This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft File: AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json) Hash identifier: pzhvTurAC74saSoqKAXqvE1of6oC8DCJGlSA4Kd7aQk= Subject key identifier: 2C:86:79:64:A3:DA:55:7D:0A:DA:DA:85:D0:08:A8:DC:B2:46:63:3D Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5 Certificate issuer: /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5 Certificate serial: 019B341F8AEFC8D762C0DA49376DCC0CFD15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft Manifest number: 0CEF Signing time: Fri 19 Dec 2025 01:00:40 +0000 Manifest this update: Fri 19 Dec 2025 01:00:40 +0000 Manifest next update: Sat 20 Dec 2025 01:00:40 +0000 Files and hashes: 1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: 5En6j7neYGud/RZ9P+Vl/IrYnjcnYS47BAvSgb93uHA=) 2: Zu7qmPE7Yu9qaSBN9WsSyKAeY2Y.roa (hash: 6EpeKHcevQPaPF9U/VGXI0S4HRJnkl5xIMQ3xA5Np4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:8a:ef:c8:d7:62:c0:da:49:37:6d:cc:0c:fd:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5 Validity Not Before: Dec 19 01:00:40 2025 GMT Not After : Dec 20 01:00:40 2025 GMT Subject: CN=2c867964a3da557d0adada85d008a8dcb246633d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ff:af:ca:5a:73:88:41:49:40:b9:be:ac:3e: 8f:cb:d2:9f:93:eb:93:f3:b3:db:2e:07:01:c5:d0: b2:cf:32:a5:a7:d5:3d:83:e5:6b:38:e7:23:26:4e: 8b:8c:09:d5:4b:72:a3:da:bd:fb:88:4b:f2:4f:4e: 90:3c:16:6e:b5:0e:65:0f:cc:3a:bd:ca:79:e1:5f: 56:0f:7d:6a:9d:8d:e3:0c:27:eb:1f:ce:73:25:59: de:da:06:cd:26:07:14:3a:a0:74:3f:49:1a:2a:14: 57:82:80:08:62:b6:01:dd:05:ae:ae:d1:a8:a3:42: 37:37:3c:f3:a5:d2:85:3e:82:70:13:c0:5c:31:9d: 36:60:10:91:23:d2:fd:1b:ed:95:da:c3:98:ea:4a: 34:dd:8e:2a:76:11:22:ce:c1:8b:2a:94:ef:7a:d6: 2b:c5:b3:83:83:34:e3:fd:6e:5e:ab:a0:30:e4:41: 70:43:32:23:06:6c:8f:b6:25:f0:19:2f:d7:b0:2e: 6b:ad:93:3a:45:0c:6f:ab:0a:0e:ff:43:ba:a0:8b: 7f:85:d9:05:1a:5d:6a:08:60:68:0a:f8:72:90:52: 51:b1:d7:7d:b6:e1:f3:97:1f:5d:c1:b0:d1:37:2f: ab:4f:59:94:7c:68:86:1b:91:29:ae:47:96:0e:7c: df:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:86:79:64:A3:DA:55:7D:0A:DA:DA:85:D0:08:A8:DC:B2:46:63:3D X509v3 Authority Key Identifier: keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0c:5f:73:c6:03:e8:df:f7:f1:70:22:b8:c3:95:06:4c:f3: 6d:73:f8:05:c8:73:ff:a0:81:05:01:bd:43:f7:68:44:ea:ba: 97:60:d7:43:2d:f2:1a:31:eb:00:92:90:8d:14:41:28:0c:5f: 0d:29:d5:f1:3c:00:8c:4f:75:5e:45:26:2a:25:3f:7f:d9:d6: 6f:42:09:ef:1a:33:d6:ed:1f:19:e2:7e:5f:81:40:d4:d8:e5: 40:da:6e:24:e6:eb:14:f4:d7:f7:de:04:5f:e8:b2:9e:6b:6a: 7f:bd:76:26:41:fc:d2:ba:96:33:53:05:95:2c:94:ea:f5:86: 56:55:79:59:98:47:f3:8d:fb:a5:d4:c9:6d:13:22:51:49:10: a0:37:f9:e9:38:f5:2f:36:e6:3b:46:7c:93:77:39:3c:27:e3: bf:82:20:3c:4c:9a:c2:7d:46:0b:0a:f3:1a:1f:db:a2:bb:9b: 66:06:84:e0:c2:41:14:73:ce:db:a6:da:6f:49:f3:dd:98:cc: 58:7d:24:55:2c:45:11:2a:16:e7:2f:ee:2e:28:7e:49:ff:79: d1:d0:fd:4a:b8:dc:fe:a9:42:99:b1:7a:2f:b0:1b:88:86:77: 26:02:ca:b4:f8:16:e0:1e:85:db:dd:a3:88:00:66:f6:11:9f: 48:15:fb:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H4rvyNdiwNpJN23MDP0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNGE3NThhMmIwYTdlOTM4YTlmMGRlZTY0MmNlYzVlNDEw Mjc2YjUwHhcNMjUxMjE5MDEwMDQwWhcNMjUxMjIwMDEwMDQwWjAzMTEwLwYDVQQD EygyYzg2Nzk2NGEzZGE1NTdkMGFkYWRhODVkMDA4YThkY2IyNDY2MzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv+vylpziEFJQLm+rD6Py9Kfk+uT 87PbLgcBxdCyzzKlp9U9g+VrOOcjJk6LjAnVS3Kj2r37iEvyT06QPBZutQ5lD8w6 vcp54V9WD31qnY3jDCfrH85zJVne2gbNJgcUOqB0P0kaKhRXgoAIYrYB3QWurtGo o0I3NzzzpdKFPoJwE8BcMZ02YBCRI9L9G+2V2sOY6ko03Y4qdhEizsGLKpTvetYr xbODgzTj/W5eq6Aw5EFwQzIjBmyPtiXwGS/XsC5rrZM6RQxvqwoO/0O6oIt/hdkF Gl1qCGBoCvhykFJRsdd9tuHzlx9dwbDRNy+rT1mUfGiGG5EprkeWDnzfiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyGeWSj2lV9CtrahdAIqNyyRmM9MB8GA1UdIwQY MBaAFABKdYorCn6Tip8N7mQs7F5BAna1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjU5MTUtOTZhYS00ZGFkLWFmMmEt MDExMDI3MmRlYzE3LzEvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iZjU5MTUtOTZhYS00ZGFkLWFmMmEtMDExMDI3MmRlYzE3 LzEvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQxfc8YD 6N/38XAiuMOVBkzzbXP4Bchz/6CBBQG9Q/doROq6l2DXQy3yGjHrAJKQjRRBKAxf DSnV8TwAjE91XkUmKiU/f9nWb0IJ7xoz1u0fGeJ+X4FA1NjlQNpuJObrFPTX994E X+iynmtqf712JkH80rqWM1MFlSyU6vWGVlV5WZhH8437pdTJbRMiUUkQoDf56Tj1 LzbmO0Z8k3c5PCfjv4IgPEyawn1GCwrzGh/borubZgaE4MJBFHPO26bab0nz3ZjM WH0kVSxFESoW5y/uLih+Sf950dD9Srjc/qlCmbF6L7AbiIZ3JgLKtPgW4B6F292j iABm9hGfSBX7ww== -----END CERTIFICATE-----Generated at Fri Dec 19 03:45:51 2025 by rpki-client