This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft File: AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json) Hash identifier: k23w2hw5U1ydc0BSR657ujrVHcFyuReMGktWtTwdEWI= Subject key identifier: 98:4F:E9:2C:77:30:DC:20:76:29:23:4B:B0:B4:C1:A3:D7:28:E3:32 Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be Certificate serial: 019AF0881F4D0682D421C690F0F8AF2143DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft Manifest number: 1764 Signing time: Fri 05 Dec 2025 22:00:43 +0000 Manifest this update: Fri 05 Dec 2025 22:00:43 +0000 Manifest next update: Sat 06 Dec 2025 22:00:43 +0000 Files and hashes: 1: 0KFOTw8mw8rqvR73lDvTvz4eLlM.roa (hash: czZq6CrDBuBW60D89viYE/HEQ3Elp6ceJu/itDlsmLQ=) 2: 1-IEGfanW1eDg4hey_mFD59jQ4Tw.roa (hash: TEwUAYBqywOE+CrQSa2/94fxmftWbXC3tqwYRSHTWvM=) 3: 7fvFmCf70OoyCtjW6q-YAjjiptE.roa (hash: lD6p2V3Fh7qOAiBluHoM70XX68qSFbEeobI0lYUOj4E=) 4: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: r6WzM6AVWV1vfCxL7IK7wfkjwVEFM0G1cTUdIIVtrs4=) 5: XXc1R4QzqDrW8SviK6xRNkQ-hUM.roa (hash: YZxuonbhRtd70cdMZUvtG4tx6j8PhsH2pz0J9ByQ1UQ=) 6: mVS8rlA27Rm5BH1YZmHsYliJgHk.roa (hash: kSobMvLQWQPPJ+5wYRzt2RMBbz/GSTGKNOrc7qdwFJQ=) 7: svn5qGrzwkwprTn6parcyTvhbAo.roa (hash: /W0ZX7Qy3yFb8g6EosJAqdHBnY5DD0AAIXPV5XPQQ5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:1f:4d:06:82:d4:21:c6:90:f0:f8:af:21:43:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be Validity Not Before: Dec 5 22:00:43 2025 GMT Not After : Dec 6 22:00:43 2025 GMT Subject: CN=984fe92c7730dc207629234bb0b4c1a3d728e332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7f:7a:b4:a2:67:4c:ec:f1:81:58:cb:0a:8b: f1:32:61:9b:e0:18:13:59:46:68:69:db:74:3a:e4: 59:71:0d:88:68:d6:75:65:e9:7b:03:a5:21:4d:09: c3:7d:dc:7b:c6:43:44:c0:63:be:b1:2a:78:e9:14: 59:b7:15:a8:b4:fa:68:cb:5c:57:06:c8:5c:13:53: 0c:19:2c:da:7f:b3:a2:aa:82:e9:9e:91:4f:e6:89: 72:8f:74:9e:4d:a6:cc:ad:4b:b3:1d:2c:55:ff:88: 30:fb:75:91:13:88:4b:46:34:36:3d:b2:7f:55:40: 5b:1b:90:7a:f5:bd:42:84:ff:6d:ab:f2:d4:44:a7: dc:a9:0e:60:91:8b:8b:58:7f:6f:93:7e:0f:7f:9b: b5:ea:0b:72:9a:98:e9:b5:8b:78:dc:77:12:48:5b: 4c:39:11:7e:cd:80:c8:b0:e8:18:2a:ae:ee:f9:33: c7:69:b9:59:c4:0e:4c:7e:29:b1:39:f3:2f:9c:b7: 18:ea:cb:32:d0:20:2d:17:f9:f5:e7:a6:99:4a:2d: ab:1b:22:58:d9:a8:f9:2c:92:5a:60:b1:8f:ce:e1: bc:a6:b6:fe:78:66:8e:e3:53:3e:c4:20:9c:1a:d5: 4b:38:ac:ec:fa:47:e2:ec:88:1c:14:d1:6c:a0:a9: