This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft File: AJJn8-O54eu5eZaQgLDfqyTDYBo.mft (raw, json) Hash identifier: EfoU9dRywAd4wTL8mWUQUy8sm5gVgxjNSNtM/KvbsOI= Subject key identifier: FB:E0:2C:87:B8:BE:29:FD:CA:EE:FA:16:F5:D0:45:AC:AD:EC:53:AE Authority key identifier: 00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A Certificate issuer: /CN=009267f3e3b9e1ebb979969080b0dfab24c3601a Certificate serial: 019B25F656E78E9038FEE2BE21F4E4B08B75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft Manifest number: 034F Signing time: Tue 16 Dec 2025 07:00:59 +0000 Manifest this update: Tue 16 Dec 2025 07:00:59 +0000 Manifest next update: Wed 17 Dec 2025 07:00:59 +0000 Files and hashes: 1: AJJn8-O54eu5eZaQgLDfqyTDYBo.crl (hash: otiFM/HCbuUCRty9XwPNdOlJfq85UyMSgf2bnR3O/0g=) 2: jt-iRSNGZBGhABnXoxTRm_rAskI.roa (hash: l7KIq5bWvwsgCT6cMEiSjjaqu0hDSyke8GcgCL2LIpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:56:e7:8e:90:38:fe:e2:be:21:f4:e4:b0:8b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=009267f3e3b9e1ebb979969080b0dfab24c3601a Validity Not Before: Dec 16 07:00:59 2025 GMT Not After : Dec 17 07:00:59 2025 GMT Subject: CN=fbe02c87b8be29fdcaeefa16f5d045acadec53ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:ee:e7:23:34:ee:56:e8:de:fc:42:b7:8a: e2:28:89:59:8b:e4:fd:6e:12:e1:ee:a0:1f:12:a2: 44:94:03:81:60:f2:52:9f:6f:bf:24:40:a3:06:46: 62:cf:1f:82:e9:e7:d6:01:23:39:7b:04:00:fc:d5: a7:32:ff:a2:c7:64:22:2d:b4:57:79:12:f5:4a:05: 5b:cf:2c:fa:fb:be:de:cd:26:01:50:40:23:98:b6: b4:e9:fd:5c:7a:ef:4d:8a:e7:94:fa:2f:ce:30:d3: 59:29:b1:a5:63:b8:a8:35:23:75:08:ed:3b:8b:54: 99:1e:28:0b:9b:4e:de:1a:ad:8f:62:11:4b:fb:a4: 58:d3:62:a5:be:5e:98:d8:15:2d:c9:d9:34:f0:b9: 30:b5:4a:20:11:e9:00:0a:3b:51:c7:a7:a7:21:d3: 29:d9:f0:8a:68:c6:42:06:0d:51:04:75:fc:cd:1b: 7a:91:c3:03:cd:7f:70:17:e4:e4:ed:10:64:72:d8: 76:61:88:54:a3:9f:d6:51:cf:76:11:7e:72:53:24: d1:fd:e8:07:83:be:51:a4:3c:52:fa:89:08:07:85: e9:b7:71:98:20:62:41:c8:46:22:a5:88:de:55:90: ac:45:96:6b:87:de:5f:94:6a:b2:0c:53:fe:73:d9: 8c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E0:2C:87:B8:BE:29:FD:CA:EE:FA:16:F5:D0:45:AC:AD:EC:53:AE X509v3 Authority Key Identifier: keyid:00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:d9:07:d0:96:0b:ef:95:54:03:25:0c:f3:8f:4c:50:25:23: 53:82:ca:bb:45:b5:54:da:9a:de:bb:b1:61:f4:6d:e7:5b:9c: