This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft File: AfZJudBUYiex1GJsIIHk09qFDv4.mft (raw, json) Hash identifier: W52+reTsBIeMGRd25kMmu2xIIDlkNpY0LQMPqm/M8hE= Subject key identifier: D5:2E:B8:EE:B7:45:4E:A2:2B:CD:71:1A:89:98:B9:8B:5B:7A:15:21 Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE Certificate issuer: /CN=01f649b9d0546227b1d4626c2081e4d3da850efe Certificate serial: 019B08904AAA6F534A1848A79EA910549811 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft Manifest number: 1456 Signing time: Wed 10 Dec 2025 14:00:32 +0000 Manifest this update: Wed 10 Dec 2025 14:00:32 +0000 Manifest next update: Thu 11 Dec 2025 14:00:32 +0000 Files and hashes: 1: AfZJudBUYiex1GJsIIHk09qFDv4.crl (hash: fMqhJDesfWfBwLR82/AG7ygLzTUNSdEZoqsT/xuQ4z4=) 2: bjnOU2JwIyBhG3a2k5FUAWGDatE.roa (hash: qBdlY6EWSQACgnafmgz/gnCk4zq1L3YPmsFgf+M1bHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:90:4a:aa:6f:53:4a:18:48:a7:9e:a9:10:54:98:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe Validity Not Before: Dec 10 14:00:32 2025 GMT Not After : Dec 11 14:00:32 2025 GMT Subject: CN=d52eb8eeb7454ea22bcd711a8998b98b5b7a1521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:42:be:f5:7f:36:e9:cc:78:0c:e9:47:05:46: 8b:d6:36:42:90:48:4e:cd:66:2e:c2:b6:df:30:0a: db:d7:56:a0:b9:af:42:8f:75:e9:38:a0:d0:74:82: 32:2f:00:9a:31:05:4d:c9:cb:2d:74:a6:35:a4:96: de:4d:84:0d:86:65:95:27:14:6e:c9:74:0b:d8:08: 3f:31:b5:6d:45:a9:8e:ba:b1:96:89:12:39:ce:51: d1:5a:9c:e2:09:f3:0a:37:4f:2d:de:5b:94:e0:b7: f6:6c:76:63:f6:2f:46:e9:0b:75:dc:e2:c4:f1:65: 28:5e:b2:d3:5f:6e:b6:26:7a:35:b0:9c:41:13:60: de:dc:13:50:15:85:06:2f:65:71:08:bb:a1:a3:57: bf:91:74:a9:ac:1b:3c:63:f7:32:59:7e:27:7c:3b: 30:f1:ce:15:36:de:3a:47:ec:5c:01:b7:08:c4:e5: 50:bd:8f:37:b9:e3:cb:f2:b3:23:78:17:59:8e:91: ca:ae:c2:b3:1b:9e:cb:4c:30:fa:e3:1c:8a:fa:2e: 56:36:d2:e6:5b:36:86:d7:31:b0:cf:d5:5a:4c:12: e6:be:dc:3e:db:16:e2:da:8c:f1:3f:cb:64:2b:7b: 80:04:e1:f7:fc:74:59:3a:4a:aa:24:f0:a3:c1:e4: 24:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2E:B8:EE:B7:45:4E:A2:2B:CD:71:1A:89:98:B9:8B:5B:7A:15:21 X509v3 Authority Key Identifier: keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b3:12:75:c2:35:4d:68:ce:6b:be:7d:d8:38:a5:73:5f:5f: 40:08:70:29:f2:1c:db:2e:80:15:73:44:07:9b:dc:29:19:af: 