6:1a:ca:01:92:40:fa:bc:d5:ea: 6c:e0:87:15:58:7e:d5:74:79:d8:c0:ae:17:b4:2e: 6e:fa:ce:87:5c:4f:ae:ce:08:a5:1c:ca:4e:93:77: df:94:b4:ba:8d:80:7e:ab:51:20:c2:c6:06:19:fe: dc:95:f2:cc:c5:59:87:0b:70:50:8e:fb:88:30:1f: c2:dc:f2:39:25:ce:51:f1:c2:cf:e1:31:e7:f7:f2: 70:18:9e:0e:87:13:13:bc:a7:ab:f4:ca:fd:15:1f: ac:f3:1f:15:4c:17:de:3a:8e:c0:33:9c:f7:3e:57: 4f:2f:33:d5:9d:e6:eb:2f:c4:13:ea:54:71:5b:9d: 80:d6:b2:f2:96:bb:7a:53:d3:9e:1c:1f:6f:b7:c4: f9:98:6c:6a:3a:7d:ae:6a:07:d9:ed:72:be:d6:86: 73:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:36:27:ED:86:4F:54:8C:71:73:01:25:1C:65:42:7C:DF:B5:F9:BC X509v3 Authority Key Identifier: keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:cd:49:ad:ae:06:a9:20:b5:e5:fe:fa:e6:7f:74:c1:af:1e: 7d:39:25:dd:79:e5:83:ea:4a:76:4c:0b:80:6b:c7:2f:57:d9: 4b:6a:76:29:4a:50:4b:9a:70:d2:e0:a1:48:35:b0:9b:a7:1f: b3:52:93:52:d1:5e:da:49:f1:dc:13:33:0f:f5:50:32:93:a8: 96:55:08:4e:21:f5:1f:a5:0a:38:a6:ea:d9:80:94:61:ae:31: 99:a0:82:fb:bd:e3:0f:a5:f7:5f:fb:3f:5d:b1:4e:93:c1:19: a5:7f:ae:13:40:30:a7:5d:72:c4:6d:5d:07:3a:89:0d:a5:0f: ac:3a:94:2e:25:2b:84:6f:cb:c5:a6:75:a5:eb:29:29:14:ac: d4:a5:9f:1a:d5:04:9d:ad:66:1f:c1:e6:0a:6d:13:3e:30:23: 83:97:3c:00:d3:2e:99:e7:e6:7f:e5:99:9c:a2:3b:79:04:f9: 7c:96:c5:27:bc:9e:7f:25:be:10:0d:33:06:ba:27:94:47:d0: c5:c7:de:19:a7:2b:3b:3f:db:ed:ea:9c:b8:45:6a:57:91:17: 77:1c:a8:12:65:ad:8a:57:bc:3a:06:6b:fd:99:06:f4:5d:71: ac:1b:56:bb:f9:83:2f:b7:b4:a4:c0:1e:4b:73:8e:4e:68:29: aa:5b:18:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd3weqhH6qk77zNCSwUBtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMTY5MmE2OTUwMTdmYjVjNGJmOGMyMzgwNzhmMzAzZDhm YmYwODcwHhcNMjUxMjI2MDcwMjQxWhcNMjUxMjI3MDcwMjQxWjAzMTEwLwYDVQQD EyhlZjM2MjdlZDg2NGY1NDhjNzE3MzAxMjUxYzY1NDI3Y2RmYjVmOWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IUQ3lpEv4na4NpvWM45Qaj9of9q aU2V/eXXzrHNkVVGm+hL9BE8wzfrawxqfu/wDJ5Jk2Qa0ePZhFMvffpCBlC/8Ns2 Vup9xfkhuNwewOu5osf9vDJNRXVAbCZA3NYaygGSQPq81eps4IcVWH7VdHnYwK4X tC5u+s6HXE+uzgilHMpOk3fflLS6jYB+q1EgwsYGGf7clfLMxVmHC3BQjvuIMB/C 3PI5Jc5R8cLP4THn9/JwGJ4OhxMTvKer9Mr9FR+s8x8VTBfeOo7AM5z3PldPLzPV nebrL8QT6lRxW52A1rLylrt6U9OeHB9vt8T5mGxqOn2uagfZ7XK+1oZz7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO82J+2GT1SMcXMBJRxlQnzftfm8MB8GA1UdIwQY MBaAFAIWkqaVAX+1xL+MI4B48wPY+/CHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWhhU3BwVUJmN1hFdjR3amdIanpBOWo3OEljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xM2JlZDUtOGQzNC00ZDNkLThlMDUt NDhkMjVjMGE0OTVmLzEvQWhhU3BwVUJmN1hFdjR3amdIanpBOWo3OEljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8xM2JlZDUtOGQzNC00ZDNkLThlMDUtNDhkMjVjMGE0OTVm LzEvQWhhU3BwVUJmN1hFdjR3amdIanpBOWo3OEljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAas1Jra4G qSC15f765n90wa8efTkl3Xnlg+pKdkwLgGvHL1fZS2p2KUpQS5pw0uChSDWwm6cf s1KTUtFe2knx3BMzD/VQMpOollUITiH1H6UKOKbq2YCUYa4xmaCC+73jD6X3X/s/ XbFOk8EZpX+uE0Awp11yxG1dBzqJDaUPrDqULiUrhG/LxaZ1pespKRSs1KWfGtUE na1mH8HmCm0TPjAjg5c8ANMumefmf+WZnKI7eQT5fJbFJ7yefyW+EA0zBronlEfQ xcfeGacrOz/b7eqcuEVqV5EXdxyoEmWtile8OgZr/ZkG9F1xrBtWu/mDL7e0pMAe S3OOTmgpqlsYOg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:27 2025 by rpki-client