This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json) Hash identifier: TPFlA4a30HAfWHbj0Hguy9efk74ka5sq/UjLeu1a9Og= Subject key identifier: 8D:B7:27:0E:7F:09:6B:2B:FD:C4:4C:1E:85:DB:84:8B:A0:2C:99:65 Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56 Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456 Certificate serial: 019AF31CD1EF3945047F9875629E4FCE1D89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:02:23 +0000 Manifest this update: Sat 06 Dec 2025 10:02:23 +0000 Manifest next update: Sun 07 Dec 2025 10:02:23 +0000 Files and hashes: 1: 0ya4sfz42L60TJ0bcAyUqtENC28.roa (hash: 8fugK/0QqnnO0V3k6nBzfLlx/GUIRpJ1ovogrf7zS2I=) 2: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: +ph9xoj57MBHcopzaQMHH5SnssWAxyRZB9Pvx0uudSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d1:ef:39:45:04:7f:98:75:62:9e:4f:ce:1d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456 Validity Not Before: Dec 6 10:02:23 2025 GMT Not After : Dec 7 10:02:23 2025 GMT Subject: CN=8db7270e7f096b2bfdc44c1e85db848ba02c9965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:43:a4:7a:ca:f2:1b:e6:95:01:82:11:86:5f: 17:d0:45:fc:bd:8b:c0:a0:62:f4:36:e2:f0:ac:15: 9f:b9:5b:0a:a4:88:d6:ac:4b:c6:13:73:16:f1:4d: 0c:e3:82:7a:37:60:56:da:6b:46:e2:62:b3:90:1c: b0:2b:c6:b9:8c:15:de:8f:04:84:c3:42:74:6a:5a: e7:56:0d:61:e1:94:08:ad:9b:8c:ff:9f:61:f9:40: be:78:05:4a:d3:23:5a:91:fe:d1:8e:21:93:f3:2b: b4:d9:7c:bf:14:ae:c8:29:48:c6:b5:7d:e1:f5:26: 3a:55:a5:df:14:6f:fc:d8:79:80:2b:32:74:78:1f: 9b:07:46:78:47:c9:cf:10:79:b0:09:13:70:64:2a: a2:86:37:7d:fd:91:19:55:ea:fa:fb:d4:e6:b0:d8: 54:5f:42:5b:7f:c0:ef:fa:22:1d:18:fe:82:a8:d9: 4e:51:e9:47:46:c9:ce:c4:82:d2:c9:c9:57:ad:fc: 88:36:1e:2f:1d:4f:19:bb:9f:82:86:5e:aa:be:e4: af:72:b7:c6:33:43:32:ad:14:f6:42:00:22:aa:59: 0e:45:15:68:c5:32:6c:63:d1:03:73:9b:da:b7:90: fb:7a:56:d2:8d:08:12:9c:49:56:49:2a:8a:f7:85: cb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B7:27:0E:7F:09:6B:2B:FD:C4:4C:1E:85:DB:84:8B:A0:2C:99:65 X509v3 Authority Key Identifier: keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:cc:21:58:70:35:52:5b:50:a0:65:94:fb:8f:c8:66:1b:72: a7:78:15:06:5f:4d:fb:e0:0c:23:1b:d8:32:68:7a:b2:e6:21: de:aa:ae:ea:a1:3c:5e:08:11:31:28:c6:50:98:7d:ac:8f:6e: b3:e9:f1:47:8e:ed:08:57:5a:ee:16:9a:3f:ec:21:ab:c0:36: ad:1b:f5:de:1f:32:b8:bc:5f:a9:c3:a5:88:d3:0a:7e:f5:48: 73:00:a7:18:28:40:b6:81:fa:b1:f2:95:cb:6a:f5:f0:e1:26: c9:a8:e7:0a:ae:0a:6f:5b:be:c7:56:22:01:b1:18:9b:a9:8e: f7:6c:f5:d9:aa:15:1d:5c:03:d6:6e:1f:1f:b8:f2:89:1b:bf: ed:fb:76:51:d3:3c:5a:d2:e7:b3:10:d8:8b:2e:a7:75:74:c1: 81:23:db:4b:d2:e4:9c:99:cb:83:5b:b2:85:cf:36:3b:1d:ef: 0e:e3:45:8b:f2:09:0b:19:0b:a8:c3:5d:54:36:16:1e:bf:85: 9a:c0:8f:f4:e1:7b:3e:5c:04:e3:f2:63:12:55:80:a8:06:e8: bf:1a:06:ee:75:aa:ce:b5:9c:4b:76:8e:26:ce:96:28:61:35: 0d:83:de:8b:1e:dc:a3:f7:79:1c:bb:ac:66:39:7a:bf:a5:b8: a6:1c:6f:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNHvOUUEf5h1Yp5Pzh2JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNTQ4ODI0MDFiMDcyNDg2NGE4Y2NjYmFlYWZlNDJjODUy NDA0NTYwHhcNMjUxMjA2MTAwMjIzWhcNMjUxMjA3MTAwMjIzWjAzMTEwLwYDVQQD Eyg4ZGI3MjcwZTdmMDk2YjJiZmRjNDRjMWU4NWRiODQ4YmEwMmM5OTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EOkesryG+aVAYIRhl8X0EX8vYvA oGL0NuLwrBWfuVsKpIjWrEvGE3MW8U0M44J6N2BW2mtG4mKzkBywK8a5jBXejwSE w0J0alrnVg1h4ZQIrZuM/59h+UC+eAVK0yNakf7RjiGT8yu02Xy/FK7IKUjGtX3h 9SY6VaXfFG/82HmAKzJ0eB+bB0Z4R8nPEHmwCRNwZCqihjd9/ZEZVer6+9TmsNhU X0Jbf8Dv+iIdGP6CqNlOUelHRsnOxILSyclXrfyINh4vHU8Zu5+Chl6qvuSvcrfG M0MyrRT2QgAiqlkORRVoxTJsY9EDc5vat5D7elbSjQgSnElWSSqK94XL2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI23Jw5/CWsr/cRMHoXbhIugLJllMB8GA1UdIwQY MBaAFABUiCQBsHJIZKjMy66v5CyFJARWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUt NDZlZTk5YTFlZTMwLzEvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUtNDZlZTk5YTFlZTMw LzEvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8whWHA1 UltQoGWU+4/IZhtyp3gVBl9N++AMIxvYMmh6suYh3qqu6qE8XggRMSjGUJh9rI9u s+nxR47tCFda7haaP+whq8A2rRv13h8yuLxfqcOliNMKfvVIcwCnGChAtoH6sfKV y2r18OEmyajnCq4Kb1u+x1YiAbEYm6mO92z12aoVHVwD1m4fH7jyiRu/7ft2UdM8 WtLnsxDYiy6ndXTBgSPbS9LknJnLg1uyhc82Ox3vDuNFi/IJCxkLqMNdVDYWHr+F msCP9OF7PlwE4/JjElWAqAbovxoG7nWqzrWcS3aOJs6WKGE1DYPeix7co/d5HLus Zjl6v6W4phxv1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:22 2025 by rpki-client