This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json) Hash identifier: SGoSGUuEsrHmJfnxNfxAeB9Ly8CRTEQs4WXVNSHDvNM= Subject key identifier: C7:03:63:F0:C6:BC:05:CF:75:78:B0:62:58:64:CB:AF:FB:71:5E:F9 Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af Certificate serial: 019B473852C6BBCEAFC08DD1027BF0346F22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft Manifest number: 0FBC Signing time: Mon 22 Dec 2025 18:00:32 +0000 Manifest this update: Mon 22 Dec 2025 18:00:32 +0000 Manifest next update: Tue 23 Dec 2025 18:00:32 +0000 Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: ajzyjZTpa5BEkiGIfP40K4/DNn24FlZ4hSSUjSUg5MI=) 2: B0Hd0utXPhNTqlbRxXDwmF9KHjs.roa (hash: 1ceb7F8O/NW3RMAYN486oZsriG91e3FFu7flF4b5QpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 18:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:52:c6:bb:ce:af:c0:8d:d1:02:7b:f0:34:6f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af Validity Not Before: Dec 22 18:00:32 2025 GMT Not After : Dec 23 18:00:32 2025 GMT Subject: CN=c70363f0c6bc05cf7578b0625864cbaffb715ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:de:83:3b:17:60:52:e3:bf:14:fa:de:34: 40:8d:be:bd:81:48:05:51:33:b6:47:28:e7:50:9f: c0:64:52:64:6f:4e:39:ae:43:60:0e:d6:79:48:55: 22:30:b7:64:0f:23:09:5c:85:2d:65:6d:47:c5:40: f1:dd:b3:b1:8e:a5:c8:47:92:3b:ec:a1:6c:3f:87: 06:b9:0e:cb:a0:bf:b6:30:4d:cc:51:52:f1:1f:06: f0:72:25:7f:f6:c2:b6:2a:58:d6:5f:9c:c4:c0:d6: ab:ec:11:55:7a:ca:42:db:82:83:a6:d4:ab:19:d4: 0c:9f:bf:71:18:f5:79:6d:c9:8d:f6:77:1f:ed:41: ad:2d:bb:01:de:59:fa:47:0d:54:2f:4c:ae:e7:13: 93:52:a6:cd:09:26:2a:35:5e:04:9d:c1:8e:fb:3e: eb:18:db:fe:d0:4a:00:d4:1c:cb:d9:7b:4c:37:1f: df:98:3b:bc:b7:d4:05:af:18:e6:7f:b6:6c:21:63: 24:db:07:46:68:e6:8a:58:b5:81:a4:f5:12:cb:a2: 12:4f:cd:f0:e5:ab:91:ed:11:39:0f:25:03:42:88: 04:b7:75:2d:10:fc:19:3d:c6:4b:7e:ec:8a:c5:d4: 38:a2:d8:52:9b:bc:44:92:ae:ce:51:bc:c8:26:ec: 53:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:03:63:F0:C6:BC:05:CF:75:78:B0:62:58:64:CB:AF:FB:71:5E:F9 X509v3 Authority Key Identifier: keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:af:58:0b:df:a3:63:cb:88:13:76:a0:fa:d3:b3:6d:32:38: f9:61:44:01:31:e9:e3:b1:f7:6b:74:81:2b:71:56:5d:81:4b: 3f:78:f3:f1:45:ec:3e:93:c3:dd:3a:26:07:ef:a4:34:89:c7: 39:f5:c3:50:29:a5:d7:fe:10:84:74:a8:1a:ff:4e:1a:d6:92: ea:b8:cc:20:69:a6:44:8b:32:67:b6:44:a1:31:74:86:4a:a0: 4a:87:dd:1a:78:c5:b7:68:3f:68:90:2d:99:1e:5d:22:12:b5: 98:4e:65:ba:95:cc:ac:87:00:99:75:1d:03:51:ad:16:05:cb: e5:72:52:20:82:89:de:5f:c7:08:e7:07:75:6d:d3:21:70:4f: 1d:e1:11:ba:53:bf:68:dd:96:aa:d9:8e:b9:4b:40:fa:a6:19: 2f:cd:15:19:e2:1e:91:98:ed:fd:da:26:73:ad:6a:62:7e:5c: 42:c9:3e:e4:b6:47:30:c5:bd:9e:54:f5:33:c1:69:3c:2a:ce: ae:88:07:80:e2:c6:4e:70:c1:ef:c8:7f:28:f9:2e:d1:dd:1d: d7:8f:fa:e5:e8:de:fa:f6:72:ee:10:e7:31:3e:5b:db:95:2c: 4e:14:35:20:4e:2e:08:1c:3f:26:ee:73:31:fc:49:1e:0c:13: 6a:99:31:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHOFLGu86vwI3RAnvwNG8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzI0ZTZhYTU4ODMyOWVhYzdhOTM4ZmI5ODc4ZDEzMmYy YTg1YWYwHhcNMjUxMjIyMTgwMDMyWhcNMjUxMjIzMTgwMDMyWjAzMTEwLwYDVQQD EyhjNzAzNjNmMGM2YmMwNWNmNzU3OGIwNjI1ODY0Y2JhZmZiNzE1ZWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3DegzsXYFLjvxT63jRAjb69gUgF UTO2RyjnUJ/AZFJkb045rkNgDtZ5SFUiMLdkDyMJXIUtZW1HxUDx3bOxjqXIR5I7 7KFsP4cGuQ7LoL+2ME3MUVLxHwbwciV/9sK2KljWX5zEwNar7BFVespC24KDptSr GdQMn79xGPV5bcmN9ncf7UGtLbsB3ln6Rw1UL0yu5xOTUqbNCSYqNV4EncGO+z7r GNv+0EoA1BzL2XtMNx/fmDu8t9QFrxjmf7ZsIWMk2wdGaOaKWLWBpPUSy6IST83w 5auR7RE5DyUDQogEt3UtEPwZPcZLfuyKxdQ4othSm7xEkq7OUbzIJuxT5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcDY/DGvAXPdXiwYlhky6/7cV75MB8GA1UdIwQY MBaAFAIyTmqliDKerHqTj7mHjRMvKoWvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jMjNiOTYtYWViNC00OTM0LWE1NTAt NGRiOTg0ZTFjODMxLzEvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9jMjNiOTYtYWViNC00OTM0LWE1NTAtNGRiOTg0ZTFjODMx LzEvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiq9YC9+j Y8uIE3ag+tOzbTI4+WFEATHp47H3a3SBK3FWXYFLP3jz8UXsPpPD3TomB++kNInH OfXDUCml1/4QhHSoGv9OGtaS6rjMIGmmRIsyZ7ZEoTF0hkqgSofdGnjFt2g/aJAt mR5dIhK1mE5lupXMrIcAmXUdA1GtFgXL5XJSIIKJ3l/HCOcHdW3TIXBPHeERulO/ aN2WqtmOuUtA+qYZL80VGeIekZjt/domc61qYn5cQsk+5LZHMMW9nlT1M8FpPCrO rogHgOLGTnDB78h/KPku0d0d14/65eje+vZy7hDnMT5b25UsThQ1IE4uCBw/Ju5z MfxJHgwTapkxlA== -----END CERTIFICATE-----Generated at Tue Dec 23 01:56:21 2025 by rpki-client