This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft File: r-iiApeGib2NX15X_MG_64Z8Mio.mft (raw, json) Hash identifier: VcKWdycDq+nQaehpHv6BMtB/Qtij1gNX3mPnRN/hqPY= Subject key identifier: 35:9F:E0:FD:2B:35:80:F2:E8:00:28:8B:1D:DF:FA:3C:AB:4F:8C:36 Authority key identifier: AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A Certificate issuer: /CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a Certificate serial: 019AF12ED68D73C0B7204F95DE05B797AC51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:02:49 +0000 Manifest this update: Sat 06 Dec 2025 01:02:49 +0000 Manifest next update: Sun 07 Dec 2025 01:02:49 +0000 Files and hashes: 1: r-iiApeGib2NX15X_MG_64Z8Mio.crl (hash: 99wFHP7yZNzkASgnvuOaSZ7B+6MWLqMpdHA2V2JW0CE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d6:8d:73:c0:b7:20:4f:95:de:05:b7:97:ac:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a Validity Not Before: Dec 6 01:02:49 2025 GMT Not After : Dec 7 01:02:49 2025 GMT Subject: CN=359fe0fd2b3580f2e800288b1ddffa3cab4f8c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:f7:da:ee:28:aa:9b:f7:11:fb:28:68:8c: a4:b7:56:c0:23:cc:01:f9:fb:7f:e3:a1:95:23:86: ea:2d:8d:ac:ff:77:1d:cc:fa:ce:5c:ae:cd:4a:11: ee:12:f7:c4:2e:17:a1:c0:22:4a:69:1c:5b:5c:00: 46:37:7e:09:20:fd:4d:0d:2b:df:69:3c:e8:c3:39: 27:6d:bf:54:00:8f:b1:08:04:bb:df:53:b3:61:2e: 7a:79:3d:59:50:af:b8:fc:53:0e:dd:c2:18:ea:af: 2a:02:39:3f:70:b8:db:a6:ad:53:71:d6:0a:1e:2f: 53:e8:06:3f:b4:6f:6a:f1:29:8f:99:0d:ad:27:7b: 81:28:75:80:c4:7c:3f:a1:49:5b:ca:4a:42:df:e6: a4:bc:d7:8e:48:7c:44:f2:7a:f3:5d:b2:04:d9:c5: 61:c3:4c:6b:e0:58:25:ce:33:18:d5:9d:35:e9:28: 74:52:78:05:50:9b:e4:d0:35:59:fd:ef:23:02:81: a0:70:00:87:82:4d:cb:9e:e5:5e:68:e3:d4:3e:3b: 95:86:a1:1f:61:1d:00:47:5e:41:60:37:76:7d:c1: 83:b2:b0:04:5b:22:f0:60:57:4d:fe:bd:13:b8:9e: c7:fc:b6:61:9a:43:50:57:26:a2:f2:c3:f1:c5:42: 59:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9F:E0:FD:2B:35:80:F2:E8:00:28:8B:1D:DF:FA:3C:AB:4F:8C:36 X509v3 Authority Key Identifier: keyid:AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:0d:22:20:16:43:f4:d9:2b:20:f4:19:21:fb:dc:ad:7f:73: 4a:6d:f5:6b:09:0c:0f:5b:1d:61:3e:0a:20:2a:3c:b7:fe:c7: 80:5c:07:29:fb:22:0e:88:e0:aa:86:d5:61:39:11:1f:3e:c7: 55:c5:5c:d6:29:e3:15:66:c2:f7:4f:a2:d1:8f:db:4e:14:24: 2f:0c:58:56:53:b2:e1:40:67:5c:0e:a8:7d:a1:eb:fb:a2:34: a3:c8:b7:a2:5a:98:fd:be:54:06:2b:17:4a:56:09:51:15:d7: 21:ba:a9:4c:c7:53:ff:dc:e4:f5:51:bd:6d:80:bb:b1:ae:d9: ab:eb:0a:cf:52:3e:1c:9c:28:54:db:6b:b7:56:bd:d8:7e:01: 9e:dd:fe:10:d6:67:a5:43:b4:87:b3:bd:2a:05:09:9c:1f:4e: 44:0a:af:95:48:c5:8d:28:08:5c:15:58:41:1d:04:58:bf:85: 33:55:f2:07:af:ea:92:8f:14:b7:f3:f0:ed:ac:6d:cb:e3:9a: 90:5b:f9:a8:42:c5:1b:a6:7f:7a:1b:10:5a:08:da:ba:fb:b2: 3e:e7:ef:a4:8b:a9:e9:d9:a4:dc:55:e5:58:b7:d7:45:f9:f0: 22:7d:63:6b:0b:7e:e2:fc:90:9f:55:82:f5:9f:c6:14:47:85: c6:68:5b:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtaNc8C3IE+V3gW3l6xRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZThhMjAyOTc4Njg5YmQ4ZDVmNWU1N2ZjYzFiZmViODY3 YzMyMmEwHhcNMjUxMjA2MDEwMjQ5WhcNMjUxMjA3MDEwMjQ5WjAzMTEwLwYDVQQD EygzNTlmZTBmZDJiMzU4MGYyZTgwMDI4OGIxZGRmZmEzY2FiNGY4YzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxv32u4oqpv3EfsoaIykt1bAI8wB +ft/46GVI4bqLY2s/3cdzPrOXK7NShHuEvfELhehwCJKaRxbXABGN34JIP1NDSvf aTzowzknbb9UAI+xCAS731OzYS56eT1ZUK+4/FMO3cIY6q8qAjk/cLjbpq1TcdYK Hi9T6AY/tG9q8SmPmQ2tJ3uBKHWAxHw/oUlbykpC3+akvNeOSHxE8nrzXbIE2cVh w0xr4FglzjMY1Z016Sh0UngFUJvk0DVZ/e8jAoGgcACHgk3LnuVeaOPUPjuVhqEf YR0AR15BYDd2fcGDsrAEWyLwYFdN/r0TuJ7H/LZhmkNQVyai8sPxxUJZ7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWf4P0rNYDy6AAoix3f+jyrT4w2MB8GA1UdIwQY MBaAFK/oogKXhom9jV9eV/zBv+uGfDIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1paUFwZUdpYjJOWDE1WF9NR182NFo4TWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mOTA3YWEtMmFjZC00ZGM3LTlmMGQt ZDdiMDg5NDhmN2M3LzEvci1paUFwZUdpYjJOWDE1WF9NR182NFo4TWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9mOTA3YWEtMmFjZC00ZGM3LTlmMGQtZDdiMDg5NDhmN2M3 LzEvci1paUFwZUdpYjJOWDE1WF9NR182NFo4TWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkg0iIBZD 9NkrIPQZIfvcrX9zSm31awkMD1sdYT4KICo8t/7HgFwHKfsiDojgqobVYTkRHz7H VcVc1injFWbC90+i0Y/bThQkLwxYVlOy4UBnXA6ofaHr+6I0o8i3olqY/b5UBisX SlYJURXXIbqpTMdT/9zk9VG9bYC7sa7Zq+sKz1I+HJwoVNtrt1a92H4Bnt3+ENZn pUO0h7O9KgUJnB9ORAqvlUjFjSgIXBVYQR0EWL+FM1XyB6/qko8Ut/Pw7axty+Oa kFv5qELFG6Z/ehsQWgjauvuyPufvpIup6dmk3FXlWLfXRfnwIn1jawt+4vyQn1WC 9Z/GFEeFxmhbVg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:58 2025 by rpki-client