This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft File: apWkz28PDDLNPf6Yh2ImC_zbpn4.mft (raw, json) Hash identifier: /r6SDp5HSA2Uxoi9OdBP9FELYqKN44KUCeDVfGoHDAg= Subject key identifier: 6F:5F:1D:3C:24:04:27:B3:E0:56:A3:5C:83:56:6A:21:9D:E8:37:A4 Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E Certificate issuer: /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e Certificate serial: 019B503BD3DB20826AB071B93E91235B10CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft Manifest number: 04E4 Signing time: Wed 24 Dec 2025 12:00:56 +0000 Manifest this update: Wed 24 Dec 2025 12:00:56 +0000 Manifest next update: Thu 25 Dec 2025 12:00:56 +0000 Files and hashes: 1: apWkz28PDDLNPf6Yh2ImC_zbpn4.crl (hash: SEooguCrO6FrLhX/sJHuAad6fg47bzA1GkTLtBFE7Mo=) 2: ei2AQFZeqEcoYtSC5TN3lwP2gbM.roa (hash: u56J4AXZH3zEF0D/VP7y3pv730bb3tumcg13gKuxn9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3b:d3:db:20:82:6a:b0:71:b9:3e:91:23:5b:10:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e Validity Not Before: Dec 24 12:00:56 2025 GMT Not After : Dec 25 12:00:56 2025 GMT Subject: CN=6f5f1d3c240427b3e056a35c83566a219de837a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:de:bd:c7:41:8c:3a:de:44:a3:b0:11:7f: 20:7b:6d:25:13:21:ad:cb:29:11:61:96:3b:38:40: 4b:26:f9:38:5f:a3:cf:74:1c:6f:ce:05:65:0d:65: 3e:c5:62:b5:59:f5:32:b6:f5:a2:29:27:4a:f4:ae: cc:ab:5e:08:ee:d2:dd:9f:0f:74:67:a9:b3:fc:fe: af:f1:40:98:2d:e3:f9:d7:a4:4a:97:0d:47:1b:6a: c4:3c:f1:bc:76:38:ea:4c:50:9a:75:6a:f4:33:da: 3b:d9:7f:9b:e7:7b:ea:31:45:cd:ca:2e:46:e8:67: a5:9d:5a:b5:17:81:c0:8c:5e:98:1e:85:60:76:9f: f8:f6:2b:41:64:92:84:9e:e7:ec:2f:6e:6a:1a:2a: 13:d3:93:75:17:7b:75:fb:39:be:54:9a:d6:36:73: e5:ee:f7:d4:ca:f4:b1:5a:79:2e:30:27:1a:8f:ed: 53:30:64:c0:d2:54:cf:9f:21:07:1e:45:48:b2:ed: c8:b4:25:8f:22:79:43:69:1b:dd:4e:c9:96:7a:6c: 7c:83:37:4d:72:c4:2d:b0:9a:7a:df:0c:a5:b9:09: f4:eb:01:c8:76:b0:43:a3:a3:2b:91:4b:6f:ca:1b: ac:ba:51:a3:35:f0:8e:bd:1b:af:52:ad:b3:52:3c: 9a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5F:1D:3C:24:04:27:B3:E0:56:A3:5C:83:56:6A:21:9D:E8:37:A4 X509v3 Authority Key Identifier: keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f4:60:5b:6d:97:39:08:bd:e7:54:4e:64:3e:db:62:ea:75: 16:ab:eb:b7:46:45:85:14:42:07:36:e5:f4:35:8b:65:c4:f8: 28:15:a8:b6:62:11:52:fe:6a:68:9b:18:77:c1:86:46:c8:54: b2:36:d4:42:84:dc:66:70:1e:4c:52:82:bd:41:13:8f:24:34: 18:7c:56:a3:b8:34:9f:1c:95:fb:f0:25:5c:d1:bc:61:b4:1a: 9d:fe:6d:7d:22:b2:be:b3:06:d2:f9:f4:b9:52:a7:ee:62:46: 48:3b:a3:56:20:7e:44:54:9d:1e:1b:48:00:04:76:ae:9b:7f: 72:3c:2c:14:43:f6:7d:8f:be:fd:4e:6e:4c:75:11:ce:6d:ac: 88:81:53:9a:7c:77:48:4b:00:ba:39:b0:f5:75:62:3c:8f:45: 50:d2:95:6e:4e:92:5c:06:a3:3f:df:09:50:7f:d8:bc:78:b3: 8a:45:c9:45:1d:27:55:bf:98:cc:19:ff:97:52:ff:07:c8:63: 8f:90:3c:74:9c:2a:c7:8f:bb:0a:5e:37:89:f6:69:60:52:f1: 37:bd:58:38:a1:4e:de:d4:01:e1:07:51:e2:9d:15:34:84:80: 4f:78:54:bf:f2:e8:69:02:24:1d:a1:05:3d:ae:5c:35:ca:27: 46:0b:6c:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQO9PbIIJqsHG5PpEjWxDKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOTVhNGNmNmYwZjBjMzJjZDNkZmU5ODg3NjIyNjBiZmNk YmE2N2UwHhcNMjUxMjI0MTIwMDU2WhcNMjUxMjI1MTIwMDU2WjAzMTEwLwYDVQQD Eyg2ZjVmMWQzYzI0MDQyN2IzZTA1NmEzNWM4MzU2NmEyMTlkZTgzN2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGnevcdBjDreRKOwEX8ge20lEyGt yykRYZY7OEBLJvk4X6PPdBxvzgVlDWU+xWK1WfUytvWiKSdK9K7Mq14I7tLdnw90 Z6mz/P6v8UCYLeP516RKlw1HG2rEPPG8djjqTFCadWr0M9o72X+b53vqMUXNyi5G 6GelnVq1F4HAjF6YHoVgdp/49itBZJKEnufsL25qGioT05N1F3t1+zm+VJrWNnPl 7vfUyvSxWnkuMCcaj+1TMGTA0lTPnyEHHkVIsu3ItCWPInlDaRvdTsmWemx8gzdN csQtsJp63wyluQn06wHIdrBDo6MrkUtvyhusulGjNfCOvRuvUq2zUjya6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9fHTwkBCez4FajXINWaiGd6DekMB8GA1UdIwQY MBaAFGqVpM9vDwwyzT3+mIdiJgv826Z+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXBXa3oyOFBERExOUGY2WWgySW1DX3picG40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hMGFhZDktMzg2Ny00NDlhLTkyNDMt OWFiMjRlN2QyOGZlLzEvYXBXa3oyOFBERExOUGY2WWgySW1DX3picG40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hMGFhZDktMzg2Ny00NDlhLTkyNDMtOWFiMjRlN2QyOGZl LzEvYXBXa3oyOFBERExOUGY2WWgySW1DX3picG40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/RgW22X OQi951ROZD7bYup1Fqvrt0ZFhRRCBzbl9DWLZcT4KBWotmIRUv5qaJsYd8GGRshU sjbUQoTcZnAeTFKCvUETjyQ0GHxWo7g0nxyV+/AlXNG8YbQanf5tfSKyvrMG0vn0 uVKn7mJGSDujViB+RFSdHhtIAAR2rpt/cjwsFEP2fY++/U5uTHURzm2siIFTmnx3 SEsAujmw9XViPI9FUNKVbk6SXAajP98JUH/YvHizikXJRR0nVb+YzBn/l1L/B8hj j5A8dJwqx4+7Cl43ifZpYFLxN71YOKFO3tQB4QdR4p0VNISAT3hUv/LoaQIkHaEF Pa5cNconRgtsLQ== -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:39 2025 by rpki-client