This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft File: apwfqpeD36srelPaP7D970zP6uU.mft (raw, json) Hash identifier: 2vWG6kEx1S9WAbUkpn3LgClTj1mCr4YaGmSXa5QNFPk= Subject key identifier: 01:75:6E:EB:1B:BB:34:C3:D8:B0:29:43:E3:DD:27:5C:70:FD:84:9C Authority key identifier: 6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5 Certificate issuer: /CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5 Certificate serial: 019AF1D1EE06E7C3BBF6A979B30755854E4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft Manifest number: 0277 Signing time: Sat 06 Dec 2025 04:00:58 +0000 Manifest this update: Sat 06 Dec 2025 04:00:58 +0000 Manifest next update: Sun 07 Dec 2025 04:00:58 +0000 Files and hashes: 1: apwfqpeD36srelPaP7D970zP6uU.crl (hash: fAqH/giW28P0DAyEKTGguXAgsauGGyjgjYMh1ROXC7g=) 2: tIh3EbNG8PyhR2bhdKGu98lXfi0.roa (hash: WvckFFiPzlkbuyQKqzi40xspGv9L4xehhqGGvB5LMXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ee:06:e7:c3:bb:f6:a9:79:b3:07:55:85:4e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5 Validity Not Before: Dec 6 04:00:58 2025 GMT Not After : Dec 7 04:00:58 2025 GMT Subject: CN=01756eeb1bbb34c3d8b02943e3dd275c70fd849c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bb:23:5d:b1:7d:94:45:4c:f1:3c:2c:c5:cc: 33:13:85:a2:31:e9:5e:12:bd:47:5f:2f:f4:6c:2f: 82:2d:ef:15:4e:1e:58:95:15:75:ca:83:ab:86:b1: 13:31:83:8e:aa:62:35:48:1f:e1:40:39:45:38:0c: 84:4c:62:f9:c6:42:42:3d:13:11:4e:3c:28:31:71: a6:b4:4d:2d:4e:32:88:6c:e5:c9:39:db:46:a5:71: bf:00:cf:78:18:7d:77:ba:44:07:6b:52:29:ce:55: b3:6c:ca:34:40:a8:0e:ab:41:05:20:40:d1:11:6c: b0:b8:c6:9d:dc:3a:a0:87:f7:42:54:f7:3a:5e:af: 3f:fc:d6:ac:d5:a0:61:da:17:57:4e:07:5a:95:c5: 02:22:ab:08:34:5c:1e:4b:21:c0:b0:89:7b:56:37: a1:67:e5:45:52:b6:20:22:2d:82:aa:e2:ec:8a:b7: 5e:24:d8:68:17:42:5e:92:ad:da:2d:3d:b3:d7:a4: bd:55:95:47:24:0e:dc:9c:e5:fa:00:0f:92:2b:eb: 0f:66:b1:48:75:d9:39:3d:37:cd:eb:10:13:ea:0b: 0c:45:48:e9:17:41:d7:d4:69:87:8d:c3:9e:77:9f: 35:c2:6e:d8:6a:fd:9a:8a:a7:41:b9:70:89:99:16: 05:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:75:6E:EB:1B:BB:34:C3:D8:B0:29:43:E3:DD:27:5C:70:FD:84:9C X509v3 Authority Key Identifier: keyid:6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:73:23:d4:5b:77:b0:f7:0a:c6:0c:31:4f:b6:ed:99:5b:67: d5:7f:d6:42:a9:6a:fe:c6:d0:a7:e1:1d:bd:4f:1e:c8:39:fc: 83:94:70:9d:a1:ec:b1:0d:ef:f8:6b:33:f8:d9:ba:c2:1c:16: 84:ec:73:99:7b:fd:7a:2e:40:5c:a5:59:34:c0:af:07:90:5d: 05:32:8e:b8:d3:8c:b6:9a:e0:b5:c0:2c:d9:cf:f4:b1:f2:6a: 3e:44:e2:27:0c:d9:4a:e8:52:e8:df:f7:1b:a8:9f:01:07:f9: 5b:86:05:b4:95:d0:af:24:c2:09:4f:f6:03:c0:28:a9:f1:aa: 41:b3:b4:2f:8f:b2:42:68:dd:bc:6b:b9:41:04:2e:38:6c:0a: 57:b0:2f:fb:60:5a:34:ba:a5:37:ec:9a:d7:ee:fc:79:03:e7: a9:02:e5:db:74:66:fb:b4:0a:8c:40:90:1c:61:08:ef:1c:a8: 27:d9:1d:1f:d9:13:65:db:01:ba:8d:8b:9e:f6:9a:aa:89:3c: 85:c0:44:95:44:07:a3:2f:74:65:e3:19:02:19:da:94:43:a4: 58:87:1d:f3:2f:34:d5:2d:ef:81:82:a1:e9:e1:24:51:45:cc: b4:98:70:a0:0b:1a:cd:59:dd:c8:18:d3:a3:a7:d3:d9:10:cb: a1:91:5a:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0e4G58O79ql5swdVhU5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOWMxZmFhOTc4M2RmYWIyYjdhNTNkYTNmYjBmZGVmNGNj ZmVhZTUwHhcNMjUxMjA2MDQwMDU4WhcNMjUxMjA3MDQwMDU4WjAzMTEwLwYDVQQD EygwMTc1NmVlYjFiYmIzNGMzZDhiMDI5NDNlM2RkMjc1YzcwZmQ4NDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rsjXbF9lEVM8TwsxcwzE4WiMele Er1HXy/0bC+CLe8VTh5YlRV1yoOrhrETMYOOqmI1SB/hQDlFOAyETGL5xkJCPRMR TjwoMXGmtE0tTjKIbOXJOdtGpXG/AM94GH13ukQHa1IpzlWzbMo0QKgOq0EFIEDR EWywuMad3Dqgh/dCVPc6Xq8//Nas1aBh2hdXTgdalcUCIqsINFweSyHAsIl7Vjeh Z+VFUrYgIi2CquLsirdeJNhoF0Jekq3aLT2z16S9VZVHJA7cnOX6AA+SK+sPZrFI ddk5PTfN6xAT6gsMRUjpF0HX1GmHjcOed581wm7Yav2aiqdBuXCJmRYFvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAF1busbuzTD2LApQ+PdJ1xw/YScMB8GA1UdIwQY MBaAFGqcH6qXg9+rK3pT2j+w/e9Mz+rlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zZmQ0YjYtYjQxNC00OTAyLTg5MWYt ZDJiYjdjNzk1YTg2LzEvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8zZmQ0YjYtYjQxNC00OTAyLTg5MWYtZDJiYjdjNzk1YTg2 LzEvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3Mj1Ft3 sPcKxgwxT7btmVtn1X/WQqlq/sbQp+EdvU8eyDn8g5RwnaHssQ3v+Gsz+Nm6whwW hOxzmXv9ei5AXKVZNMCvB5BdBTKOuNOMtprgtcAs2c/0sfJqPkTiJwzZSuhS6N/3 G6ifAQf5W4YFtJXQryTCCU/2A8AoqfGqQbO0L4+yQmjdvGu5QQQuOGwKV7Av+2Ba NLqlN+ya1+78eQPnqQLl23Rm+7QKjECQHGEI7xyoJ9kdH9kTZdsBuo2Lnvaaqok8 hcBElUQHoy90ZeMZAhnalEOkWIcd8y801S3vgYKh6eEkUUXMtJhwoAsazVndyBjT o6fT2RDLoZFapw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:24:54 2025 by rpki-client