This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft File: afjrNm_GyKCb-xQPFQX57GddQuQ.mft (raw, json) Hash identifier: /GfhKZMO/PUfgtYV6XKM+axUjzexxifZHdZgsCVeEgo= Subject key identifier: 29:2C:EE:3F:54:C8:72:F1:93:29:EE:C4:88:E5:90:D7:F9:C7:26:3A Authority key identifier: 69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4 Certificate issuer: /CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4 Certificate serial: 019B30E91D5592242A4531DA4D31B928E6AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft Manifest number: 0A56 Signing time: Thu 18 Dec 2025 10:02:22 +0000 Manifest this update: Thu 18 Dec 2025 10:02:22 +0000 Manifest next update: Fri 19 Dec 2025 10:02:22 +0000 Files and hashes: 1: afjrNm_GyKCb-xQPFQX57GddQuQ.crl (hash: N19SHbstX1IAKc0GkPvO9t3xHo/BwvcUtdEd1wIk940=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:1d:55:92:24:2a:45:31:da:4d:31:b9:28:e6:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4 Validity Not Before: Dec 18 10:02:22 2025 GMT Not After : Dec 19 10:02:22 2025 GMT Subject: CN=292cee3f54c872f19329eec488e590d7f9c7263a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:72:a3:74:ad:d2:46:c4:09:53:7a:e6:40: b2:9b:4a:96:b6:34:c0:1c:e2:c9:d5:bc:99:e8:ad: 47:a4:7d:ea:0e:35:6f:3a:7c:4e:3d:ae:9a:65:43: c5:c0:a6:e3:8d:08:aa:e8:92:53:a7:68:67:7c:9c: 62:3e:d6:88:90:6a:4a:88:5d:0d:bc:ec:56:f7:13: 2a:17:67:83:d4:57:e9:23:1a:b9:da:a8:1e:5e:5f: 06:86:09:78:c7:4f:c6:ab:e5:4c:6e:ed:9e:3a:40: 55:3e:db:14:13:cc:9b:45:61:28:7c:f9:43:67:8e: c9:6f:8b:85:68:69:26:87:bc:20:d5:42:1c:5d:46: 08:ed:63:51:fc:77:b7:3a:e2:fd:bd:c5:18:9f:6b: f1:ef:14:b4:97:6d:d8:ab:00:11:56:4f:e1:11:78: 70:cf:42:35:b5:3c:6a:28:c5:9c:44:02:0a:cb:33: 76:a9:9f:9e:87:56:63:83:4b:9d:f6:8c:27:72:d0: 7a:8a:0b:ad:f1:f0:d1:8b:19:a1:35:e2:1f:2f:5c: ea:cd:29:f5:f0:c3:50:13:31:6b:ba:37:45:88:6a: af:b1:72:40:d1:a9:e2:53:62:63:5b:42:e8:52:a6: a1:54:fa:10:67:fd:54:5e:ca:12:b4:ab:ee:71:27: 41:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2C:EE:3F:54:C8:72:F1:93:29:EE:C4:88:E5:90:D7:F9:C7:26:3A X509v3 Authority Key Identifier: keyid:69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:26:1b:2e:58:28:a5:f1:96:3d:b4:63:d1:a2:ea:20:57:e1: 61:c6:ed:80:86:b6:23:29:12:2b:46:57:66:92:8b:67:0e:35: 92:05:d8:bf:e3:db:5e:f4:c4:09:80:2f:fa:b2:7c:00:c5:fb: 54:74:91:35:ce:41:76:9d:93:65:90:23:e2:de:24:98:45:61: 9c:79:1c:91:de:77:4c:48:6c:9f:53:ea:23:82:f8:a2:d7:88: 8d:a3:9a:5b:d3:1c:67:66:20:f3:d5:ea:5c:71:31:08:45:77: 22:de:c4:14:c2:2c:6d:14:89:c1:8a:3c:d4:83:17:fa:df:6e: cf:ec:1f:ea:da:c4:96:79:c5:ef:d6:05:2b:de:a8:10:7f:aa: 66:e5:a9:5b:9c:cd:dd:4d:9d:6a:2a:fc:60:ff:c9:6f:3f:9a: e0:be:df:e3:2f:db:7a:b7:c4:29:2a:37:ab:05:6c:5d:a8:fa: bb:80:64:94:a1:72:72:4e:75:ec:23:6c:0d:83:5e:22:d6:9f: 8f:2d:62:43:f8:98:50:c2:04:e2:62:8d:c1:5a:58:45:16:3e: 46:1a:15:89:69:5a:c9:33:67:1b:06:4b:ae:5f:f0:71:4d:76: 7a:08:4e:e1:1d:9e:23:80:cf:0d:a3:45:2d:60:7c:a6:93:36: 3b:02:c7:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6R1VkiQqRTHaTTG5KOaqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjhlYjM2NmZjNmM4YTA5YmZiMTQwZjE1MDVmOWVjNjc1 ZDQyZTQwHhcNMjUxMjE4MTAwMjIyWhcNMjUxMjE5MTAwMjIyWjAzMTEwLwYDVQQD EygyOTJjZWUzZjU0Yzg3MmYxOTMyOWVlYzQ4OGU1OTBkN2Y5YzcyNjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2tyo3St0kbECVN65kCym0qWtjTA HOLJ1byZ6K1HpH3qDjVvOnxOPa6aZUPFwKbjjQiq6JJTp2hnfJxiPtaIkGpKiF0N vOxW9xMqF2eD1FfpIxq52qgeXl8Ghgl4x0/Gq+VMbu2eOkBVPtsUE8ybRWEofPlD Z47Jb4uFaGkmh7wg1UIcXUYI7WNR/He3OuL9vcUYn2vx7xS0l23YqwARVk/hEXhw z0I1tTxqKMWcRAIKyzN2qZ+eh1Zjg0ud9ownctB6igut8fDRixmhNeIfL1zqzSn1 8MNQEzFrujdFiGqvsXJA0aniU2JjW0LoUqahVPoQZ/1UXsoStKvucSdBOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCks7j9UyHLxkynuxIjlkNf5xyY6MB8GA1UdIwQY MBaAFGn46zZvxsigm/sUDxUF+exnXULkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZqck5tX0d5S0NiLXhRUEZRWDU3R2RkUXVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZGFkOGMtOWVkMy00ZjAxLWIxMDct NzQ4NmMwNTgyZjJhLzEvYWZqck5tX0d5S0NiLXhRUEZRWDU3R2RkUXVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9mZGFkOGMtOWVkMy00ZjAxLWIxMDctNzQ4NmMwNTgyZjJh LzEvYWZqck5tX0d5S0NiLXhRUEZRWDU3R2RkUXVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSYbLlgo pfGWPbRj0aLqIFfhYcbtgIa2IykSK0ZXZpKLZw41kgXYv+PbXvTECYAv+rJ8AMX7 VHSRNc5Bdp2TZZAj4t4kmEVhnHkckd53TEhsn1PqI4L4oteIjaOaW9McZ2Yg89Xq XHExCEV3It7EFMIsbRSJwYo81IMX+t9uz+wf6trElnnF79YFK96oEH+qZuWpW5zN 3U2dair8YP/Jbz+a4L7f4y/berfEKSo3qwVsXaj6u4BklKFyck517CNsDYNeItaf jy1iQ/iYUMIE4mKNwVpYRRY+RhoViWlayTNnGwZLrl/wcU12eghO4R2eI4DPDaNF LWB8ppM2OwLHFw== -----END CERTIFICATE-----Generated at Thu Dec 18 16:12:02 2025 by rpki-client