This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft File: aFeXIsOgywwzUcWV36PX6tgfFr8.mft (raw, json) Hash identifier: n6Bs+5qD/RhRsCqMaeuNFgAdREpGaooIYY2sIy0nJZQ= Subject key identifier: E6:72:4E:27:CC:0B:4A:C3:13:DB:7D:5C:96:E2:2A:83:3E:B1:DC:07 Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF Certificate issuer: /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf Certificate serial: 019B4E84F60EB64435873760DCDA0E8CBD2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft Manifest number: 1798 Signing time: Wed 24 Dec 2025 04:01:35 +0000 Manifest this update: Wed 24 Dec 2025 04:01:35 +0000 Manifest next update: Thu 25 Dec 2025 04:01:35 +0000 Files and hashes: 1: 5kpPrp0PsQaLwN-0f4M5ORyJaIo.roa (hash: sRLtBcmB7NMgyGt87xrsnTDd/kvjgxEDyhMytt8u1mY=) 2: TEQ2s_TPddXgs2TBHawu_QRXdAY.roa (hash: v8GdY3sNaK+PD8iTL9fBBYBUT72JOPHFN0JrePdltX0=) 3: aFeXIsOgywwzUcWV36PX6tgfFr8.crl (hash: wSXNJ739k0bG7qY4CRdKUa8utqespbJhpqA4fOTR9cY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:f6:0e:b6:44:35:87:37:60:dc:da:0e:8c:bd:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf Validity Not Before: Dec 24 04:01:35 2025 GMT Not After : Dec 25 04:01:35 2025 GMT Subject: CN=e6724e27cc0b4ac313db7d5c96e22a833eb1dc07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:24:87:95:e2:57:35:5a:f1:d2:e3:02:3a:1e: 2d:10:de:0b:6c:5f:69:fb:70:4e:ef:4e:68:a4:75: 15:65:d6:bc:cb:dd:cd:f5:43:1e:55:58:de:c1:ed: 69:3e:25:b5:78:1b:a2:9d:76:3d:b6:52:46:d4:46: ac:e8:70:ff:b2:05:f8:ad:43:53:05:5b:5d:8c:6c: 5a:74:7b:35:26:ce:de:d0:1e:bd:db:eb:4a:cf:90: 80:be:4b:ce:3a:a2:a8:d9:91:91:d9:77:9e:b8:0f: dc:4e:67:cf:dc:a3:96:a2:bf:02:14:3c:f7:0f:6d: 85:70:a3:4c:75:27:d1:db:90:72:1d:26:8a:67:ea: 2f:cf:47:08:bc:f9:a7:9c:c3:33:4b:06:12:12:1e: f4:f4:9e:d9:71:c4:cc:e2:8b:ac:fc:b3:b3:1a:32: 8e:64:6a:99:86:96:6a:7b:ff:55:ec:ed:56:78:86: f3:6d:41:6d:7e:32:02:c2:cf:31:f6:c3:d1:67:e2: 94:4e:cd:93:0f:d3:5c:7a:c7:37:4d:a1:96:3c:f5: 0c:08:e0:ad:41:ae:65:e9:f7:94:9c:0b:ec:75:34: 3c:87:96:cf:8f:6d:83:14:f5:c6:61:00:31:1e:65: 79:60:3b:7b:c9:90:13:09:eb:da:7f:e0:f4:bc:eb: fc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:72:4E:27:CC:0B:4A:C3:13:DB:7D:5C:96:E2:2A:83:3E:B1:DC:07 X509v3 Authority Key Identifier: keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:14:61:03:27:d3:25:8a:00:9b:ab:1f:6a:38:2c:67:ac:f9: ba:98:cd:df:f1:a8:71:9a:58:ba:69:9d:32:25:58:df:dd:c8: