This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft File: AmEbTqouCzf3LMCKySlhmB6rsh8.mft (raw, json) Hash identifier: 3IrC1NO0rjnfsJpf8aIgE+LSDUdcYHr5qkMhSChZV/8= Subject key identifier: E8:3D:E4:40:6D:74:FC:45:13:7C:64:CD:75:6E:48:3A:5B:B0:88:4D Authority key identifier: 02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F Certificate issuer: /CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f Certificate serial: 019B5B642B55E72E9507802AF4C42168B06A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft Manifest number: 1729 Signing time: Fri 26 Dec 2025 16:00:49 +0000 Manifest this update: Fri 26 Dec 2025 16:00:49 +0000 Manifest next update: Sat 27 Dec 2025 16:00:49 +0000 Files and hashes: 1: AmEbTqouCzf3LMCKySlhmB6rsh8.crl (hash: Ive95CF/KkTHXhqZYTBQ/+A4GLe312Tp3IrCpOSf60Q=) 2: ZYWLpZ35KZiRaWxSeFuEnh6lxl0.roa (hash: A+6pCmvRh21bff+k990m7MW26aQWM6C7J37zdRTRafw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:2b:55:e7:2e:95:07:80:2a:f4:c4:21:68:b0:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f Validity Not Before: Dec 26 16:00:49 2025 GMT Not After : Dec 27 16:00:49 2025 GMT Subject: CN=e83de4406d74fc45137c64cd756e483a5bb0884d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fa:9b:e5:74:b4:d6:69:db:0b:67:7a:29:e7: 75:22:f8:32:d2:e3:ea:b6:21:9d:e4:92:79:d2:5e: 95:42:5a:e8:53:05:f6:38:08:87:4b:3e:ed:5b:a8: 46:a1:d2:92:69:40:f8:01:17:32:8a:f8:4b:3b:ee: 6c:c3:47:af:c1:12:ff:b9:83:25:eb:2b:4a:ba:a5: b6:b0:82:2b:5c:ac:4b:b2:0c:fd:fc:05:62:57:88: 02:d3:f7:8c:5f:8c:24:69:f5:a1:08:7f:1f:ef:b4: f3:69:d3:1c:fe:15:16:f2:2b:5f:45:ee:c4:0e:f5: f7:3d:04:8a:cc:c4:6a:85:94:67:02:bc:03:e4:9a: e7:3e:ec:39:db:24:05:8e:90:14:c9:bb:a4:10:ad: db:79:e4:ad:04:e0:7f:9a:b7:b8:26:73:87:57:ac: 36:2a:e1:43:6f:71:f0:c4:a7:e0:cf:cb:8d:39:9b: 7a:94:66:9d:54:89:9c:af:8a:be:e8:93:b8:ca:c5: 50:8c:88:b3:31:90:26:12:57:1a:84:fd:15:6f:2b: 65:04:87:dc:2c:b6:99:c9:e4:91:ca:e2:88:22:a5: 62:11:98:b7:df:f8:c9:43:a2:d9:64:3b:1b:a2:4a: f7:c3:27:e9:ac:08:8e:26:73:d2:b4:dd:77:c4:c9: 19:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3D:E4:40:6D:74:FC:45:13:7C:64:CD:75:6E:48:3A:5B:B0:88:4D X509v3 Authority Key Identifier: keyid:02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7a:8c:a5:10:b2:4d:10:8e:d0:a2:20:e3:9b:f6:7e:d1:a1: f2:71:ba:1b:6a:a8:d0:ba:66:91:e3:db:68:bd:74:a5:42:77: