This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft File: Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json) Hash identifier: tHH4w3VnyLs8QiWyTVlgy0YaJF0BQnnnSuXKKu0b9K8= Subject key identifier: 6B:E2:6E:A6:81:5A:66:0B:6D:B8:75:6A:7A:C8:55:0B:8C:A9:1F:0F Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C Certificate issuer: /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c Certificate serial: 019B3042CAD823DCFFEEAF0C25149BFC474E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft Manifest number: 04FA Signing time: Thu 18 Dec 2025 07:00:42 +0000 Manifest this update: Thu 18 Dec 2025 07:00:42 +0000 Manifest next update: Fri 19 Dec 2025 07:00:42 +0000 Files and hashes: 1: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: 4W8B49Rf7WmwDGhPK/1SYwgYhD8Y4jVGFCNK3udiPiM=) 2: Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa (hash: eSc+nFa0PsPsCuhZ0NSVf3t+L8KNOuXb5VC0gk1mWnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:ca:d8:23:dc:ff:ee:af:0c:25:14:9b:fc:47:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c Validity Not Before: Dec 18 07:00:42 2025 GMT Not After : Dec 19 07:00:42 2025 GMT Subject: CN=6be26ea6815a660b6db8756a7ac8550b8ca91f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a1:b9:23:d0:51:b2:9e:51:c0:b2:09:ba:9a: 26:0a:67:92:27:1e:64:4f:a5:b6:f1:db:1c:d6:5b: 60:36:76:e8:1b:b0:48:f2:e0:14:ec:47:e5:bf:46: 5f:be:6b:71:f5:c7:cc:54:9e:16:41:9c:77:35:11: 04:2a:9d:c1:8e:e2:d6:98:69:54:e2:80:c6:95:34: b2:cc:96:cb:3e:33:8b:4b:0b:a9:5a:f3:25:dd:7b: d8:8a:14:c0:0e:30:ee:c6:bd:44:b2:ab:7e:63:0e: 9a:01:28:b0:9f:36:fb:8a:b6:9c:87:68:f8:5d:6c: 0c:71:07:0d:26:25:bb:d3:0d:da:65:ae:d3:10:7c: 2b:be:cf:b6:e3:b6:6b:fa:c6:9c:a1:6a:16:b6:f4: ec:d0:3f:9d:ba:6d:95:f3:fe:c7:0a:60:48:a6:d3: 8c:1a:bb:ff:d5:5a:45:fb:f1:22:4e:04:ab:e2:f3: ad:95:38:34:04:a2:81:d8:e1:1a:1e:4f:18:0f:60: 60:30:90:91:73:7f:33:0e:27:e6:70:9f:aa:e5:cd: 68:7a:e5:3a:ab:fa:50:14:98:1c:60:85:2b:a7:ac: b1:e7:91:2c:fd:90:2e:7b:5e:3e:8d:82:15:ea:56: 70:81:af:c0:4d:5a:40:6d:18:26:58:31:c2:a8:6e: 92:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E2:6E:A6:81:5A:66:0B:6D:B8:75:6A:7A:C8:55:0B:8C:A9:1F:0F X509v3 Authority Key Identifier: keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:af:ca:45:7c:af:64:09:10:a2:73:5c:39:87:cb:7f:09:cb: cf:f9:51:16:d4:ae:cf:cd:f1:4e:6c:10:95:28:39:b4:0e:91: d7:19:d2:d7:26:5d:3b:ed:d1:7b:48:b2:c8:ba:3f:34:3e:e0: 7b:d8:e6:3f:96:e5:f0:bf:c9:c2:9e:bd:a5:51:15:04:49:c9: a3:52:22:f5:8d:95:99:12:96:a9:7e:a9:f0:61:62:08:02:3c: d0:09:55:68:8e:44:5b:b6:4a:ca:fa:69:74:7b:31:dc:79:e6: fd:f1:b4:2e:28:da:d4:6b:48:ce:e1:fe:d3:93:e9:89:df:1b: 80:a2:90:b7:fa:18:f5:d4:a1:2f:5b:fa:14:75:73:82:ee:07: 1d:63:56:cb:a6:2d:5b:ba:f2:63:4d:24:ba:e5:ad:ba:80:bc: fa:46:7c:86:98:fd:db:13:a5:aa:fd:77:f1:63:c4:fa:39:60: 91:59:63:84:27:38:49:88:47:16:44:db:34:68:90:ee:94:76: 9e:cf:ef:74:c2:00:95:f0:83:1e:03:29:a0:2d:49:17:58:b4: 6b:c9:75:5e:13:e8:f8:b7:de:f6:7b:90:ac:bc:5b:7f:8e:79: b5:3f:2e:c7:68:ef:44:6c:cf:d3:0c:35:da:4b:a9:5f:12:45: 7a:47:70:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQsrYI9z/7q8MJRSb/EdOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZmU4ODI1Y2UyOTExNWVjNzFjZGNjZmMzNTVkODFhMzVm ZDdlOGMwHhcNMjUxMjE4MDcwMDQyWhcNMjUxMjE5MDcwMDQyWjAzMTEwLwYDVQQD Eyg2YmUyNmVhNjgxNWE2NjBiNmRiODc1NmE3YWM4NTUwYjhjYTkxZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqG5I9BRsp5RwLIJupomCmeSJx5k T6W28dsc1ltgNnboG7BI8uAU7Eflv0Zfvmtx9cfMVJ4WQZx3NREEKp3BjuLWmGlU 4oDGlTSyzJbLPjOLSwupWvMl3XvYihTADjDuxr1Esqt+Yw6aASiwnzb7irach2j4 XWwMcQcNJiW70w3aZa7TEHwrvs+247Zr+sacoWoWtvTs0D+dum2V8/7HCmBIptOM Grv/1VpF+/EiTgSr4vOtlTg0BKKB2OEaHk8YD2BgMJCRc38zDifmcJ+q5c1oeuU6 q/pQFJgcYIUrp6yx55Es/ZAue14+jYIV6lZwga/ATVpAbRgmWDHCqG6SpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvibqaBWmYLbbh1anrIVQuMqR8PMB8GA1UdIwQY MBaAFAH+iCXOKRFexxzcz8NV2Bo1/X6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wZWU1NTgtZjA4Yy00MmNhLWE5NTMt NTM4MjhmNDNmZWEwLzEvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wZWU1NTgtZjA4Yy00MmNhLWE5NTMtNTM4MjhmNDNmZWEw LzEvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUq/KRXyv ZAkQonNcOYfLfwnLz/lRFtSuz83xTmwQlSg5tA6R1xnS1yZdO+3Re0iyyLo/ND7g e9jmP5bl8L/Jwp69pVEVBEnJo1Ii9Y2VmRKWqX6p8GFiCAI80AlVaI5EW7ZKyvpp dHsx3Hnm/fG0Lija1GtIzuH+05Ppid8bgKKQt/oY9dShL1v6FHVzgu4HHWNWy6Yt W7ryY00kuuWtuoC8+kZ8hpj92xOlqv138WPE+jlgkVljhCc4SYhHFkTbNGiQ7pR2 ns/vdMIAlfCDHgMpoC1JF1i0a8l1XhPo+Lfe9nuQrLxbf455tT8ux2jvRGzP0ww1 2kupXxJFekdwSg== -----END CERTIFICATE-----Generated at Thu Dec 18 13:36:33 2025 by rpki-client