This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft File: Afq489H7PSo1xPZ6SPb2CD6rpXU.mft (raw, json) Hash identifier: hKTqmggsjnSm/NWUw1w8grXmjRbH4xPcUpjFCe+Vfmg= Subject key identifier: A1:E3:BC:91:76:BC:39:5A:87:6C:4D:80:2A:7D:AE:53:C3:E7:16:24 Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75 Certificate issuer: /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575 Certificate serial: 019B69579FEA64AE438619C2D3FE9E938F11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft Manifest number: 0780 Signing time: Mon 29 Dec 2025 09:01:48 +0000 Manifest this update: Mon 29 Dec 2025 09:01:48 +0000 Manifest next update: Tue 30 Dec 2025 09:01:48 +0000 Files and hashes: 1: Afq489H7PSo1xPZ6SPb2CD6rpXU.crl (hash: W4El5Tf1cJJ1tQoqBIVFORYgoOdusAasc+m6YAmjfZQ=) 2: RCG29GRzXNkfnM3mAc2fQgzDKKo.roa (hash: VMJ45tdoRBW32E+FWz6jKq995VHfDQKLmdI/8SmUIrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 09:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:57:9f:ea:64:ae:43:86:19:c2:d3:fe:9e:93:8f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575 Validity Not Before: Dec 29 09:01:48 2025 GMT Not After : Dec 30 09:01:48 2025 GMT Subject: CN=a1e3bc9176bc395a876c4d802a7dae53c3e71624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:26:df:94:5d:39:11:92:9c:39:8a:9f:78:5d: 8a:1c:23:00:8b:b6:70:b6:8c:74:a7:3c:28:72:ea: bb:76:9f:b0:a5:1b:2d:52:b0:0f:5b:4e:37:fd:42: bb:32:e2:a5:9e:06:19:06:ec:bb:b6:c9:d5:db:b2: 1c:2f:c1:fb:ff:35:c9:45:4e:e2:73:07:28:c1:d2: 03:33:10:13:93:58:8a:70:56:b8:dd:9f:ce:60:0e: 40:dc:95:75:39:95:37:09:51:78:2f:cb:a8:7e:dc: d7:00:63:e3:c4:f3:9f:d3:c9:d0:63:50:e3:9d:f8: 23:f5:99:18:38:04:1c:ea:de:17:56:e3:d7:3d:ef: c0:f8:6b:5d:76:43:52:68:14:4b:7e:3a:6f:b0:38: f1:92:62:51:43:00:1e:95:b8:67:8f:b0:c9:cf:bc: 2c:f7:dd:a7:92:e0:8a:77:ef:30:97:39:70:7e:a5: 1b:70:52:ff:8e:06:35:fd:fc:8b:a8:a9:3d:fc:d4: 75:7e:81:67:e4:07:37:c0:36:06:f5:80:fb:3e:03: 39:c7:76:9f:8f:40:f3:05:da:4e:ae:9c:69:ad:5a: 2f:21:bf:76:40:18:12:e8:b1:41:a6:7f:dc:45:6d: 7b:dc:77:91:1a:83:37:de:fb:9f:7e:de:a1:6b:17: 24:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E3:BC:91:76:BC:39:5A:87:6C:4D:80:2A:7D:AE:53:C3:E7:16:24 X509v3 Authority Key Identifier: keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:73:c2:fd:99:78:34:e3:55:75:8a:eb:f0:1a:a4:5b:bf:03: e0:35:94:c4:02:7d:7b:6e:8b:4d:87:94:12:b6:d0:72:a6:62: 