This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft File: afY2pbazoordg_l0Rtewg7lMPa4.mft (raw, json) Hash identifier: 1AV7FNRqjoX8vrkdshda3TepN1pgrD7MKORSB08C3FI= Subject key identifier: B0:BB:2D:4B:00:1F:F9:4B:D5:C2:0C:CC:9D:91:82:8F:2B:F9:03:ED Authority key identifier: 69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE Certificate issuer: /CN=69f636a5b6b3a28add83f97446d7b083b94c3dae Certificate serial: 019AF2AD9F6A7B49BD3B2A036FCF420D2371 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft Manifest number: 0731 Signing time: Sat 06 Dec 2025 08:00:56 +0000 Manifest this update: Sat 06 Dec 2025 08:00:56 +0000 Manifest next update: Sun 07 Dec 2025 08:00:56 +0000 Files and hashes: 1: Uq41S_TL-4cdbHQOXq-81k1Y6B0.roa (hash: imvcawPVkLTN2rqi9GrM6dLepGLRmW6IgQsJl3oa4vo=) 2: afY2pbazoordg_l0Rtewg7lMPa4.crl (hash: IBkHUhs3Zn0A7wh2RXpiLPdfcab6gVctPCeeveKtGK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:9f:6a:7b:49:bd:3b:2a:03:6f:cf:42:0d:23:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f636a5b6b3a28add83f97446d7b083b94c3dae Validity Not Before: Dec 6 08:00:56 2025 GMT Not After : Dec 7 08:00:56 2025 GMT Subject: CN=b0bb2d4b001ff94bd5c20ccc9d91828f2bf903ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5e:2a:60:01:c8:ea:ea:8f:59:33:cf:fd:8c: c5:06:de:fb:13:ae:93:94:55:21:90:0c:81:f2:9a: bd:e2:48:a4:59:9b:f0:24:10:82:52:62:f7:94:9e: de:c7:e4:7e:3f:0b:21:62:6e:4b:14:8d:09:7f:02: 24:94:cd:1e:2d:0e:66:05:95:1f:81:96:13:79:49: 7e:c9:cc:76:53:db:6a:1c:ea:5e:c8:87:17:c7:a0: 02:68:14:9e:cf:6c:b8:39:48:8c:35:5a:d1:f9:db: c0:be:81:95:64:41:bb:73:2b:ff:b4:dd:52:cd:dd: d2:ec:4d:87:83:66:0e:bb:d8:6b:90:60:e0:a5:d6: 7c:93:b9:b4:d4:83:21:fe:3c:d4:ad:a7:5b:e1:0a: 54:ce:b1:41:bc:4b:cf:fd:56:f4:0d:25:58:20:68: 8c:5a:68:79:01:0d:b6:f8:16:8f:d5:fc:88:6d:31: d3:43:c7:0a:78:90:3e:3e:e6:98:b6:67:43:ed:4b: b1:42:1d:db:89:51:07:b7:13:1f:b0:47:23:cb:c5: f8:79:2a:ec:f1:f2:83:f2:68:43:d1:42:0a:4f:e9: 35:3e:e8:31:62:3e:86:17:ba:7e:16:1e:c1:54:4f: 60:41:57:5b:92:43:d5:28:27:2f:e7:e4:2c:50:39: bc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BB:2D:4B:00:1F:F9:4B:D5:C2:0C:CC:9D:91:82:8F:2B:F9:03:ED X509v3 Authority Key Identifier: keyid:69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ee:47:dd:bf:ab:fc:27:13:09:46:09:94:ef:af:20:25:bd: 24:f3:6b:ad:4a:5c:77:8d:f1:c4:31:95:c0:a9:9b:8b:be:af: