This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json) Hash identifier: +AtseKh0Wz8GBvgH+syC8jC5vvBhFc38uLmvCy548fM= Subject key identifier: 9F:91:1B:E8:A5:DF:78:99:C7:78:E7:2F:63:8E:7B:21:0B:D5:D1:3D Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6 Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6 Certificate serial: 019B72C75005DE936322E8E10F079917406C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft Manifest number: 1125 Signing time: Wed 31 Dec 2025 05:00:23 +0000 Manifest this update: Wed 31 Dec 2025 05:00:23 +0000 Manifest next update: Thu 01 Jan 2026 05:00:23 +0000 Files and hashes: 1: 4_oN5t2VSIOq_-X5g3Ce-QiBlKY.roa (hash: xjVxZUWWNj0H8HPJGRtdhqp5nG1AYywGPAoN+0SYdO8=) 2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: CGMXXy05nTM8aURfeGJZpPfzvo+j9mH9aUpRm+o7NLA=) 3: v3SUAtR9QWFlr-gp81uV9PqvwlY.roa (hash: mn3Ww15BCRBB13Jmxz3hObcdL3yCXwDoxW+3UuBjkwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:c7:50:05:de:93:63:22:e8:e1:0f:07:99:17:40:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6 Validity Not Before: Dec 31 05:00:23 2025 GMT Not After : Jan 1 05:00:23 2026 GMT Subject: CN=9f911be8a5df7899c778e72f638e7b210bd5d13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:51:59:9e:3b:26:af:c7:af:51:ee:15:6e: dc:de:e0:d8:aa:d1:2e:fb:23:72:97:c2:fa:96:74: 5d:9f:d2:8c:56:aa:d2:dd:83:79:f8:ff:42:36:a0: c9:c5:1a:e1:2f:40:aa:0d:4c:3b:36:54:c8:17:30: 4d:f8:ad:94:c9:e4:e4:53:c0:cd:07:2e:c2:33:1b: 75:96:4b:0a:58:e0:fb:2e:4d:06:40:c8:83:55:5b: be:99:31:d6:31:cd:b2:a2:5c:ce:45:e4:a8:be:e2: c2:dd:9c:5e:ef:6a:2a:e7:0c:e0:43:84:d1:96:79: ca:a7:d7:fa:65:a1:6d:53:3b:74:92:6e:c2:35:a5: c2:7b:51:b5:ff:98:41:6f:a7:44:88:9c:a6:7c:0d: 64:dc:ed:0c:84:7a:fe:f7:fa:89:7b:19:b9:8e:03: 45:f1:c1:e5:bf:1f:b1:bd:48:fd:a5:b8:aa:e2:75: 7b:58:8c:33:b7:a6:e9:77:24:2c:dd:a4:17:e5:08: 1a:06:e2:ed:a2:45:ff:08:3e:06:f6:3c:06:3b:19: 57:31:83:26:1f:e1:e2:51:9b:fd:6e:a4:4c:12:d8: bf:9e:bf:00:43:fa:1b:8d:6c:40:49:2a:cc:f4:ed: bd:d7:0c:6a:d5:4d:ae:0e:08:b0:9d:94:95:c7:8c: cd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:91:1B:E8:A5:DF:78:99:C7:78:E7:2F:63:8E:7B:21:0B:D5:D1:3D X509v3 Authority Key Identifier: keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:93:12:55:f9:0f:b1:9f:18:92:51:f2:d6:20:89:b7:6f:21: c9:a2:50:9a:9d:c1:ee:48:87:6f:a7:93:ef:88:f0:64:37:43: a4:f8:8c:dd:e9:ed:5c:40:be:5b:ca:e2:d9:55:75:82:9d:8b: 88:22:49:36:80:73:bd:ae:fa:b1:cc:3c:89:9a:a5:51:a3:0f: b9:b2:19:48:87:98:e1:d4:fd:a4:05:62:f7:b8:41:d6:f1:58: 8e:45:1c:53:a9:ef:a6:fe:55:06:09:83:73:2e:b4:96:73:28: 56:0d:7c:13:b6:d3:46:e0:e6:dd:ef:86:ae:f1:d6:4a:90:9a: a4:e5:8d:d9:82:93:58:06:98:41:34:dc:54:35:92:aa:e0:f5: 50:60:01:9c:2e:ce:ff:21:39:62:7a:01:4c:99:87:07:e5:b2: 17:64:29:96:4c:bc:b6:13:71:39:b4:e6:92:2b:d0:d8:dc:ec: 9f:a6:6b:95:4f:f8:f1:cd:2d:2c:25:5a:f0:cd:6e:37:11:74: 5d:f7:4a:3b:bc:26:ad:a6:82:88:58:9d:35:c8:c7:c9:1d:ca: fc:9d:dd:5e:f6:fc:5e:5f:31:84:fe:c1:85:b1:07:d5:54:24: 48:1f:4f:81:68:47:f0:2c:9e:e7:aa:b8:ca:9b:8f:88:3b:70: 73:e5:d9:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyx1AF3pNjIujhDweZF0BsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjczNTJkMDcxMzU2MjNlMzNmNWE3ZTYyOTI1ZDRiYWI3 MjJmYzYwHhcNMjUxMjMxMDUwMDIzWhcNMjYwMTAxMDUwMDIzWjAzMTEwLwYDVQQD Eyg5ZjkxMWJlOGE1ZGY3ODk5Yzc3OGU3MmY2MzhlN2IyMTBiZDVkMTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoFRWZ47Jq/Hr1HuFW7c3uDYqtEu +yNyl8L6lnRdn9KMVqrS3YN5+P9CNqDJxRrhL0CqDUw7NlTIFzBN+K2UyeTkU8DN By7CMxt1lksKWOD7Lk0GQMiDVVu+mTHWMc2yolzOReSovuLC3Zxe72oq5wzgQ4TR lnnKp9f6ZaFtUzt0km7CNaXCe1G1/5hBb6dEiJymfA1k3O0MhHr+9/qJexm5jgNF 8cHlvx+xvUj9pbiq4nV7WIwzt6bpdyQs3aQX5QgaBuLtokX/CD4G9jwGOxlXMYMm H+HiUZv9bqRMEti/nr8AQ/objWxASSrM9O291wxq1U2uDgiwnZSVx4zN5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+RG+il33iZx3jnL2OOeyEL1dE9MB8GA1UdIwQY MBaAFGn3NS0HE1Yj4z9afmKSXUurci/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEt MDcxNTE4ZTA1NzNlLzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEtMDcxNTE4ZTA1NzNl LzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA35MSVfkP sZ8YklHy1iCJt28hyaJQmp3B7kiHb6eT74jwZDdDpPiM3entXEC+W8ri2VV1gp2L iCJJNoBzva76scw8iZqlUaMPubIZSIeY4dT9pAVi97hB1vFYjkUcU6nvpv5VBgmD cy60lnMoVg18E7bTRuDm3e+GrvHWSpCapOWN2YKTWAaYQTTcVDWSquD1UGABnC7O /yE5YnoBTJmHB+WyF2Qplky8thNxObTmkivQ2Nzsn6ZrlU/48c0tLCVa8M1uNxF0 XfdKO7wmraaCiFidNcjHyR3K/J3dXvb8Xl8xhP7BhbEH1VQkSB9PgWhH8Cye56q4 ypuPiDtwc+XZ6Q== -----END CERTIFICATE-----Generated at Wed Dec 31 05:59:13 2025 by rpki-client