This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft File: afM-l5tD6I0OXsp5h5R9sh73yrk.mft (raw, json) Hash identifier: ItoIMjcHBW+o1Ra6byyfGrfIL5QMMEL8I2Vh20a7+Co= Subject key identifier: 2A:9A:52:30:22:FF:00:AE:45:EE:75:8E:A9:E5:56:06:0D:90:BB:4C Authority key identifier: 69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9 Certificate issuer: /CN=69f33e979b43e88d0e5eca7987947db21ef7cab9 Certificate serial: 019AF19BB9164AB0F451BC3C3B4FF36E4172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft Manifest number: 061A Signing time: Sat 06 Dec 2025 03:01:45 +0000 Manifest this update: Sat 06 Dec 2025 03:01:45 +0000 Manifest next update: Sun 07 Dec 2025 03:01:45 +0000 Files and hashes: 1: afM-l5tD6I0OXsp5h5R9sh73yrk.crl (hash: pqeP/JC/UCte6MY0zyHVJ0PXz1Wg7zM82i9+gqv8zd4=) 2: rjuN-ZTOCGAomaycIkzHFBIupdk.roa (hash: mpitT9m9PBhweeULsMgo7mL5tvByadSSpZctsThk9Hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b9:16:4a:b0:f4:51:bc:3c:3b:4f:f3:6e:41:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f33e979b43e88d0e5eca7987947db21ef7cab9 Validity Not Before: Dec 6 03:01:45 2025 GMT Not After : Dec 7 03:01:45 2025 GMT Subject: CN=2a9a523022ff00ae45ee758ea9e556060d90bb4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:23:55:7b:ee:75:d2:27:f9:f2:28:19:17: 08:25:e9:b1:48:47:59:b3:68:f8:65:7e:e3:9f:7a: c6:91:52:3d:28:47:26:5c:8c:e5:d4:c3:a1:92:de: 7c:9b:be:84:22:ba:de:6f:a5:54:90:0b:08:b7:85: 5f:d1:57:76:ce:20:83:a5:2b:c1:9a:33:a3:60:87: 2d:c7:a6:d5:8a:d3:09:e0:17:08:71:fc:f3:40:60: cc:37:6b:9d:65:f1:93:6a:7a:84:cf:7f:b6:6e:5e: 2e:88:91:9d:58:6a:61:ce:15:60:db:7a:d8:cb:78: 10:dd:30:eb:17:5e:c6:bf:13:cb:00:9a:08:d0:14: e8:45:e7:9a:a7:51:d3:f3:d6:1e:c7:9b:47:ac:14: 8d:0a:17:09:4f:b0:82:3f:16:e3:7a:bb:00:63:4c: 89:5c:22:4d:c7:17:25:ed:2a:4a:c5:bb:44:0a:61: 8e:c2:eb:58:2d:cd:1e:8c:54:9e:4c:33:0e:3a:3e: 61:50:42:22:68:94:81:b6:e9:65:23:61:0d:86:b0: e5:00:e3:5b:90:f5:8c:65:ed:c1:56:5b:a6:0c:08: d1:a4:e4:4e:86:8f:44:31:7b:ea:a9:31:26:f0:d4: 83:a2:e6:3b:4a:55:e2:8e:d0:d8:f5:37:d5:d3:19: 6d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9A:52:30:22:FF:00:AE:45:EE:75:8E:A9:E5:56:06:0D:90:BB:4C X509v3 Authority Key Identifier: keyid:69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:3e:86:a9:ba:37:8d:0a:b5:c7:a1:3f:f2:6f:eb:3e:71:7d: e7:67:9f:17:ca:72:7b:1d:bb:f7:d7:0b:0b:f7:01:f6:f0:4a: