This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft File: afM-l5tD6I0OXsp5h5R9sh73yrk.mft (raw, json) Hash identifier: 6AuUfmkviFlouvMPQlXdzxVdiZ78sNhaAAxpjYmf7o4= Subject key identifier: 02:47:F4:83:89:A3:52:EE:D3:04:84:A6:97:E1:47:4D:5D:14:1F:4E Authority key identifier: 69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9 Certificate issuer: /CN=69f33e979b43e88d0e5eca7987947db21ef7cab9 Certificate serial: 019B6F2177646135688A61EF058B68E3D41F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft Manifest number: 065B Signing time: Tue 30 Dec 2025 12:00:22 +0000 Manifest this update: Tue 30 Dec 2025 12:00:22 +0000 Manifest next update: Wed 31 Dec 2025 12:00:22 +0000 Files and hashes: 1: afM-l5tD6I0OXsp5h5R9sh73yrk.crl (hash: SNseRAOx2EkmfwVxJnEertd6+ijpMkI17rQIvBue1FI=) 2: rjuN-ZTOCGAomaycIkzHFBIupdk.roa (hash: mpitT9m9PBhweeULsMgo7mL5tvByadSSpZctsThk9Hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 12:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:21:77:64:61:35:68:8a:61:ef:05:8b:68:e3:d4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f33e979b43e88d0e5eca7987947db21ef7cab9 Validity Not Before: Dec 30 12:00:22 2025 GMT Not After : Dec 31 12:00:22 2025 GMT Subject: CN=0247f48389a352eed30484a697e1474d5d141f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ee:00:57:01:45:0b:33:8f:d4:b1:11:85:46: fb:42:a6:09:9c:50:9c:3c:5b:36:ad:98:27:05:ca: 7b:ba:18:03:e9:68:42:47:af:95:b2:d5:1c:1d:40: 83:7c:ce:6f:85:24:81:2f:06:ad:24:a5:b6:25:ca: 69:f1:ae:91:88:fb:ce:73:0d:5a:72:dc:00:2f:1c: bf:6e:fc:2a:18:e9:61:72:8a:04:be:88:e9:51:c8: ef:d4:30:5a:7e:0a:16:e1:d3:be:5f:8f:92:e8:79: d7:e4:48:a4:c6:67:c2:17:92:7a:04:52:17:80:35: c8:87:71:67:d6:d3:91:f5:68:5a:d0:31:e2:10:95: 59:b2:5a:b9:22:1c:9d:2e:a2:77:48:4d:77:65:5f: 51:d0:38:64:e8:6a:9a:06:02:44:a5:4a:eb:5b:31: 11:ed:55:2b:d9:1a:ca:93:96:f1:72:54:1e:55:89: 95:b9:37:7a:37:d1:eb:91:23:56:9d:ce:02:0e:f4: 14:19:19:0d:00:a3:45:56:26:15:49:25:7b:00:ec: 15:17:76:4e:49:b2:ed:4d:23:4e:40:8f:17:18:e6: f6:fa:4f:a6:8b:d7:a5:1b:46:a7:aa:d7:f5:d5:9c: 3e:86:95:cf:81:81:7f:f0:68:2a:8e:c6:2e:ef:e1: eb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:47:F4:83:89:A3:52:EE:D3:04:84:A6:97:E1:47:4D:5D:14:1F:4E X509v3 Authority Key Identifier: keyid:69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5f:13:c8:9c:bd:bc:a9:b1:7b:2a:f0:5f:af:f9:4e:20:61: