This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json) Hash identifier: /+fR7IBA9tmAFOLQU6lGeKYs3iyaOnLNu41CuAldkow= Subject key identifier: 4B:33:58:A5:15:FC:04:31:2F:59:46:64:04:6D:4C:74:DD:80:85:F4 Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19 Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319 Certificate serial: 019AF24015C1F986603A91DF2C7ADC73C7C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft Manifest number: 1396 Signing time: Sat 06 Dec 2025 06:01:17 +0000 Manifest this update: Sat 06 Dec 2025 06:01:17 +0000 Manifest next update: Sun 07 Dec 2025 06:01:17 +0000 Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: uyaFMK+wHVsIv5kZfE02MzOGX2rnXEuM6/h+cgCxuJU=) 2: FpXlOOnsbwOYeT36IscKSuN8OMU.roa (hash: A+XYmuaYnslHDaJLV17tPt7jw//813JyNtz/WmswEK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:15:c1:f9:86:60:3a:91:df:2c:7a:dc:73:c7:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319 Validity Not Before: Dec 6 06:01:17 2025 GMT Not After : Dec 7 06:01:17 2025 GMT Subject: CN=4b3358a515fc04312f594664046d4c74dd8085f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:39:a6:cd:7a:e7:aa:a1:97:32:5a:28:1a: 68:8f:88:57:f3:1d:b6:83:ea:5c:be:3f:51:87:6d: c1:73:78:38:87:9c:87:51:e0:be:29:3b:55:54:bb: 47:d8:5b:91:60:83:b6:97:5d:02:d5:da:d4:dc:0d: d9:80:7d:f0:ac:a3:79:ee:1e:dc:1d:14:5e:a3:54: 63:a3:de:35:52:72:05:f1:ed:fe:00:fd:3c:b8:1c: 1f:22:99:f7:2e:bd:ef:09:da:ea:63:38:c7:9d:da: 9b:0d:69:83:89:51:72:77:58:91:7d:9b:7a:c6:e7: 57:b2:74:d3:8a:3a:67:56:c3:d3:a6:5c:dc:b5:91: d7:40:a4:ac:dd:50:8a:2b:76:d2:0b:ec:29:64:b6: 9d:f4:ed:37:20:24:24:39:0b:ed:37:a1:2b:a0:2d: 45:55:04:11:1e:c0:a0:7e:ce:0e:e7:b8:c9:55:f9: 92:ec:84:be:59:57:52:4a:53:38:e5:32:a9:d0:3b: 99:5e:d9:82:b9:a0:99:10:62:81:44:24:ef:cf:6c: 5b:10:11:b4:c3:bb:fe:11:5d:ee:62:c9:81:d9:e1: 7e:8d:9a:09:8e:05:b9:ef:93:a0:09:dd:b5:f1:f2: 32:2f:52:b0:fc:ff:e1:bb:6e:07:a1:90:dd:bb:4d: d6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:33:58:A5:15:FC:04:31:2F:59:46:64:04:6D:4C:74:DD:80:85:F4 X509v3 Authority Key Identifier: keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:22:09:7f:88:47:26:be:1b:7f:4f:3e:ec:d5:5c:a3:92:ac: 59:fe:7b:84:5f:9c:22:47:4f:0a:87:5f:21:25:a3:5a:a0:c2: 04:21:d6:b0:f7:6b:0c:18:35:49:5b:a0:e8:20:b7:d0:96:fa: 92:67:9a:26:d3:ee:6e:b1:03:a3:49:38:fa:7e:e3:6b:56:5b: b7:3d:78:78:f4:d5:2e:74:9e:e8:b2:01:25:fc:8d:d1:d5:71: 84:cf:b2:30:e9:ab:0d:b6:fb:84:d4:7d:ae:cb:e3:93:0a:e8: ea:21:40:16:e4:92:92:07:f2:00:d5:e5:77:81:0b:d9:f7:b1: 5b:a6:b8:fe:8b:32:c5:3e:74:d7:9a:51:4a:07:a0:27:97:3f: 18:ca:f9:8d:e5:81:cb:52:1d:32:fc:ff:73:e1:59:96:41:c4: 79:0b:8b:fb:98:74:3e:6d:b9:98:64:c0:ad:e7:2a:f1:e0:eb: 28:f8:79:1b:ed:58:2e:9f:70:f3:f0:91:cf:0f:f7:fb:b7:0b: c8:0f:9a:cb:93:38:29:c5:58:d8:73:6a:04:68:93:30:f8:9f: 95:ae:29:98:a1:86:9d:c1:8b:4f:07:84:f8:ef:c3:ea:c3:3e: 53:35:e2:85:7e:5e:3a:69:bc:0c:d5:7f:ee:57:90:7c:6d:bc: bf:63:1b:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBXB+YZgOpHfLHrcc8fDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZTdjMzA0NTkzNTZhOTAwZGM2MzM2OTc2NGE3NTRjNWMx ZjMzMTkwHhcNMjUxMjA2MDYwMTE3WhcNMjUxMjA3MDYwMTE3WjAzMTEwLwYDVQQD Eyg0YjMzNThhNTE1ZmMwNDMxMmY1OTQ2NjQwNDZkNGM3NGRkODA4NWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8M5ps1656qhlzJaKBpoj4hX8x22 g+pcvj9Rh23Bc3g4h5yHUeC+KTtVVLtH2FuRYIO2l10C1drU3A3ZgH3wrKN57h7c HRReo1Rjo941UnIF8e3+AP08uBwfIpn3Lr3vCdrqYzjHndqbDWmDiVFyd1iRfZt6 xudXsnTTijpnVsPTplzctZHXQKSs3VCKK3bSC+wpZLad9O03ICQkOQvtN6EroC1F VQQRHsCgfs4O57jJVfmS7IS+WVdSSlM45TKp0DuZXtmCuaCZEGKBRCTvz2xbEBG0 w7v+EV3uYsmB2eF+jZoJjgW575OgCd218fIyL1Kw/P/hu24HoZDdu03WpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEszWKUV/AQxL1lGZARtTHTdgIX0MB8GA1UdIwQY MBaAFAHnwwRZNWqQDcYzaXZKdUxcHzMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xOWMxNjQtZWFlNy00NmJkLWExZGUt YmYyOWM0MTg4ZDdlLzEvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xOWMxNjQtZWFlNy00NmJkLWExZGUtYmYyOWM0MTg4ZDdl LzEvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCIJf4hH Jr4bf08+7NVco5KsWf57hF+cIkdPCodfISWjWqDCBCHWsPdrDBg1SVug6CC30Jb6 kmeaJtPubrEDo0k4+n7ja1Zbtz14ePTVLnSe6LIBJfyN0dVxhM+yMOmrDbb7hNR9 rsvjkwro6iFAFuSSkgfyANXld4EL2fexW6a4/osyxT5015pRSgegJ5c/GMr5jeWB y1IdMvz/c+FZlkHEeQuL+5h0Pm25mGTArecq8eDrKPh5G+1YLp9w8/CRzw/3+7cL yA+ay5M4KcVY2HNqBGiTMPifla4pmKGGncGLTweE+O/D6sM+UzXihX5eOmm8DNV/ 7leQfG28v2Mb0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:25 2025 by rpki-client