This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json) Hash identifier: 7c47O1sIAls8HFZHC3CAk57fww5hAmhFRsAiFZMRDeA= Subject key identifier: 64:D4:24:C1:44:93:78:4B:A5:26:F2:83:BD:71:9F:A8:36:ED:03:55 Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1 Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1 Certificate serial: 019AF19B289BCB157A6FF96CD0D5F2FD4FC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:08 +0000 Manifest this update: Sat 06 Dec 2025 03:01:08 +0000 Manifest next update: Sun 07 Dec 2025 03:01:08 +0000 Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: 7eDIUyjK5Jq/A9D/m1Ct1KHqYwsDD6rINiIMeaw5Szo=) 2: qUUjm1H90-uL9euvKLjFEczkCzY.roa (hash: oUTa5+ocukOmAJZqVNEO6dDqsHnc1xufuifi9duph8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:28:9b:cb:15:7a:6f:f9:6c:d0:d5:f2:fd:4f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1 Validity Not Before: Dec 6 03:01:08 2025 GMT Not After : Dec 7 03:01:08 2025 GMT Subject: CN=64d424c14493784ba526f283bd719fa836ed0355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b2:87:35:f7:f4:9e:e4:c2:87:5d:60:b7:5c: dd:92:f7:e9:3e:51:34:79:73:ed:a4:a5:09:ff:37: 00:ff:bb:76:b5:bf:48:34:d7:c3:42:7a:34:11:71: fc:39:3b:d8:30:02:3e:19:e4:60:a1:59:64:58:8d: 2e:bb:66:f3:9d:32:2b:3d:8e:a9:12:b9:e6:f7:d5: 4c:b0:d2:2c:b8:3d:6c:a4:06:90:0e:80:2d:b8:71: 32:e1:42:f4:a6:51:08:09:db:d8:3c:5a:8e:04:ae: 08:e8:06:0f:11:34:de:9c:da:f4:83:a2:a5:8c:43: b5:10:c2:ad:89:06:1b:71:97:ff:40:a4:c8:70:43: 04:99:b1:fb:b0:89:62:0e:03:31:5a:6c:66:c2:da: b4:da:03:a5:f4:70:32:6e:7f:c4:2c:12:c1:c3:bb: a8:d2:84:22:8f:c2:df:58:45:b8:f0:29:29:12:99: 76:68:b6:50:a6:8d:dd:58:da:dd:95:0b:72:e7:65: a0:ed:81:39:86:1d:e4:7b:b5:6b:d5:30:fd:7c:09: 10:a2:05:ad:ae:52:61:24:e4:e2:2a:a8:7f:eb:58: a9:ac:92:5e:09:24:be:a0:6e:38:fc:fc:65:b7:3f: 84:3c:9e:97:6f:ec:a8:a9:5b:41:e4:cb:b1:cb:80: 74:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D4:24:C1:44:93:78:4B:A5:26:F2:83:BD:71:9F:A8:36:ED:03:55 X509v3 Authority Key Identifier: keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d9:93:97:97:65:01:a6:8f:19:68:38:b3:73:d7:17:48:e2: 6d:e9:5b:69:36:69:9b:09:7e:65:31:f5:bf:ed:b4:ca:97:21: b0:e7:ba:66:2c:2d:8c:dc:bd:b1:ae:ca:08:21:c7:74:6c:cf: c7:a6:d9:e0:70:08:56:ee:76:0f:dc:71:ba:3f:7f:33:d4:58: 0b:0a:3a:66:95:be:f9:b9:31:32:b5:72:86:cb:53:42:3a:5b: 87:e4:68:44:40:f3:00:c9:4b:b2:82:b1:e3:a5:44:a4:6a:51: 86:36:4d:92:e7:47:e2:7a:e4:e0:a0:29:32:18:0e:ef:e6:c8: 16:9f:91:31:4c:b7:25:dc:98:1e:75:ba:9b:eb:5c:c5:ce:04: 08:2e:b0:6d:e4:3c:1e:b9:30:f1:22:0f:6a:5a:02:1e:56:b9: ec:3a:81:cd:df:1d:77:b6:9b:9d:1b:3d:09:8f:b5:be:c7:31: be:a3:35:88:dc:cf:32:6b:fb:2b:ba:21:b2:f1:cc:ba:f2:39: f9:b2:ff:ac:b3:f9:aa:b1:26:51:8e:67:71:4b:59:1f:a2:a7: 65:79:ec:b4:16:27:ef:d1:aa:b6:79:2a:94:ca:ac:a0:9f:ac: e3:92:a5:d2:de:1a:06:2c:97:58:ad:00:e5:78:05:02:9d:61: e5:24:4a:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyibyxV6b/ls0NXy/U/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMGE2NzE4ZDUzOTE1NWMyNzMwMDQwMWYyYzQ2Njc1MTNl ZWM1YjEwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD Eyg2NGQ0MjRjMTQ0OTM3ODRiYTUyNmYyODNiZDcxOWZhODM2ZWQwMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubKHNff0nuTCh11gt1zdkvfpPlE0 eXPtpKUJ/zcA/7t2tb9INNfDQno0EXH8OTvYMAI+GeRgoVlkWI0uu2bznTIrPY6p Ernm99VMsNIsuD1spAaQDoAtuHEy4UL0plEICdvYPFqOBK4I6AYPETTenNr0g6Kl jEO1EMKtiQYbcZf/QKTIcEMEmbH7sIliDgMxWmxmwtq02gOl9HAybn/ELBLBw7uo 0oQij8LfWEW48CkpEpl2aLZQpo3dWNrdlQty52Wg7YE5hh3ke7Vr1TD9fAkQogWt rlJhJOTiKqh/61iprJJeCSS+oG44/Pxltz+EPJ6Xb+yoqVtB5Muxy4B0iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTUJMFEk3hLpSbyg71xn6g27QNVMB8GA1UdIwQY MBaAFAAKZxjVORVcJzAEAfLEZnUT7sWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMt OWRkODU2MWNhZWRlLzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMtOWRkODU2MWNhZWRl LzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdmTl5dl AaaPGWg4s3PXF0jibelbaTZpmwl+ZTH1v+20ypchsOe6ZiwtjNy9sa7KCCHHdGzP x6bZ4HAIVu52D9xxuj9/M9RYCwo6ZpW++bkxMrVyhstTQjpbh+RoREDzAMlLsoKx 46VEpGpRhjZNkudH4nrk4KApMhgO7+bIFp+RMUy3JdyYHnW6m+tcxc4ECC6wbeQ8 Hrkw8SIPaloCHla57DqBzd8dd7abnRs9CY+1vscxvqM1iNzPMmv7K7ohsvHMuvI5 +bL/rLP5qrEmUY5ncUtZH6KnZXnstBYn79GqtnkqlMqsoJ+s45Kl0t4aBiyXWK0A 5XgFAp1h5SRKFA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:13 2025 by rpki-client