cf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4F:E9:2C:77:30:DC:20:76:29:23:4B:B0:B4:C1:A3:D7:28:E3:32 X509v3 Authority Key Identifier: keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:79:eb:4f:c0:3e:49:8a:b1:53:60:f6:bf:ba:df:09:a9:34: dd:3c:59:63:77:e4:d1:88:02:c3:12:92:fd:36:43:de:79:65: b5:55:6e:34:a5:a0:2b:81:7f:20:33:61:3e:5d:ad:7b:be:ca: b6:be:cf:d1:6c:16:fe:45:c4:a8:70:3a:65:26:41:55:36:32: 96:ac:7b:c0:66:9c:44:a2:2e:83:f9:96:eb:2c:84:77:ea:2c: 3a:bf:b0:8c:cc:28:38:cc:3b:39:45:e9:e8:ef:89:79:97:25: ab:38:3b:7c:d0:c0:a7:5f:74:a1:f0:3c:d1:e1:d0:9c:81:00: 99:05:b6:fb:e1:07:88:e7:6b:dd:91:e7:5b:06:b1:9f:e0:86: e4:b1:2f:47:28:36:82:38:02:a4:51:dc:92:3d:55:29:cc:b0: 17:af:bc:76:ff:77:a5:50:36:be:79:b9:15:48:9d:15:8e:8a: 62:41:53:dd:3d:b5:68:0e:13:4e:4b:0d:6f:77:e0:c8:3d:c9: af:e1:84:5b:7f:8a:07:9a:ed:71:51:fe:c5:e5:74:cc:a8:93: 6d:e3:d2:44:b4:17:4a:44:5a:3c:29:51:ee:c2:ac:7f:b8:02: a8:9b:98:fe:13:1f:53:6a:28:ab:aa:59:27:6c:47:66:d5:59: 93:98:1e:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiB9NBoLUIcaQ8PivIUPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNWZmOWNjODljNjZhOGEzYTVkNzM0YTBkNjVjNjFmZGM4 NTE4YmUwHhcNMjUxMjA1MjIwMDQzWhcNMjUxMjA2MjIwMDQzWjAzMTEwLwYDVQQD Eyg5ODRmZTkyYzc3MzBkYzIwNzYyOTIzNGJiMGI0YzFhM2Q3MjhlMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX96tKJnTOzxgVjLCovxMmGb4BgT WUZoadt0OuRZcQ2IaNZ1Zel7A6UhTQnDfdx7xkNEwGO+sSp46RRZtxWotPpoy1xX BshcE1MMGSzaf7OiqoLpnpFP5olyj3SeTabMrUuzHSxV/4gw+3WRE4hLRjQ2PbJ/ VUBbG5B69b1ChP9tq/LURKfcqQ5gkYuLWH9vk34Pf5u16gtympjptYt43HcSSFtM ORF+zYDIsOgYKq7u+TPHablZxA5MfimxOfMvnLcY6ssy0CAtF/n156aZSi2rGyJY 2aj5LJJaYLGPzuG8prb+eGaO41M+xCCcGtVLOKzs+kfi7IgcFNFsoKnPoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhP6Sx3MNwgdikjS7C0waPXKOMyMB8GA1UdIwQY MBaAFABf+cyJxmqKOl1zSg1lxh/chRi+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kNTNjNzgtMGQ1Yi00MjM3LTk5OTkt MGUyZDY5N2IyN2UzLzEvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9kNTNjNzgtMGQ1Yi00MjM3LTk5OTktMGUyZDY5N2IyN2Uz LzEvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnnrT8A+ SYqxU2D2v7rfCak03TxZY3fk0YgCwxKS/TZD3nlltVVuNKWgK4F/IDNhPl2te77K tr7P0WwW/kXEqHA6ZSZBVTYylqx7wGacRKIug/mW6yyEd+osOr+wjMwoOMw7OUXp 6O+JeZclqzg7fNDAp190ofA80eHQnIEAmQW2++EHiOdr3ZHnWwaxn+CG5LEvRyg2 gjgCpFHckj1VKcywF6+8dv93pVA2vnm5FUidFY6KYkFT3T21aA4TTksNb3fgyD3J r+GEW3+KB5rtcVH+xeV0zKiTbePSRLQXSkRaPClR7sKsf7gCqJuY/hMfU2ooq6pZ J2xHZtVZk5geQg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:41 2025 by rpki-client