This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft File: apWkz28PDDLNPf6Yh2ImC_zbpn4.mft (raw, json) Hash identifier: jduwNIkbKMuL7kMI+TQ2WnFFsCHcxMyBGBgK62KtCJ0= Subject key identifier: 2C:3D:91:FC:E3:8B:55:FA:DF:C2:10:B4:65:EA:CB:54:81:93:57:AA Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E Certificate issuer: /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e Certificate serial: 019AF19A9FC284C77D3062CEFFB7FA3A0967 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft Manifest number: 04B3 Signing time: Sat 06 Dec 2025 03:00:33 +0000 Manifest this update: Sat 06 Dec 2025 03:00:33 +0000 Manifest next update: Sun 07 Dec 2025 03:00:33 +0000 Files and hashes: 1: apWkz28PDDLNPf6Yh2ImC_zbpn4.crl (hash: jottzyaxME7GETZVCMEgE92r2Hl7CmyDu6uWMRGWheU=) 2: ei2AQFZeqEcoYtSC5TN3lwP2gbM.roa (hash: u56J4AXZH3zEF0D/VP7y3pv730bb3tumcg13gKuxn9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:9f:c2:84:c7:7d:30:62:ce:ff:b7:fa:3a:09:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e Validity Not Before: Dec 6 03:00:33 2025 GMT Not After : Dec 7 03:00:33 2025 GMT Subject: CN=2c3d91fce38b55fadfc210b465eacb54819357aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:28:22:6c:84:65:02:6f:60:3e:dc:4e:d6: df:7b:0b:bd:bd:00:5d:f6:d3:ac:f9:4b:7f:77:f0: 31:03:e9:77:59:01:19:0f:ad:b6:99:32:a4:44:84: d9:83:8c:4d:0e:e7:0c:9c:c9:bd:77:2c:94:d7:58: 26:c4:1e:fa:b4:6b:cf:3f:90:9f:e4:be:4d:27:55: a0:2b:93:44:2a:df:cb:f1:af:e4:d7:bc:77:fa:b9: ef:58:c2:45:3d:40:b9:db:48:e8:c5:91:2e:4b:25: a9:fa:c5:43:07:7f:52:af:1b:d3:d2:27:31:bd:9f: 49:58:1e:34:80:6f:df:ed:78:44:13:c1:4f:a4:42: 1f:48:58:84:46:c0:e8:8f:45:a2:7d:5d:af:b7:f1: 46:36:69:59:4b:53:67:ff:12:ad:84:6e:fc:b8:3a: 6f:cb:da:09:a3:6f:13:98:56:c6:f1:c9:ab:c1:7c: 5e:8a:a8:82:b1:17:9b:d1:4d:5e:a4:d1:f3:91:d2: 01:42:9a:fd:d4:22:62:cf:fd:79:d8:c1:cd:db:3a: 96:d2:c1:0a:8a:3b:7e:26:1d:1c:30:d3:2b:33:00: 24:84:51:c8:46:bd:cc:04:bc:36:4a:4a:e5:fc:16: 40:31:40:0b:3b:82:35:5f:51:2e:85:a1:a1:d5:dd: fe:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3D:91:FC:E3:8B:55:FA:DF:C2:10:B4:65:EA:CB:54:81:93:57:AA X509v3 Authority Key Identifier: keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:87:a6:fe:d7:44:2d:3e:ad:44:18:be:77:44:72:05:0f:25: 28:dc:64:ba:80:07:53:c0:f2:81:b7:39:4f:a3:eb:89:9f:dd: 