This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft File: AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json) Hash identifier: wp4Js7D7lbEVep5vGSvJrprloDSFXKWPEe8JEBO4dLM= Subject key identifier: 8A:DF:8E:92:CE:ED:0B:8C:9D:9A:56:6A:6E:DB:FD:45:5D:1C:F2:8F Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B Certificate issuer: /CN=00a856a4173895af44b8fd34455469a5c4d6173b Certificate serial: 019AB999D112398A2918F5E29DB099236026 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft Manifest number: 0289 Signing time: Tue 25 Nov 2025 06:00:56 +0000 Manifest this update: Tue 25 Nov 2025 06:00:56 +0000 Manifest next update: Wed 26 Nov 2025 06:00:56 +0000 Files and hashes: 1: 4mezRfHPXPaCo28qoJyolX64C48.roa (hash: QHUvtDK2DiCjdwwLpsM73EoVrUrKJFVkLwmkkTWUE3k=) 2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: 76peLWQG87ZRhhr9tysF24MhR2A6+ESL6vqKAJ3CjhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:99:d1:12:39:8a:29:18:f5:e2:9d:b0:99:23:60:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b Validity Not Before: Nov 25 06:00:56 2025 GMT Not After : Nov 26 06:00:56 2025 GMT Subject: CN=8adf8e92ceed0b8c9d9a566a6edbfd455d1cf28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:96:ae:ec:75:91:51:84:fa:0f:13:45:7c: f4:92:8c:8f:d1:29:dd:31:59:ba:f5:71:6d:0e:2c: 70:00:3e:65:2f:b0:7b:bd:06:14:bd:25:0d:eb:e4: 6a:e9:05:c7:b0:a9:a4:b3:04:aa:e9:e7:7d:7b:9e: 15:dc:bc:5c:22:8e:b7:f3:38:ea:7f:d7:7b:d2:a5: 73:6d:71:a6:7d:44:98:a7:ff:5e:65:75:44:dc:6b: 46:e5:e0:76:04:48:4b:1a:0f:fb:13:52:c0:12:35: aa:ed:b8:53:8e:bb:aa:42:45:3d:b1:8e:95:3e:7d: a7:33:67:52:20:ea:16:4f:a7:1c:5c:8d:70:4b:5f: 9d:19:ff:b0:f3:c0:02:f4:0e:67:28:f7:71:66:5c: 53:9e:10:7b:2f:21:9b:1d:7b:7e:18:2f:7b:74:ac: ba:02:32:2c:3c:89:e1:fc:e8:75:3a:30:27:b6:00: 0d:b1:76:f8:be:a6:1c:c6:2e:66:38:34:1d:28:40: 60:f0:79:34:ea:0a:3e:0b:bd:61:08:64:bb:b5:18: 21:9e:c3:e8:c1:3f:dd:46:36:60:6d:3d:43:8b:2c: ac:06:9d:bf:d2:32:4e:93:cc:5d:7d:38:b3:12:ca: 2e:47:3b:cc:cf:2e:7a:d4:6d:a0:86:4c:4f:a8:2d: 72:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DF:8E:92:CE:ED:0B:8C:9D:9A:56:6A:6E:DB:FD:45:5D:1C:F2:8F X509v3 Authority Key Identifier: keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:47:2f:82:4b:a3:2e:09:e7:3f:f6:f4:8a:94:1a:90:b7:a5: 9d:59:55:c8:59:2e:1d:01:67:29:b7:f0:f0:76:e5:04:59:79: f3:6e:ba:7e:92:e0:11:0e:48:41:29:30:15:3a:37:7c:df:c8: 53:49:56:89:b8:f9:0d:d4:8c:cd:8d:2d:87:18:c7:13:3f:b2: 25:dc:4c:70:3a:fd:87:47:9e:f7:c2:41:ce:e8:c7:e3:10:51: d6:91:4c:0d:4a:ab:fe:26:59:dc:cf:0f:7d:b3:cb:a8:9d:df: 7a:9d:11:e8:bb:4c:45:6e:ac:af:1a:29:13:b5:6b:1e:59:86: e8:bc:ed:ce:3b:52:5a:ff:e0:5c:bf:16:49:62:64:8e:32:6c: 95:22:5d:d8:67:51:32:b7:48:15:3b:6b:99:10:6b:3e:56:8a: 1d:5d:d5:ee:86:82:19:a8:09:49:2e:3e:92:21:13:8e:1e:ff: 8f:44:58:87:f4:66:72:ee:f1:b2:62:67:15:e1:1e:bd:09:1e: c6:b8:64:a9:21:a4:89:ba:2b:d8:33:6d:d0:79:ac:92:8b:c7: d7:0b:f7:92:52:9e:a2:9f:50:2e:7c:be:26:c8:02:38:8b:4f: b1:06:d1:b0:28:37:66:60:d7:09:31:d2:42:03:06:5c:f7:60: ef:6e:db:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq5mdESOYopGPXinbCZI2AmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYTg1NmE0MTczODk1YWY0NGI4ZmQzNDQ1NTQ2OWE1YzRk NjE3M2IwHhcNMjUxMTI1MDYwMDU2WhcNMjUxMTI2MDYwMDU2WjAzMTEwLwYDVQQD Eyg4YWRmOGU5MmNlZWQwYjhjOWQ5YTU2NmE2ZWRiZmQ0NTVkMWNmMjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMWWrux1kVGE+g8TRXz0koyP0Snd MVm69XFtDixwAD5lL7B7vQYUvSUN6+Rq6QXHsKmkswSq6ed9e54V3LxcIo638zjq f9d70qVzbXGmfUSYp/9eZXVE3GtG5eB2BEhLGg/7E1LAEjWq7bhTjruqQkU9sY6V Pn2nM2dSIOoWT6ccXI1wS1+dGf+w88AC9A5nKPdxZlxTnhB7LyGbHXt+GC97dKy6 AjIsPInh/Oh1OjAntgANsXb4vqYcxi5mODQdKEBg8Hk06go+C71hCGS7tRghnsPo wT/dRjZgbT1DiyysBp2/0jJOk8xdfTizEsouRzvMzy561G2ghkxPqC1yDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrfjpLO7QuMnZpWam7b/UVdHPKPMB8GA1UdIwQY MBaAFACoVqQXOJWvRLj9NEVUaaXE1hc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82Yjc1MTItOTJjYS00OWY5LTk4NzAt Y2I5ZTdkZGFkMTg5LzEvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82Yjc1MTItOTJjYS00OWY5LTk4NzAtY2I5ZTdkZGFkMTg5 LzEvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEcvgkuj LgnnP/b0ipQakLelnVlVyFkuHQFnKbfw8HblBFl58266fpLgEQ5IQSkwFTo3fN/I U0lWibj5DdSMzY0thxjHEz+yJdxMcDr9h0ee98JBzujH4xBR1pFMDUqr/iZZ3M8P fbPLqJ3fep0R6LtMRW6srxopE7VrHlmG6LztzjtSWv/gXL8WSWJkjjJslSJd2GdR MrdIFTtrmRBrPlaKHV3V7oaCGagJSS4+kiETjh7/j0RYh/Rmcu7xsmJnFeEevQke xrhkqSGkibor2DNt0HmskovH1wv3klKeop9QLny+JsgCOItPsQbRsCg3ZmDXCTHS QgMGXPdg727b1A== -----END CERTIFICATE-----Generated at Tue Nov 25 13:40:03 2025 by rpki-client