This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft File: apwfqpeD36srelPaP7D970zP6uU.mft (raw, json) Hash identifier: DCtqZaDes1hHbcKHLuMx3f2+OsROhZ4hWuTnudUjhoY= Subject key identifier: F9:58:4E:E0:DD:28:3E:22:F1:04:66:AA:B4:52:1B:32:EA:55:89:49 Authority key identifier: 6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5 Certificate issuer: /CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5 Certificate serial: 019B582CA6809AD01D149F08D61E0259DEF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft Manifest number: 02AC Signing time: Fri 26 Dec 2025 01:01:19 +0000 Manifest this update: Fri 26 Dec 2025 01:01:19 +0000 Manifest next update: Sat 27 Dec 2025 01:01:19 +0000 Files and hashes: 1: apwfqpeD36srelPaP7D970zP6uU.crl (hash: Jkw662kfggGzYlPCGgGq5f97h6AXJ875PPt+l7hw5Gs=) 2: tIh3EbNG8PyhR2bhdKGu98lXfi0.roa (hash: WvckFFiPzlkbuyQKqzi40xspGv9L4xehhqGGvB5LMXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:2c:a6:80:9a:d0:1d:14:9f:08:d6:1e:02:59:de:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5 Validity Not Before: Dec 26 01:01:19 2025 GMT Not After : Dec 27 01:01:19 2025 GMT Subject: CN=f9584ee0dd283e22f10466aab4521b32ea558949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:97:01:97:52:f4:b8:88:1f:6e:fe:18:cb: 1d:f9:6d:b5:a4:37:1c:09:28:14:d6:69:f3:7e:d2: 0f:f1:40:c9:9c:aa:30:26:33:ec:24:b7:3d:9a:15: d4:82:2e:aa:bd:ae:e4:2f:b9:fa:ac:eb:63:b4:51: c7:bd:84:5c:43:66:df:ab:d4:8d:9a:11:76:e5:9b: 03:4c:64:9e:11:17:f9:f4:d8:0b:7a:51:96:30:57: b7:07:73:4c:56:6d:f8:5e:9b:3f:c6:d8:4a:e3:63: af:34:23:fa:b4:e2:22:8c:40:92:97:ab:b8:f2:ce: 88:b6:9b:14:c0:6b:ef:71:6e:38:48:28:62:d3:94: bb:f5:a9:20:e7:98:23:3d:ce:1c:a3:2a:24:78:63: 69:6c:0b:7d:60:8f:c7:c4:ae:86:2c:a9:d0:ee:30: fd:0f:25:49:cf:ab:06:b1:a6:a1:c6:fa:76:d9:05: 0a:e1:7d:46:0c:1c:e8:2a:4b:7b:5a:57:e6:23:48: 77:b1:d4:96:e4:0b:d3:75:1d:b8:a0:0e:68:30:a5: 7e:ed:b4:bf:49:08:a3:65:41:9c:c0:52:55:56:e1: 37:e2:c7:51:5f:c6:69:08:d4:13:40:ac:b8:ef:47: 13:cd:5f:32:ab:38:77:46:5d:57:6b:e1:99:0d:a7: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:58:4E:E0:DD:28:3E:22:F1:04:66:AA:B4:52:1B:32:EA:55:89:49 X509v3 Authority Key Identifier: keyid:6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f9:a7:26:26:6b:96:5d:77:aa:08:46:7c:38:95:26:33:e4: 59:ed:28:00:54:45:1a:9e:2f:91:20:2c:1b:34:f2:0b:85:ac: 5f:ba:19:41:2f:0c:e5:59:dd:3a:8d:1b:77:b4:6d:35:f8:00: f8:82:47:83:39:ef:d7:84:a6:1f:29:aa:76:21:6e:d8:a3:4c: 16:71:82:55:0b:b7:af:cd:b7:7f:81:99:2d:9d:20:81:67:fe: 47:88:1c:08:5c:1a:84:dc:39:a2:76:d2:7e:4d:15:8e:79:72: 14:5f:6a:2a:07:7b:bb:dd:f2:9b:fd:e2:e3:db:27:52:9a:cd: 76:8f:e2:5e:8e:37:95:6a:66:94:02:00:11:37:2e:1b:15:da: 82:3a:01:45:11:bb:27:3b:28:6f:84:a9:27:8d:44:06:6c:ff: 64:0f:e8:1f:bf:1a:10:44:cb:1f:2a:04:20:ea:b5:ec:14:de: 6d:d4:af:42:e5:dc:5c:bc:f0:bf:6b:09:ae:2f:32:dc:f7:59: 56:b7:60:f5:bd:44:a7:72:11:20:c5:16:ed:9f:3f:14:1f:e2: e4:cc:40:c6:09:c4:34:0a:30:6f:e6:a7:1b:48:c7:35:d0:bd: 55:75:b7:08:ad:78:c0:34:0f:fa:c3:c9:b1:03:74:88:9c:ec: 5e:43:af:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYLKaAmtAdFJ8I1h4CWd74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOWMxZmFhOTc4M2RmYWIyYjdhNTNkYTNmYjBmZGVmNGNj ZmVhZTUwHhcNMjUxMjI2MDEwMTE5WhcNMjUxMjI3MDEwMTE5WjAzMTEwLwYDVQQD EyhmOTU4NGVlMGRkMjgzZTIyZjEwNDY2YWFiNDUyMWIzMmVhNTU4OTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSSXAZdS9LiIH27+GMsd+W21pDcc CSgU1mnzftIP8UDJnKowJjPsJLc9mhXUgi6qva7kL7n6rOtjtFHHvYRcQ2bfq9SN mhF25ZsDTGSeERf59NgLelGWMFe3B3NMVm34Xps/xthK42OvNCP6tOIijECSl6u4 8s6ItpsUwGvvcW44SChi05S79akg55gjPc4coyokeGNpbAt9YI/HxK6GLKnQ7jD9 DyVJz6sGsaahxvp22QUK4X1GDBzoKkt7WlfmI0h3sdSW5AvTdR24oA5oMKV+7bS/ SQijZUGcwFJVVuE34sdRX8ZpCNQTQKy470cTzV8yqzh3Rl1Xa+GZDaeEOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlYTuDdKD4i8QRmqrRSGzLqVYlJMB8GA1UdIwQY MBaAFGqcH6qXg9+rK3pT2j+w/e9Mz+rlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zZmQ0YjYtYjQxNC00OTAyLTg5MWYt ZDJiYjdjNzk1YTg2LzEvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8zZmQ0YjYtYjQxNC00OTAyLTg5MWYtZDJiYjdjNzk1YTg2 LzEvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/mnJiZr ll13qghGfDiVJjPkWe0oAFRFGp4vkSAsGzTyC4WsX7oZQS8M5VndOo0bd7RtNfgA +IJHgznv14SmHymqdiFu2KNMFnGCVQu3r823f4GZLZ0ggWf+R4gcCFwahNw5onbS fk0VjnlyFF9qKgd7u93ym/3i49snUprNdo/iXo43lWpmlAIAETcuGxXagjoBRRG7 Jzsob4SpJ41EBmz/ZA/oH78aEETLHyoEIOq17BTebdSvQuXcXLzwv2sJri8y3PdZ Vrdg9b1Ep3IRIMUW7Z8/FB/i5MxAxgnENAowb+anG0jHNdC9VXW3CK14wDQP+sPJ sQN0iJzsXkOv6Q== -----END CERTIFICATE-----Generated at Fri Dec 26 04:49:38 2025 by rpki-client