d6:d2:79:d2:2c:cb:c1:9c:a2:85:2e:54:72:e1:bb:e5:be:f6: 41:f0:10:51:b2:8e:ac:0f:4a:11:a1:c6:fd:b2:25:34:c5:3c: 63:62:0e:2d:71:4e:2d:21:56:0f:e0:41:74:8a:d5:08:0f:e2: ee:b7:ed:92:f3:04:b9:58:b9:42:b3:79:26:00:e8:19:1a:89: 5c:b7:a9:41:28:d0:9e:03:2a:8a:1a:96:04:a8:27:a3:97:a7: 24:55:66:3b:17:8f:ad:8e:02:c2:6a:fb:ed:7a:32:de:5c:87: 17:c2:da:4d:65:10:d0:c2:aa:2b:f3:cf:d8:c6:bf:b5:0b:b1: 78:34:ef:33:48:aa:4b:42:23:21:0f:75:13:94:38:e5:44:b3: b4:32:ef:d4:66:0f:f2:94:d3:c3:af:89:06:06:8c:98:4b:2c: d2:d6:d3:84:a2:71:49:82:d6:72:9e:ce:c6:2d:7a:94:7d:90: d3:7a:07:eb:0f:07:2c:52:53:97:67:df:26:61:40:4a:bc:d2: 52:d3:b1:f2:cc:88:a0:a0:10:7c:72:27:f1:5f:96:58:c9:aa: 46:10:09:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZ9qe0m9OyoDb89CDSNxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjYzNmE1YjZiM2EyOGFkZDgzZjk3NDQ2ZDdiMDgzYjk0 YzNkYWUwHhcNMjUxMjA2MDgwMDU2WhcNMjUxMjA3MDgwMDU2WjAzMTEwLwYDVQQD EyhiMGJiMmQ0YjAwMWZmOTRiZDVjMjBjY2M5ZDkxODI4ZjJiZjkwM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF4qYAHI6uqPWTPP/YzFBt77E66T lFUhkAyB8pq94kikWZvwJBCCUmL3lJ7ex+R+PwshYm5LFI0JfwIklM0eLQ5mBZUf gZYTeUl+ycx2U9tqHOpeyIcXx6ACaBSez2y4OUiMNVrR+dvAvoGVZEG7cyv/tN1S zd3S7E2Hg2YOu9hrkGDgpdZ8k7m01IMh/jzUradb4QpUzrFBvEvP/Vb0DSVYIGiM Wmh5AQ22+BaP1fyIbTHTQ8cKeJA+PuaYtmdD7UuxQh3biVEHtxMfsEcjy8X4eSrs 8fKD8mhD0UIKT+k1PugxYj6GF7p+Fh7BVE9gQVdbkkPVKCcv5+QsUDm89QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLC7LUsAH/lL1cIMzJ2Rgo8r+QPtMB8GA1UdIwQY MBaAFGn2NqW2s6KK3YP5dEbXsIO5TD2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZZMnBiYXpvb3JkZ19sMFJ0ZXdnN2xNUGE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lOTk5NTQtYzAwZi00MDE0LThlNzEt OGFlZTJiZjg5YjkxLzEvYWZZMnBiYXpvb3JkZ19sMFJ0ZXdnN2xNUGE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lOTk5NTQtYzAwZi00MDE0LThlNzEtOGFlZTJiZjg5Yjkx LzEvYWZZMnBiYXpvb3JkZ19sMFJ0ZXdnN2xNUGE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+5H3b+r /CcTCUYJlO+vICW9JPNrrUpcd43xxDGVwKmbi76v1tJ50izLwZyihS5UcuG75b72 QfAQUbKOrA9KEaHG/bIlNMU8Y2IOLXFOLSFWD+BBdIrVCA/i7rftkvMEuVi5QrN5 JgDoGRqJXLepQSjQngMqihqWBKgno5enJFVmOxePrY4Cwmr77Xoy3lyHF8LaTWUQ 0MKqK/PP2Ma/tQuxeDTvM0iqS0IjIQ91E5Q45USztDLv1GYP8pTTw6+JBgaMmEss 0tbThKJxSYLWcp7Oxi16lH2Q03oH6w8HLFJTl2ffJmFASrzSUtOx8syIoKAQfHIn 8V+WWMmqRhAJyg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:57 2025 by rpki-client