This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft File: AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json) Hash identifier: OaolOeVlBoKmkRamEu8UY73rlFO/Sl2rjD7Lw70/N2c= Subject key identifier: 06:41:55:33:91:45:56:A6:A9:3B:D5:BC:C2:BC:80:BD:49:37:81:6F Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4 Certificate issuer: /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4 Certificate serial: 019AF12D82F0D9BFCF54DD06589E4FDAF2F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft Manifest number: 1049 Signing time: Sat 06 Dec 2025 01:01:22 +0000 Manifest this update: Sat 06 Dec 2025 01:01:22 +0000 Manifest next update: Sun 07 Dec 2025 01:01:22 +0000 Files and hashes: 1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: xiHdnAEQBGXMy4una9pm9BZQ7zRPGBVg8WkkXAikqPQ=) 2: uxPm2jgrGB9aUpoVSqtxOrk6oLc.roa (hash: jnz+6TEphg6WeFVMNjeLnKwOXT2+7WslFFXVeACqJbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:82:f0:d9:bf:cf:54:dd:06:58:9e:4f:da:f2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4 Validity Not Before: Dec 6 01:01:22 2025 GMT Not After : Dec 7 01:01:22 2025 GMT Subject: CN=06415533914556a6a93bd5bcc2bc80bd4937816f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d5:2a:05:17:8b:8e:31:dc:66:3a:53:81:c5: d8:b2:41:02:63:5e:e4:73:b1:57:3f:53:b1:d7:8d: 88:93:9b:2e:58:61:68:2a:6d:5d:01:c8:c8:b9:8e: 12:fa:16:34:a8:b4:3b:85:68:df:53:a3:80:c8:ad: 74:10:88:06:05:58:e0:9e:f9:df:10:16:29:7c:9b: 82:53:c3:f4:a2:57:69:2a:c9:96:46:2f:c0:c3:94: b0:71:64:66:3e:15:51:53:56:69:c9:19:7b:07:30: ea:21:e6:a9:21:fb:81:2b:fc:b1:12:3b:26:fb:bd: 4e:6b:3d:32:8d:61:60:6e:d7:bd:3a:f5:c7:bd:9d: 33:60:93:c1:99:e3:dc:d2:f4:09:c1:22:81:8a:e8: 1c:4f:2e:22:c9:f9:72:29:a9:5f:d2:4d:e7:12:6f: a8:6a:7b:5a:69:69:95:23:8a:31:5a:4a:c5:fe:f5: b4:ec:df:a2:ea:f6:d7:53:9e:c6:1d:3f:7c:9f:02: 62:fd:97:be:7a:49:56:3d:31:ed:71:41:c4:f3:08: 34:04:2f:ce:7c:51:e8:93:f2:3e:b0:68:23:e0:3a: 3a:f1:16:6b:56:93:0a:f3:8f:f6:3f:8c:f2:22:f6: 81:05:c3:b3:fd:2b:cb:fc:1a:03:b1:ee:55:b0:0c: ef:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:41:55:33:91:45:56:A6:A9:3B:D5:BC:C2:BC:80:BD:49:37:81:6F X509v3 Authority Key Identifier: keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:56:45:1e:74:1e:26:60:9b:67:b0:f6:25:da:ee:86:00:df: 00:89:21:a3:be:09:c3:3a:01:4a:0c:63:e7:10:fd:ae:e7:5d: 49:db:09:88:2d:c7:1a:48:b6:1d:0e:f2:5e:5f:c1:1f:55:3b: 3e:84:b4:f3:ed:a4:88:75:35:4f:b9:b6:6c:2e:ec:c5:a2:ee: bb:24:39:c8:3d:da:d2:30:e5:ff:ea:2d:fe:6e:48:6b:09:a4: e0:2a:13:f3:44:da:5e:74:0b:a7:da:c1:1f:1e:7e:ec:de:f2: 92:44:65:42:b9:30:b7:1d:69:42:ba:85:5f:98:e7:6c:fe:05: 6a:3a:e1:45:da:b8:6b:c3:b8:4d:a0:10:68:4f:f8:db:ec:dd: 87:e2:4d:ff:15:b7:8a:04:c3:39:87:17:5d:c7:a9:52:ac:e2: fb:36:c5:02:ee:f4:db:9f:94:d0:bf:b6:91:c4:ed:e0:cb:9c: 59:cf:b4:12:a1:4b:6b:20:24:46:57:59:6f:4b:ea:fc:f1:66: f1:ea:98:3e:b0:cd:85:09:47:bf:15:41:12:e0:97:8a:ac:61: 01:22:1d:61:39:1a:c9:84:1a:09:f4:28:49:f1:73:0b:42:45: 9c:6d:86:1c:53:29:e1:4a:8d:4f:07:57:73:be:ca:5e:c5:0d: c0:c5:23:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYLw2b/PVN0GWJ5P2vL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNTdhZDA5YWU5YTFhOTgwMTIyNzU4NTFhYWJlNjllNGUx NWEyZjQwHhcNMjUxMjA2MDEwMTIyWhcNMjUxMjA3MDEwMTIyWjAzMTEwLwYDVQQD EygwNjQxNTUzMzkxNDU1NmE2YTkzYmQ1YmNjMmJjODBiZDQ5Mzc4MTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdUqBReLjjHcZjpTgcXYskECY17k c7FXP1Ox142Ik5suWGFoKm1dAcjIuY4S+hY0qLQ7hWjfU6OAyK10EIgGBVjgnvnf EBYpfJuCU8P0oldpKsmWRi/Aw5SwcWRmPhVRU1ZpyRl7BzDqIeapIfuBK/yxEjsm +71Oaz0yjWFgbte9OvXHvZ0zYJPBmePc0vQJwSKBiugcTy4iyflyKalf0k3nEm+o antaaWmVI4oxWkrF/vW07N+i6vbXU57GHT98nwJi/Ze+eklWPTHtcUHE8wg0BC/O fFHok/I+sGgj4Do68RZrVpMK84/2P4zyIvaBBcOz/SvL/BoDse5VsAzvYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZBVTORRVamqTvVvMK8gL1JN4FvMB8GA1UdIwQY MBaAFABXrQmumhqYASJ1hRqr5p5OFaL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUZldENhNmFHcGdCSW5XRkdxdm1uazRWb3ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80YzMyYjktZjc3NS00ODY4LTkyM2Qt ZGNhMzhkNTlhMTU4LzEvQUZldENhNmFHcGdCSW5XRkdxdm1uazRWb3ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy80YzMyYjktZjc3NS00ODY4LTkyM2QtZGNhMzhkNTlhMTU4 LzEvQUZldENhNmFHcGdCSW5XRkdxdm1uazRWb3ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplZFHnQe JmCbZ7D2JdruhgDfAIkho74JwzoBSgxj5xD9ruddSdsJiC3HGki2HQ7yXl/BH1U7 PoS08+2kiHU1T7m2bC7sxaLuuyQ5yD3a0jDl/+ot/m5Iawmk4CoT80TaXnQLp9rB Hx5+7N7ykkRlQrkwtx1pQrqFX5jnbP4FajrhRdq4a8O4TaAQaE/42+zdh+JN/xW3 igTDOYcXXcepUqzi+zbFAu7025+U0L+2kcTt4MucWc+0EqFLayAkRldZb0vq/PFm 8eqYPrDNhQlHvxVBEuCXiqxhASIdYTkayYQaCfQoSfFzC0JFnG2GHFMp4UqNTwdX c77KXsUNwMUjVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:24 2025 by rpki-client