This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json) Hash identifier: vJzwjDYXmFu2Z6z5AwJvWRufKS4qt4NAOtl2Z1VgF/E= Subject key identifier: 7C:07:6C:F7:0B:C3:6C:50:93:D4:50:C7:9D:89:0F:B5:B3:EB:51:4B Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6 Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6 Certificate serial: 019B3AC664C433BC076CBE55CEDC7DBF78CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft Manifest number: 1108 Signing time: Sat 20 Dec 2025 08:00:38 +0000 Manifest this update: Sat 20 Dec 2025 08:00:38 +0000 Manifest next update: Sun 21 Dec 2025 08:00:38 +0000 Files and hashes: 1: 4_oN5t2VSIOq_-X5g3Ce-QiBlKY.roa (hash: xjVxZUWWNj0H8HPJGRtdhqp5nG1AYywGPAoN+0SYdO8=) 2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: BEkVRksNKDPKYHPWVm8RX479qLx0qGNwDm2VDpSWs6M=) 3: v3SUAtR9QWFlr-gp81uV9PqvwlY.roa (hash: mn3Ww15BCRBB13Jmxz3hObcdL3yCXwDoxW+3UuBjkwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:64:c4:33:bc:07:6c:be:55:ce:dc:7d:bf:78:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6 Validity Not Before: Dec 20 08:00:38 2025 GMT Not After : Dec 21 08:00:38 2025 GMT Subject: CN=7c076cf70bc36c5093d450c79d890fb5b3eb514b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e7:72:31:9f:eb:ba:42:d1:21:9b:e8:b9:38: fc:d9:45:f2:2f:15:65:8a:e3:43:f5:cf:7f:f8:85: fa:f2:be:ad:b2:2e:bc:21:01:e8:77:f9:17:47:62: 38:92:9c:5e:9d:fe:f9:06:ff:23:6a:20:c9:f9:60: f4:11:7c:8f:2a:60:91:73:94:b0:7f:cb:cd:78:ae: ef:a3:3f:49:3c:b7:13:df:b4:ae:c7:98:ac:c8:ee: ba:b9:08:c7:cd:16:7c:6e:bc:4c:cc:d2:bc:9b:7b: e5:de:2f:84:22:02:15:f1:72:9a:ae:f1:cb:2c:69: 34:42:fd:1f:64:1b:07:eb:94:ff:3a:c9:d7:67:51: c9:88:a1:75:71:0c:36:59:b9:2b:9c:2c:bd:65:86: 22:53:51:5a:e0:48:34:37:c0:af:9a:fb:7a:25:fb: 2d:da:71:7e:43:d5:6d:09:2c:b5:f8:e3:35:da:e9: 75:0d:c2:04:66:9e:f3:8f:43:d6:34:ae:22:1d:47: 2d:38:71:6f:62:b9:79:7f:8e:a1:e4:3d:9c:8d:59: 3c:2e:25:58:98:b8:c5:e5:ab:c4:e0:89:92:8d:1f: d2:67:9b:c7:9a:4b:2c:ea:87:c6:e0:d0:6c:03:44: 42:3b:73:a1:a4:2a:6a:1b:87:80:86:01:10:6a:8f: b5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:07:6C:F7:0B:C3:6C:50:93:D4:50:C7:9D:89:0F:B5:B3:EB:51:4B X509v3 Authority Key Identifier: keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:50:91:86:b0:f8:c9:e4:25:28:54:ed:25:52:55:f6:f2:ed: 2c:e3:a6:3e:5d:f3:0e:d6:95:f9:f1:83:b4:e9:84:b8:38:d0: 56:a8:5a:73:a6:e9:32:92:a1:eb:46:bc:40:1d:52:05:c8:d8: e7:f4:1f:5c:83:ae:48:62:f9:a5:2b:e2:d4:75:ad:7a:b1:d2: d5:85:55:85:53:f6:43:3e:28:dd:c4:e8:78:71:5e:23:af:93: 4b:76:1c:bb:f4:bb:b0:0a:5b:bd:68:b6:8f:29:05:02:70:5b: c4:3d:8c:23:00:1c:f0:c5:32:8d:68:a7:0c:91:80:69:6e:ce: c8:28:6e:ce:79:5f:2a:d9:2d:98:22:0d:a7:2c:73:a9:53:bf: 3c:ed:f7:e8:a2:0c:6e:e1:1e:05:eb:5f:2b:80:ed:fb:ad:22: 8e:49:a9:4d:b9:ea:ad:57:f2:01:be:9b:64:a5:50:78:2b:b9: dc:09:27:7a:04:f7:48:3e:fb:08:bb:84:92:cf:17:8e:a3:23: 49:36:e9:f5:7b:48:3e:de:9a:3d:1d:05:df:e3:34:9d:a6:3e: f2:c8:ed:dc:fd:c3:e7:6f:a0:31:4d:3f:de:bb:48:fa:90:ec: ee:e5:a9:f6:5b:f7:33:f9:c8:57:5f:01:9d:97:44:ff:52:d9: c7:1d:dd:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xmTEM7wHbL5Vztx9v3jMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjczNTJkMDcxMzU2MjNlMzNmNWE3ZTYyOTI1ZDRiYWI3 MjJmYzYwHhcNMjUxMjIwMDgwMDM4WhcNMjUxMjIxMDgwMDM4WjAzMTEwLwYDVQQD Eyg3YzA3NmNmNzBiYzM2YzUwOTNkNDUwYzc5ZDg5MGZiNWIzZWI1MTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOdyMZ/rukLRIZvouTj82UXyLxVl iuND9c9/+IX68r6tsi68IQHod/kXR2I4kpxenf75Bv8jaiDJ+WD0EXyPKmCRc5Sw f8vNeK7voz9JPLcT37Sux5isyO66uQjHzRZ8brxMzNK8m3vl3i+EIgIV8XKarvHL LGk0Qv0fZBsH65T/OsnXZ1HJiKF1cQw2WbkrnCy9ZYYiU1Fa4Eg0N8Cvmvt6Jfst 2nF+Q9VtCSy1+OM12ul1DcIEZp7zj0PWNK4iHUctOHFvYrl5f46h5D2cjVk8LiVY mLjF5avE4ImSjR/SZ5vHmkss6ofG4NBsA0RCO3OhpCpqG4eAhgEQao+1/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwHbPcLw2xQk9RQx52JD7Wz61FLMB8GA1UdIwQY MBaAFGn3NS0HE1Yj4z9afmKSXUurci/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEt MDcxNTE4ZTA1NzNlLzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEtMDcxNTE4ZTA1NzNl LzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelCRhrD4 yeQlKFTtJVJV9vLtLOOmPl3zDtaV+fGDtOmEuDjQVqhac6bpMpKh60a8QB1SBcjY 5/QfXIOuSGL5pSvi1HWterHS1YVVhVP2Qz4o3cToeHFeI6+TS3Ycu/S7sApbvWi2 jykFAnBbxD2MIwAc8MUyjWinDJGAaW7OyChuznlfKtktmCINpyxzqVO/PO336KIM buEeBetfK4Dt+60ijkmpTbnqrVfyAb6bZKVQeCu53AknegT3SD77CLuEks8XjqMj STbp9XtIPt6aPR0F3+M0naY+8sjt3P3D52+gMU0/3rtI+pDs7uWp9lv3M/nIV18B nZdE/1LZxx3dBQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:05:33 2025 by rpki-client