This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft File: afM-l5tD6I0OXsp5h5R9sh73yrk.mft (raw, json) Hash identifier: kvJQDWPwqUwtm9vg7KcUVszM5vR0+nswFJXgLmg4zjU= Subject key identifier: 94:33:55:96:19:AA:21:BC:C5:6F:96:01:26:DE:C7:F3:1A:09:0C:08 Authority key identifier: 69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9 Certificate issuer: /CN=69f33e979b43e88d0e5eca7987947db21ef7cab9 Certificate serial: 019B74EC965EF098D88C6D59D3915C5F3CC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft Manifest number: 065E Signing time: Wed 31 Dec 2025 15:00:20 +0000 Manifest this update: Wed 31 Dec 2025 15:00:20 +0000 Manifest next update: Thu 01 Jan 2026 15:00:20 +0000 Files and hashes: 1: afM-l5tD6I0OXsp5h5R9sh73yrk.crl (hash: lszvgDcUT5BaLANkb8xLOFDdqyQdT6NlmQvTqHl184k=) 2: rjuN-ZTOCGAomaycIkzHFBIupdk.roa (hash: mpitT9m9PBhweeULsMgo7mL5tvByadSSpZctsThk9Hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 15:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:ec:96:5e:f0:98:d8:8c:6d:59:d3:91:5c:5f:3c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f33e979b43e88d0e5eca7987947db21ef7cab9 Validity Not Before: Dec 31 15:00:20 2025 GMT Not After : Jan 1 15:00:20 2026 GMT Subject: CN=9433559619aa21bcc56f960126dec7f31a090c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:09:73:28:4c:c1:5f:56:58:39:59:06:b1: cb:ef:40:86:9f:48:25:9a:ca:b4:21:1e:e9:7d:88: b3:01:08:9a:94:73:58:a7:4a:89:6c:a5:ac:62:8d: 98:35:03:61:74:e1:c2:85:aa:23:7e:d6:6b:9f:9a: 61:2a:8c:eb:55:74:9f:48:19:b7:34:82:e8:c0:14: 9e:6b:bc:80:40:95:da:8f:9c:fb:c7:18:e9:ed:50: 96:78:22:8e:6e:76:cd:da:be:74:c7:5f:e3:09:2e: 0b:5d:77:3d:66:4e:70:22:b4:32:d1:1d:4b:43:cb: a2:d2:40:4e:8c:b8:aa:11:e6:11:08:d3:5c:c1:fd: b0:64:91:e6:f3:52:1d:1e:b0:d2:3d:d6:f9:95:f7: 87:e0:15:95:f6:f1:c1:1a:aa:a3:f4:1f:65:b6:58: 34:40:98:5c:75:0a:80:01:69:5b:12:80:05:75:4e: d1:11:0b:19:82:28:f7:93:a7:1d:b7:28:fc:b6:a8: a5:2f:88:5c:d7:67:8a:61:4b:68:e8:d0:b3:74:0e: 2a:22:aa:29:39:7e:e8:5e:5e:a9:0b:97:f8:18:7c: 70:07:31:77:78:84:54:2e:99:13:8c:dc:f8:60:fa: a5:9b:3f:ee:3b:88:0f:d1:4c:c1:f9:54:d2:bb:2d: 71:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:33:55:96:19:AA:21:BC:C5:6F:96:01:26:DE:C7:F3:1A:09:0C:08 X509v3 Authority Key Identifier: keyid:69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:72:86:ad:a5:e3:22:96:ea:62:f2:a5:d7:d4:ac:a1:7f:77: 