This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json) Hash identifier: ajqGNBmzu0Bh1trevciyoeosOwRuV8R9j6oj0SWjHsY= Subject key identifier: F0:CB:C6:9A:CE:13:CB:9A:D2:D6:A3:67:4A:63:55:99:A3:36:95:B9 Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20 Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020 Certificate serial: 019AF2098B90108B32CCEF64086B21A13B7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 05:01:42 +0000 Manifest this update: Sat 06 Dec 2025 05:01:42 +0000 Manifest next update: Sun 07 Dec 2025 05:01:42 +0000 Files and hashes: 1: 5lxdXXMFxYxoygmdkLHDVycf6Ls.roa (hash: 8akqgrA1gBkLMeQEUc+FbsTSvkiKqDW9xlyu0c6xU6A=) 2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: LxkCtm43hWI7dHRxkkpcvpcC9cvEiw2of6yq1majRmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8b:90:10:8b:32:cc:ef:64:08:6b:21:a1:3b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020 Validity Not Before: Dec 6 05:01:42 2025 GMT Not After : Dec 7 05:01:42 2025 GMT Subject: CN=f0cbc69ace13cb9ad2d6a3674a635599a33695b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:04:b3:81:83:43:9a:3f:a9:e0:4f:07:ae:6a: 4d:4c:21:82:4c:60:72:12:ec:bc:8a:fe:9e:88:c6: ca:33:5b:a3:2b:85:68:79:c8:95:96:b5:ad:37:19: 6a:22:4f:ca:c7:e6:be:fc:11:04:0b:5f:34:d5:20: 76:94:70:8d:f0:b9:e1:c2:61:d3:d5:37:31:3f:4a: 75:06:96:da:fd:fd:db:cc:bb:6f:4b:27:66:a1:42: e7:f3:0d:30:43:d0:fb:e8:a1:a1:90:c5:e5:ef:c1: 9e:b5:9a:7b:89:b8:08:73:da:0f:03:93:c7:87:21: e2:02:f8:f1:03:9b:15:a9:45:13:df:21:7e:cc:75: 0c:24:d9:1e:c0:8d:4a:b6:4e:17:9e:d2:14:49:78: 9a:2e:10:6b:41:8b:41:04:25:aa:71:6a:17:fe:dc: b9:91:b5:4c:a2:87:b2:98:58:66:b1:80:4f:2f:95: ba:a1:be:ec:5d:b1:f0:07:85:e3:06:38:4e:d8:2b: 40:af:aa:fd:b3:b4:f5:91:8d:eb:69:d8:41:4a:48: 0e:cd:03:78:20:a2:a9:f2:0c:20:5e:06:bf:c0:02: f2:d6:e9:1b:33:35:b0:49:02:5e:b5:0b:fc:37:b5: 04:a8:8c:81:28:ba:df:f7:4b:9f:5f:3b:a0:03:4f: 06:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CB:C6:9A:CE:13:CB:9A:D2:D6:A3:67:4A:63:55:99:A3:36:95:B9 X509v3 Authority Key Identifier: keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:9b:e4:db:63:b4:87:7b:da:00:27:a2:48:11:98:fe:92:34: 36:46:d5:8d:b3:5a:5f:b4:91:0f:85:82:6c:98:b5:93:49:11: ba:1a:29:31:06:d9:8a:7b:67:25:d7:09:b5:6e:4f:60:98:61: 6b:7d:23:7c:03:f0:f8:bd:b3:6a:ec:73:d6:b1:b5:f4:8a:68: 1c:31:5a:88:25:46:be:86:7e:46:c2:03:5a:d0:6c:09:27:ee: 78:ab:ab:db:0f:c9:2c:8f:c8:ba:4e:50:57:2a:6c:2b:2a:e9: 14:8d:f0:67:8c:f5:48:b1:fc:8a:24:50:06:c1:09:0c:2c:81: 80:4e:27:29:ec:c6:65:a2:09:f7:57:6f:a6:f6:fd:6d:fa:45: 23:bf:46:b8:1f:85:2b:cd:83:2a:a0:86:4e:fb:35:73:2f:a8: 0c:42:d2:c9:22:56:60:08:eb:e6:30:24:b7:95:3e:ea:15:97: 0b:51:e4:7b:64:8c:89:c5:f4:9c:28:34:dc:bb:38:d9:78:bf: f0:63:0b:24:8d:e8:6b:38:0b:76:ae:4a:0a:9b:5f:75:ba:2e: 48:5d:fd:8a:63:ff:b0:41:e3:47:a9:0b:6e:cc:32:35:5b:6d: be:44:92:df:81:0e:0f:f9:6a:4b:a2:e5:c5:4b:f9:72:62:7d: 9f:60:a3:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYuQEIsyzO9kCGshoTt6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOWQ2ZDI2ZTU2YzEzMmRkYmJjMDA1YWM0MjRmYjUzNmFj YmEwMjAwHhcNMjUxMjA2MDUwMTQyWhcNMjUxMjA3MDUwMTQyWjAzMTEwLwYDVQQD EyhmMGNiYzY5YWNlMTNjYjlhZDJkNmEzNjc0YTYzNTU5OWEzMzY5NWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQSzgYNDmj+p4E8HrmpNTCGCTGBy Euy8iv6eiMbKM1ujK4VoeciVlrWtNxlqIk/Kx+a+/BEEC1801SB2lHCN8LnhwmHT 1TcxP0p1Bpba/f3bzLtvSydmoULn8w0wQ9D76KGhkMXl78GetZp7ibgIc9oPA5PH hyHiAvjxA5sVqUUT3yF+zHUMJNkewI1Ktk4XntIUSXiaLhBrQYtBBCWqcWoX/ty5 kbVMooeymFhmsYBPL5W6ob7sXbHwB4XjBjhO2CtAr6r9s7T1kY3radhBSkgOzQN4 IKKp8gwgXga/wALy1ukbMzWwSQJetQv8N7UEqIyBKLrf90ufXzugA08GuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDLxprOE8ua0tajZ0pjVZmjNpW5MB8GA1UdIwQY MBaAFGqdbSblbBMt27wAWsQk+1Nqy6AgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWRkNmUtMDg1Ni00YTI3LWFlY2Qt ZDg5MjhmNWUxYjQwLzEvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85OWRkNmUtMDg1Ni00YTI3LWFlY2QtZDg5MjhmNWUxYjQw LzEvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpvk22O0 h3vaACeiSBGY/pI0NkbVjbNaX7SRD4WCbJi1k0kRuhopMQbZintnJdcJtW5PYJhh a30jfAPw+L2zauxz1rG19IpoHDFaiCVGvoZ+RsIDWtBsCSfueKur2w/JLI/Iuk5Q VypsKyrpFI3wZ4z1SLH8iiRQBsEJDCyBgE4nKezGZaIJ91dvpvb9bfpFI79GuB+F K82DKqCGTvs1cy+oDELSySJWYAjr5jAkt5U+6hWXC1Hke2SMicX0nCg03Ls42Xi/ 8GMLJI3oazgLdq5KCptfdbouSF39imP/sEHjR6kLbswyNVttvkSS34EOD/lqS6Ll xUv5cmJ9n2Cj1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:59 2025 by rpki-client