This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft File: apN9la67vmK5DyTepNZjFwpmWew.mft (raw, json) Hash identifier: qz4DUhxAVu7Xlngts7zUgHwPQqlwoIXaXlCIq6Nrxyc= Subject key identifier: 5D:E2:EE:05:09:08:D7:FA:79:70:29:04:58:CD:C4:10:2C:34:9F:1A Authority key identifier: 6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC Certificate issuer: /CN=6a937d95aebbbe62b90f24dea4d663170a6659ec Certificate serial: 019AF23F6B3CDDB4AADCC903D65AABF1BC7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft Manifest number: 0E30 Signing time: Sat 06 Dec 2025 06:00:33 +0000 Manifest this update: Sat 06 Dec 2025 06:00:33 +0000 Manifest next update: Sun 07 Dec 2025 06:00:33 +0000 Files and hashes: 1: apN9la67vmK5DyTepNZjFwpmWew.crl (hash: kWUEtlyTRMucWZuz7iIw+bEYQo/tZWKCW1fsNhEX/Zk=) 2: yLRog1k-iJohsHlS9HFe5cUcYWg.roa (hash: ZlXdhSl4IFvEbzgGzHY+LvPAZzUFdSUq8xFm3+GUTOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6b:3c:dd:b4:aa:dc:c9:03:d6:5a:ab:f1:bc:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a937d95aebbbe62b90f24dea4d663170a6659ec Validity Not Before: Dec 6 06:00:33 2025 GMT Not After : Dec 7 06:00:33 2025 GMT Subject: CN=5de2ee050908d7fa7970290458cdc4102c349f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ae:04:9a:b6:88:64:05:f2:b4:62:fe:4a:cd: 54:fe:7f:1d:23:c8:a9:0c:05:fa:6f:9f:ad:48:8a: be:8d:77:67:1a:e4:31:64:9c:38:fa:d8:15:83:a6: bb:1b:f2:21:62:92:fd:af:9e:74:de:0e:16:82:d2: 7f:53:c3:2f:7a:ee:d6:ab:62:23:86:6e:8b:80:a8: fc:4c:b9:2e:2e:05:18:14:5e:7b:43:36:44:29:8f: 6d:a2:a6:77:14:72:f4:68:43:90:43:50:27:38:a0: ef:84:10:e4:23:44:b5:6a:92:49:fc:8e:51:be:5f: af:58:ed:81:78:89:9a:c1:03:6a:94:63:9b:f1:c3: 12:a8:c6:80:2b:a3:92:c2:6f:de:7c:42:54:0c:4d: 40:a2:ac:2a:c0:9a:07:94:4a:95:51:94:7d:44:71: 5a:e8:3a:1e:14:ed:1f:51:c5:e5:df:0d:ae:8c:22: 6b:57:4b:9e:ff:98:56:a0:b5:d3:16:a7:d7:68:08: 2d:a6:4a:c8:ba:91:59:64:dc:13:6d:60:2a:2e:f5: 79:74:d2:8d:a2:5c:20:df:ed:3e:59:de:2a:bc:cc: b9:64:21:f7:7a:17:0f:ae:5d:b4:b0:9b:f4:2d:eb: b5:52:22:25:e4:6b:72:f7:c1:a5:cd:a2:40:3f:fd: 3e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E2:EE:05:09:08:D7:FA:79:70:29:04:58:CD:C4:10:2C:34:9F:1A X509v3 Authority Key Identifier: keyid:6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ac:fa:3a:e5:2f:52:88:88:d8:26:20:20:f2:26:eb:e0:2f: