This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json) Hash identifier: Q0WjGC+tbLVjDk9dCCzruGTB+R7oQ4jhRZFu7OQkHuc= Subject key identifier: 55:D5:16:F7:39:25:01:57:5D:33:0A:4E:FA:2C:68:14:8D:01:A6:FD Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52 Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452 Certificate serial: 019AF1645417C6DF13C268AEFF84C1556953 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 02:01:15 +0000 Manifest this update: Sat 06 Dec 2025 02:01:15 +0000 Manifest next update: Sun 07 Dec 2025 02:01:15 +0000 Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: vxwlYn0P+zS+UfNff8qx85gN5C6rCantV7ptzhKi6dM=) 2: rFvQ7kKYqXPkmLuwIzu6v_5kUm4.roa (hash: sOutQCKMagct2n7Im9fbDePApSglLVIsuSmVsFlE9uM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:54:17:c6:df:13:c2:68:ae:ff:84:c1:55:69:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452 Validity Not Before: Dec 6 02:01:15 2025 GMT Not After : Dec 7 02:01:15 2025 GMT Subject: CN=55d516f7392501575d330a4efa2c68148d01a6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d8:97:99:91:b7:bb:7f:1f:49:5e:69:6e:bf: f4:8d:14:03:28:8b:4e:66:24:e8:fe:51:f2:ed:d9: 6a:4c:ee:eb:0b:30:ad:30:98:3e:27:cd:88:81:53: f9:56:19:88:09:02:ab:0c:cf:17:a4:b8:7d:49:43: b5:18:88:21:77:43:d2:77:a6:da:46:68:47:f7:0f: 9c:f3:72:9e:52:51:ad:0f:b2:e0:9d:df:55:c8:e4: 09:06:08:35:e3:b8:c3:84:14:1f:e2:86:f6:98:db: 9a:2a:40:1b:4c:1d:61:e9:80:ea:82:c0:c9:f7:08: f7:ac:fd:68:bb:2c:82:0f:63:7a:f2:14:7a:2e:2f: 0e:7c:1b:30:64:26:c3:29:4e:d0:4a:db:2a:ae:22: 2c:22:82:a9:16:06:c5:1f:13:05:54:98:1d:cb:3f: b0:02:a7:55:46:77:c3:a6:0c:8e:43:0e:8f:4c:e0: 8e:00:98:af:9a:72:05:c4:08:ca:7a:79:6f:2f:2c: f2:09:6d:a1:d5:6b:60:2f:4e:e1:b1:d5:41:a7:33: 81:6f:35:5c:15:0e:b9:76:e6:7e:71:87:0d:16:5f: 0a:a7:4f:a9:6a:f4:f6:25:38:e1:30:22:a3:92:c4: 8d:2f:5f:e1:6c:c0:d4:58:77:7f:c7:62:c3:87:f5: f2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D5:16:F7:39:25:01:57:5D:33:0A:4E:FA:2C:68:14:8D:01:A6:FD X509v3 Authority Key Identifier: keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:36:0a:72:18:17:05:53:15:17:c3:df:d5:7f:7f:df:f4:9b: 67:8a:12:a6:da:53:85:ed:d8:c5:fd:e2:10:b5:d3:72:e9:cf: 67:36:7a:60:96:57:5b:bf:59:48:72:6c:1e:7b:a9:eb:f6:9c: d7:77:d3:9d:e1:d5:f3:ad:fc:a5:58:ae:80:5b:de:58:80:fe: b3:24:91:71:e9:bd:45:74:10:27:34:62:94:8e:8f:1a:4c:c1: 60:b4:8b:bb:7a:15:04:8a:84:b5:84:c1:1d:b1:b4:3f:98:bb: 35:4e:6d:21:94:d1:6c:12:f1:1a:f8:af:1a:70:81:3c:b3:21: 9e:46:cf:f8:64:af:ca:67:16:d6:06:0e:e8:24:c9:13:75:72: fa:e2:5a:84:d9:d6:db:f6:4e:ce:1e:7d:af:c6:fe:30:e1:20: 72:e0:61:6b:87:e4:99:3b:59:36:99:30:25:8e:a8:56:1f:ea: 5d:5f:a3:6c:fb:0b:41:5d:e2:ec:b7:07:a4:77:07:f9:99:45: ea:2c:05:0a:8a:80:07:4c:6e:ec:b6:29:32:29:7e:87:fa:69: a2:58:db:49:52:f7:20:50:0a:cc:25:93:91:22:68:dc:a6:d0: db:b6:4f:cb:37:70:5b:52:84:79:1b:f3:0a:e8:d4:a5:9d:be: 7e:be:6f:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFQXxt8Twmiu/4TBVWlTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NTFhM2ZlZTc3ZTkyNDE0NjE3NzEyM2RkNjc1M2IwNmZk ZTI0NTIwHhcNMjUxMjA2MDIwMTE1WhcNMjUxMjA3MDIwMTE1WjAzMTEwLwYDVQQD Eyg1NWQ1MTZmNzM5MjUwMTU3NWQzMzBhNGVmYTJjNjgxNDhkMDFhNmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNiXmZG3u38fSV5pbr/0jRQDKItO ZiTo/lHy7dlqTO7rCzCtMJg+J82IgVP5VhmICQKrDM8XpLh9SUO1GIghd0PSd6ba RmhH9w+c83KeUlGtD7Lgnd9VyOQJBgg147jDhBQf4ob2mNuaKkAbTB1h6YDqgsDJ 9wj3rP1ouyyCD2N68hR6Li8OfBswZCbDKU7QStsqriIsIoKpFgbFHxMFVJgdyz+w AqdVRnfDpgyOQw6PTOCOAJivmnIFxAjKenlvLyzyCW2h1WtgL07hsdVBpzOBbzVc FQ65duZ+cYcNFl8Kp0+pavT2JTjhMCKjksSNL1/hbMDUWHd/x2LDh/Xy5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXVFvc5JQFXXTMKTvosaBSNAab9MB8GA1UdIwQY MBaAFGhRo/7nfpJBRhdxI91nU7Bv3iRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQt YTNiNTg2MjgwNjBkLzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQtYTNiNTg2MjgwNjBk LzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczYKchgX BVMVF8Pf1X9/3/SbZ4oSptpThe3Yxf3iELXTcunPZzZ6YJZXW79ZSHJsHnup6/ac 13fTneHV8638pViugFveWID+sySRcem9RXQQJzRilI6PGkzBYLSLu3oVBIqEtYTB HbG0P5i7NU5tIZTRbBLxGvivGnCBPLMhnkbP+GSvymcW1gYO6CTJE3Vy+uJahNnW 2/ZOzh59r8b+MOEgcuBha4fkmTtZNpkwJY6oVh/qXV+jbPsLQV3i7LcHpHcH+ZlF 6iwFCoqAB0xu7LYpMil+h/ppoljbSVL3IFAKzCWTkSJo3KbQ27ZPyzdwW1KEeRvz CujUpZ2+fr5vpA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:49 2025 by rpki-client