This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft File: aFeXIsOgywwzUcWV36PX6tgfFr8.mft (raw, json) Hash identifier: iCRcXh8IYaa+GxyXlALuX3AFcC2tZuysuP6yfKfSP4E= Subject key identifier: C6:1D:47:67:F4:AB:8B:B7:E8:85:0F:6D:76:C6:C3:AB:9E:AA:20:A8 Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF Certificate issuer: /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf Certificate serial: 019AF1D22DDC468339918DFE3A52D5C54E94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 04:01:14 +0000 Manifest this update: Sat 06 Dec 2025 04:01:14 +0000 Manifest next update: Sun 07 Dec 2025 04:01:14 +0000 Files and hashes: 1: 5kpPrp0PsQaLwN-0f4M5ORyJaIo.roa (hash: sRLtBcmB7NMgyGt87xrsnTDd/kvjgxEDyhMytt8u1mY=) 2: TEQ2s_TPddXgs2TBHawu_QRXdAY.roa (hash: v8GdY3sNaK+PD8iTL9fBBYBUT72JOPHFN0JrePdltX0=) 3: aFeXIsOgywwzUcWV36PX6tgfFr8.crl (hash: uJoB6EjXWbC4wnsdlrNeEh1gELS5mAfNGu7/7+/kNec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2d:dc:46:83:39:91:8d:fe:3a:52:d5:c5:4e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf Validity Not Before: Dec 6 04:01:14 2025 GMT Not After : Dec 7 04:01:14 2025 GMT Subject: CN=c61d4767f4ab8bb7e8850f6d76c6c3ab9eaa20a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:02:7c:3f:2b:fd:b5:59:cb:3a:c8:ea:ba:1d: fb:c8:2c:65:bf:8b:84:f0:5a:16:95:46:3d:e0:bf: 33:c6:1f:92:c1:7c:71:15:52:0d:4e:3f:62:e4:dd: f5:ed:12:8f:4f:04:82:51:d6:b0:48:5a:28:cb:48: b1:b1:53:fa:ae:63:ae:21:97:3e:a9:4f:87:cd:b5: af:32:3b:da:01:24:ce:77:df:68:f1:68:8e:2e:9c: a8:8f:5a:fe:3f:6a:e1:f7:cf:5c:6a:79:33:67:60: ed:dd:06:f4:ff:47:94:4c:53:d9:77:7d:df:1f:dc: 2c:b7:61:ef:1d:e9:86:8a:a1:7f:ee:58:ea:6d:f6: f1:03:8f:a1:b1:de:2a:3f:9a:f3:c8:01:37:05:54: cb:f3:a8:23:0f:57:cb:d0:42:44:7b:ed:9d:8c:d2: 12:f0:1e:27:e8:df:e7:db:99:b2:a8:c5:1e:e3:cf: 16:a2:ce:c6:1f:04:c1:d5:a5:69:9d:84:35:be:37: f9:1d:b6:61:ca:21:0b:8e:0c:fb:97:64:39:27:60: b4:21:42:72:a0:4a:c0:db:5b:bf:91:68:6c:7e:27: 29:5d:87:5e:31:b6:00:bd:b9:99:df:8c:25:2f:fe: 06:cc:ec:43:97:bb:62:4f:82:df:2c:46:df:3d:7c: 84:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1D:47:67:F4:AB:8B:B7:E8:85:0F:6D:76:C6:C3:AB:9E:AA:20:A8 X509v3 Authority Key Identifier: keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:db:67:90:bc:98:5c:98:28:00:67:36:d9:bb:14:fb:fc:32: fa:07:1a:d0:d3:a0:7d:d9:5d:d7:05:2e:0d:72:24:95:be:6e: 