This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft File: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json) Hash identifier: pUbBA+eqPg3LkMw4diVczTpvKlX/CTI68lMFyDqUSyY= Subject key identifier: 1F:04:A9:80:F1:89:BA:DD:B7:ED:60:A3:76:1B:BB:25:9F:53:47:95 Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D Certificate issuer: /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d Certificate serial: 019B1F18E374AD63272C96F8E282399F6EF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft Manifest number: 170C Signing time: Sun 14 Dec 2025 23:01:23 +0000 Manifest this update: Sun 14 Dec 2025 23:01:23 +0000 Manifest next update: Mon 15 Dec 2025 23:01:23 +0000 Files and hashes: 1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: 8CqWTljhtRrJqhQ9Bj83KbBEsv5bIseEZBRaZGRxXNk=) 2: RZsQW2mn0p77cUSrDj82xlpY4kU.roa (hash: PgZwlEZ/SO6/ySPSoJ7naRU3kSxO9+Lme8pB8HNwF8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:18:e3:74:ad:63:27:2c:96:f8:e2:82:39:9f:6e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d Validity Not Before: Dec 14 23:01:23 2025 GMT Not After : Dec 15 23:01:23 2025 GMT Subject: CN=1f04a980f189baddb7ed60a3761bbb259f534795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b8:56:f9:bd:4c:0d:f9:42:98:69:0a:97:e8: fd:52:5c:a7:2c:ae:6b:f6:28:1a:3a:5b:06:2e:6e: 98:68:9a:5f:13:e2:a8:c8:eb:0e:ca:7d:95:20:42: 84:85:a5:63:5f:8b:bb:3f:1d:0f:eb:e5:5d:8b:ef: 00:98:e7:c6:1a:16:66:c4:6d:8e:ec:41:71:33:e0: f6:c6:dc:9b:ea:f2:e9:aa:07:39:87:e6:a2:2b:0d: c3:0a:ea:b3:27:9a:7c:b6:e3:4a:20:65:25:16:b7: 28:c3:b3:3c:e7:35:f8:32:2a:d1:31:b3:be:05:71: 2b:0a:7d:b7:8f:8b:ce:47:bc:51:46:48:e8:87:5e: b5:19:8c:32:4d:87:fb:b3:e2:55:4d:b5:46:8e:52: 78:e7:43:a6:9e:28:96:ed:29:33:b6:90:ec:38:78: cb:09:7d:41:1d:bb:9a:91:26:b5:e2:0b:b0:cd:96: fe:c9:9d:35:83:dd:ac:94:d7:43:e6:61:d3:bd:ee: 06:45:2a:65:2f:e2:ef:ac:2a:bc:19:62:27:1e:fd: b9:7d:5a:ec:75:36:4a:87:af:b5:20:6d:0c:93:4f: d0:96:a8:76:61:ca:ec:72:58:49:0c:97:ab:41:bd: d7:29:c5:ec:e7:52:ce:6b:59:c3:86:b5:3d:95:88: e0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:04:A9:80:F1:89:BA:DD:B7:ED:60:A3:76:1B:BB:25:9F:53:47:95 X509v3 Authority Key Identifier: keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:c8:66:3f:0d:b6:22:cb:ed:95:a2:d6:f3:09:be:f9:65:88: a3:ab:f6:d0:79:50:67:f8:12:35:5c:d8:e3:08:5b:d5:4d:d1: ac:f1:4a:0d:11:c0:f2:f7:82:55:4a:94:81:9c:42:f5:2c:6d: 64:2a:3c:f3:9c:6b:48:ed:9c:91:7d:81:fa:a0:5d:6e:c9:47: 0d:a8:ed:ca:9b:ca:6b:53:10:f2:13:0d:30:85:a9:5a:e5:3a: a1:db:b7:95:1f:08:4d:49:73:b0:d7:69:48:33:d2:3e:70:9c: 88:21:ba:63:51:11:b4:f1:2e:4b:dc:ca:f2:b6:9a:da:df:21: b1:88:d9:8e:13:de:60:1b:ba:6d:d6:8e:52:30:4b:ac:f6:af: 13:a5:93:ee:06:f0:76:85:1d:64:f7:4a:d4:c5:64:a0:5b:e2: 48:5b:3e:d5:59:88:d6:6c:6b:0e:22:8a:c3:1b:59:df:4f:d9: 4a:c0:4c:59:4c:e5:ec:18:61:f7:59:ff:8d:0f:1e:fd:2c:3f: 6a:6c:a9:69:47:4d:23:39:50:1e:b6:34:e4:c3:19:77:af:9b: 4e:02:5c:77:14:74:ef:dc:31:c2:2e:c1:5f:c3:2b:f9:57:00: 84:8a:0a:8e:9b:3b:6e:a1:74:1d:76:b4:69:16:d0:02:be:e1: bb:9a:72:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfGON0rWMnLJb44oI5n27wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzRlYzNlYzUzZjUyZjdmNTI4MzViYjUxMGFiNmJlZGFh MDBhM2QwHhcNMjUxMjE0MjMwMTIzWhcNMjUxMjE1MjMwMTIzWjAzMTEwLwYDVQQD EygxZjA0YTk4MGYxODliYWRkYjdlZDYwYTM3NjFiYmIyNTlmNTM0Nzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLhW+b1MDflCmGkKl+j9UlynLK5r 9igaOlsGLm6YaJpfE+KoyOsOyn2VIEKEhaVjX4u7Px0P6+Vdi+8AmOfGGhZmxG2O 7EFxM+D2xtyb6vLpqgc5h+aiKw3DCuqzJ5p8tuNKIGUlFrcow7M85zX4MirRMbO+ BXErCn23j4vOR7xRRkjoh161GYwyTYf7s+JVTbVGjlJ450OmniiW7SkztpDsOHjL CX1BHbuakSa14guwzZb+yZ01g92slNdD5mHTve4GRSplL+LvrCq8GWInHv25fVrs dTZKh6+1IG0Mk0/Qlqh2YcrsclhJDJerQb3XKcXs51LOa1nDhrU9lYjgZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8EqYDxibrdt+1go3YbuyWfU0eVMB8GA1UdIwQY MBaAFAB07D7FP1L39Sg1u1EKtr7aoAo9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhUc1BzVV9VdmYxS0RXN1VRcTJ2dHFnQ2owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MDhhOGEtNThkYi00NTA5LWEyODUt MWFjMmVkZGE4ZTJhLzEvQUhUc1BzVV9VdmYxS0RXN1VRcTJ2dHFnQ2owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85MDhhOGEtNThkYi00NTA5LWEyODUtMWFjMmVkZGE4ZTJh LzEvQUhUc1BzVV9VdmYxS0RXN1VRcTJ2dHFnQ2owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMhmPw22 IsvtlaLW8wm++WWIo6v20HlQZ/gSNVzY4whb1U3RrPFKDRHA8veCVUqUgZxC9Sxt ZCo885xrSO2ckX2B+qBdbslHDajtypvKa1MQ8hMNMIWpWuU6odu3lR8ITUlzsNdp SDPSPnCciCG6Y1ERtPEuS9zK8raa2t8hsYjZjhPeYBu6bdaOUjBLrPavE6WT7gbw doUdZPdK1MVkoFviSFs+1VmI1mxrDiKKwxtZ30/ZSsBMWUzl7Bhh91n/jQ8e/Sw/ amypaUdNIzlQHrY05MMZd6+bTgJcdxR079wxwi7BX8Mr+VcAhIoKjps7bqF0HXa0 aRbQAr7hu5pyQw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:59:16 2025 by rpki-client