This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json) Hash identifier: 3KF2qq6hQgL7v0qDeHQ1XGXlVZXGvlmQtYgY0xQkGkE= Subject key identifier: 0A:D0:2B:92:4D:56:19:88:26:93:17:C6:C7:0C:50:0E:23:C1:B5:6B Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20 Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020 Certificate serial: 019B3B6B55DDEBFF5452FD0E279925F73A89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft Manifest number: 1719 Signing time: Sat 20 Dec 2025 11:00:48 +0000 Manifest this update: Sat 20 Dec 2025 11:00:48 +0000 Manifest next update: Sun 21 Dec 2025 11:00:48 +0000 Files and hashes: 1: 5lxdXXMFxYxoygmdkLHDVycf6Ls.roa (hash: 8akqgrA1gBkLMeQEUc+FbsTSvkiKqDW9xlyu0c6xU6A=) 2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: ZpjKhXFyOsdRsBosnr8+nwhk7b7c1oQFV9/KJtcMBuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:55:dd:eb:ff:54:52:fd:0e:27:99:25:f7:3a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020 Validity Not Before: Dec 20 11:00:48 2025 GMT Not After : Dec 21 11:00:48 2025 GMT Subject: CN=0ad02b924d561988269317c6c70c500e23c1b56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0c:af:3d:50:32:eb:6d:a4:be:d7:df:37:d7: 7d:70:a1:f9:e3:90:08:80:b5:f3:bf:bf:08:58:0c: 13:b1:a3:f5:fc:20:33:af:e3:15:3b:09:aa:77:71: d5:14:d8:35:4f:1e:6f:c9:c2:74:48:04:bc:7a:c1: dc:af:54:5f:22:4b:5a:60:88:12:5b:c7:98:3e:92: 08:92:2d:b8:d6:30:c4:17:aa:c6:ee:36:bf:54:91: ff:51:4c:67:bd:10:aa:7e:b4:ab:21:f7:3f:32:a4: 0a:f6:32:37:bd:0c:28:a3:8b:67:3c:7a:74:9f:6a: 4d:a0:06:af:5a:85:b9:53:d8:07:85:88:21:19:6b: a2:00:07:3f:8c:37:12:41:11:99:fe:81:70:f6:7f: 71:05:64:22:89:42:6a:63:1b:1c:87:51:03:3b:14: 1f:84:dd:3c:6e:09:1c:2e:2c:bc:4b:d8:1b:45:bc: 7c:fa:6e:5e:a3:21:de:e4:11:53:b8:dc:d6:a0:0a: 2d:fd:5f:46:22:31:f1:37:e7:bb:d3:84:9e:77:a9: 07:77:ea:d8:ac:9e:d9:d5:a4:c5:54:a9:d2:b7:39: 59:8e:d3:3a:3c:36:6f:66:98:4d:9c:67:90:2f:da: 04:03:a2:0f:01:88:74:57:25:f1:63:b6:e9:bf:2e: c3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D0:2B:92:4D:56:19:88:26:93:17:C6:C7:0C:50:0E:23:C1:B5:6B X509v3 Authority Key Identifier: keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:cc:1a:7b:d5:78:5b:16:3c:f2:ac:46:7c:e0:8a:80:d1:48: 22:2c:96:e8:bf:98:e7:7c:91:93:92:38:af:3a:b3:bf:06:59: 41:2e:12:07:59:82:e4:a2:2f:c0:d9:dd:4a:dd:f3:3f:29:fd: f8:98:a6:0f:f4:00:a9:1a:8b:db:c8:3d:4f:cf:a8:65:92:ac: 7a:bb:49:5a:f0:b3:5e:da:17:e0:f3:bd:7e:89:dc:66:90:6a: ad:41:b6:f1:19:c5:84:9d:40:ac:aa:d0:d9:77:aa:a1:61:51: 75:74:43:83:03:61:4b:a8:a7:00:e3:84:98:2c:45:de:f3:8c: 99:d1:49:89:4d:38:66:59:69:d1:65:00:02:0b:bc:74:ac:46: 21:45:de:e6:35:5b:9e:8c:f7:9d:8d:ce:e8:c9:14:4f:a9:ef: eb:89:f5:db:b6:30:c4:5d:03:00:59:74:4a:5c:cd:82:db:8a: ee:fa:70:55:29:20:a4:2e:22:94:f9:d0:28:73:d0:50:f6:00: 4d:6f:51:b1:01:9b:d8:67:07:1e:5c:84:53:34:32:e4:ad:f9: e2:2e:e3:4b:a9:28:2e:cf:98:52:38:39:ba:80:1a:ec:6f:d7: cb:27:7a:0f:6e:bd:74:f6:53:c2:84:fc:ba:dc:89:34:a5:33: 4a:a4:6c:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a1Xd6/9UUv0OJ5kl9zqJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOWQ2ZDI2ZTU2YzEzMmRkYmJjMDA1YWM0MjRmYjUzNmFj YmEwMjAwHhcNMjUxMjIwMTEwMDQ4WhcNMjUxMjIxMTEwMDQ4WjAzMTEwLwYDVQQD EygwYWQwMmI5MjRkNTYxOTg4MjY5MzE3YzZjNzBjNTAwZTIzYzFiNTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQyvPVAy622kvtffN9d9cKH545AI gLXzv78IWAwTsaP1/CAzr+MVOwmqd3HVFNg1Tx5vycJ0SAS8esHcr1RfIktaYIgS W8eYPpIIki241jDEF6rG7ja/VJH/UUxnvRCqfrSrIfc/MqQK9jI3vQwoo4tnPHp0 n2pNoAavWoW5U9gHhYghGWuiAAc/jDcSQRGZ/oFw9n9xBWQiiUJqYxsch1EDOxQf hN08bgkcLiy8S9gbRbx8+m5eoyHe5BFTuNzWoAot/V9GIjHxN+e704Sed6kHd+rY rJ7Z1aTFVKnStzlZjtM6PDZvZphNnGeQL9oEA6IPAYh0VyXxY7bpvy7D5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArQK5JNVhmIJpMXxscMUA4jwbVrMB8GA1UdIwQY MBaAFGqdbSblbBMt27wAWsQk+1Nqy6AgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWRkNmUtMDg1Ni00YTI3LWFlY2Qt ZDg5MjhmNWUxYjQwLzEvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85OWRkNmUtMDg1Ni00YTI3LWFlY2QtZDg5MjhmNWUxYjQw LzEvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8wae9V4 WxY88qxGfOCKgNFIIiyW6L+Y53yRk5I4rzqzvwZZQS4SB1mC5KIvwNndSt3zPyn9 +JimD/QAqRqL28g9T8+oZZKsertJWvCzXtoX4PO9foncZpBqrUG28RnFhJ1ArKrQ 2XeqoWFRdXRDgwNhS6inAOOEmCxF3vOMmdFJiU04Zllp0WUAAgu8dKxGIUXe5jVb noz3nY3O6MkUT6nv64n127YwxF0DAFl0SlzNgtuK7vpwVSkgpC4ilPnQKHPQUPYA TW9RsQGb2GcHHlyEUzQy5K354i7jS6koLs+YUjg5uoAa7G/Xyyd6D269dPZTwoT8 utyJNKUzSqRsPg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:05:40 2025 by rpki-client