ea:f7:9b:f1:69:cf:ec:c6:67:27:78:4b:72:1c:00:31:e1:cb: 66:90:d6:5d:e1:76:ff:ea:79:d3:2d:e6:cb:09:9b:09:bd:66: 35:db:29:3f:84:37:45:e6:bf:08:19:ae:36:14:fa:18:57:f5: d7:d5:00:0a:9c:60:53:ed:ff:cb:cf:fc:c3:a6:31:72:76:59: e2:52:75:fb:ad:5f:d3:df:14:d8:cf:dc:14:d0:86:21:e0:52: 1e:28:b3:fb:ec:2e:b7:56:50:31:29:54:d5:8c:ba:10:e7:d2: 2f:63:06:64:84:87:41:e8:00:35:8e:45:be:a5:b9:8d:59:53: a3:34:cd:11:a3:d3:ed:8b:f1:c8:56:e2:2f:92:dd:82:f9:f6: d4:3a:5e:ea:ef:c5:1d:97:4f:89:b9:13:75:3a:53:a9:7b:0f: d1:a9:40:ef:58:73:a9:8e:ad:e2:06:6f:97:fa:f0:34:a9:66: 8f:b0:f0:45:21:f0:3a:ea:11:ff:be:21:21:dd:73:f7:a0:33: 7f:58:24:15:c8:da:57:f9:d6:af:f0:1c:33:bd:07:6d:cd:5d: aa:53:79:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZCtV5y6VB4Aq9MQhaLBqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNjExYjRlYWEyZTBiMzdmNzJjYzA4YWM5Mjk2MTk4MWVh YmIyMWYwHhcNMjUxMjI2MTYwMDQ5WhcNMjUxMjI3MTYwMDQ5WjAzMTEwLwYDVQQD EyhlODNkZTQ0MDZkNzRmYzQ1MTM3YzY0Y2Q3NTZlNDgzYTViYjA4ODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPqb5XS01mnbC2d6Ked1Ivgy0uPq tiGd5JJ50l6VQlroUwX2OAiHSz7tW6hGodKSaUD4ARcyivhLO+5sw0evwRL/uYMl 6ytKuqW2sIIrXKxLsgz9/AViV4gC0/eMX4wkafWhCH8f77TzadMc/hUW8itfRe7E DvX3PQSKzMRqhZRnArwD5JrnPuw52yQFjpAUybukEK3beeStBOB/mre4JnOHV6w2 KuFDb3HwxKfgz8uNOZt6lGadVImcr4q+6JO4ysVQjIizMZAmElcahP0VbytlBIfc LLaZyeSRyuKIIqViEZi33/jJQ6LZZDsbokr3wyfprAiOJnPStN13xMkZiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOg95EBtdPxFE3xkzXVuSDpbsIhNMB8GA1UdIwQY MBaAFAJhG06qLgs39yzAiskpYZgeq7IfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW1FYlRxb3VDemYzTE1DS3lTbGhtQjZyc2g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82NDY0MzgtNmRhMi00YzA1LTlmY2Qt MTJjNGJkODA1OGFhLzEvQW1FYlRxb3VDemYzTE1DS3lTbGhtQjZyc2g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82NDY0MzgtNmRhMi00YzA1LTlmY2QtMTJjNGJkODA1OGFh LzEvQW1FYlRxb3VDemYzTE1DS3lTbGhtQjZyc2g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3qMpRCy TRCO0KIg45v2ftGh8nG6G2qo0LpmkePbaL10pUJ36veb8WnP7MZnJ3hLchwAMeHL ZpDWXeF2/+p50y3mywmbCb1mNdspP4Q3Rea/CBmuNhT6GFf119UACpxgU+3/y8/8 w6YxcnZZ4lJ1+61f098U2M/cFNCGIeBSHiiz++wut1ZQMSlU1Yy6EOfSL2MGZISH QegANY5FvqW5jVlTozTNEaPT7YvxyFbiL5Ldgvn21Dpe6u/FHZdPibkTdTpTqXsP 0alA71hzqY6t4gZvl/rwNKlmj7DwRSHwOuoR/74hId1z96Azf1gkFcjaV/nWr/Ac M70Hbc1dqlN5Sw== -----END CERTIFICATE-----Generated at Fri Dec 26 21:01:18 2025 by rpki-client