This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft File: Ap6YM29qbMnbzx7LSJVYDwlOPis.mft (raw, json) Hash identifier: KLjEKUZsHbqt2MXAn/jMTDDYGhnnfu9iG5YJUzYDSt8= Subject key identifier: 1A:71:28:FE:1C:30:67:79:10:31:C6:F7:A4:21:01:CC:53:FF:D2:40 Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b Certificate serial: 019AF208AB19354C53264030BA20C25E10D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft Manifest number: 0E52 Signing time: Sat 06 Dec 2025 05:00:45 +0000 Manifest this update: Sat 06 Dec 2025 05:00:45 +0000 Manifest next update: Sun 07 Dec 2025 05:00:45 +0000 Files and hashes: 1: Ap6YM29qbMnbzx7LSJVYDwlOPis.crl (hash: 9+UME7xg8QHlGwdA86LT7+PRrfq0t+3j4pVl/Nuf3/c=) 2: FybckS4mS3PAuxN_d3EgWJtMQK4.roa (hash: MImS/nx2LOpK0AGTytgC4EXihDeCbzPO2eNXYJc+NdA=) 3: KpRFnijx4HYqUIUICY-ZUp7rRPk.roa (hash: tZGVcmUikk1vZ7sDIA+p4HCO8PzQlQBBtwwble5ZLjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ab:19:35:4c:53:26:40:30:ba:20:c2:5e:10:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b Validity Not Before: Dec 6 05:00:45 2025 GMT Not After : Dec 7 05:00:45 2025 GMT Subject: CN=1a7128fe1c3067791031c6f7a42101cc53ffd240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:8c:5a:f1:f9:58:d7:bc:05:f7:a0:10:dd: a4:0f:ab:f6:02:a1:2c:2c:d4:fd:45:3d:5c:83:d7: b0:34:19:af:dd:19:9a:64:90:64:26:37:33:c7:ed: 73:29:66:cc:bb:c9:7d:79:1f:61:85:2c:a9:fe:04: cd:4a:f8:2f:9f:42:33:cd:52:a6:6a:63:e3:f7:b6: 9b:41:d2:44:e2:39:d0:61:a1:93:84:0f:62:fe:ad: 87:03:58:dc:0b:f5:0f:9d:66:34:fc:d6:f4:21:ec: 6b:6e:33:79:bc:22:95:a5:3b:82:49:58:1a:71:c5: 05:eb:a1:90:b6:1a:70:35:e6:de:94:05:df:eb:62: 28:20:40:20:11:af:fb:5a:5f:fd:cb:a1:aa:60:a9: 19:c4:85:63:cb:2e:74:67:ab:99:db:58:d2:9a:87: 4c:06:1f:fd:be:c9:dd:b4:0e:51:c4:91:e2:1c:98: 92:a7:a7:d5:21:b4:c0:41:8a:0f:27:f4:d5:f3:47: 74:3b:f5:e2:2c:d4:d1:3b:1b:a3:65:75:87:a5:03: 8a:6b:0d:e0:e7:d0:81:ad:e0:ab:f0:ab:29:e3:a1: 54:db:0c:ed:b7:6e:2c:4a:58:59:fc:43:83:5f:9d: c6:aa:2d:30:a5:7a:b5:90:8c:44:1c:ef:cc:80:bb: c9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:71:28:FE:1C:30:67:79:10:31:C6:F7:A4:21:01:CC:53:FF:D2:40 X509v3 Authority Key Identifier: keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:bc:df:fa:c8:2c:02:54:1b:8f:73:34:2d:6a:59:7d:aa:a8: df:1e:57:81:dd:56:0a:42:c3:6a:75:0e:d3:a2:0f:d1:b8:5f: 