This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json) Hash identifier: +dQx4xOBq9EqNLe5oaXh+EAhsa4n6AOGLcdlogux7CU= Subject key identifier: 0F:3D:A0:B0:3B:70:CF:17:21:B8:3D:A3:B2:5B:BA:5B:CA:E9:B8:9B Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6 Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6 Certificate serial: 019AF3521A8C33ACE55544CF7E1B3D4C50DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft Manifest number: 10E3 Signing time: Sat 06 Dec 2025 11:00:35 +0000 Manifest this update: Sat 06 Dec 2025 11:00:35 +0000 Manifest next update: Sun 07 Dec 2025 11:00:35 +0000 Files and hashes: 1: 4_oN5t2VSIOq_-X5g3Ce-QiBlKY.roa (hash: xjVxZUWWNj0H8HPJGRtdhqp5nG1AYywGPAoN+0SYdO8=) 2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: gOgnSCtJ7ojGYtpxmiyvOEX/YR2xMZiQccN8omPyvlk=) 3: v3SUAtR9QWFlr-gp81uV9PqvwlY.roa (hash: mn3Ww15BCRBB13Jmxz3hObcdL3yCXwDoxW+3UuBjkwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:1a:8c:33:ac:e5:55:44:cf:7e:1b:3d:4c:50:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6 Validity Not Before: Dec 6 11:00:35 2025 GMT Not After : Dec 7 11:00:35 2025 GMT Subject: CN=0f3da0b03b70cf1721b83da3b25bba5bcae9b89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:3c:b2:a9:f1:8b:18:9e:41:9b:a6:a7:34: 09:12:db:d8:90:21:73:56:d2:6d:22:e8:80:bd:98: bf:cc:ac:e9:0c:c1:7b:4f:73:df:aa:a0:0b:ed:10: 32:12:df:45:e9:60:de:78:27:f7:b3:64:19:ba:b7: 5f:98:59:57:9f:a0:d9:c3:47:2b:b5:c2:22:7d:2b: 23:dd:fb:fe:c7:d5:64:4c:fb:40:4e:39:35:37:d7: b5:70:34:f5:4f:00:16:0c:c0:7a:37:d5:5b:30:f0: 86:69:2e:b4:c2:48:06:ac:74:2d:ab:15:1e:3a:9a: 76:c2:da:49:81:71:b4:51:8f:8b:34:d2:08:b8:b4: ed:f7:2b:08:d9:8f:d2:9f:61:73:1f:42:22:48:d3: 71:d0:c6:89:be:c3:50:61:e6:e7:60:f7:5a:86:d0: e9:75:99:f8:ec:a1:c2:ca:21:44:39:05:92:26:3c: 1d:3d:e5:00:ca:81:64:3b:3e:bc:5d:99:46:4f:9e: 9b:46:e5:3b:fb:14:22:70:62:77:10:98:af:1b:5d: bc:5a:a4:09:4c:a8:c8:9b:59:04:87:bd:77:75:65: b2:60:1e:db:e0:54:bf:06:f5:b4:1e:0a:30:ba:3e: 92:13:7a:bc:79:e4:01:ee:49:d6:30:aa:16:f1:52: 2e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3D:A0:B0:3B:70:CF:17:21:B8:3D:A3:B2:5B:BA:5B:CA:E9:B8:9B X509v3 Authority Key Identifier: keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e7:f0:5a:85:47:f3:b2:25:f8:91:f0:14:d7:88:93:e9:15: 0e:3c:92:8a:0a:cf:93:9d:35:ed:30:89:8c:1e:a0:0f:78:03: 81:f1:af:1c:b4:9e:b5:f0:18:da:b8:cb:94:93:87:1a:fa:75: 8f:e9:af:07:2f:90:46:bb:97:c6:c2:36:51:7e:f0:fd:16:8a: 2e:ee:8d:1b:65:ef:05:0b:71:31:4c:d2:53:88:24:bc:26:18: 4a:ab:66:25:d4:9c:8a:34:f8:40:8e:e1:2e:ed:cd:40:27:57: ee:8d:b8:12:4d:62:fc:2a:4c:8b:65:00:86:6c:c6:c0:f8:6a: e8:ed:f3:65:78:42:11:08:0c:89:20:d6:41:62:72:d4:77:2a: c2:5e:b8:a8:83:6b:ed:11:7f:77:f6:ac:09:b9:c2:8b:1f:93: 3f:a5:1b:85:7f:d1:aa:6f:47:42:bc:f8:5a:7a:ba:f4:c1:0e: 15:5e:46:13:27:ee:d4:27:44:d4:62:d7:00:e4:5a:52:b2:4a: 2a:3c:e5:ca:e6:80:4a:4f:be:1b:2c:1a:01:c0:cf:f1:96:c9: c3:df:72:b4:1a:51:28:26:73:7d:ac:1b:2c:77:ab:c5:57:88: 24:01:13:4e:0e:02:d7:f9:8e:23:52:a3:07:25:1b:8f:05:6e: 4f:cf:6d:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUhqMM6zlVUTPfhs9TFDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjczNTJkMDcxMzU2MjNlMzNmNWE3ZTYyOTI1ZDRiYWI3 MjJmYzYwHhcNMjUxMjA2MTEwMDM1WhcNMjUxMjA3MTEwMDM1WjAzMTEwLwYDVQQD EygwZjNkYTBiMDNiNzBjZjE3MjFiODNkYTNiMjViYmE1YmNhZTliODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrM8sqnxixieQZumpzQJEtvYkCFz VtJtIuiAvZi/zKzpDMF7T3PfqqAL7RAyEt9F6WDeeCf3s2QZurdfmFlXn6DZw0cr tcIifSsj3fv+x9VkTPtATjk1N9e1cDT1TwAWDMB6N9VbMPCGaS60wkgGrHQtqxUe Opp2wtpJgXG0UY+LNNIIuLTt9ysI2Y/Sn2FzH0IiSNNx0MaJvsNQYebnYPdahtDp dZn47KHCyiFEOQWSJjwdPeUAyoFkOz68XZlGT56bRuU7+xQicGJ3EJivG128WqQJ TKjIm1kEh713dWWyYB7b4FS/BvW0Hgowuj6SE3q8eeQB7knWMKoW8VIuaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA89oLA7cM8XIbg9o7JbulvK6bibMB8GA1UdIwQY MBaAFGn3NS0HE1Yj4z9afmKSXUurci/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEt MDcxNTE4ZTA1NzNlLzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEtMDcxNTE4ZTA1NzNl LzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+fwWoVH 87Il+JHwFNeIk+kVDjySigrPk5017TCJjB6gD3gDgfGvHLSetfAY2rjLlJOHGvp1 j+mvBy+QRruXxsI2UX7w/RaKLu6NG2XvBQtxMUzSU4gkvCYYSqtmJdScijT4QI7h Lu3NQCdX7o24Ek1i/CpMi2UAhmzGwPhq6O3zZXhCEQgMiSDWQWJy1Hcqwl64qINr 7RF/d/asCbnCix+TP6UbhX/Rqm9HQrz4Wnq69MEOFV5GEyfu1CdE1GLXAORaUrJK KjzlyuaASk++GywaAcDP8ZbJw99ytBpRKCZzfawbLHerxVeIJAETTg4C1/mOI1Kj ByUbjwVuT89tGA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:41 2025 by rpki-client