This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft File: afjrNm_GyKCb-xQPFQX57GddQuQ.mft (raw, json) Hash identifier: BZRhm9jSwT0DQAJkqLH/D9yNZfpRWbaRuLJJ4W/sXsE= Subject key identifier: FE:F2:8F:1B:8F:EA:E1:45:F0:35:9F:97:A8:E2:D3:3A:60:CC:18:F2 Authority key identifier: 69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4 Certificate issuer: /CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4 Certificate serial: 019AF12D8FFA9687AECDC2720E707C157B40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft Manifest number: 0A35 Signing time: Sat 06 Dec 2025 01:01:26 +0000 Manifest this update: Sat 06 Dec 2025 01:01:26 +0000 Manifest next update: Sun 07 Dec 2025 01:01:26 +0000 Files and hashes: 1: afjrNm_GyKCb-xQPFQX57GddQuQ.crl (hash: oTXgW9Np8oXPR2Kp1oo9+PoqNKPbS39ZFKfbJumGDqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:8f:fa:96:87:ae:cd:c2:72:0e:70:7c:15:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4 Validity Not Before: Dec 6 01:01:26 2025 GMT Not After : Dec 7 01:01:26 2025 GMT Subject: CN=fef28f1b8feae145f0359f97a8e2d33a60cc18f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a1:c0:d3:a7:c0:55:ab:bb:9a:da:64:56:0d: d8:f4:25:29:cf:05:d1:37:ce:b8:74:bc:28:88:fb: 4f:5e:03:14:3f:bb:97:a8:ab:db:eb:4c:fb:de:29: 52:46:b7:15:3d:6f:43:be:3b:28:2c:88:5d:1d:fa: e9:95:db:bf:74:0e:5c:61:5d:0f:e5:36:d9:05:bf: b6:3e:c5:66:67:cb:3c:67:e1:34:31:c2:29:d4:8f: b0:8d:e6:e0:40:f2:53:a7:3e:57:9e:6b:ae:b8:ea: 89:6b:c1:b9:a9:e2:05:fa:7c:96:5e:13:3d:a9:e9: fe:b7:b0:14:18:d8:9c:ee:a6:38:17:a0:b0:30:b9: d9:bf:f0:f9:40:18:7c:58:0a:62:20:6c:42:d2:c7: 78:24:c9:c6:85:68:d6:e9:1a:b7:19:6b:88:39:3b: 36:e0:39:72:83:e5:59:20:a3:eb:91:b4:32:4b:b1: 56:8d:7e:a4:aa:ee:58:03:af:e6:eb:9f:41:48:d4: 83:d6:16:ec:7f:40:f5:b4:e7:89:50:b2:28:ee:e4: 94:05:4a:4f:7a:84:3e:e1:1a:ea:95:e3:3b:37:85: 1e:15:fe:e8:31:b5:08:b8:9d:cd:34:3d:84:7a:b9: f6:da:ed:95:fc:35:b5:83:7b:67:81:8d:3b:b3:6c: c0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F2:8F:1B:8F:EA:E1:45:F0:35:9F:97:A8:E2:D3:3A:60:CC:18:F2 X509v3 Authority Key Identifier: keyid:69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:06:e7:f8:fb:f3:71:40:15:ea:e1:2f:9b:6d:f1:a5:87:9b: 4c:2f:6d:9d:6f:95:09:3b:f7:fa:24:18:29:72:b4:97:08:f2: 30:09:8f:7e:fe:77:73:53:28:ff:4e:36:3a:40:05:3c:d4:69: 22:57:fe:39:db:ca:60:b6:ed:86:bd:58:97:d3:6e:3f:f9:eb: 60:e8:c8:2c:5b:4e:45:ef:ea:a1:3c:20:67:aa:1b:78:99:81: 2e:79:73:df:51:8d:15:76:46:0d:25:aa:4d:c8:7d:19:51:1f: 3a:a9:eb:77:52:53:26:e7:ad:c1:d7:ab:4b:4f:48:55:a5:bf: 18:50:6e:68:3d:03:6f:03:38:f6:e4:e5:8b:e7:35:5f:e4:88: 24:28:fd:4e:0c:02:26:06:ea:9a:66:1c:e3:76:ba:60:b0:70: b3:a1:b5:42:60:86:39:cf:8c:95:03:b0:0b:70:c4:51:e3:11: ce:46:29:7a:54:bd:77:9f:b7:61:5f:7f:42:e1:5c:d5:b1:f9: f4:b4:96:43:a2:1b:b3:1e:86:ba:b3:1f:ee:f2:4c:19:ae:18: 65:74:3e:02:01:e3:0b:b4:3a:46:be:ad:44:9d:a1:1a:7e:27: ff:5f:7b:ee:29:91:ac:78:60:b3:95:81:c5:19:4b:b0:15:9b: 45:de:f4:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLY/6loeuzcJyDnB8FXtAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjhlYjM2NmZjNmM4YTA5YmZiMTQwZjE1MDVmOWVjNjc1 ZDQyZTQwHhcNMjUxMjA2MDEwMTI2WhcNMjUxMjA3MDEwMTI2WjAzMTEwLwYDVQQD EyhmZWYyOGYxYjhmZWFlMTQ1ZjAzNTlmOTdhOGUyZDMzYTYwY2MxOGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6HA06fAVau7mtpkVg3Y9CUpzwXR N864dLwoiPtPXgMUP7uXqKvb60z73ilSRrcVPW9DvjsoLIhdHfrpldu/dA5cYV0P 5TbZBb+2PsVmZ8s8Z+E0McIp1I+wjebgQPJTpz5XnmuuuOqJa8G5qeIF+nyWXhM9 qen+t7AUGNic7qY4F6CwMLnZv/D5QBh8WApiIGxC0sd4JMnGhWjW6Rq3GWuIOTs2 4Dlyg+VZIKPrkbQyS7FWjX6kqu5YA6/m659BSNSD1hbsf0D1tOeJULIo7uSUBUpP eoQ+4RrqleM7N4UeFf7oMbUIuJ3NND2Eern22u2V/DW1g3tngY07s2zA5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7yjxuP6uFF8DWfl6ji0zpgzBjyMB8GA1UdIwQY MBaAFGn46zZvxsigm/sUDxUF+exnXULkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZqck5tX0d5S0NiLXhRUEZRWDU3R2RkUXVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZGFkOGMtOWVkMy00ZjAxLWIxMDct NzQ4NmMwNTgyZjJhLzEvYWZqck5tX0d5S0NiLXhRUEZRWDU3R2RkUXVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9mZGFkOGMtOWVkMy00ZjAxLWIxMDctNzQ4NmMwNTgyZjJh LzEvYWZqck5tX0d5S0NiLXhRUEZRWDU3R2RkUXVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwbn+Pvz cUAV6uEvm23xpYebTC9tnW+VCTv3+iQYKXK0lwjyMAmPfv53c1Mo/042OkAFPNRp Ilf+OdvKYLbthr1Yl9NuP/nrYOjILFtORe/qoTwgZ6obeJmBLnlz31GNFXZGDSWq Tch9GVEfOqnrd1JTJuetwderS09IVaW/GFBuaD0DbwM49uTli+c1X+SIJCj9TgwC JgbqmmYc43a6YLBws6G1QmCGOc+MlQOwC3DEUeMRzkYpelS9d5+3YV9/QuFc1bH5 9LSWQ6Ibsx6GurMf7vJMGa4YZXQ+AgHjC7Q6Rr6tRJ2hGn4n/1977imRrHhgs5WB xRlLsBWbRd706Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:06 2025 by rpki-client