This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json) Hash identifier: bRHfKXrAmbjnuBsvEqrGMXKQDRCabHYod1VuMpKY5WU= Subject key identifier: B9:A1:9F:CB:B8:5B:EE:D9:D8:86:40:5F:DF:80:98:D5:31:9D:D3:BE Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd Certificate serial: 019B0E26CA51CF70883FB70BF6FA34FCEF11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft Manifest number: 1476 Signing time: Thu 11 Dec 2025 16:03:01 +0000 Manifest this update: Thu 11 Dec 2025 16:03:01 +0000 Manifest next update: Fri 12 Dec 2025 16:03:01 +0000 Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: 6aciCzKI7qZZf80FgUxSYuvsJFcT8sLtMX3DaeRsbFc=) 2: C8VNDT0eLyU6a-BGSaat20kBt5Q.roa (hash: GVJtrMJUvAX+z3Z9hhGqUx0RMXPQ0og215klHN94fVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:ca:51:cf:70:88:3f:b7:0b:f6:fa:34:fc:ef:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd Validity Not Before: Dec 11 16:03:01 2025 GMT Not After : Dec 12 16:03:01 2025 GMT Subject: CN=b9a19fcbb85beed9d886405fdf8098d5319dd3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:ee:15:49:80:87:4b:25:22:30:df:35:b5: 1f:b9:39:d7:83:43:87:9f:61:9b:8c:a9:b3:79:52: a9:44:b5:49:92:07:2e:92:f6:5f:88:9e:4c:12:b7: 6b:d1:0d:cb:2b:62:03:35:e4:68:1f:48:17:1d:0a: 91:a6:2a:cd:b6:17:65:ca:e7:8b:9d:51:e5:33:90: e3:c8:04:88:6c:aa:46:64:ac:f7:69:07:63:f9:4d: e3:fb:5b:9c:8a:ff:ef:1c:41:62:57:b5:e1:1f:81: 34:31:05:d4:ec:5f:2b:9e:e4:5d:8e:6b:4e:6d:6d: f8:56:fe:1c:3e:da:57:74:af:5a:f3:1a:21:b8:92: d2:1d:fe:4b:59:39:d6:17:58:9c:38:59:e5:4c:32: a8:da:46:04:32:0d:3d:ad:58:a3:74:49:f3:ba:59: 57:77:91:c0:ff:59:20:55:95:18:ca:67:ef:33:c3: d3:22:d8:14:88:66:24:b4:b2:66:e1:b3:ca:e6:31: d2:82:9d:e5:d7:6f:87:7d:d0:25:c9:1d:70:70:53: 50:16:a9:a7:46:7e:59:1f:8d:97:4a:56:e6:b5:7e: e8:5a:fd:7a:8b:a8:2a:64:67:e5:43:78:79:77:00: e5:5a:78:1b:d7:73:09:9d:fc:ba:35:64:60:04:a0: 3f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A1:9F:CB:B8:5B:EE:D9:D8:86:40:5F:DF:80:98:D5:31:9D:D3:BE X509v3 Authority Key Identifier: keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:3b:a7:e8:1b:0b:9a:8c:16:b8:dc:00:76:91:33:4a:0e:e1: 3a:eb:c3:f0:af:e4:75:99:88:8e:c2:a1:d3:5c:7a:bc:d3:d5: 27:8e:08:43:60:09:17:42:45:45:2d:34:f6:e1:99:74:23:6c: ae:5b:ad:4b:47:a8:33:59:52:36:02:21:fc:50:43:d7:af:42: 20:6d:a6:ba:f8:7c:88:09:1e:b1:8c:74:04:5f:e5:48:7d:0c: 68:e1:49:8e:10:67:a0:79:b1:80:15:8f:0f:67:e9:a9:d6:2f: 1d:2b:71:b1:12:e2:37:95:ef:23:71:c2:91:c7:1e:77:66:ee: 91:5f:3f:21:9d:ab:ab:d9:d3:cc:ba:10:b1:30:27:0a:c8:a9: a1:a7:d0:4d:b3:35:f5:6e:62:1f:3b:da:1b:9e:41:a4:31:85: e9:7b:cc:39:e1:57:8a:f8:51:61:ad:b8:39:a9:9c:66:85:8e: 32:b3:fb:8a:f8:90:fb:03:5f:eb:86:15:03:89:56:bb:51:9c: ac:27:15:5b:6e:30:79:e1:0c:be:21:36:d0:06:57:e0:3f:50: ba:5f:ee:ef:34:4d:07:33:ac:23:2e:9b:bd:c1:e0:01:93:24: 0e:8f:16:27:4f:2c:7a:0f:8b:9b:5b:1f:f3:cf:ef:8c:54:a7: 74:fd:63:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJspRz3CIP7cL9vo0/O8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwY2M0ZDUwODhkYjcxZTIxODc3N2Q5NzZkMGFhZGM0OThj NDZjZmQwHhcNMjUxMjExMTYwMzAxWhcNMjUxMjEyMTYwMzAxWjAzMTEwLwYDVQQD EyhiOWExOWZjYmI4NWJlZWQ5ZDg4NjQwNWZkZjgwOThkNTMxOWRkM2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV3uFUmAh0slIjDfNbUfuTnXg0OH n2GbjKmzeVKpRLVJkgcukvZfiJ5MErdr0Q3LK2IDNeRoH0gXHQqRpirNthdlyueL nVHlM5DjyASIbKpGZKz3aQdj+U3j+1uciv/vHEFiV7XhH4E0MQXU7F8rnuRdjmtO bW34Vv4cPtpXdK9a8xohuJLSHf5LWTnWF1icOFnlTDKo2kYEMg09rVijdEnzullX d5HA/1kgVZUYymfvM8PTItgUiGYktLJm4bPK5jHSgp3l12+HfdAlyR1wcFNQFqmn Rn5ZH42XSlbmtX7oWv16i6gqZGflQ3h5dwDlWngb13MJnfy6NWRgBKA/OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmhn8u4W+7Z2IZAX9+AmNUxndO+MB8GA1UdIwQY MBaAFADMTVCI23HiGHd9l20KrcSYxGz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQt YTIzODFjMzZjMDU0LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQtYTIzODFjMzZjMDU0 LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqTun6BsL mowWuNwAdpEzSg7hOuvD8K/kdZmIjsKh01x6vNPVJ44IQ2AJF0JFRS009uGZdCNs rlutS0eoM1lSNgIh/FBD169CIG2muvh8iAkesYx0BF/lSH0MaOFJjhBnoHmxgBWP D2fpqdYvHStxsRLiN5XvI3HCkcced2bukV8/IZ2rq9nTzLoQsTAnCsipoafQTbM1 9W5iHzvaG55BpDGF6XvMOeFXivhRYa24OamcZoWOMrP7iviQ+wNf64YVA4lWu1Gc rCcVW24weeEMviE20AZX4D9Qul/u7zRNBzOsIy6bvcHgAZMkDo8WJ08seg+Lm1sf 88/vjFSndP1jkQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:31:34 2025 by rpki-client