21:c0:1d:d1:dd:99:45:b3:c9:47:37:96:63:1a:55:e5:46:9a: 5c:ba:0d:37:e2:97:d1:b4:e0:96:b1:90:d4:aa:cc:ef:f6:00: fb:71:f3:f2:b2:65:22:07:75:fe:79:eb:6e:c8:96:50:db:c3: e6:27:4b:33:11:ae:10:67:ce:95:ab:7f:7a:a9:e2:54:83:8c: 72:ae:97:65:28:a5:c5:c1:7d:1f:4c:b3:4e:62:02:35:ca:36: d2:ff:09:70:f6:b9:49:83:0b:ee:a1:73:b3:22:02:1f:a0:85: 60:35:a3:fe:1c:53:a5:e7:92:ff:d5:15:f4:f4:ad:e8:73:e6: a1:06:6d:10:21:db:b9:5d:ce:4c:dd:47:51:00:1e:7a:40:1b: b2:46:b1:91:88:65:4d:84:50:2f:60:f2:18:c9:58:ce:12:3c: 39:49:b0:d3:79:d9:76:dd:a7:60:73:9d:a8:ea:2d:47:32:e9: f1:86:84:24:8a:75:5f:0f:de:dc:fb:a2:c9:01:ad:84:04:ff: bf:b3:7a:43:e2:8d:7b:af:d6:31:35:66:23:49:ac:66:0c:e3: 66:40:b3:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0i3cRoM5kY3+OlLVxU6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NTc5NzIyYzNhMGNiMGMzMzUxYzU5NWRmYTNkN2VhZDgx ZjE2YmYwHhcNMjUxMjA2MDQwMTE0WhcNMjUxMjA3MDQwMTE0WjAzMTEwLwYDVQQD EyhjNjFkNDc2N2Y0YWI4YmI3ZTg4NTBmNmQ3NmM2YzNhYjllYWEyMGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQJ8Pyv9tVnLOsjquh37yCxlv4uE 8FoWlUY94L8zxh+SwXxxFVINTj9i5N317RKPTwSCUdawSFooy0ixsVP6rmOuIZc+ qU+HzbWvMjvaASTOd99o8WiOLpyoj1r+P2rh989cankzZ2Dt3Qb0/0eUTFPZd33f H9wst2HvHemGiqF/7ljqbfbxA4+hsd4qP5rzyAE3BVTL86gjD1fL0EJEe+2djNIS 8B4n6N/n25myqMUe488Wos7GHwTB1aVpnYQ1vjf5HbZhyiELjgz7l2Q5J2C0IUJy oErA21u/kWhsficpXYdeMbYAvbmZ34wlL/4GzOxDl7tiT4LfLEbfPXyEaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYdR2f0q4u36IUPbXbGw6ueqiCoMB8GA1UdIwQY MBaAFGhXlyLDoMsMM1HFld+j1+rYHxa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUZlWElzT2d5d3d6VWNXVjM2UFg2dGdmRnI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mYTgzNmMtMWNkMy00YmE3LWI1OTgt OWY1NTk3YjU2Yjc2LzEvYUZlWElzT2d5d3d6VWNXVjM2UFg2dGdmRnI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9mYTgzNmMtMWNkMy00YmE3LWI1OTgtOWY1NTk3YjU2Yjc2 LzEvYUZlWElzT2d5d3d6VWNXVjM2UFg2dGdmRnI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNtnkLyY XJgoAGc22bsU+/wy+gca0NOgfdld1wUuDXIklb5uIcAd0d2ZRbPJRzeWYxpV5Uaa XLoNN+KX0bTglrGQ1KrM7/YA+3Hz8rJlIgd1/nnrbsiWUNvD5idLMxGuEGfOlat/ eqniVIOMcq6XZSilxcF9H0yzTmICNco20v8JcPa5SYML7qFzsyICH6CFYDWj/hxT peeS/9UV9PSt6HPmoQZtECHbuV3OTN1HUQAeekAbskaxkYhlTYRQL2DyGMlYzhI8 OUmw03nZdt2nYHOdqOotRzLp8YaEJIp1Xw/e3PuiyQGthAT/v7N6Q+KNe6/WMTVm I0msZgzjZkCz+g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:23 2025 by rpki-client