db:b5:b9:a3:0c:04:69:55:c3:18:00:3e:32:78:0c:90:bd:a4: 3a:6d:f9:cd:29:3c:b3:a3:91:97:68:b5:2d:a9:09:16:ae:24: 25:96:19:f4:97:26:1b:36:67:a7:d6:85:a7:aa:f3:5c:00:ef: 53:bf:dd:c1:23:07:dd:00:9a:45:ae:97:90:77:ca:93:b2:0c: bb:2a:bc:8b:f4:27:70:b0:52:a0:08:0d:83:bf:97:c3:bf:92: 7f:54:72:bc:c1:ec:7a:31:f0:52:a0:ce:04:d7:93:63:c5:cf: 9f:99:76:40:88:f2:3b:f3:b9:85:80:e7:73:74:c9:5c:fc:64: 44:26:8f:81:39:d7:ab:13:38:d1:cb:66:e3:b6:e6:a2:e9:d2: 74:cf:9c:5c:c7:dc:ef:3a:c7:89:9a:42:a7:0d:dd:1b:fa:28: db:6d:4b:d6:41:ed:8c:85:60:da:d5:fd:30:41:43:28:e0:ca: 3e:00:b3:db:5f:ca:ff:e5:9d:02:d0:27:fb:7f:17:ef:1a:0f: 20:1d:d8:a6:5f:19:e5:0c:59:ad:bd:9d:55:b0:18:27:aa:ab: 2c:95:f4:63:81:8d:a9:28:4f:84:42:be:71:62:53:d3:77:a8: 30:0e:d6:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2s83bSq3MkD1lqr8bx+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOTM3ZDk1YWViYmJlNjJiOTBmMjRkZWE0ZDY2MzE3MGE2 NjU5ZWMwHhcNMjUxMjA2MDYwMDMzWhcNMjUxMjA3MDYwMDMzWjAzMTEwLwYDVQQD Eyg1ZGUyZWUwNTA5MDhkN2ZhNzk3MDI5MDQ1OGNkYzQxMDJjMzQ5ZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK4EmraIZAXytGL+Ss1U/n8dI8ip DAX6b5+tSIq+jXdnGuQxZJw4+tgVg6a7G/IhYpL9r5503g4WgtJ/U8Mveu7Wq2Ij hm6LgKj8TLkuLgUYFF57QzZEKY9toqZ3FHL0aEOQQ1AnOKDvhBDkI0S1apJJ/I5R vl+vWO2BeImawQNqlGOb8cMSqMaAK6OSwm/efEJUDE1AoqwqwJoHlEqVUZR9RHFa 6DoeFO0fUcXl3w2ujCJrV0ue/5hWoLXTFqfXaAgtpkrIupFZZNwTbWAqLvV5dNKN olwg3+0+Wd4qvMy5ZCH3ehcPrl20sJv0Leu1UiIl5Gty98GlzaJAP/0+bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3i7gUJCNf6eXApBFjNxBAsNJ8aMB8GA1UdIwQY MBaAFGqTfZWuu75iuQ8k3qTWYxcKZlnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YzVjZDItMTkyMC00NTY0LWJjMmMt OTQxNzdmOGQ4NzdjLzEvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS82YzVjZDItMTkyMC00NTY0LWJjMmMtOTQxNzdmOGQ4Nzdj LzEvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6z6OuUv UoiI2CYgIPIm6+Av27W5owwEaVXDGAA+MngMkL2kOm35zSk8s6ORl2i1LakJFq4k JZYZ9JcmGzZnp9aFp6rzXADvU7/dwSMH3QCaRa6XkHfKk7IMuyq8i/QncLBSoAgN g7+Xw7+Sf1RyvMHsejHwUqDOBNeTY8XPn5l2QIjyO/O5hYDnc3TJXPxkRCaPgTnX qxM40ctm47bmounSdM+cXMfc7zrHiZpCpw3dG/oo221L1kHtjIVg2tX9MEFDKODK PgCz21/K/+WdAtAn+38X7xoPIB3Ypl8Z5QxZrb2dVbAYJ6qrLJX0Y4GNqShPhEK+ cWJT03eoMA7WAw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:37:00 2025 by rpki-client