This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json) Hash identifier: pfXzBitsyoDUIhoHfsrhB1Ph1B4Lr7CAbgH2KY0w53s= Subject key identifier: A1:3B:B1:7E:28:14:EC:16:1D:51:ED:87:A8:8E:29:19:94:E1:6D:A7 Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71 Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71 Certificate serial: 019AF5AEFF6557E18A7942C399513F2833B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft Manifest number: 0621 Signing time: Sat 06 Dec 2025 22:01:17 +0000 Manifest this update: Sat 06 Dec 2025 22:01:17 +0000 Manifest next update: Sun 07 Dec 2025 22:01:17 +0000 Files and hashes: 1: N-BSf874DQvK549b1pSEfsfJ-W8.roa (hash: bW40XSisvNpm05Mkk5fR9GiNdKpGc7uzNKkhrhBHqx4=) 2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: b+SSCiIt+chrEz6ycBbNRCy4Hx1QyyQnQlnjfSbxxPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:ff:65:57:e1:8a:79:42:c3:99:51:3f:28:33:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71 Validity Not Before: Dec 6 22:01:17 2025 GMT Not After : Dec 7 22:01:17 2025 GMT Subject: CN=a13bb17e2814ec161d51ed87a88e291994e16da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bb:db:5d:6f:83:02:63:3c:66:ee:0f:7f:25: c2:fa:3f:87:65:4b:7f:cd:b5:33:27:1f:24:b4:23: 95:06:54:e2:27:77:32:67:50:91:c2:6d:8f:78:75: 63:ff:5c:4b:8a:d9:46:3f:17:da:ef:df:32:43:7a: bf:1c:9a:89:fc:81:4d:8e:36:01:e8:62:d6:8d:79: 1b:cf:a7:c8:a7:98:eb:20:06:da:af:57:54:9d:c2: be:41:5f:d6:bd:fa:ce:68:3b:d1:1a:dc:f5:6a:34: 48:96:5f:01:ee:ac:3d:8c:d3:cc:07:d7:63:94:57: 9b:c8:d8:58:df:23:77:b8:58:e5:c2:1c:00:c8:c3: 0e:f1:a5:c2:76:9a:7c:84:8c:4f:d5:b6:73:10:57: f4:fb:02:19:de:6c:b4:90:b7:45:28:1b:99:70:87: 8b:31:3f:1a:cd:ce:60:55:8c:5c:f4:04:96:19:f6: 6c:50:02:30:93:35:8c:49:5f:67:d4:fd:21:ea:1f: 43:4a:20:e6:ed:ec:4d:82:ff:97:aa:b7:ec:88:73: 21:2e:79:84:25:63:63:09:86:81:8c:dc:a1:f3:87: 08:ba:00:7c:7e:52:19:80:e6:d3:27:cd:02:d9:19: c8:20:5b:70:cf:46:f4:49:de:c8:f4:a2:45:2b:4d: 7c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3B:B1:7E:28:14:EC:16:1D:51:ED:87:A8:8E:29:19:94:E1:6D:A7 X509v3 Authority Key Identifier: keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:64:75:08:41:8c:06:44:7f:36:6d:ac:a5:00:bd:fe:9b:58: fe:ff:80:f5:00:ae:04:e6:84:e2:7a:c6:44:d1:cc:69:d7:b0: a6:8b:5f:19:05:4c:8e:53:4a:ac:a1:5b:4c:f8:31:56:95:83: 16:68:52:ef:31:11:6b:29:7f:df:a8:b2:a6:be:05:06:1b:0b: df:61:24:5a:e2:71:66:09:dc:cc:54:e0:4c:25:21:15:1a:d3: 15:94:ac:df:71:e1:1b:1c:d2:dd:73:ae:c2:6b:65:0f:b6:29: 98:a3:90:c9:74:38:17:96:30:dd:85:25:21:b2:9f:6b:22:14: e7:73:5d:02:29:67:fb:6b:c5:cc:97:8c:0f:88:c0:9e:4a:ab: c1:91:f0:31:d6:39:a8:95:2e:17:3c:78:8a:dc:a5:58:19:6e: 67:a3:b7:d1:2d:2f:54:d6:b3:92:c0:1f:33:c9:16:38:1a:00: dd:20:4b:44:ea:33:72:84:b5:d5:d5:54:29:4a:4c:b6:71:85: 29:ba:85:fa:7d:92:6d:8c:13:c0:e3:0b:af:4b:54:13:f3:b5: 8b:07:1a:66:c7:aa:31:7f:0d:b1:19:e9:6d:60:92:ec:64:60: 6a:f1:71:37:1d:9e:2b:38:d5:09:b8:67:e3:4a:31:ef:a1:03: 63:4e:29:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rv9lV+GKeULDmVE/KDO0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZjgzZTJhMzQxNDVhZDQ3ZTBjYzJiM2M3OWZjNjMxMmJh ZTJjNzEwHhcNMjUxMjA2MjIwMTE3WhcNMjUxMjA3MjIwMTE3WjAzMTEwLwYDVQQD EyhhMTNiYjE3ZTI4MTRlYzE2MWQ1MWVkODdhODhlMjkxOTk0ZTE2ZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7vbXW+DAmM8Zu4PfyXC+j+HZUt/ zbUzJx8ktCOVBlTiJ3cyZ1CRwm2PeHVj/1xLitlGPxfa798yQ3q/HJqJ/IFNjjYB 6GLWjXkbz6fIp5jrIAbar1dUncK+QV/WvfrOaDvRGtz1ajRIll8B7qw9jNPMB9dj lFebyNhY3yN3uFjlwhwAyMMO8aXCdpp8hIxP1bZzEFf0+wIZ3my0kLdFKBuZcIeL MT8azc5gVYxc9ASWGfZsUAIwkzWMSV9n1P0h6h9DSiDm7exNgv+XqrfsiHMhLnmE JWNjCYaBjNyh84cIugB8flIZgObTJ80C2RnIIFtwz0b0Sd7I9KJFK018xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKE7sX4oFOwWHVHth6iOKRmU4W2nMB8GA1UdIwQY MBaAFGj4Pio0FFrUfgzCs8efxjErrixxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQt NzkyODAyYzQzOTI1LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQtNzkyODAyYzQzOTI1 LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWR1CEGM BkR/Nm2spQC9/ptY/v+A9QCuBOaE4nrGRNHMadewpotfGQVMjlNKrKFbTPgxVpWD FmhS7zERayl/36iypr4FBhsL32EkWuJxZgnczFTgTCUhFRrTFZSs33HhGxzS3XOu wmtlD7YpmKOQyXQ4F5Yw3YUlIbKfayIU53NdAiln+2vFzJeMD4jAnkqrwZHwMdY5 qJUuFzx4itylWBluZ6O30S0vVNazksAfM8kWOBoA3SBLROozcoS11dVUKUpMtnGF KbqF+n2SbYwTwOMLr0tUE/O1iwcaZseqMX8NsRnpbWCS7GRgavFxNx2eKzjVCbhn 40ox76EDY04phw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:51:47 2025 by rpki-client