1b:4e:fa:d5:16:6f:75:42:37:5c:ad:4f:cb:7e:ff:34:57:fc: 8e:2b:47:eb:c2:48:17:28:44:07:f8:78:af:15:8b:1c:38:5a: 26:32:f1:a0:45:84:5e:62:a8:ad:f1:2e:b0:6e:bf:1f:ff:d8: 16:57:5a:d9:36:3d:ce:6b:11:99:92:07:bd:ae:88:67:f4:49: 18:7b:73:64:01:31:4b:e2:3e:86:80:bb:8b:f7:d3:dc:62:db: d1:a8:72:8c:db:e6:06:4d:d0:50:47:86:4c:22:01:25:0a:8d: fc:82:f1:a7:25:2a:e2:68:d6:aa:ad:04:f2:8c:13:96:96:f3: 33:78:25:c1:00:39:55:7b:bb:da:44:c2:b1:f6:d0:e9:7b:71: de:6e:b8:bd:66:42:16:2f:f3:42:53:a5:48:4e:4a:7d:42:5d: f7:ff:51:ab:ef:9a:8c:27:71:28:4b:46:eb:6f:39:2a:1c:25: b0:2b:f9:15:19:ef:4e:4b:3f:bb:23:4f:39:4f:99:a9:25:80: 76:f5:6b:69:68:58:5c:97:82:6f:b9:c7:cb:e3:40:24:3c:c0: db:ed:9a:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIkEqqb1NKGEinnqkQVJgRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZjY0OWI5ZDA1NDYyMjdiMWQ0NjI2YzIwODFlNGQzZGE4 NTBlZmUwHhcNMjUxMjEwMTQwMDMyWhcNMjUxMjExMTQwMDMyWjAzMTEwLwYDVQQD EyhkNTJlYjhlZWI3NDU0ZWEyMmJjZDcxMWE4OTk4Yjk4YjViN2ExNTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEK+9X826cx4DOlHBUaL1jZCkEhO zWYuwrbfMArb11agua9Cj3XpOKDQdIIyLwCaMQVNycstdKY1pJbeTYQNhmWVJxRu yXQL2Ag/MbVtRamOurGWiRI5zlHRWpziCfMKN08t3luU4Lf2bHZj9i9G6Qt13OLE 8WUoXrLTX262Jno1sJxBE2De3BNQFYUGL2VxCLuho1e/kXSprBs8Y/cyWX4nfDsw 8c4VNt46R+xcAbcIxOVQvY83uePL8rMjeBdZjpHKrsKzG57LTDD64xyK+i5WNtLm WzaG1zGwz9VaTBLmvtw+2xbi2ozxP8tkK3uABOH3/HRZOkqqJPCjweQkpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUuuO63RU6iK81xGomYuYtbehUhMB8GA1UdIwQY MBaAFAH2SbnQVGInsdRibCCB5NPahQ7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWZaSnVkQlVZaWV4MUdKc0lJSGswOXFGRHY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hMTkyM2YtMjZkNy00NGJlLWEyYmUt MDNjYmRiOGZmOTYwLzEvQWZaSnVkQlVZaWV4MUdKc0lJSGswOXFGRHY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9hMTkyM2YtMjZkNy00NGJlLWEyYmUtMDNjYmRiOGZmOTYw LzEvQWZaSnVkQlVZaWV4MUdKc0lJSGswOXFGRHY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7MSdcI1 TWjOa7592Dilc19fQAhwKfIc2y6AFXNEB5vcKRmvG0761RZvdUI3XK1Py37/NFf8 jitH68JIFyhEB/h4rxWLHDhaJjLxoEWEXmKorfEusG6/H//YFlda2TY9zmsRmZIH va6IZ/RJGHtzZAExS+I+hoC7i/fT3GLb0ahyjNvmBk3QUEeGTCIBJQqN/ILxpyUq 4mjWqq0E8owTlpbzM3glwQA5VXu72kTCsfbQ6Xtx3m64vWZCFi/zQlOlSE5KfUJd 9/9Rq++ajCdxKEtG6285KhwlsCv5FRnvTks/uyNPOU+ZqSWAdvVraWhYXJeCb7nH y+NAJDzA2+2a6A== -----END CERTIFICATE-----Generated at Wed Dec 10 17:34:12 2025 by rpki-client