This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json) Hash identifier: 9t+zmYZQ6+1pirUfN9qwa2fxvz3jDohaIIUpI6bmuSY= Subject key identifier: C4:1E:78:EA:32:D7:92:0D:BD:B6:8A:D7:AA:CB:AF:03:34:7E:69:FB Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19 Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319 Certificate serial: 019B56AC160644AC1DB94F1BA4202ADF6084 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft Manifest number: 13CA Signing time: Thu 25 Dec 2025 18:01:16 +0000 Manifest this update: Thu 25 Dec 2025 18:01:16 +0000 Manifest next update: Fri 26 Dec 2025 18:01:16 +0000 Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: ExlBR9Y2cRACsW17COSeWSiNkrnTgzngf1HQCrkMu9w=) 2: FpXlOOnsbwOYeT36IscKSuN8OMU.roa (hash: A+XYmuaYnslHDaJLV17tPt7jw//813JyNtz/WmswEK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 18:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:ac:16:06:44:ac:1d:b9:4f:1b:a4:20:2a:df:60:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319 Validity Not Before: Dec 25 18:01:16 2025 GMT Not After : Dec 26 18:01:16 2025 GMT Subject: CN=c41e78ea32d7920dbdb68ad7aacbaf03347e69fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:32:32:e0:21:a0:67:e1:32:9f:89:5a:0a:e3: 18:2c:b0:e8:b4:9b:c4:91:e8:64:ab:9c:21:00:b1: 9c:63:31:c1:10:35:39:29:fe:73:8e:95:be:48:c5: 3c:52:45:16:83:01:f9:48:c6:2a:1f:71:08:87:81: d8:36:3b:8f:e0:1e:1d:5a:e0:28:b5:f4:fe:46:a2: 64:6a:c6:3a:de:31:e1:a2:03:9a:2c:e0:bd:64:00: 3d:87:01:c3:7c:4d:c1:26:78:28:85:be:b0:b1:b7: 03:03:11:24:12:a3:71:b6:ed:da:3a:89:65:69:11: 50:4b:fd:5d:bd:5b:37:70:a5:54:9a:b3:e6:db:70: c2:c6:a7:87:41:af:5a:83:1a:29:21:46:39:17:2c: 2b:84:d5:e9:bc:ae:21:a9:26:6b:24:28:4c:54:ce: 72:a0:3f:9a:5e:ca:c8:1a:f4:97:8d:93:da:4b:f9: 11:65:5c:c6:44:50:95:e5:1a:ea:5c:c7:60:1a:bf: 1a:7c:49:e6:2d:f1:60:3d:b6:91:8a:55:d4:5e:6d: 9b:e1:99:bd:cf:ad:27:d7:65:77:92:e4:d1:e9:59: f0:62:3d:cb:52:78:3d:b4:f7:58:d3:f5:92:8a:c0: 02:2f:cb:d8:b4:1b:d0:76:34:53:56:5c:22:2a:4c: 7e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1E:78:EA:32:D7:92:0D:BD:B6:8A:D7:AA:CB:AF:03:34:7E:69:FB X509v3 Authority Key Identifier: keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:21:fd:0f:0d:5e:54:aa:36:4d:38:05:cf:24:42:4e:0e:7f: 12:66:20:e0:3b:e9:c8:7a:86:ed:92:a4:7a:01:01:5e:b5:f0: 5f:06:bf:d3:81:7d:02:7d:2f:53:99:f2:36:e8:c8:54:66:4f: 9f:08:5e:69:ed:d7:97:30:22:32:77:46:0f:8b:3c:59:f8:f7: ef:84:02:44:e5:2d:5a:66:e4:19:69:cf:d1:1d:7e:5a:c9:c8: fb:09:85:dc:e4:ef:5f:60:49:6f:7f:bd:2d:58:5f:d6:6c:12: d2:63:85:07:f8:ec:ed:3c:95:e3:9d:11:14:7f:de:f5:e2:17: 96:e0:4e:b1:ea:0b:e5:ed:8f:51:4a:ad:2a:0a:87:71:30:1f: b9:a3:e6:13:5e:4c:22:50:f6:70:7b:b7:0a:49:e9:49:51:82: ce:a2:97:81:88:ce:c6:13:c8:0b:ec:2a:f7:7c:1d:ba:91:62: de:7a:f2:39:ca:a9:5f:36:48:40:2a:31:17:01:64:9c:0c:a9: 4c:99:12:a2:52:bb:9e:ca:bd:3c:e4:a6:fa:f9:b4:a5:8b:1a: 38:b1:b6:a7:aa:25:78:d8:42:f9:c9:7e:78:9c:89:9c:7b:30: d1:57:20:2e:b9:cb:12:8e:e7:0e:ce:88:42:6b:04:98:05:de: 32:e9:93:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWrBYGRKwduU8bpCAq32CEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZTdjMzA0NTkzNTZhOTAwZGM2MzM2OTc2NGE3NTRjNWMx ZjMzMTkwHhcNMjUxMjI1MTgwMTE2WhcNMjUxMjI2MTgwMTE2WjAzMTEwLwYDVQQD EyhjNDFlNzhlYTMyZDc5MjBkYmRiNjhhZDdhYWNiYWYwMzM0N2U2OWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjIy4CGgZ+Eyn4laCuMYLLDotJvE kehkq5whALGcYzHBEDU5Kf5zjpW+SMU8UkUWgwH5SMYqH3EIh4HYNjuP4B4dWuAo tfT+RqJkasY63jHhogOaLOC9ZAA9hwHDfE3BJngohb6wsbcDAxEkEqNxtu3aOoll aRFQS/1dvVs3cKVUmrPm23DCxqeHQa9agxopIUY5FywrhNXpvK4hqSZrJChMVM5y oD+aXsrIGvSXjZPaS/kRZVzGRFCV5RrqXMdgGr8afEnmLfFgPbaRilXUXm2b4Zm9 z60n12V3kuTR6VnwYj3LUng9tPdY0/WSisACL8vYtBvQdjRTVlwiKkx+YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQeeOoy15INvbaK16rLrwM0fmn7MB8GA1UdIwQY MBaAFAHnwwRZNWqQDcYzaXZKdUxcHzMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xOWMxNjQtZWFlNy00NmJkLWExZGUt YmYyOWM0MTg4ZDdlLzEvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xOWMxNjQtZWFlNy00NmJkLWExZGUtYmYyOWM0MTg4ZDdl LzEvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSH9Dw1e VKo2TTgFzyRCTg5/EmYg4DvpyHqG7ZKkegEBXrXwXwa/04F9An0vU5nyNujIVGZP nwheae3XlzAiMndGD4s8Wfj374QCROUtWmbkGWnP0R1+WsnI+wmF3OTvX2BJb3+9 LVhf1mwS0mOFB/js7TyV450RFH/e9eIXluBOseoL5e2PUUqtKgqHcTAfuaPmE15M IlD2cHu3CknpSVGCzqKXgYjOxhPIC+wq93wdupFi3nryOcqpXzZIQCoxFwFknAyp TJkSolK7nsq9POSm+vm0pYsaOLG2p6oleNhC+cl+eJyJnHsw0VcgLrnLEo7nDs6I QmsEmAXeMumTQg== -----END CERTIFICATE-----Generated at Fri Dec 26 00:30:54 2025 by rpki-client