This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json) Hash identifier: w0ugiqbtEKxJsRndBTDqNTiGOkrPtDcn2aBj/XUWKws= Subject key identifier: 72:8E:FE:65:F7:47:64:60:B0:6D:FC:DB:E7:47:13:2D:15:FE:8D:DB Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37 Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537 Certificate serial: 019B0CA437C476E5770E70319277BF9264A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft Manifest number: 08D6 Signing time: Thu 11 Dec 2025 09:00:47 +0000 Manifest this update: Thu 11 Dec 2025 09:00:47 +0000 Manifest next update: Fri 12 Dec 2025 09:00:47 +0000 Files and hashes: 1: 5Wr3s3710WFh-gqqnOC5HRfGhqo.roa (hash: mRv9qva0cARo5/cUdT7w241MszdGWtnBv2czFRm61Yk=) 2: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: CMApFmzuIWBCggimzCKOyZrxJp05ZCMSVfuvIiQ5FRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 09:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:a4:37:c4:76:e5:77:0e:70:31:92:77:bf:92:64:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537 Validity Not Before: Dec 11 09:00:47 2025 GMT Not After : Dec 12 09:00:47 2025 GMT Subject: CN=728efe65f7476460b06dfcdbe747132d15fe8ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:74:c8:51:e1:ba:ec:53:37:5e:ba:b3:7d:38: e1:72:5f:07:8c:91:b7:d4:e8:b2:a2:87:e5:3d:05: 29:3b:1a:e4:82:a7:3e:78:3c:a2:3f:47:38:23:8e: c9:a4:47:ea:f0:ef:46:48:d3:78:88:77:eb:3a:39: ac:47:b3:d4:ab:46:6a:31:d0:e8:0e:ab:43:c2:ac: b5:71:6a:f7:0f:2d:67:83:25:26:e3:0e:f3:11:23: dc:c1:25:3b:88:19:48:09:a5:85:45:d8:2e:f8:91: fb:18:6b:bb:d5:0e:e2:bb:bc:a0:b2:0c:db:d7:f8: 77:8f:95:aa:e1:17:b9:6e:23:d5:76:5b:e3:cc:29: 2f:fe:60:a4:0f:86:a0:54:32:c7:2d:cf:69:98:33: 8a:71:d4:2d:d1:73:7a:96:02:02:6b:f7:13:fe:33: b4:92:78:50:9f:ef:4b:99:55:a0:36:bb:b9:91:2a: 15:c4:00:56:39:ee:6b:5b:0f:f0:fb:84:8c:71:6d: 4c:e6:cf:77:f6:25:ee:a5:15:d7:fb:c9:35:52:53: 03:95:80:b2:2b:c1:84:69:83:64:45:23:8a:49:df: be:cf:5d:ce:db:10:10:38:15:22:48:d9:d0:d9:89: f6:69:d1:13:66:f5:83:7a:9c:35:02:4c:31:fc:07: 47:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8E:FE:65:F7:47:64:60:B0:6D:FC:DB:E7:47:13:2D:15:FE:8D:DB X509v3 Authority Key Identifier: keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:6b:aa:35:53:81:04:b8:10:12:d0:c2:2b:26:7d:00:aa:a6: 90:25:3a:b1:54:db:72:cc:b2:1f:44:a7:58:3a:a8:2c:46:a9: 4a:20:11:66:21:06:50:0d:c3:1b:d4:f9:0d:00:7b:2d:c4:51: e6:a2:22:91:fb:10:f4:03:f2:7e:92:84:11:ac:9a:c0:1c:49: 83:24:a3:53:b0:47:22:27:54:53:19:bb:ff:b9:00:6b:0f:fd: 74:1e:00:ba:1d:8d:5e:06:7b:a2:c8:de:a5:3e:42:a9:fd:2e: a8:29:2e:27:51:5a:b4:5f:80:b1:28:c9:50:31:f4:ba:dc:1d: 94:ff:fc:22:d9:85:61:a8:cf:63:a6:ac:95:56:98:32:aa:cd: 58:2e:fa:b3:7d:02:92:f4:d9:f1:24:d5:41:cf:83:b0:70:6f: c4:be:70:39:16:b8:0c:eb:dd:d8:84:a1:fb:55:e3:8a:e2:5d: 5e:53:6a:00:51:e1:f3:d7:e4:b7:ab:5f:0d:55:e4:c9:bd:d0: 64:14:a4:da:6a:61:23:35:07:43:42:08:ba:55:c2:fd:a0:db: b2:94:56:c4:05:f0:31:7a:36:e0:b5:2f:30:c1:74:94:1f:3a: d3:e5:4a:60:75:44:cb:94:6a:2c:e3:77:06:c6:c9:21:bb:61: a9:47:6f:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMpDfEduV3DnAxkne/kmSmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNDExNTQ0NjJlNWFkY2NhOWQyYmNiZDE0NDNmY2M2Mzc4 Nzk1MzcwHhcNMjUxMjExMDkwMDQ3WhcNMjUxMjEyMDkwMDQ3WjAzMTEwLwYDVQQD Eyg3MjhlZmU2NWY3NDc2NDYwYjA2ZGZjZGJlNzQ3MTMyZDE1ZmU4ZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnTIUeG67FM3XrqzfTjhcl8HjJG3 1OiyooflPQUpOxrkgqc+eDyiP0c4I47JpEfq8O9GSNN4iHfrOjmsR7PUq0ZqMdDo DqtDwqy1cWr3Dy1ngyUm4w7zESPcwSU7iBlICaWFRdgu+JH7GGu71Q7iu7ygsgzb 1/h3j5Wq4Re5biPVdlvjzCkv/mCkD4agVDLHLc9pmDOKcdQt0XN6lgICa/cT/jO0 knhQn+9LmVWgNru5kSoVxABWOe5rWw/w+4SMcW1M5s939iXupRXX+8k1UlMDlYCy K8GEaYNkRSOKSd++z13O2xAQOBUiSNnQ2Yn2adETZvWDepw1Akwx/AdHgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKO/mX3R2RgsG382+dHEy0V/o3bMB8GA1UdIwQY MBaAFAJBFURi5a3MqdK8vRRD/MY3h5U3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wOTc2MWQtNmU1Yy00NTFiLThlOGEt ZTkyZWU1ZWVkMjI2LzEvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8wOTc2MWQtNmU1Yy00NTFiLThlOGEtZTkyZWU1ZWVkMjI2 LzEvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2uqNVOB BLgQEtDCKyZ9AKqmkCU6sVTbcsyyH0SnWDqoLEapSiARZiEGUA3DG9T5DQB7LcRR 5qIikfsQ9APyfpKEEayawBxJgySjU7BHIidUUxm7/7kAaw/9dB4Auh2NXgZ7osje pT5Cqf0uqCkuJ1FatF+AsSjJUDH0utwdlP/8ItmFYajPY6aslVaYMqrNWC76s30C kvTZ8STVQc+DsHBvxL5wORa4DOvd2ISh+1XjiuJdXlNqAFHh89fkt6tfDVXkyb3Q ZBSk2mphIzUHQ0IIulXC/aDbspRWxAXwMXo24LUvMMF0lB860+VKYHVEy5RqLON3 BsbJIbthqUdvig== -----END CERTIFICATE-----Generated at Thu Dec 11 19:22:42 2025 by rpki-client