This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft File: AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json) Hash identifier: 6zkiduNZkC8+S+khPXrMCJiDg/50rfHp0Gl8+WDmY58= Subject key identifier: 32:1E:60:11:DF:16:E6:BA:43:0C:44:E8:6C:85:12:55:5A:F2:93:D8 Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B Certificate issuer: /CN=00a856a4173895af44b8fd34455469a5c4d6173b Certificate serial: 019B4E4D14E26A68D5CC32242AAF4DC2E73F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft Manifest number: 02D6 Signing time: Wed 24 Dec 2025 03:00:32 +0000 Manifest this update: Wed 24 Dec 2025 03:00:32 +0000 Manifest next update: Thu 25 Dec 2025 03:00:32 +0000 Files and hashes: 1: 4mezRfHPXPaCo28qoJyolX64C48.roa (hash: QHUvtDK2DiCjdwwLpsM73EoVrUrKJFVkLwmkkTWUE3k=) 2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: mn9UYmV79Dm2G7BejfQAu2nmrueRzdUkgqzGgRgRg/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:14:e2:6a:68:d5:cc:32:24:2a:af:4d:c2:e7:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b Validity Not Before: Dec 24 03:00:32 2025 GMT Not After : Dec 25 03:00:32 2025 GMT Subject: CN=321e6011df16e6ba430c44e86c8512555af293d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:19:46:67:ea:f0:56:0b:75:bb:bd:b2:b8:31: f1:c8:08:34:e5:40:f2:54:09:d4:aa:a1:1a:1a:20: 4f:32:d8:0d:f9:0b:72:5a:9c:f9:19:0b:6e:a1:69: 20:18:09:da:35:78:d1:fa:d8:a3:15:a0:d6:bd:ba: 30:59:65:4e:d1:26:0f:18:73:cb:8f:42:63:0f:6b: c4:f6:ee:8b:c8:96:ca:57:24:fe:64:6c:27:f7:75: a8:40:cd:53:9b:bb:7e:d3:a5:f6:5f:49:95:a3:b3: 45:05:b3:52:99:e1:10:90:40:92:f9:ae:eb:8e:13: f4:13:0b:98:0d:79:5b:56:fc:a2:4f:7d:cc:cf:95: 7f:c8:ed:d9:d0:02:9a:ca:52:f9:f2:7b:b7:8a:11: 63:3c:7b:be:e1:e3:01:63:69:d8:3c:5a:5e:8f:2c: 39:ac:20:ba:ba:4c:59:92:40:00:38:6b:57:0e:31: 9c:3f:22:65:2f:de:ec:8e:bd:90:cc:3c:8d:46:cb: 72:1b:91:ec:4d:64:46:9f:49:c7:a8:85:12:1f:58: f3:18:fe:85:98:27:05:1f:3a:85:95:1e:39:8d:fa: 70:31:be:21:b5:bd:17:49:2c:9c:62:2d:b8:9b:bc: d0:6e:18:6f:ce:8e:f8:82:48:08:d1:3d:08:ac:b8: c5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1E:60:11:DF:16:E6:BA:43:0C:44:E8:6C:85:12:55:5A:F2:93:D8 X509v3 Authority Key Identifier: keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:9f:20:1d:71:1d:68:5a:37:2a:c7:2c:08:d4:eb:8f:8d:2c: 71:ee:28:9e:d0:ed:56:4e:64:9c:15:ab:44:0b:f0:36:e8:86: 56:21:ed:b3:4f:f6:70:15:55:8e:f4:74:8c:b5:ad:b2:85:89: 59:63:e1:1f:ac:44:31:1b:ae:3d:ba:f4:9f:38:33:27:ef:80: a9:02:21:2a:5e:63:b3:94:54:6b:fc:91:3c:45:05:de:e6:b5: 09:8b:40:9f:b7:46:bf:e8:62:3e:11:ae:90:13:d9:12:97:cd: 85:73:2f:5c:8f:d9:4e:c4:40:37:0e:16:45:3d:62:a0:63:c4: a8:fe:9e:be:7f:ce:6b:d9:c6:05:19:09:4f:98:f5:61:ee:1f: 4f:81:92:b6:4f:45:0c:30:b2:ad:8f:15:93:f5:35:f9:da:ff: 98:89:c6:ed:13:85:f3:b5:80:40:84:bb:60:81:04:79:74:88: 11:81:24:90:78:5b:cd:df:02:92:7f:0d:db:2a:d7:92:8a:22: 9e:4b:af:37:6a:42:00:0e:ec:e0:45:a9:f5:46:62:04:86:e7: 26:47:23:ea:be:7d:7a:01:7b:b3:65:85:1d:75:04:78:cb:28: 42:bf:f5:f8:63:55:b2:49:9f:bf:41:e6:67:b6:31:32:62:8c: 34:37:72:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTRTiamjVzDIkKq9Nwuc/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYTg1NmE0MTczODk1YWY0NGI4ZmQzNDQ1NTQ2OWE1YzRk NjE3M2IwHhcNMjUxMjI0MDMwMDMyWhcNMjUxMjI1MDMwMDMyWjAzMTEwLwYDVQQD EygzMjFlNjAxMWRmMTZlNmJhNDMwYzQ0ZTg2Yzg1MTI1NTVhZjI5M2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RlGZ+rwVgt1u72yuDHxyAg05UDy VAnUqqEaGiBPMtgN+QtyWpz5GQtuoWkgGAnaNXjR+tijFaDWvbowWWVO0SYPGHPL j0JjD2vE9u6LyJbKVyT+ZGwn93WoQM1Tm7t+06X2X0mVo7NFBbNSmeEQkECS+a7r jhP0EwuYDXlbVvyiT33Mz5V/yO3Z0AKaylL58nu3ihFjPHu+4eMBY2nYPFpejyw5 rCC6ukxZkkAAOGtXDjGcPyJlL97sjr2QzDyNRstyG5HsTWRGn0nHqIUSH1jzGP6F mCcFHzqFlR45jfpwMb4htb0XSSycYi24m7zQbhhvzo74gkgI0T0IrLjF2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIeYBHfFua6QwxE6GyFElVa8pPYMB8GA1UdIwQY MBaAFACoVqQXOJWvRLj9NEVUaaXE1hc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82Yjc1MTItOTJjYS00OWY5LTk4NzAt Y2I5ZTdkZGFkMTg5LzEvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82Yjc1MTItOTJjYS00OWY5LTk4NzAtY2I5ZTdkZGFkMTg5 LzEvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZ8gHXEd aFo3KscsCNTrj40sce4ontDtVk5knBWrRAvwNuiGViHts0/2cBVVjvR0jLWtsoWJ WWPhH6xEMRuuPbr0nzgzJ++AqQIhKl5js5RUa/yRPEUF3ua1CYtAn7dGv+hiPhGu kBPZEpfNhXMvXI/ZTsRANw4WRT1ioGPEqP6evn/Oa9nGBRkJT5j1Ye4fT4GStk9F DDCyrY8Vk/U1+dr/mInG7ROF87WAQIS7YIEEeXSIEYEkkHhbzd8Ckn8N2yrXkooi nkuvN2pCAA7s4EWp9UZiBIbnJkcj6r59egF7s2WFHXUEeMsoQr/1+GNVskmfv0Hm Z7YxMmKMNDdyOA== -----END CERTIFICATE-----Generated at Wed Dec 24 04:45:24 2025 by rpki-client