b2:f9:8d:4c:12:ba:89:23:8d:40:cf:4c:18:44:93:e5:ac:1d: 56:97:2b:45:cd:64:27:ec:7b:dc:cc:4e:4d:7b:14:1a:59:91: da:6d:4b:92:5e:0a:e5:8e:8f:a3:4d:9c:d8:1f:90:9b:a2:de: a6:6d:bd:4d:16:a8:c4:89:f6:82:df:07:00:e0:61:9e:03:55: 06:5a:c6:78:40:3c:82:a3:f6:e2:a2:f5:9b:9b:a1:2a:27:df: cd:a8:c4:00:41:72:70:6e:fe:07:5b:9e:69:9a:7b:93:a9:e3: d5:a2:05:26:52:6d:60:3f:86:34:72:25:be:74:3b:30:3b:5e: de:bd:f8:af:80:35:c5:22:87:45:24:a2:05:02:7c:d0:fc:6e: 96:59:73:46:bc:1d:99:eb:09:5d:12:d4:58:aa:4a:7c:6a:f3: cd:0c:39:0d:c9:5e:ef:1b:e3:de:84:20:67:d0:66:18:00:c4: 9a:ea:5d:f6:fa:61:02:fd:92:0d:d5:d4:24:a0:6f:c0:85:be: 5a:bb:cc:bc:bf:df:a4:04:36:85:bb:47:d1:77:bb:24:cd:08: dc:d6:35:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhPYOtkQ1hzdg3NoOjL0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NTc5NzIyYzNhMGNiMGMzMzUxYzU5NWRmYTNkN2VhZDgx ZjE2YmYwHhcNMjUxMjI0MDQwMTM1WhcNMjUxMjI1MDQwMTM1WjAzMTEwLwYDVQQD EyhlNjcyNGUyN2NjMGI0YWMzMTNkYjdkNWM5NmUyMmE4MzNlYjFkYzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCSHleJXNVrx0uMCOh4tEN4LbF9p +3BO705opHUVZda8y93N9UMeVVjewe1pPiW1eBuinXY9tlJG1Eas6HD/sgX4rUNT BVtdjGxadHs1Js7e0B692+tKz5CAvkvOOqKo2ZGR2XeeuA/cTmfP3KOWor8CFDz3 D22FcKNMdSfR25ByHSaKZ+ovz0cIvPmnnMMzSwYSEh709J7ZccTM4ous/LOzGjKO ZGqZhpZqe/9V7O1WeIbzbUFtfjICws8x9sPRZ+KUTs2TD9Ncesc3TaGWPPUMCOCt Qa5l6feUnAvsdTQ8h5bPj22DFPXGYQAxHmV5YDt7yZATCevaf+D0vOv84wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZyTifMC0rDE9t9XJbiKoM+sdwHMB8GA1UdIwQY MBaAFGhXlyLDoMsMM1HFld+j1+rYHxa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUZlWElzT2d5d3d6VWNXVjM2UFg2dGdmRnI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mYTgzNmMtMWNkMy00YmE3LWI1OTgt OWY1NTk3YjU2Yjc2LzEvYUZlWElzT2d5d3d6VWNXVjM2UFg2dGdmRnI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9mYTgzNmMtMWNkMy00YmE3LWI1OTgtOWY1NTk3YjU2Yjc2 LzEvYUZlWElzT2d5d3d6VWNXVjM2UFg2dGdmRnI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxRhAyfT JYoAm6sfajgsZ6z5upjN3/GocZpYummdMiVY393IsvmNTBK6iSONQM9MGEST5awd VpcrRc1kJ+x73MxOTXsUGlmR2m1Lkl4K5Y6Po02c2B+Qm6Lepm29TRaoxIn2gt8H AOBhngNVBlrGeEA8gqP24qL1m5uhKiffzajEAEFycG7+B1ueaZp7k6nj1aIFJlJt YD+GNHIlvnQ7MDte3r34r4A1xSKHRSSiBQJ80PxulllzRrwdmesJXRLUWKpKfGrz zQw5Dcle7xvj3oQgZ9BmGADEmupd9vphAv2SDdXUJKBvwIW+WrvMvL/fpAQ2hbtH 0Xe7JM0I3NY1dg== -----END CERTIFICATE-----Generated at Wed Dec 24 13:08:52 2025 by rpki-client