This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft File: afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json) Hash identifier: m40HpmvEDhdTXeITpKi9+jAL0YxORnZ64gEndZaxE1k= Subject key identifier: 26:69:1B:08:A1:B1:69:E5:58:07:66:26:9C:21:9D:42:10:CC:B9:2C Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05 Certificate issuer: /CN=69f1a6b4804bb6a3854a44e1069f257267417805 Certificate serial: 019AF12D8F84B2E2487FAA37F9CC9A51B6F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft Manifest number: 0537 Signing time: Sat 06 Dec 2025 01:01:26 +0000 Manifest this update: Sat 06 Dec 2025 01:01:26 +0000 Manifest next update: Sun 07 Dec 2025 01:01:26 +0000 Files and hashes: 1: Skkt9qCmFcjyoJKLbWcw_zW-zv4.roa (hash: oMEM2PX5h0QQNYCkDuZtaf8uG3ceVoU4JnbpV2MwKWM=) 2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: DfdRksY0Ct7LJNCRVKrRVuSBSAvZU7XaUuSNLZg4mvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:8f:84:b2:e2:48:7f:aa:37:f9:cc:9a:51:b6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805 Validity Not Before: Dec 6 01:01:26 2025 GMT Not After : Dec 7 01:01:26 2025 GMT Subject: CN=26691b08a1b169e5580766269c219d4210ccb92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:b8:14:e7:cf:04:7e:1d:4c:24:de:cd:c6: 94:a7:42:ea:60:dd:29:ec:9f:dd:bd:78:a1:47:ce: bf:8e:f2:2d:4a:a0:82:37:ec:3c:10:24:20:8a:24: fd:8f:f6:32:5f:a5:51:f8:56:61:55:c1:cd:32:f2: 85:a1:08:7b:e5:00:9c:da:0b:8c:01:86:76:06:fc: da:de:9f:8a:3c:49:50:98:68:93:45:0e:c1:ce:a4: 43:7a:9e:9d:eb:41:83:89:a5:bc:29:df:9c:0f:83: 9f:d5:b3:de:5e:52:9a:db:d9:ed:ee:f3:30:50:1c: ea:a2:47:06:7d:fe:f0:a9:d7:77:3f:90:7e:91:22: 22:24:d7:7c:43:43:2e:19:d8:76:08:23:fc:27:2a: 3e:e3:6d:8f:b8:22:4d:ee:6d:8f:56:9d:4c:c3:d1: 25:62:7c:e7:c7:a3:f5:fa:bd:65:f8:54:18:a3:64: 37:27:76:87:3d:68:b2:ca:e0:58:e7:84:00:ec:45: d6:b3:f4:35:18:b4:f3:4f:b8:b7:91:c2:f5:2b:db: a8:2c:ef:17:81:45:92:f6:d3:f7:4b:b7:48:b7:f4: c6:7a:1c:08:10:d0:2c:9c:9d:b6:78:c0:d9:50:c1: 99:d2:dd:3a:96:63:81:3d:b3:f0:33:8e:09:3f:bd: e4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:69:1B:08:A1:B1:69:E5:58:07:66:26:9C:21:9D:42:10:CC:B9:2C X509v3 Authority Key Identifier: keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:eb:e5:85:8d:58:45:f5:47:ee:13:7c:9c:e9:2d:07:d3:ad: 20:28:01:c2:3a:e2:7e:f1:8d:8d:a2:26:4b:6e:de:57:a3:28: 5d:63:f5:29:2d:e5:6c:93:51:c6:f0:d1:4a:c7:00:25:f5:59: 9e:9e:f3:e9:47:68:47:17:d1:12:2e:1a:f6:b4:fd:b3:95:6a: 44:36:57:c7:7a:88:51:cc:c8:ab:06:bf:6f:6a:16:c6:e1:b9: 3c:41:0f:eb:93:32:ed:21:d9:dd:c3:24:6d:86:56:ef:03:84: 98:06:a0:8a:30:11:96:02:c1:d8:03:ad:e6:fc:62:47:b3:8b: db:2d:8f:c2:99:79:df:ee:60:24:ac:25:bf:a6:63:57:7c:6a: 21:2b:6e:7b:87:dd:58:eb:0a:3b:9a:32:87:9c:64:9c:7e:55: 71:af:e8:25:b7:43:43:9a:90:86:a5:c6:f0:fc:55:31:f0:6b: 35:50:f9:2c:f7:92:cc:ce:75:45:84:2d:da:20:9f:46:24:a6: fa:fe:e8:89:b5:dd:82:ff:87:0b:7a:00:58:b2:30:93:0a:14: 81:75:63:12:71:79:fc:8a:b1:ea:b6:f4:79:04:c8:f0:40:86: 6b:cf:75:7a:a2:ce:ca:29:43:fb:68:75:01:ce:42:b5:8f:28: be:a2:a6:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLY+EsuJIf6o3+cyaUbbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjFhNmI0ODA0YmI2YTM4NTRhNDRlMTA2OWYyNTcyNjc0 MTc4MDUwHhcNMjUxMjA2MDEwMTI2WhcNMjUxMjA3MDEwMTI2WjAzMTEwLwYDVQQD EygyNjY5MWIwOGExYjE2OWU1NTgwNzY2MjY5YzIxOWQ0MjEwY2NiOTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/q4FOfPBH4dTCTezcaUp0LqYN0p 7J/dvXihR86/jvItSqCCN+w8ECQgiiT9j/YyX6VR+FZhVcHNMvKFoQh75QCc2guM AYZ2Bvza3p+KPElQmGiTRQ7BzqRDep6d60GDiaW8Kd+cD4Of1bPeXlKa29nt7vMw UBzqokcGff7wqdd3P5B+kSIiJNd8Q0MuGdh2CCP8Jyo+422PuCJN7m2PVp1Mw9El Ynznx6P1+r1l+FQYo2Q3J3aHPWiyyuBY54QA7EXWs/Q1GLTzT7i3kcL1K9uoLO8X gUWS9tP3S7dIt/TGehwIENAsnJ22eMDZUMGZ0t06lmOBPbPwM44JP73kCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZpGwihsWnlWAdmJpwhnUIQzLksMB8GA1UdIwQY MBaAFGnxprSAS7ajhUpE4QafJXJnQXgFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZjFmMmUtNWM1Mi00ZmIwLWI1Mzgt MTczNjZmZjk2Mzc5LzEvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zZjFmMmUtNWM1Mi00ZmIwLWI1MzgtMTczNjZmZjk2Mzc5 LzEvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnuvlhY1Y RfVH7hN8nOktB9OtICgBwjrifvGNjaImS27eV6MoXWP1KS3lbJNRxvDRSscAJfVZ np7z6UdoRxfREi4a9rT9s5VqRDZXx3qIUczIqwa/b2oWxuG5PEEP65My7SHZ3cMk bYZW7wOEmAagijARlgLB2AOt5vxiR7OL2y2Pwpl53+5gJKwlv6ZjV3xqIStue4fd WOsKO5oyh5xknH5Vca/oJbdDQ5qQhqXG8PxVMfBrNVD5LPeSzM51RYQt2iCfRiSm +v7oibXdgv+HC3oAWLIwkwoUgXVjEnF5/Iqx6rb0eQTI8ECGa891eqLOyilD+2h1 Ac5CtY8ovqKmog== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:11 2025 by rpki-client