61:7a:04:bb:ea:58:9a:b6:9f:2f:d8:7a:4b:2e:7b:d2:92:a3: 11:57:4c:c3:6a:6b:60:03:73:f9:58:79:48:05:df:43:2b:10: f8:fc:a0:df:5e:2a:4b:39:19:0c:95:52:a7:00:49:a1:3c:13: ef:37:3a:97:81:12:50:c7:d0:1e:d5:f4:f2:2c:db:38:98:d3: 17:4d:49:1f:d4:ce:20:b8:4b:b3:31:a4:15:f1:7c:3a:e0:2e: d2:2d:39:63:e9:ff:c6:c5:dc:c8:aa:82:c0:c8:b5:9d:78:3e: 9c:02:3b:61:4c:41:8d:d3:20:22:c9:c5:a7:74:33:2d:ff:86: 8e:98:5c:7f:bc:09:36:ef:44:19:a3:7b:8f:9c:14:84:fe:91: 32:de:a0:d4:bc:9f:f4:bc:ee:13:99:66:f7:80:c6:c7:ab:b2: 83:ec:45:50:76:04:78:16:b4:ad:36:ea:84:ff:8b:02:e0:26: 71:30:b5:16:e0:17:4f:74:29:5e:f0:9c:a4:97:fd:c5:57:c0: b5:d4:db:dd:18:41:1e:bf:09:bd:f6:3f:21:b9:31:76:36:0c: e8:b0:0f:36:e6:77:2b:5b:ba:6c:ee:e6:82:5b:da:e8:67:bc: dc:cd:ce:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt07JZe8JjYjG1Z05FcXzzBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjMzZTk3OWI0M2U4OGQwZTVlY2E3OTg3OTQ3ZGIyMWVm N2NhYjkwHhcNMjUxMjMxMTUwMDIwWhcNMjYwMTAxMTUwMDIwWjAzMTEwLwYDVQQD Eyg5NDMzNTU5NjE5YWEyMWJjYzU2Zjk2MDEyNmRlYzdmMzFhMDkwYzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/MJcyhMwV9WWDlZBrHL70CGn0gl msq0IR7pfYizAQialHNYp0qJbKWsYo2YNQNhdOHChaojftZrn5phKozrVXSfSBm3 NILowBSea7yAQJXaj5z7xxjp7VCWeCKObnbN2r50x1/jCS4LXXc9Zk5wIrQy0R1L Q8ui0kBOjLiqEeYRCNNcwf2wZJHm81IdHrDSPdb5lfeH4BWV9vHBGqqj9B9ltlg0 QJhcdQqAAWlbEoAFdU7REQsZgij3k6cdtyj8tqilL4hc12eKYUto6NCzdA4qIqop OX7oXl6pC5f4GHxwBzF3eIRULpkTjNz4YPqlmz/uO4gP0UzB+VTSuy1xfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQzVZYZqiG8xW+WASbex/MaCQwIMB8GA1UdIwQY MBaAFGnzPpebQ+iNDl7KeYeUfbIe98q5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZNLWw1dEQ2STBPWHNwNWg1UjlzaDczeXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85NTNhNjEtMzM0OS00N2JmLWExMmIt ZTRjNjkzMzQxNDJjLzEvYWZNLWw1dEQ2STBPWHNwNWg1UjlzaDczeXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi85NTNhNjEtMzM0OS00N2JmLWExMmItZTRjNjkzMzQxNDJj LzEvYWZNLWw1dEQ2STBPWHNwNWg1UjlzaDczeXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3KGraXj IpbqYvKl19SsoX93YXoEu+pYmrafL9h6Sy570pKjEVdMw2prYANz+Vh5SAXfQysQ +Pyg314qSzkZDJVSpwBJoTwT7zc6l4ESUMfQHtX08izbOJjTF01JH9TOILhLszGk FfF8OuAu0i05Y+n/xsXcyKqCwMi1nXg+nAI7YUxBjdMgIsnFp3QzLf+Gjphcf7wJ Nu9EGaN7j5wUhP6RMt6g1Lyf9LzuE5lm94DGx6uyg+xFUHYEeBa0rTbqhP+LAuAm cTC1FuAXT3QpXvCcpJf9xVfAtdTb3RhBHr8JvfY/IbkxdjYM6LAPNuZ3K1u6bO7m glva6Ge83M3OZQ== -----END CERTIFICATE-----Generated at Wed Dec 31 21:06:20 2025 by rpki-client