This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft File: AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json) Hash identifier: P1tTGDcUu2HHOhl+aptbdB90+VYwfJEjUMMJ4YO1JlI= Subject key identifier: E1:9E:9A:38:4D:47:F2:AD:64:29:77:04:FD:F7:89:58:C6:43:F8:50 Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74 Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74 Certificate serial: 019B1BAA19BDB5528675D4D312EFC2C660CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft Manifest number: 1473 Signing time: Sun 14 Dec 2025 07:01:30 +0000 Manifest this update: Sun 14 Dec 2025 07:01:30 +0000 Manifest next update: Mon 15 Dec 2025 07:01:30 +0000 Files and hashes: 1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: XOsvWWIx3tLP7bVilwWuBQT2bUj2j91Nrtlc8tox9Yk=) 2: ntOMxIeMhr-P2kPbMPUoMu_pVTw.roa (hash: L+3qj6bnJM4B6HcuOJiFgE8okn2o6USIpevCWtSI9V4=) 3: on0Eb8DLw5yo7ERsBMlPbYsTuDw.roa (hash: ItajaA8/b84P6Za11CUhjcsIeCXK2t3vB+hMRKaYKy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:19:bd:b5:52:86:75:d4:d3:12:ef:c2:c6:60:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74 Validity Not Before: Dec 14 07:01:30 2025 GMT Not After : Dec 15 07:01:30 2025 GMT Subject: CN=e19e9a384d47f2ad64297704fdf78958c643f850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:6b:81:a2:be:c4:ff:98:6f:cb:0f:08:72: 56:cc:b1:b5:73:25:2b:bc:b3:ca:21:29:e1:6a:86: 8d:c4:5e:f6:ba:04:b5:82:f5:09:d1:74:fe:29:7e: e9:f1:8b:ef:b2:c1:19:96:1e:dd:1f:79:48:a9:67: 69:a4:04:5a:93:bf:25:6f:61:04:ca:fd:2a:67:69: 89:a3:0f:2a:c1:36:d3:6f:e9:81:b1:27:5d:9b:71: cd:10:ff:c7:40:07:b4:9a:d9:9f:91:40:1d:e5:0f: a5:21:5c:fc:02:df:93:d2:34:b0:c1:9f:b8:76:d2: 54:66:fb:cd:3b:00:4f:31:36:aa:6d:53:01:17:c4: 52:bc:28:35:aa:ab:df:04:97:48:29:7c:d9:6a:60: c6:a9:66:99:57:51:bb:e6:b0:2e:f5:47:02:e8:87: 62:33:ec:77:dc:de:ea:4a:16:bf:96:34:04:e3:02: 2f:8c:78:8b:81:4e:05:48:aa:ac:11:fe:f5:ac:ab: cc:1c:9f:12:f2:eb:87:f7:84:44:74:b0:d0:82:d9: ea:3d:0e:9f:64:76:82:59:f0:c1:bb:10:7b:79:ca: 8d:7f:78:cc:bc:a0:58:2f:db:d4:dd:d0:e2:a9:a6: db:77:09:17:c7:d3:f7:e4:b7:25:11:fe:93:d6:4e: 3a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9E:9A:38:4D:47:F2:AD:64:29:77:04:FD:F7:89:58:C6:43:F8:50 X509v3 Authority Key Identifier: keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:df:39:46:b4:c7:8a:03:46:e8:49:e6:31:2d:05:39:e5:20: aa:4b:a6:5c:36:85:29:f0:f3:da:93:66:b8:e9:c9:78:83:ea: 