07:eb:fc:2e:b4:a0:4d:0c:54:e3:34:fc:ab:4f:56:3d:99:4c: a1:95:a2:6b:da:3e:48:6e:3d:78:bb:77:3d:ca:1e:fa:16:f6: 08:d2:e6:1a:0f:1f:f3:31:89:18:b1:2e:fe:f9:47:18:20:4c: cd:d5:e7:6a:7b:f6:ed:18:7c:42:8e:1d:7f:6f:7a:14:5a:2a: 26:8d:b3:87:9a:c8:ab:82:39:4f:c9:6b:50:05:d4:a2:6c:f4: 50:a2:92:61:11:ed:f6:1a:55:be:2b:04:20:db:4a:85:58:b2: 05:21:ab:6f:cc:99:a5:0f:40:4e:aa:0f:d8:c0:22:07:7f:5e: 9a:11:89:fe:5b:72:9f:bb:84:a4:52:f6:65:98:91:6e:dc:bc: 5b:59:af:7d:09:40:46:ed:3d:63:2a:5f:3a:d3:b7:42:0b:c9: aa:d3:3e:fc:65:6a:e8:5b:a5:5b:76:29:34:35:93:c9:17:5e: 7d:68:75:63:49:64:cd:5f:6a:28:66:23:70:59:fc:37:b4:03: 7a:f2:54:e2:dd:a0:ad:38:4f:17:7e:85:0d:d1:b7:db:05:a3: c0:ae:6e:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKsZNUxTJkAwuiDCXhDXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOWU5ODMzNmY2YTZjYzlkYmNmMWVjYjQ4OTU1ODBmMDk0 ZTNlMmIwHhcNMjUxMjA2MDUwMDQ1WhcNMjUxMjA3MDUwMDQ1WjAzMTEwLwYDVQQD EygxYTcxMjhmZTFjMzA2Nzc5MTAzMWM2ZjdhNDIxMDFjYzUzZmZkMjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4qMWvH5WNe8BfegEN2kD6v2AqEs LNT9RT1cg9ewNBmv3RmaZJBkJjczx+1zKWbMu8l9eR9hhSyp/gTNSvgvn0IzzVKm amPj97abQdJE4jnQYaGThA9i/q2HA1jcC/UPnWY0/Nb0IexrbjN5vCKVpTuCSVga ccUF66GQthpwNebelAXf62IoIEAgEa/7Wl/9y6GqYKkZxIVjyy50Z6uZ21jSmodM Bh/9vsndtA5RxJHiHJiSp6fVIbTAQYoPJ/TV80d0O/XiLNTROxujZXWHpQOKaw3g 59CBreCr8Ksp46FU2wztt24sSlhZ/EODX53Gqi0wpXq1kIxEHO/MgLvJXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpxKP4cMGd5EDHG96QhAcxT/9JAMB8GA1UdIwQY MBaAFAKemDNvamzJ288ey0iVWA8JTj4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXA2WU0yOXFiTW5ieng3TFNKVllEd2xPUGlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mYmMxNDEtOTlmYy00ZjgzLWI1ODUt MGZlNmY1NWRiM2Y2LzEvQXA2WU0yOXFiTW5ieng3TFNKVllEd2xPUGlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9mYmMxNDEtOTlmYy00ZjgzLWI1ODUtMGZlNmY1NWRiM2Y2 LzEvQXA2WU0yOXFiTW5ieng3TFNKVllEd2xPUGlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbzf+sgs AlQbj3M0LWpZfaqo3x5Xgd1WCkLDanUO06IP0bhfB+v8LrSgTQxU4zT8q09WPZlM oZWia9o+SG49eLt3Pcoe+hb2CNLmGg8f8zGJGLEu/vlHGCBMzdXnanv27Rh8Qo4d f296FFoqJo2zh5rIq4I5T8lrUAXUomz0UKKSYRHt9hpVvisEINtKhViyBSGrb8yZ pQ9ATqoP2MAiB39emhGJ/ltyn7uEpFL2ZZiRbty8W1mvfQlARu09YypfOtO3QgvJ qtM+/GVq6FulW3YpNDWTyRdefWh1Y0lkzV9qKGYjcFn8N7QDevJU4t2grThPF36F DdG32wWjwK5uhA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:21 2025 by rpki-client