This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft File: AF8NRLIh9LEcidtolp-Xw8cVSQY.mft (raw, json) Hash identifier: iU3rcf4CI/an6ue3zJoCNArJY7pm+OVnBH9Y0lFS8XM= Subject key identifier: 61:9B:6C:5D:7C:6C:5D:5E:71:52:53:22:B9:7A:76:79:D0:DC:14:0E Authority key identifier: 00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06 Certificate issuer: /CN=005f0d44b221f4b11c89db68969f97c3c7154906 Certificate serial: 019AF389A310464B98BA469F2C1276173958 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 12:01:14 +0000 Manifest this update: Sat 06 Dec 2025 12:01:14 +0000 Manifest next update: Sun 07 Dec 2025 12:01:14 +0000 Files and hashes: 1: AF8NRLIh9LEcidtolp-Xw8cVSQY.crl (hash: IAoIELLE1gwUQ15yHjVl2r7WGTDC+otQJK4ZY0DqAsw=) 2: YU4fCfmpK-fuEOwSolTjGJvHl-Q.roa (hash: jEvy+I1e+1GaLBXiJtzyH21Rx3ZNEpokSAtj3mt7uI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:a3:10:46:4b:98:ba:46:9f:2c:12:76:17:39:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=005f0d44b221f4b11c89db68969f97c3c7154906 Validity Not Before: Dec 6 12:01:14 2025 GMT Not After : Dec 7 12:01:14 2025 GMT Subject: CN=619b6c5d7c6c5d5e71525322b97a7679d0dc140e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fa:80:dd:f3:59:63:cc:2c:c9:97:66:84:21: db:de:7a:14:04:23:e8:45:96:4d:2a:f5:ff:22:53: e9:af:34:07:81:5f:9f:ac:8e:ab:44:1e:5a:36:10: c6:98:a4:89:f4:ea:f1:f0:38:7a:4e:87:cf:b4:89: bd:4c:71:be:5e:c1:c5:8d:b8:15:e1:1c:8a:ca:9d: 02:b5:8c:30:89:a4:46:63:3d:9b:c1:1f:29:62:38: 31:b7:bc:01:bc:46:aa:c1:0e:0b:c2:ad:18:1a:37: 16:a3:5f:27:51:f5:fd:8b:31:11:93:ca:2a:8f:6d: 07:85:f8:8d:23:98:c6:51:0c:9a:88:22:4e:da:a4: 13:01:30:a9:e0:11:7f:ba:cb:88:7c:4b:db:44:c9: 89:19:a7:1e:c3:19:00:9a:b5:4a:3b:c9:c9:7e:de: 9e:18:8f:69:66:0e:c1:ab:c6:09:48:9a:ed:bb:84: 6f:57:64:2b:39:00:c1:c0:e2:38:4e:48:3d:bd:3a: c2:1e:54:08:8f:3c:76:27:4d:f5:ab:d7:94:a1:5f: 87:cf:e9:b3:78:de:84:cc:a7:78:fc:7c:70:b3:5c: d7:10:b7:31:6c:99:77:e4:c1:81:33:fa:ed:a8:7d: 7e:ca:10:d6:8b:86:02:a4:32:24:1c:e8:80:ff:7a: 86:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9B:6C:5D:7C:6C:5D:5E:71:52:53:22:B9:7A:76:79:D0:DC:14:0E X509v3 Authority Key Identifier: keyid:00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ca:3b:33:9a:46:a3:32:42:5a:34:29:d4:d9:20:67:db:21: 9e:8e:25:6e:8b:28:97:5d:b3:98:2f:21:69:09:8e:8a:b6:0d: