This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft File: AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json) Hash identifier: pgcSX2Geq7/xBAyxWlMxHKsIwACpkyGq2XlO91qe6Fg= Subject key identifier: E8:AE:09:E6:4C:4D:21:8B:D2:FF:2A:41:81:09:62:27:B6:6D:B5:2F Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4 Certificate issuer: /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4 Certificate serial: 019B5D5310E25F006BDCDFD5C663240EF671 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft Manifest number: 1081 Signing time: Sat 27 Dec 2025 01:01:23 +0000 Manifest this update: Sat 27 Dec 2025 01:01:23 +0000 Manifest next update: Sun 28 Dec 2025 01:01:23 +0000 Files and hashes: 1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: mjZ4Fqr/CqG1NnVqwSLD451sPILuERZeZG/KDjLmlMw=) 2: uxPm2jgrGB9aUpoVSqtxOrk6oLc.roa (hash: jnz+6TEphg6WeFVMNjeLnKwOXT2+7WslFFXVeACqJbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:10:e2:5f:00:6b:dc:df:d5:c6:63:24:0e:f6:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4 Validity Not Before: Dec 27 01:01:23 2025 GMT Not After : Dec 28 01:01:23 2025 GMT Subject: CN=e8ae09e64c4d218bd2ff2a4181096227b66db52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a7:88:de:61:30:5a:75:df:1f:18:80:3f:5e: 6a:05:b1:6f:20:38:96:cc:81:9f:fb:08:3a:1d:ea: d8:1c:9e:a6:8b:92:a2:f3:2e:18:09:98:ce:9a:c6: b8:13:eb:03:03:98:2b:64:88:2d:a2:d0:27:d1:c0: 37:b1:2c:17:1f:98:5b:c4:cc:1e:cd:38:6a:e0:3b: 2e:b4:5e:b4:50:0d:cc:c9:17:22:95:c1:56:21:7c: 47:fb:8a:e3:96:41:08:1e:20:36:80:a4:fe:83:8e: 59:c8:ab:0d:f5:e4:a6:56:8c:4e:78:a9:8c:07:f2: 72:70:6e:55:48:64:26:ae:1f:ba:60:7f:eb:3f:34: d0:c3:10:7b:cd:bb:b0:1e:66:33:a8:8c:7f:2a:c5: 91:09:2f:6e:9b:37:86:c9:73:30:0f:c2:69:15:11: e4:08:71:26:50:e8:6e:70:7f:2c:29:35:cb:95:42: 7f:a1:e8:be:b2:ef:79:ad:44:d5:ac:65:fb:9e:e8: 05:51:1b:cf:be:02:24:c2:9d:ef:f9:ef:f6:da:2c: e1:26:02:47:b1:a6:66:54:e8:4b:e0:ab:69:07:25: 94:50:da:70:1a:4f:f7:a7:dd:d4:53:fc:f5:43:3d: b4:e4:10:65:f5:01:b9:c7:e6:4f:cd:f6:90:a0:59: f8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AE:09:E6:4C:4D:21:8B:D2:FF:2A:41:81:09:62:27:B6:6D:B5:2F X509v3 Authority Key Identifier: keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:fe:ad:6d:76:1d:d6:30:86:3c:d8:42:e6:11:6f:e0:08:d7: b3:ab:58:7a:0f:60:7c:1a:55:ad:33:5c:67:43:0d:5d:e7:2f: b8:26:e4:52:a2:33:55:53:32:ae:84:d7:4c:0e:2b:b8:3c:82: b1:a3:0a:7f:40:f3:c4:74:82:b0:e2:85:e3:89:4f:07:98:d4: de:b7:10:04:de:39:0b:d3:f4:83:a5:fc:d1:a2:7b:8f:a8:3f: dc:5a:ae:49:7d:33:4e:90:c1:6f:de:d7:da:08:73:d2:5a:34: c5:3a:17:0d:29:bd:cd:aa:3c:34:69:68:fa:83:89:16:ca:0d: 72:cd:a2:e5:62:b9:ff:8d:40:e9:43:70:06:47:d5:88:5b:1b: a0:ea:4d:51:24:f8:eb:21:50:e3:f6:24:62:67:99:e4:6a:58: d4:17:59:e5:39:25:09:d0:02:5c:db:30:fa:ed:1f:dc:2f:cc: eb:cc:88:81:a7:5e:56:04:b5:99:b4:c7:c6:24:ff:0f:62:cf: af:7e:96:23:14:d9:c3:fe:8c:15:dd:c4:e0:7a:d5:3f:e3:d2: 4d:14:df:6c:98:f5:08:49:d2:35:a3:c0:19:81:b7:8a:e4:3d: 2a:16:8f:8c:15:36:6f:8a:f5:19:06:c9:0b:16:c3:81:06:46: a8:63:af:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUxDiXwBr3N/VxmMkDvZxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNTdhZDA5YWU5YTFhOTgwMTIyNzU4NTFhYWJlNjllNGUx NWEyZjQwHhcNMjUxMjI3MDEwMTIzWhcNMjUxMjI4MDEwMTIzWjAzMTEwLwYDVQQD EyhlOGFlMDllNjRjNGQyMThiZDJmZjJhNDE4MTA5NjIyN2I2NmRiNTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKeI3mEwWnXfHxiAP15qBbFvIDiW zIGf+wg6HerYHJ6mi5Ki8y4YCZjOmsa4E+sDA5grZIgtotAn0cA3sSwXH5hbxMwe zThq4DsutF60UA3MyRcilcFWIXxH+4rjlkEIHiA2gKT+g45ZyKsN9eSmVoxOeKmM B/JycG5VSGQmrh+6YH/rPzTQwxB7zbuwHmYzqIx/KsWRCS9umzeGyXMwD8JpFRHk CHEmUOhucH8sKTXLlUJ/oei+su95rUTVrGX7nugFURvPvgIkwp3v+e/22izhJgJH saZmVOhL4KtpByWUUNpwGk/3p93UU/z1Qz205BBl9QG5x+ZPzfaQoFn48wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiuCeZMTSGL0v8qQYEJYie2bbUvMB8GA1UdIwQY MBaAFABXrQmumhqYASJ1hRqr5p5OFaL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUZldENhNmFHcGdCSW5XRkdxdm1uazRWb3ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80YzMyYjktZjc3NS00ODY4LTkyM2Qt ZGNhMzhkNTlhMTU4LzEvQUZldENhNmFHcGdCSW5XRkdxdm1uazRWb3ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy80YzMyYjktZjc3NS00ODY4LTkyM2QtZGNhMzhkNTlhMTU4 LzEvQUZldENhNmFHcGdCSW5XRkdxdm1uazRWb3ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPP6tbXYd 1jCGPNhC5hFv4AjXs6tYeg9gfBpVrTNcZ0MNXecvuCbkUqIzVVMyroTXTA4ruDyC saMKf0DzxHSCsOKF44lPB5jU3rcQBN45C9P0g6X80aJ7j6g/3FquSX0zTpDBb97X 2ghz0lo0xToXDSm9zao8NGlo+oOJFsoNcs2i5WK5/41A6UNwBkfViFsboOpNUST4 6yFQ4/YkYmeZ5GpY1BdZ5TklCdACXNsw+u0f3C/M68yIgadeVgS1mbTHxiT/D2LP r36WIxTZw/6MFd3E4HrVP+PSTRTfbJj1CEnSNaPAGYG3iuQ9KhaPjBU2b4r1GQbJ CxbDgQZGqGOvIQ== -----END CERTIFICATE-----Generated at Sat Dec 27 07:03:30 2025 by rpki-client