This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json) Hash identifier: bwNkAeJZd81gRuVSwKEIsW4/k3kfU1L/N/ffBntvKQo= Subject key identifier: F3:96:25:E2:59:B7:E0:36:FD:2D:F1:72:E1:D0:CB:8A:D8:73:DE:E7 Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6 Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6 Certificate serial: 019B988C07F893B9E90496D6353A3C697ED4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft Manifest number: 1139 Signing time: Wed 07 Jan 2026 13:01:12 +0000 Manifest this update: Wed 07 Jan 2026 13:01:12 +0000 Manifest next update: Thu 08 Jan 2026 13:01:12 +0000 Files and hashes: 1: PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa (hash: uNWAi4ypu2U7vKEwyptJEE3BsJukgPqN0/lL7CgpehE=) 2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: L5QbT9u201V5yHpwpZNwWX1Jh45hzFV3p51MTauC8d4=) 3: bNsvbdSJD0WI7Ewm9hgAe8yTIz4.roa (hash: fjVFQSNrjHzCOHsMITQUOhjzFotcFBmj0QqIbMKaS7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:8c:07:f8:93:b9:e9:04:96:d6:35:3a:3c:69:7e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6 Validity Not Before: Jan 7 13:01:12 2026 GMT Not After : Jan 8 13:01:12 2026 GMT Subject: CN=f39625e259b7e036fd2df172e1d0cb8ad873dee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:62:52:9d:c8:a4:c4:5d:6a:df:63:bf:6e: 4e:62:f0:b2:d4:5c:05:68:65:5f:08:86:eb:b7:8b: 9f:00:95:22:d6:a3:6b:93:34:38:2f:e2:59:91:50: 92:3a:d0:70:2e:97:2a:d3:77:dd:22:d1:1b:31:26: f4:92:7b:90:56:76:a9:7a:77:7c:3f:6f:d9:ca:88: f0:3e:9f:43:0d:fd:8f:b8:04:41:c3:80:1f:dd:52: c9:b8:4f:d5:f1:5b:b0:a5:a8:24:45:74:7f:86:24: 49:a3:d5:f1:db:a9:81:a2:9a:62:63:ec:c3:28:2a: 47:94:80:50:5f:ad:48:f8:ee:1b:18:bc:b7:3a:d8: 70:8e:65:59:92:8e:ed:21:2f:e2:fa:01:a3:5a:d4: fc:24:e0:19:f4:24:79:48:07:ab:16:0e:c0:5f:bc: f2:88:b5:7d:21:87:92:0d:b8:bb:6b:9a:41:97:4e: ec:59:d1:13:98:d2:68:94:27:4a:dc:50:b9:85:1c: 1f:dc:d1:73:2d:ff:94:4b:33:b7:8c:e0:ed:47:6a: 37:d3:00:08:d1:18:03:ad:85:87:49:cc:2a:03:f5: bb:93:f2:61:5e:be:34:0b:6d:ad:be:3c:d6:d0:4b: d4:5c:ed:5f:97:61:01:f5:eb:d2:a6:15:eb:31:32: a4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:96:25:E2:59:B7:E0:36:FD:2D:F1:72:E1:D0:CB:8A:D8:73:DE:E7 X509v3 Authority Key Identifier: keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:68:10:c1:0d:22:d9:f4:ed:29:31:a2:67:d1:d3:31:be:78: 35:4a:ad:50:a4:ca:f8:20:95:3d:34:dc:d7:ca:72:a7:3a:cf: 00:af:71:4e:d5:e7:8e:58:3c:29:8d:21:50:48:81:60:f6:0b: 92:87:03:48:43:9d:00:79:f7:ee:6b:fe:21:67:8d:08:7a:18: 6b:6f:1a:c5:ba:4b:ff:3f:4b:42:dc:db:4e:2a:1c:d0:18:50: 8a:04:24:87:ac:46:48:39:15:14:24:12:fd:29:87:b9:8f:6a: 61:72:0e:14:16:d6:1d:7a:2d:40:ee:5d:11:39:c5:9b:cb:5b: b6:e4:b6:eb:de:1b:87:34:e6:5d:79:b6:96:93:56:1a:c4:95: 50:bd:07:05:95:60:d4:8c:fe:f0:90:19:cc:63:21:72:e4:20: 2d:62:8a:c3:92:83:0d:0d:86:17:3d:6b:2e:fa:39:08:23:3a: 17:c2:b2:af:a0:f6:9a:e1:8f:a2:4f:86:fe:bc:ba:24:a8:79: 8e:27:69:31:23:fe:62:b2:9d:69:a6:71:66:fa:dd:48:f9:cc: 98:cb:3f:80:9f:38:49:5c:a8:4f:bc:2e:b7:79:11:0a:a2:5c: 02:ec:32:77:df:ee:c8:a8:a7:78:90:c2:8b:0e:90:cd:fd:b4: 41:94:ce:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuYjAf4k7npBJbWNTo8aX7UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjczNTJkMDcxMzU2MjNlMzNmNWE3ZTYyOTI1ZDRiYWI3 MjJmYzYwHhcNMjYwMTA3MTMwMTEyWhcNMjYwMTA4MTMwMTEyWjAzMTEwLwYDVQQD EyhmMzk2MjVlMjU5YjdlMDM2ZmQyZGYxNzJlMWQwY2I4YWQ4NzNkZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV9iUp3IpMRdat9jv25OYvCy1FwF aGVfCIbrt4ufAJUi1qNrkzQ4L+JZkVCSOtBwLpcq03fdItEbMSb0knuQVnapend8 P2/ZyojwPp9DDf2PuARBw4Af3VLJuE/V8VuwpagkRXR/hiRJo9Xx26mBoppiY+zD KCpHlIBQX61I+O4bGLy3OthwjmVZko7tIS/i+gGjWtT8JOAZ9CR5SAerFg7AX7zy iLV9IYeSDbi7a5pBl07sWdETmNJolCdK3FC5hRwf3NFzLf+USzO3jODtR2o30wAI 0RgDrYWHScwqA/W7k/JhXr40C22tvjzW0EvUXO1fl2EB9evSphXrMTKkCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOWJeJZt+A2/S3xcuHQy4rYc97nMB8GA1UdIwQY MBaAFGn3NS0HE1Yj4z9afmKSXUurci/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEt MDcxNTE4ZTA1NzNlLzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEtMDcxNTE4ZTA1NzNl LzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2gQwQ0i 2fTtKTGiZ9HTMb54NUqtUKTK+CCVPTTc18pypzrPAK9xTtXnjlg8KY0hUEiBYPYL kocDSEOdAHn37mv+IWeNCHoYa28axbpL/z9LQtzbTioc0BhQigQkh6xGSDkVFCQS /SmHuY9qYXIOFBbWHXotQO5dETnFm8tbtuS2694bhzTmXXm2lpNWGsSVUL0HBZVg 1Iz+8JAZzGMhcuQgLWKKw5KDDQ2GFz1rLvo5CCM6F8Kyr6D2muGPok+G/ry6JKh5 jidpMSP+YrKdaaZxZvrdSPnMmMs/gJ84SVyoT7wut3kRCqJcAuwyd9/uyKineJDC iw6Qzf20QZTOyQ== -----END CERTIFICATE-----Generated at Wed Jan 7 22:13:03 2026 by rpki-client