7a:9d:97:09:99:9f:0f:1b:0a:2a:b3:33:57:80:06:e3:3e:6a: 9a:bc:61:66:c9:0a:7d:7e:e9:7d:d1:a2:b9:fc:92:7a:62:c5: 21:54:d5:31:f4:b6:e9:25:e8:8a:52:55:bf:72:91:ec:39:88: 30:50:2c:95:ef:e9:cd:4f:23:bf:b3:22:88:fc:8e:9d:ae:9a: 24:85:0f:49:73:75:06:1a:70:99:37:0c:fb:4a:1b:00:99:90: 22:00:59:dc:0a:3b:4c:46:79:f1:41:3b:01:47:12:eb:f6:c3: 72:e7:2f:36:cf:a4:34:24:b7:1c:63:82:31:5c:c9:28:88:03: 73:ee:a4:37:6b:5a:f6:96:37:04:43:88:50:24:4b:62:5e:b7: 9b:5d:be:88:e9:a7:71:37:d2:fc:06:5a:f9:af:3b:e5:1b:a0: b9:ad:cf:5c:bd:6f:27:74:75:4a:d6:36:28:5a:ee:19:f7:5a: cc:24:5b:7e:16:4d:87:eb:65:a5:1a:26:4a:1b:86:dc:45:50: 4e:fa:f3:ff:c3:68:47:62:53:fc:02:85:ad:fb:70:f4:7c:ad: 10:8e:1a:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqhm9tVKGddTTEu/CxmDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNDcxOGU3YTI2M2ViZTQ1ZTc3MDY3MzkyNDFlYzZkNmFl NThlNzQwHhcNMjUxMjE0MDcwMTMwWhcNMjUxMjE1MDcwMTMwWjAzMTEwLwYDVQQD EyhlMTllOWEzODRkNDdmMmFkNjQyOTc3MDRmZGY3ODk1OGM2NDNmODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWtrgaK+xP+Yb8sPCHJWzLG1cyUr vLPKISnhaoaNxF72ugS1gvUJ0XT+KX7p8YvvssEZlh7dH3lIqWdppARak78lb2EE yv0qZ2mJow8qwTbTb+mBsSddm3HNEP/HQAe0mtmfkUAd5Q+lIVz8At+T0jSwwZ+4 dtJUZvvNOwBPMTaqbVMBF8RSvCg1qqvfBJdIKXzZamDGqWaZV1G75rAu9UcC6Idi M+x33N7qSha/ljQE4wIvjHiLgU4FSKqsEf71rKvMHJ8S8uuH94REdLDQgtnqPQ6f ZHaCWfDBuxB7ecqNf3jMvKBYL9vU3dDiqabbdwkXx9P35LclEf6T1k46FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGemjhNR/KtZCl3BP33iVjGQ/hQMB8GA1UdIwQY MBaAFABHGOeiY+vkXncGc5JB7G1q5Y50MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUVjWTU2Smo2LVJlZHdaemtrSHNiV3Jsam5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8zZWVjZjgtZWIwNC00MWNlLWE5ZjYt M2E5MWE2MTNhNDA3LzEvQUVjWTU2Smo2LVJlZHdaemtrSHNiV3Jsam5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8zZWVjZjgtZWIwNC00MWNlLWE5ZjYtM2E5MWE2MTNhNDA3 LzEvQUVjWTU2Smo2LVJlZHdaemtrSHNiV3Jsam5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAt85RrTH igNG6EnmMS0FOeUgqkumXDaFKfDz2pNmuOnJeIPqep2XCZmfDxsKKrMzV4AG4z5q mrxhZskKfX7pfdGiufySemLFIVTVMfS26SXoilJVv3KR7DmIMFAsle/pzU8jv7Mi iPyOna6aJIUPSXN1BhpwmTcM+0obAJmQIgBZ3Ao7TEZ58UE7AUcS6/bDcucvNs+k NCS3HGOCMVzJKIgDc+6kN2ta9pY3BEOIUCRLYl63m12+iOmncTfS/AZa+a875Rug ua3PXL1vJ3R1StY2KFruGfdazCRbfhZNh+tlpRomShuG3EVQTvrz/8NoR2JT/AKF rftw9HytEI4atQ== -----END CERTIFICATE-----Generated at Sun Dec 14 12:03:31 2025 by rpki-client