This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft File: aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json) Hash identifier: B862nMHm669QFs8yGkt7RrHBO2wvmJyhO27SmdzlgiY= Subject key identifier: 0F:E0:0D:14:3A:18:9B:4C:68:57:51:72:FF:6E:E3:98:BA:9B:85:98 Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E Certificate issuer: /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e Certificate serial: 019AF12EC42E2A2C8F2A1B7B612D74735948 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:02:45 +0000 Manifest this update: Sat 06 Dec 2025 01:02:45 +0000 Manifest next update: Sun 07 Dec 2025 01:02:45 +0000 Files and hashes: 1: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: UndMIc16SUl07MJYZwlcgsNysK+/xJi+xkIT+grd3Ik=) 2: qnXqSBmvIClWRdSX3rmYASI_2Pc.roa (hash: 2FNK4DlE8j3wOu3WxQxB7a85ZmjXWPid3Sa9pj/6S3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:c4:2e:2a:2c:8f:2a:1b:7b:61:2d:74:73:59:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e Validity Not Before: Dec 6 01:02:45 2025 GMT Not After : Dec 7 01:02:45 2025 GMT Subject: CN=0fe00d143a189b4c68575172ff6ee398ba9b8598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:6d:5e:88:93:97:7b:f6:9b:78:d9:2d:e8: 25:c3:47:94:32:59:1a:9a:a4:59:77:9d:9e:51:05: fa:6a:51:8e:61:60:96:9d:89:f5:53:81:45:3b:78: 4b:f1:3d:61:4e:93:39:9e:29:da:d4:4f:e5:c7:96: 95:8c:3a:ad:42:c0:77:dd:25:80:2a:6b:f7:bd:39: 1b:ac:81:2c:75:6a:a8:bb:4f:5f:57:2e:da:f7:62: 59:2d:61:48:80:73:36:85:dc:6f:cc:f6:67:7f:27: 4c:50:92:cf:df:ab:3d:93:ba:5c:7d:98:7a:ef:d7: c7:8b:6e:ec:9b:b0:cf:62:6e:ae:42:fd:6f:c1:be: f6:5c:3b:f2:14:0f:0d:b0:4e:22:fd:61:c3:cc:db: 2f:f4:f7:19:75:86:80:11:32:53:98:69:00:a4:66: 22:f8:52:76:01:22:ab:1a:b6:59:70:82:0b:03:09: 53:c1:f0:70:56:41:4e:9b:fd:6a:21:9f:6c:83:2e: 56:e0:b7:31:9f:41:6b:b3:5c:65:e9:9c:2a:83:6f: 2f:0c:63:e9:5a:b8:d1:c7:80:fc:19:99:66:bb:e5: bc:28:22:3c:6b:3c:20:2c:00:18:0a:0a:b7:45:5d: 00:46:6d:a9:5d:42:4f:96:b4:c6:cd:93:6e:83:b4: ee:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E0:0D:14:3A:18:9B:4C:68:57:51:72:FF:6E:E3:98:BA:9B:85:98 X509v3 Authority Key Identifier: keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:5a:34:cd:fa:11:1b:50:92:36:49:c6:c4:3b:50:bf:91:19: d6:20:e7:48:6a:9e:d8:e3:70:04:2d:b7:67:c1:6b:d8:eb:f1: cb:d3:19:7a:36:1a:0c:d2:75:f4:39:16:b5:5b:e9:27:63:be: 0b:5d:28:98:b1:11:43:51:7e:5d:f9:d9:99:f4:d6:d3:96:a1: 69:64:4d:cb:88:c3:1f:4b:30:0b:c6:61:f9:2b:ce:a0:e6:f4: 51:0f:20:fe:22:ec:db:af:87:7e:f9:91:67:c2:d7:5e:19:ef: 2e:f3:52:10:fb:c5:fb:b9:36:cd:48:a1:61:43:46:b6:6e:44: d7:9a:c9:ce:75:89:9e:b0:b8:a5:f8:69:54:cf:35:0a:1a:dd: b6:5e:a2:e7:d4:5b:07:90:9d:47:f4:6e:29:d0:78:5d:4b:5f: 9c:f1:a0:c3:1a:30:21:45:18:01:00:e0:80:b0:2e:05:26:fe: da:b0:b2:26:52:b3:d7:92:f3:8c:12:28:b6:7f:2a:9f:63:92: 80:31:6b:8d:43:c4:ea:de:f1:74:c1:2f:cf:2d:87:f1:c3:a8: 30:fc:e2:d5:f2:87:dd:2b:fe:a4:c8:81:29:ec:a5:41:b4:ab: d1:04:cf:cc:46:f8:be:05:e5:89:d8:33:09:47:f8:1b:77:fc: fa:72:b5:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsQuKiyPKht7YS10c1lIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NTdhOWJiMjk3ZjBiM2M0NDRhYjBhZjY3M2E1Mjc1MGU5 NzliNGUwHhcNMjUxMjA2MDEwMjQ1WhcNMjUxMjA3MDEwMjQ1WjAzMTEwLwYDVQQD EygwZmUwMGQxNDNhMTg5YjRjNjg1NzUxNzJmZjZlZTM5OGJhOWI4NTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr1tXoiTl3v2m3jZLeglw0eUMlka mqRZd52eUQX6alGOYWCWnYn1U4FFO3hL8T1hTpM5nina1E/lx5aVjDqtQsB33SWA Kmv3vTkbrIEsdWqou09fVy7a92JZLWFIgHM2hdxvzPZnfydMUJLP36s9k7pcfZh6 79fHi27sm7DPYm6uQv1vwb72XDvyFA8NsE4i/WHDzNsv9PcZdYaAETJTmGkApGYi +FJ2ASKrGrZZcIILAwlTwfBwVkFOm/1qIZ9sgy5W4Lcxn0Frs1xl6Zwqg28vDGPp WrjRx4D8GZlmu+W8KCI8azwgLAAYCgq3RV0ARm2pXUJPlrTGzZNug7TuXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/gDRQ6GJtMaFdRcv9u45i6m4WYMB8GA1UdIwQY MBaAFGhXqbspfws8REqwr2c6UnUOl5tOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUZlcHV5bF9DenhFU3JDdlp6cFNkUTZYbTA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85ZDBhMTUtZDU0Ni00OTcwLTlhODEt ODU5NmMyYWY5ZGNjLzEvYUZlcHV5bF9DenhFU3JDdlp6cFNkUTZYbTA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85ZDBhMTUtZDU0Ni00OTcwLTlhODEtODU5NmMyYWY5ZGNj LzEvYUZlcHV5bF9DenhFU3JDdlp6cFNkUTZYbTA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAulo0zfoR G1CSNknGxDtQv5EZ1iDnSGqe2ONwBC23Z8Fr2Ovxy9MZejYaDNJ19DkWtVvpJ2O+ C10omLERQ1F+XfnZmfTW05ahaWRNy4jDH0swC8Zh+SvOoOb0UQ8g/iLs26+HfvmR Z8LXXhnvLvNSEPvF+7k2zUihYUNGtm5E15rJznWJnrC4pfhpVM81Chrdtl6i59Rb B5CdR/RuKdB4XUtfnPGgwxowIUUYAQDggLAuBSb+2rCyJlKz15LzjBIotn8qn2OS gDFrjUPE6t7xdMEvzy2H8cOoMPzi1fKH3Sv+pMiBKeylQbSr0QTPzEb4vgXlidgz CUf4G3f8+nK1Hw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:35:39 2025 by rpki-client