This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft File: DnSXlvuOtxaowjxHZJ0jvz0-apg.mft (raw, json) Hash identifier: 5oDGHO8NT+720C6JJrV4NX5CHrlW1hQYpSpSGWIv/Jc= Subject key identifier: EC:C1:50:C1:5A:F9:41:CF:8F:D7:31:A1:5F:B8:F3:FE:E7:18:34:93 Authority key identifier: 0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98 Certificate issuer: /CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98 Certificate serial: 019AF5AEC9E5B007B3B7C36A387669B16609 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft Manifest number: 032A Signing time: Sat 06 Dec 2025 22:01:03 +0000 Manifest this update: Sat 06 Dec 2025 22:01:03 +0000 Manifest next update: Sun 07 Dec 2025 22:01:03 +0000 Files and hashes: 1: DnSXlvuOtxaowjxHZJ0jvz0-apg.crl (hash: YeqTAPYbqXuwX8S+SUoc25sM4hf+CoSR1iIg2xWZ6wU=) 2: KVIjbEYwlYHNE7SjeBSZ9snwsuM.roa (hash: jHpTUbyUDvIBB9d7GvdlvIiOW08/ogM82drw/TrRWfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:c9:e5:b0:07:b3:b7:c3:6a:38:76:69:b1:66:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98 Validity Not Before: Dec 6 22:01:03 2025 GMT Not After : Dec 7 22:01:03 2025 GMT Subject: CN=ecc150c15af941cf8fd731a15fb8f3fee7183493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:a4:d2:b9:86:28:dd:b7:ed:69:5e:60:79: b9:d8:f1:3f:22:9a:63:2e:f9:d4:b1:9d:8d:57:2a: f2:43:ad:af:85:59:5b:d7:bf:e7:04:63:ea:bb:a7: e3:f9:e2:c6:5d:9f:e8:2e:e3:ff:d9:7a:41:0e:aa: 69:7a:bd:a4:98:83:eb:59:78:a7:36:40:73:8f:56: 9f:f1:0f:fa:5e:35:30:e9:73:4d:8c:e0:49:cb:6f: 95:a8:57:e9:2a:e9:17:d1:05:91:b9:c3:58:c4:ec: 92:ae:7f:9a:85:c3:8c:54:eb:82:c4:64:71:4e:dd: c0:9c:d1:4f:3c:dd:eb:5a:d8:40:6d:bb:a1:67:e7: 24:47:54:36:26:d7:9e:64:c1:6a:57:38:59:4d:25: cc:a0:b2:ab:a6:1b:8a:35:93:d8:58:67:14:91:31: a4:62:79:3f:3e:cb:2d:11:c2:72:20:7a:9c:8f:5b: 52:23:c7:8a:ba:09:6d:6c:48:dd:b3:67:a6:28:17: 92:a4:6f:e8:5e:5d:25:60:a6:84:0b:01:e6:12:9a: 35:b2:12:c7:6a:d3:46:17:a7:d0:f8:31:ce:c0:d1: 51:24:0d:4b:d0:4f:0c:e0:1f:27:b9:af:71:68:f8: 44:3f:a1:c4:30:db:a6:44:b4:3e:00:ae:f7:cd:87: 36:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C1:50:C1:5A:F9:41:CF:8F:D7:31:A1:5F:B8:F3:FE:E7:18:34:93 X509v3 Authority Key Identifier: keyid:0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6e:5c:97:99:83:fa:24:fc:c3:8a:32:83:08:24:e6:7b:db: e3:e8:fa:c9:86:64:bc:85:5b:7b:43:3a:cb:25:43:73:0d:e7: 75:f5:60:f3:16:4b:95:56:0d:81:69:54:eb:df:72:d5:4b:d1: 33:ee:7d:00:5e:f2:fa:91:5c:6e:bc:79:53:21:25:54:fc:63: 66:8f:cb:10:1a:9f:7f:dd:68:ef:1c:6e:5d:93:ab:69:ba:65: d2:6c:22:52:d2:09:d6:39:4e:d1:14:d6:84:5e:b9:e0:de:de: db:dd:ef:9f:1c:4e:44:e0:0c:6a:48:51:d1:e3:07:35:f4:ca: 3e:bf:4f:67:3f:6d:49:44:c4:42:79:99:77:a9:bd:fc:0d:17: 43:13:b7:52:a2:ec:dc:00:b9:2f:2c:4f:c3:ae:bf:6a:ec:d6: 03:81:ca:f8:95:48:a3:04:7c:03:73:1e:d4:fb:9f:37:7d:e1: 49:c7:16:e0:f1:ff:2e:0d:ce:88:40:dc:f7:48:93:4c:20:e0: 18:c5:e3:04:2d:85:73:c9:7e:42:1d:2e:40:96:61:ca:00:2c: 90:7b:d5:aa:48:9d:db:55:d7:8c:ca:6c:c4:db:da:83:d9:ab: 10:d5:e3:73:b0:b0:7b:6d:fb:97:54:3d:14:cc:b6:55:ef:b0: 42:5c:85:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rsnlsAezt8NqOHZpsWYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzQ5Nzk2ZmI4ZWI3MTZhOGMyM2M0NzY0OWQyM2JmM2Qz ZTZhOTgwHhcNMjUxMjA2MjIwMTAzWhcNMjUxMjA3MjIwMTAzWjAzMTEwLwYDVQQD EyhlY2MxNTBjMTVhZjk0MWNmOGZkNzMxYTE1ZmI4ZjNmZWU3MTgzNDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Sk0rmGKN237WleYHm52PE/Ippj LvnUsZ2NVyryQ62vhVlb17/nBGPqu6fj+eLGXZ/oLuP/2XpBDqpper2kmIPrWXin NkBzj1af8Q/6XjUw6XNNjOBJy2+VqFfpKukX0QWRucNYxOySrn+ahcOMVOuCxGRx Tt3AnNFPPN3rWthAbbuhZ+ckR1Q2JteeZMFqVzhZTSXMoLKrphuKNZPYWGcUkTGk Ynk/PsstEcJyIHqcj1tSI8eKugltbEjds2emKBeSpG/oXl0lYKaECwHmEpo1shLH atNGF6fQ+DHOwNFRJA1L0E8M4B8nua9xaPhEP6HEMNumRLQ+AK73zYc2WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzBUMFa+UHPj9cxoV+48/7nGDSTMB8GA1UdIwQY MBaAFA50l5b7jrcWqMI8R2SdI789PmqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xNzIyNmItMzJiYS00OGQxLWI3ZTIt ZGY4YjJhYTZiYmU2LzEvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8xNzIyNmItMzJiYS00OGQxLWI3ZTItZGY4YjJhYTZiYmU2 LzEvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjm5cl5mD +iT8w4oygwgk5nvb4+j6yYZkvIVbe0M6yyVDcw3ndfVg8xZLlVYNgWlU699y1UvR M+59AF7y+pFcbrx5UyElVPxjZo/LEBqff91o7xxuXZOrabpl0mwiUtIJ1jlO0RTW hF654N7e293vnxxOROAMakhR0eMHNfTKPr9PZz9tSUTEQnmZd6m9/A0XQxO3UqLs 3AC5LyxPw66/auzWA4HK+JVIowR8A3Me1PufN33hSccW4PH/Lg3OiEDc90iTTCDg GMXjBC2Fc8l+Qh0uQJZhygAskHvVqkid21XXjMpsxNvag9mrENXjc7Cwe237l1Q9 FMy2Ve+wQlyFMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:14 2025 by rpki-client