a2:01:14:46:33:f0:b9:d1:a5:65:6a:e6:26:39:ea:f0:96:aa: 45:7c:e8:f2:f6:5f:dc:e5:f8:ba:ac:59:82:73:ab:58:8b:1f: 3c:6e:39:76:de:6c:8b:60:33:7f:33:50:ab:30:44:79:f5:fd: 99:00:02:f6:28:3f:bc:c4:4a:5a:fd:68:b8:bb:79:4d:b7:96: e8:8c:cd:fa:a5:c8:c9:90:0b:df:5a:f8:f2:44:f1:48:a1:1b: f1:15:24:55:f3:bc:a1:65:ac:b9:f1:58:9a:d5:67:6a:6c:a9: 3c:2e:b5:25:84:4a:28:0c:91:5a:d6:6a:01:ae:8e:02:cb:d9: 0e:b4:ee:30:f6:f0:6b:30:f9:b1:ed:fa:cc:03:d3:30:fc:d7: 1a:97:15:06:02:29:d5:44:5b:0c:72:0d:f7:57:ff:60:4c:14: 34:78:26:e2:4b:d8:b8:59:b6:db:62:d4:db:d1:5d:74:4b:e6: 83:2b:1c:89:e9:e4:b3:f2:c0:2f:a5:34:28:ec:01:ec:b9:a8: 7b:96:3b:80:06:a0:b9:57:d3:dc:cc:0b:76:9d:db:2c:cd:54: ca:d9:1c:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziaMQRkuYukafLBJ2FzlYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNWYwZDQ0YjIyMWY0YjExYzg5ZGI2ODk2OWY5N2MzYzcx NTQ5MDYwHhcNMjUxMjA2MTIwMTE0WhcNMjUxMjA3MTIwMTE0WjAzMTEwLwYDVQQD Eyg2MTliNmM1ZDdjNmM1ZDVlNzE1MjUzMjJiOTdhNzY3OWQwZGMxNDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfqA3fNZY8wsyZdmhCHb3noUBCPo RZZNKvX/IlPprzQHgV+frI6rRB5aNhDGmKSJ9Orx8Dh6TofPtIm9THG+XsHFjbgV 4RyKyp0CtYwwiaRGYz2bwR8pYjgxt7wBvEaqwQ4Lwq0YGjcWo18nUfX9izERk8oq j20HhfiNI5jGUQyaiCJO2qQTATCp4BF/usuIfEvbRMmJGacewxkAmrVKO8nJft6e GI9pZg7Bq8YJSJrtu4RvV2QrOQDBwOI4Tkg9vTrCHlQIjzx2J031q9eUoV+Hz+mz eN6EzKd4/Hxws1zXELcxbJl35MGBM/rtqH1+yhDWi4YCpDIkHOiA/3qG/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGbbF18bF1ecVJTIrl6dnnQ3BQOMB8GA1UdIwQY MBaAFABfDUSyIfSxHInbaJafl8PHFUkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUY4TlJMSWg5TEVjaWR0b2xwLVh3OGNWU1FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82ODIzOWYtMDlhMy00MTA4LTg5YmEt ZWVlNTBkZDkxOTNjLzEvQUY4TlJMSWg5TEVjaWR0b2xwLVh3OGNWU1FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My82ODIzOWYtMDlhMy00MTA4LTg5YmEtZWVlNTBkZDkxOTNj LzEvQUY4TlJMSWg5TEVjaWR0b2xwLVh3OGNWU1FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8o7M5pG ozJCWjQp1NkgZ9shno4lbosol12zmC8haQmOirYNogEURjPwudGlZWrmJjnq8Jaq RXzo8vZf3OX4uqxZgnOrWIsfPG45dt5si2AzfzNQqzBEefX9mQAC9ig/vMRKWv1o uLt5TbeW6IzN+qXIyZAL31r48kTxSKEb8RUkVfO8oWWsufFYmtVnamypPC61JYRK KAyRWtZqAa6OAsvZDrTuMPbwazD5se36zAPTMPzXGpcVBgIp1URbDHIN91f/YEwU NHgm4kvYuFm222LU29FddEvmgyscienks/LAL6U0KOwB7Lmoe5Y7gAaguVfT3MwL dp3bLM1Uytkc7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:10 2025 by rpki-client