c3:34:c5:e4:79:60:47:37:15:03:6d:5d:ac:2c:ed:fd:9b:85: 37:10:a8:10:87:84:12:ad:cd:96:b0:56:19:4e:ab:f7:74:f2: 26:f7:c8:12:83:19:ca:bf:c7:30:69:7a:26:38:e7:9d:ce:95: 92:ea:13:4d:1d:2d:24:e6:66:27:07:2b:d6:b8:0a:4e:b1:da: 38:af:86:e3:50:eb:fc:ad:47:49:3f:7c:87:a0:b3:ce:20:0a: 8e:75:2e:2c:ca:12:1d:e0:cc:2f:0d:4a:94:68:af:7e:ea:ff: 8c:f6:64:22:8e:ae:8c:df:7d:bd:33:eb:92:80:15:63:7a:d9: e6:a0:ee:dc:9b:71:5d:63:31:1d:64:15:db:76:0c:a7:a0:f9: a3:a3:3b:12:6e:8b:43:ba:97:ac:ca:a0:79:ea:e1:a3:0b:73: 26:b0:22:b5:52:73:e5:4c:58:3e:b1:b6:8c:d1:2a:52:72:ac: 88:7e:6a:45:f9:89:1b:50:57:ab:42:7f:bd:43:79:35:8d:33: 8d:86:c7:0c:5f:79:e4:30:e2:ae:7f:42:54:64:b9:98:8d:66: 93:54:e4:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7kWSrD0Ubw8O0/zbkFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjMzZTk3OWI0M2U4OGQwZTVlY2E3OTg3OTQ3ZGIyMWVm N2NhYjkwHhcNMjUxMjA2MDMwMTQ1WhcNMjUxMjA3MDMwMTQ1WjAzMTEwLwYDVQQD EygyYTlhNTIzMDIyZmYwMGFlNDVlZTc1OGVhOWU1NTYwNjBkOTBiYjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorEjVXvuddIn+fIoGRcIJemxSEdZ s2j4ZX7jn3rGkVI9KEcmXIzl1MOhkt58m76EIrreb6VUkAsIt4Vf0Vd2ziCDpSvB mjOjYIctx6bVitMJ4BcIcfzzQGDMN2udZfGTanqEz3+2bl4uiJGdWGphzhVg23rY y3gQ3TDrF17GvxPLAJoI0BToReeap1HT89Yex5tHrBSNChcJT7CCPxbjersAY0yJ XCJNxxcl7SpKxbtECmGOwutYLc0ejFSeTDMOOj5hUEIiaJSBtullI2ENhrDlAONb kPWMZe3BVlumDAjRpOROho9EMXvqqTEm8NSDouY7SlXijtDY9TfV0xlt5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqaUjAi/wCuRe51jqnlVgYNkLtMMB8GA1UdIwQY MBaAFGnzPpebQ+iNDl7KeYeUfbIe98q5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZNLWw1dEQ2STBPWHNwNWg1UjlzaDczeXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85NTNhNjEtMzM0OS00N2JmLWExMmIt ZTRjNjkzMzQxNDJjLzEvYWZNLWw1dEQ2STBPWHNwNWg1UjlzaDczeXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi85NTNhNjEtMzM0OS00N2JmLWExMmItZTRjNjkzMzQxNDJj LzEvYWZNLWw1dEQ2STBPWHNwNWg1UjlzaDczeXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgD6Gqbo3 jQq1x6E/8m/rPnF952efF8pyex2799cLC/cB9vBKwzTF5HlgRzcVA21drCzt/ZuF NxCoEIeEEq3NlrBWGU6r93TyJvfIEoMZyr/HMGl6Jjjnnc6VkuoTTR0tJOZmJwcr 1rgKTrHaOK+G41Dr/K1HST98h6CzziAKjnUuLMoSHeDMLw1KlGivfur/jPZkIo6u jN99vTPrkoAVY3rZ5qDu3JtxXWMxHWQV23YMp6D5o6M7Em6LQ7qXrMqgeerhowtz JrAitVJz5UxYPrG2jNEqUnKsiH5qRfmJG1BXq0J/vUN5NY0zjYbHDF955DDirn9C VGS5mI1mk1TkIw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:35 2025 by rpki-client