a3:0a:97:e9:17:aa:09:7a:f7:b1:81:52:14:bf:20:ee:7b:90: ad:16:68:f4:4d:9f:ac:29:a9:fb:f7:1c:83:56:81:a9:f3:52: 64:c4:62:18:ca:42:73:ee:11:03:7d:79:b8:72:7a:e9:2d:0e: cd:09:3e:2d:b4:c3:1e:cf:dc:f0:b0:82:99:10:67:08:a5:31: 32:c3:0c:95:a4:43:2f:53:92:fb:38:ba:eb:eb:13:b7:39:df: 21:78:92:54:2d:c8:7e:5b:b3:87:6f:9f:13:29:ce:75:96:5c: d3:cc:3d:32:99:91:79:1b:b7:f1:85:20:24:35:5a:90:17:68: f3:86:46:46:d1:cb:2e:1c:1d:c2:5e:4d:0c:fa:3f:4e:35:16: 8b:fb:6e:de:dd:8d:61:81:1e:9c:f9:cb:90:9f:22:be:95:56: 71:fe:12:b2:1a:59:0c:bb:37:9a:c1:48:c8:53:6e:6f:e9:c2: 92:56:1d:3f:9a:44:f3:dc:50:28:7d:7a:cf:56:77:28:ed:03: d9:72:1e:df:4b:87:3b:9a:b3:55:41:1a:a1:31:08:17:fa:65: 52:2d:39:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9lbnjpA4/uK+IfTksIt1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOTI2N2YzZTNiOWUxZWJiOTc5OTY5MDgwYjBkZmFiMjRj MzYwMWEwHhcNMjUxMjE2MDcwMDU5WhcNMjUxMjE3MDcwMDU5WjAzMTEwLwYDVQQD EyhmYmUwMmM4N2I4YmUyOWZkY2FlZWZhMTZmNWQwNDVhY2FkZWM1M2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPju5yM07lbo3vxCt4riKIlZi+T9 bhLh7qAfEqJElAOBYPJSn2+/JECjBkZizx+C6efWASM5ewQA/NWnMv+ix2QiLbRX eRL1SgVbzyz6+77ezSYBUEAjmLa06f1ceu9NiueU+i/OMNNZKbGlY7ioNSN1CO07 i1SZHigLm07eGq2PYhFL+6RY02Klvl6Y2BUtydk08LkwtUogEekACjtRx6enIdMp 2fCKaMZCBg1RBHX8zRt6kcMDzX9wF+Tk7RBkcth2YYhUo5/WUc92EX5yUyTR/egH g75RpDxS+okIB4Xpt3GYIGJByEYipYjeVZCsRZZrh95flGqyDFP+c9mMmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvgLIe4vin9yu76FvXQRayt7FOuMB8GA1UdIwQY MBaAFACSZ/PjueHruXmWkICw36skw2AaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpKbjgtTzU0ZXU1ZVphUWdMRGZxeVREWUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNGRiYTYtNmQ5NC00MTBmLTliZTIt ZDY5MDM4MjUwMThjLzEvQUpKbjgtTzU0ZXU1ZVphUWdMRGZxeVREWUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mNGRiYTYtNmQ5NC00MTBmLTliZTItZDY5MDM4MjUwMThj LzEvQUpKbjgtTzU0ZXU1ZVphUWdMRGZxeVREWUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtkH0JYL 75VUAyUM849MUCUjU4LKu0W1VNqa3ruxYfRt51ucowqX6ReqCXr3sYFSFL8g7nuQ rRZo9E2frCmp+/ccg1aBqfNSZMRiGMpCc+4RA315uHJ66S0OzQk+LbTDHs/c8LCC mRBnCKUxMsMMlaRDL1OS+zi66+sTtznfIXiSVC3Ifluzh2+fEynOdZZc08w9MpmR eRu38YUgJDVakBdo84ZGRtHLLhwdwl5NDPo/TjUWi/tu3t2NYYEenPnLkJ8ivpVW cf4SshpZDLs3msFIyFNub+nCklYdP5pE89xQKH16z1Z3KO0D2XIe30uHO5qzVUEa oTEIF/plUi05fw== -----END CERTIFICATE-----Generated at Tue Dec 16 09:44:22 2025 by rpki-client