e7:ea:33:fa:f6:63:80:a3:49:e8:ad:1d:43:10:40:93:f8:2f: 12:b7:a3:3c:5d:33:95:1a:88:7b:13:90:7d:7a:2d:57:e6:3c: a6:2d:1f:3a:cd:e3:ca:9c:5e:a1:3b:f1:2c:01:b9:1f:ba:10: 13:e4:2e:7e:58:ee:fd:9a:bd:0a:db:9f:32:8c:7b:63:0a:b0: 0c:c2:60:13:74:85:78:7a:a1:52:e4:b2:cd:f4:06:2e:7a:20: 81:57:47:3c:66:68:cd:8b:f4:50:0a:49:82:9c:36:f0:01:18: d4:d4:91:af:15:ed:4a:02:d4:bc:98:0c:28:8b:de:5b:70:b2: 8b:ba:c0:75:a3:b1:3d:92:c4:7b:36:62:d6:6c:8d:a7:4e:49: d4:0b:29:49:0f:e8:37:88:f1:3e:bd:a3:cf:e1:27:31:dd:46: b6:af:2a:e9:24:0d:5c:a0:61:0e:3c:c1:b3:df:48:a4:c6:be: 94:58:99:f3:fe:88:7d:5f:2c:a8:1d:7d:f5:85:01:f3:92:89: 99:1e:99:81:93:c3:26:6d:29:76:c9:52:67:13:18:69:de:19: fb:99:4d:62:60:39:53:3b:c6:24:51:05:e7:3a:53:98:cf:a3: 81:f3:1d:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvIXdkYTVoimHvBYto49QfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjMzZTk3OWI0M2U4OGQwZTVlY2E3OTg3OTQ3ZGIyMWVm N2NhYjkwHhcNMjUxMjMwMTIwMDIyWhcNMjUxMjMxMTIwMDIyWjAzMTEwLwYDVQQD EygwMjQ3ZjQ4Mzg5YTM1MmVlZDMwNDg0YTY5N2UxNDc0ZDVkMTQxZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu4AVwFFCzOP1LERhUb7QqYJnFCc PFs2rZgnBcp7uhgD6WhCR6+VstUcHUCDfM5vhSSBLwatJKW2Jcpp8a6RiPvOcw1a ctwALxy/bvwqGOlhcooEvojpUcjv1DBafgoW4dO+X4+S6HnX5EikxmfCF5J6BFIX gDXIh3Fn1tOR9Wha0DHiEJVZslq5IhydLqJ3SE13ZV9R0Dhk6GqaBgJEpUrrWzER 7VUr2RrKk5bxclQeVYmVuTd6N9HrkSNWnc4CDvQUGRkNAKNFViYVSSV7AOwVF3ZO SbLtTSNOQI8XGOb2+k+mi9elG0anqtf11Zw+hpXPgYF/8GgqjsYu7+HrrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJH9IOJo1Lu0wSEppfhR01dFB9OMB8GA1UdIwQY MBaAFGnzPpebQ+iNDl7KeYeUfbIe98q5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZNLWw1dEQ2STBPWHNwNWg1UjlzaDczeXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85NTNhNjEtMzM0OS00N2JmLWExMmIt ZTRjNjkzMzQxNDJjLzEvYWZNLWw1dEQ2STBPWHNwNWg1UjlzaDczeXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi85NTNhNjEtMzM0OS00N2JmLWExMmItZTRjNjkzMzQxNDJj LzEvYWZNLWw1dEQ2STBPWHNwNWg1UjlzaDczeXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnl8TyJy9 vKmxeyrwX6/5TiBh5+oz+vZjgKNJ6K0dQxBAk/gvErejPF0zlRqIexOQfXotV+Y8 pi0fOs3jypxeoTvxLAG5H7oQE+Quflju/Zq9CtufMox7YwqwDMJgE3SFeHqhUuSy zfQGLnoggVdHPGZozYv0UApJgpw28AEY1NSRrxXtSgLUvJgMKIveW3Cyi7rAdaOx PZLEezZi1myNp05J1AspSQ/oN4jxPr2jz+EnMd1Gtq8q6SQNXKBhDjzBs99IpMa+ lFiZ8/6IfV8sqB199YUB85KJmR6ZgZPDJm0pdslSZxMYad4Z+5lNYmA5UzvGJFEF 5zpTmM+jgfMdWg== -----END CERTIFICATE-----Generated at Tue Dec 30 20:20:32 2025 by rpki-client