8a:2a:ac:04:69:fe:39:40:5e:67:b3:59:be:09:1f:6d:b2:4f: b4:bc:d9:93:2e:2c:25:a4:5f:ca:3a:dc:39:02:be:05:52:58: 57:e9:32:c4:98:24:79:83:e2:a5:9f:26:b2:74:77:9d:a7:45: 14:51:52:ac:1d:2d:2d:aa:0f:70:71:57:eb:6b:74:58:bd:5e: 5d:98:70:ba:9b:a0:84:b4:44:ea:6d:9a:57:aa:55:f1:b7:1b: c4:8b:42:1c:2f:7b:51:a8:a4:db:47:c9:a4:9a:97:7f:ef:07: 88:55:f0:78:ba:e9:a9:64:b0:90:0c:c3:20:7a:e1:b9:6d:29: 3a:0e:9b:cc:a4:58:24:f3:64:f6:6b:c1:2d:63:ab:dd:2a:ad: 30:9b:f2:be:a8:b4:2c:57:9b:61:6b:f8:2a:f1:af:6b:59:67: da:29:47:cb:28:a4:28:1b:34:34:03:f0:d2:62:5a:a7:55:b9: ee:39:9d:32:df:5c:13:7b:97:da:0c:2f:df:16:1e:fe:34:68: e6:66:b8:fe:af:54:99:49:40:23:34:2f:f0:63:fd:4d:0b:55: ac:55:5d:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpV5/qZK5DhhnC0/6ek48RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZmFiOGYzZDFmYjNkMmEzNWM0ZjY3YTQ4ZjZmNjA4M2Vh YmE1NzUwHhcNMjUxMjI5MDkwMTQ4WhcNMjUxMjMwMDkwMTQ4WjAzMTEwLwYDVQQD EyhhMWUzYmM5MTc2YmMzOTVhODc2YzRkODAyYTdkYWU1M2MzZTcxNjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SbflF05EZKcOYqfeF2KHCMAi7Zw tox0pzwocuq7dp+wpRstUrAPW043/UK7MuKlngYZBuy7tsnV27IcL8H7/zXJRU7i cwcowdIDMxATk1iKcFa43Z/OYA5A3JV1OZU3CVF4L8uoftzXAGPjxPOf08nQY1Dj nfgj9ZkYOAQc6t4XVuPXPe/A+GtddkNSaBRLfjpvsDjxkmJRQwAelbhnj7DJz7ws 992nkuCKd+8wlzlwfqUbcFL/jgY1/fyLqKk9/NR1foFn5Ac3wDYG9YD7PgM5x3af j0DzBdpOrpxprVovIb92QBgS6LFBpn/cRW173HeRGoM33vufft6haxckRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHjvJF2vDlah2xNgCp9rlPD5xYkMB8GA1UdIwQY MBaAFAH6uPPR+z0qNcT2ekj29gg+q6V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWZxNDg5SDdQU28xeFBaNlNQYjJDRDZycFhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85N2Y5MTctOTNmOC00MDVjLTlkNTUt YTNjMDYxZDhiZTkxLzEvQWZxNDg5SDdQU28xeFBaNlNQYjJDRDZycFhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy85N2Y5MTctOTNmOC00MDVjLTlkNTUtYTNjMDYxZDhiZTkx LzEvQWZxNDg5SDdQU28xeFBaNlNQYjJDRDZycFhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3PC/Zl4 NONVdYrr8BqkW78D4DWUxAJ9e26LTYeUErbQcqZiiiqsBGn+OUBeZ7NZvgkfbbJP tLzZky4sJaRfyjrcOQK+BVJYV+kyxJgkeYPipZ8msnR3nadFFFFSrB0tLaoPcHFX 62t0WL1eXZhwupughLRE6m2aV6pV8bcbxItCHC97Uaik20fJpJqXf+8HiFXweLrp qWSwkAzDIHrhuW0pOg6bzKRYJPNk9mvBLWOr3SqtMJvyvqi0LFebYWv4KvGva1ln 2ilHyyikKBs0NAPw0mJap1W57jmdMt9cE3uX2gwv3xYe/jRo5ma4/q9UmUlAIzQv 8GP9TQtVrFVdSw== -----END CERTIFICATE-----Generated at Mon Dec 29 14:53:57 2025 by rpki-client