This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft File: apc35u85FOD8zAaQI76XGYuRN5E.mft (raw, json) Hash identifier: szuNgTdwJUaEbrQQXYYQMLNCq2gDsaBGLO4CKw6KlwE= Subject key identifier: EB:C1:FF:44:E9:FB:CC:C7:24:B3:BC:6A:D7:03:55:58:CF:35:70:77 Authority key identifier: 6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91 Certificate issuer: /CN=6a9737e6ef3914e0fccc069023be97198b913791 Certificate serial: 019AF31C6CAAADDCA44A83FE5058DD0E7686 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:01:57 +0000 Manifest this update: Sat 06 Dec 2025 10:01:57 +0000 Manifest next update: Sun 07 Dec 2025 10:01:57 +0000 Files and hashes: 1: apc35u85FOD8zAaQI76XGYuRN5E.crl (hash: xzOdtOuybIPVyp7r9zSywDutdjaMF7BxKCkw/irSBvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:6c:aa:ad:dc:a4:4a:83:fe:50:58:dd:0e:76:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a9737e6ef3914e0fccc069023be97198b913791 Validity Not Before: Dec 6 10:01:57 2025 GMT Not After : Dec 7 10:01:57 2025 GMT Subject: CN=ebc1ff44e9fbccc724b3bc6ad7035558cf357077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:30:c8:98:3c:3e:d8:58:59:bb:25:68:a6:4e: 07:85:29:e0:95:3d:9c:c9:32:d0:ab:20:ca:37:b9: 7b:95:65:b9:b1:3f:4c:98:ac:cc:bf:6f:d8:4b:73: d7:b1:20:b9:2d:99:af:05:01:df:bd:55:f6:e3:24: 7b:7d:35:e9:90:90:9a:b7:4b:76:2b:65:82:d7:51: 0b:e6:87:9b:c1:c4:23:2b:84:84:94:3c:9f:b5:d6: cb:88:2f:f1:79:6f:b9:4c:d7:80:55:a3:40:5e:ca: 90:85:70:86:42:85:2e:2d:93:85:0f:31:4a:f8:6c: 5e:2d:d4:82:a2:b0:a3:69:00:7f:be:ad:a0:0f:2d: e0:5f:ac:e5:e4:cd:b8:b8:76:28:bf:a2:90:27:c5: 3c:f3:12:7b:bb:ec:45:4f:fc:8f:93:56:f0:90:6e: 9d:ca:85:d1:6e:19:7e:bc:b6:89:62:34:0a:71:1a: 5b:d5:db:bf:98:41:e2:82:5c:08:f3:1a:e2:3e:45: 95:be:8b:32:36:33:8f:09:c4:b8:44:7c:e0:65:1d: 21:7b:04:09:ab:e0:69:ff:9a:1e:37:32:0c:7e:1e: c9:52:ec:ca:0d:f4:3e:bb:ae:04:d1:73:1c:bf:fa: b1:07:fd:fe:19:71:7c:77:d1:05:61:4c:5c:90:d0: 5d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C1:FF:44:E9:FB:CC:C7:24:B3:BC:6A:D7:03:55:58:CF:35:70:77 X509v3 Authority Key Identifier: keyid:6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:c7:14:3a:6f:69:cf:e3:f5:ac:f1:d3:e7:8f:04:5f:ea:29: f8:31:ba:a5:0e:20:bf:3f:bd:b3:22:b8:66:25:5e:fa:69:7e: bc:cb:0b:58:44:20:99:9f:ab:22:42:12:ad:bc:00:9d:1c:46: af:a2:6b:75:59:73:fb:d4:ff:c0:4a:d2:5b:48:39:44:7a:f1: 9c:4f:d3:66:4c:bd:cf:ff:07:47:04:b3:72:73:b6:c3:7f:32: 2c:98:b2:96:5d:76:e3:10:0d:a8:3d:44:2b:9c:04:c6:76:ac: 44:8c:de:3c:d3:8b:40:65:de:b5:3a:82:1c:da:99:8b:7f:03: 52:bf:ae:5d:58:e0:cf:c8:cd:e9:d5:e6:8f:49:d2:eb:99:6f: 14:52:67:9b:04:02:f6:54:be:98:73:47:53:67:b7:38:9d:0f: 6d:0e:9e:e5:21:02:55:78:5c:07:7f:49:8e:a0:81:23:bb:29: 3b:4c:1e:7c:fd:5e:a3:10:6e:53:32:ae:11:46:26:0a:6a:a8: 46:6f:c0:b1:7b:37:04:95:2c:50:7b:8a:19:b5:38:40:32:3f: cb:2c:0f:b2:89:27:93:cb:e5:e6:44:c5:97:b7:dd:fc:5f:15: 3a:d4:e3:b9:37:d5:a3:0c:4e:eb:d3:12:ba:78:ae:6e:24:59: 77:b6:f9:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGyqrdykSoP+UFjdDnaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOTczN2U2ZWYzOTE0ZTBmY2NjMDY5MDIzYmU5NzE5OGI5 MTM3OTEwHhcNMjUxMjA2MTAwMTU3WhcNMjUxMjA3MTAwMTU3WjAzMTEwLwYDVQQD EyhlYmMxZmY0NGU5ZmJjY2M3MjRiM2JjNmFkNzAzNTU1OGNmMzU3MDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTDImDw+2FhZuyVopk4HhSnglT2c yTLQqyDKN7l7lWW5sT9MmKzMv2/YS3PXsSC5LZmvBQHfvVX24yR7fTXpkJCat0t2 K2WC11EL5oebwcQjK4SElDyftdbLiC/xeW+5TNeAVaNAXsqQhXCGQoUuLZOFDzFK +GxeLdSCorCjaQB/vq2gDy3gX6zl5M24uHYov6KQJ8U88xJ7u+xFT/yPk1bwkG6d yoXRbhl+vLaJYjQKcRpb1du/mEHiglwI8xriPkWVvosyNjOPCcS4RHzgZR0hewQJ q+Bp/5oeNzIMfh7JUuzKDfQ+u64E0XMcv/qxB/3+GXF8d9EFYUxckNBdsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvB/0Tp+8zHJLO8atcDVVjPNXB3MB8GA1UdIwQY MBaAFGqXN+bvORTg/MwGkCO+lxmLkTeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84NDM4ZjUtNmM5Yy00NzAzLTlmZTIt MDE1ZmRlNDVkMGVhLzEvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84NDM4ZjUtNmM5Yy00NzAzLTlmZTItMDE1ZmRlNDVkMGVh LzEvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsscUOm9p z+P1rPHT548EX+op+DG6pQ4gvz+9syK4ZiVe+ml+vMsLWEQgmZ+rIkISrbwAnRxG r6JrdVlz+9T/wErSW0g5RHrxnE/TZky9z/8HRwSzcnO2w38yLJiyll124xANqD1E K5wExnasRIzePNOLQGXetTqCHNqZi38DUr+uXVjgz8jN6dXmj0nS65lvFFJnmwQC 9lS+mHNHU2e3OJ0PbQ6e5SECVXhcB39JjqCBI7spO0wefP1eoxBuUzKuEUYmCmqo Rm/AsXs3BJUsUHuKGbU4QDI/yywPsoknk8vl5kTFl7fd/F8VOtTjuTfVowxO69MS uniubiRZd7b5dg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:21:26 2025 by rpki-client