9d:e2:5d:a9:12:34:45:1f:36:f8:79:d7:12:3d:94:65:41:41: 7a:21:37:b0:d7:42:dd:55:fe:a6:21:d6:be:30:e4:70:24:31: dc:f0:ae:52:de:6f:56:8a:b3:3b:02:71:3a:91:51:39:a7:01: 52:96:86:07:4e:12:74:e1:9a:c8:95:bc:8a:9c:17:ad:56:73: f9:cf:54:5c:df:e0:dd:96:a8:52:68:6c:89:20:cb:99:7e:e9: cc:fd:b2:f9:0e:37:32:ba:28:bd:11:3d:07:9e:88:af:e9:bd: a2:14:22:8d:17:69:66:ee:20:3e:05:1f:b5:0f:d7:57:59:6c: 3b:c5:0b:d1:1c:5e:2c:ee:dd:84:6c:2a:64:9e:45:35:82:f5: 03:13:c1:96:12:e4:b8:b6:7e:f1:cd:1c:f7:76:54:59:bb:8a: 2d:4e:91:68:2a:9a:86:68:be:bb:0d:c3:c5:ee:2f:50:df:84: 40:78:80:38:05:f0:86:5b:18:a3:24:8f:62:5f:78:e2:f5:2f: 54:bb:3d:7f:5a:0b:c0:d1:83:41:84:92:0f:ed:5f:3c:1c:ad: ad:50:3f:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmp/ChMd9MGLO/7f6OglnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOTVhNGNmNmYwZjBjMzJjZDNkZmU5ODg3NjIyNjBiZmNk YmE2N2UwHhcNMjUxMjA2MDMwMDMzWhcNMjUxMjA3MDMwMDMzWjAzMTEwLwYDVQQD EygyYzNkOTFmY2UzOGI1NWZhZGZjMjEwYjQ2NWVhY2I1NDgxOTM1N2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2coImyEZQJvYD7cTtbfewu9vQBd 9tOs+Ut/d/AxA+l3WQEZD622mTKkRITZg4xNDucMnMm9dyyU11gmxB76tGvPP5Cf 5L5NJ1WgK5NEKt/L8a/k17x3+rnvWMJFPUC520joxZEuSyWp+sVDB39SrxvT0icx vZ9JWB40gG/f7XhEE8FPpEIfSFiERsDoj0WifV2vt/FGNmlZS1Nn/xKthG78uDpv y9oJo28TmFbG8cmrwXxeiqiCsReb0U1epNHzkdIBQpr91CJiz/152MHN2zqW0sEK ijt+Jh0cMNMrMwAkhFHIRr3MBLw2Skrl/BZAMUALO4I1X1EuhaGh1d3+GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCw9kfzji1X638IQtGXqy1SBk1eqMB8GA1UdIwQY MBaAFGqVpM9vDwwyzT3+mIdiJgv826Z+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXBXa3oyOFBERExOUGY2WWgySW1DX3picG40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hMGFhZDktMzg2Ny00NDlhLTkyNDMt OWFiMjRlN2QyOGZlLzEvYXBXa3oyOFBERExOUGY2WWgySW1DX3picG40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hMGFhZDktMzg2Ny00NDlhLTkyNDMtOWFiMjRlN2QyOGZl LzEvYXBXa3oyOFBERExOUGY2WWgySW1DX3picG40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4em/tdE LT6tRBi+d0RyBQ8lKNxkuoAHU8Dygbc5T6PriZ/dneJdqRI0RR82+HnXEj2UZUFB eiE3sNdC3VX+piHWvjDkcCQx3PCuUt5vVoqzOwJxOpFROacBUpaGB04SdOGayJW8 ipwXrVZz+c9UXN/g3ZaoUmhsiSDLmX7pzP2y+Q43MroovRE9B56Ir+m9ohQijRdp Zu4gPgUftQ/XV1lsO8UL0RxeLO7dhGwqZJ5FNYL1AxPBlhLkuLZ+8c0c93ZUWbuK LU6RaCqahmi+uw3Dxe4vUN+EQHiAOAXwhlsYoySPYl944vUvVLs9f1oLwNGDQYSS D+1fPBytrVA/0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:18 2025 by rpki-client