This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft File: afAHCvh31rmGswe5vATvGcRAQz0.mft (raw, json) Hash identifier: 38+uSMgIJM7MPdVAWHqY9UUoQsdLT+MouAbacdEQMNY= Subject key identifier: 19:1B:A2:04:CD:44:31:12:AD:D8:4D:4E:4F:A5:E2:2F:AE:A8:49:3B Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d Certificate serial: 019B3A90AE76CE56A0A19867253DAC33C8C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft Manifest number: 09BB Signing time: Sat 20 Dec 2025 07:01:58 +0000 Manifest this update: Sat 20 Dec 2025 07:01:58 +0000 Manifest next update: Sun 21 Dec 2025 07:01:58 +0000 Files and hashes: 1: 5m0E4hrlymj_oPq4RutDZTBvpFc.roa (hash: D3u2GpmWvvHTn4HOSLwFPi92ntWCyeD4rYP1qp5He0g=) 2: afAHCvh31rmGswe5vATvGcRAQz0.crl (hash: YF0o6/lueUyEnLLcRKpvAo7CnIvs2I8lKWSezchJQcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:ae:76:ce:56:a0:a1:98:67:25:3d:ac:33:c8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d Validity Not Before: Dec 20 07:01:58 2025 GMT Not After : Dec 21 07:01:58 2025 GMT Subject: CN=191ba204cd443112add84d4e4fa5e22faea8493b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:66:56:5a:61:43:d1:16:85:cd:e4:ba:d4: e4:f1:f8:87:42:5d:7d:f2:a7:7f:c4:c3:e1:db:25: 70:da:89:e2:f1:c1:87:82:84:29:27:37:70:d4:01: 22:66:78:6f:43:f7:25:6d:01:a1:cf:e6:e1:d7:70: ff:eb:df:6b:f1:be:27:46:a7:c4:2f:97:63:83:c4: 1b:a2:b9:14:bd:f8:0f:db:69:5e:e0:47:42:18:45: b0:58:db:29:c3:27:80:27:58:0c:6e:ba:43:1d:7b: f3:59:62:37:46:57:73:4f:05:12:49:ad:2d:d9:5a: 45:73:98:b1:c2:6f:88:23:af:39:16:54:13:59:74: 66:c5:ef:c2:ff:35:2b:2a:0b:2e:8a:66:f8:55:f0: 6e:9a:4d:16:66:53:71:e5:68:3f:28:d8:0f:ca:c5: 39:6a:4a:ff:86:2f:eb:cb:c5:28:b2:e9:b6:8b:d2: 7e:48:61:c2:5a:fb:ed:7f:29:a6:d1:df:d1:c8:33: 5f:79:f3:b0:75:d7:7f:f3:00:a2:fd:dc:b5:12:c0: 1c:1f:61:03:19:e6:fc:09:f2:9e:2a:81:ba:8a:ef: bc:60:59:3d:7f:4a:a1:6e:44:6e:77:c5:0a:b3:32: a2:11:cf:a1:aa:ba:e4:d9:1f:4e:85:e3:ed:8e:15: 9b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1B:A2:04:CD:44:31:12:AD:D8:4D:4E:4F:A5:E2:2F:AE:A8:49:3B X509v3 Authority Key Identifier: keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:24:9c:14:bb:50:70:e6:d3:84:eb:6b:1e:58:23:19:62:68: 68:06:e3:90:1d:a5:40:ed:52:37:6b:51:f4:4b:65:39:20:45: b7:94:93:31:40:41:83:67:01:03:8c:2f:e6:62:1b:9d:35:a9: 2a:75:85:00:9f:04:17:96:e5:cc:7c:04:37:50:ac:9b:95:85: 9e:cc:18:04:0a:26:6c:dc:88:07:e9:f2:ec:52:7e:b0:83:ff: b7:0b:a1:0f:c6:30:8a:16:36:3f:b0:42:72:f4:bd:a3:14:b4: 36:5b:1b:65:69:f0:5a:f3:13:00:4e:cd:7b:f1:3a:e3:d3:fa: cb:2f:c3:7e:80:b3:87:90:c8:f0:f3:fb:82:8c:c5:cf:b4:d6: c8:da:78:48:b9:dd:39:43:85:87:6b:92:48:7c:d3:02:e1:7f: f8:42:92:18:38:6b:8a:bd:79:f9:c5:97:cd:b8:f3:7e:c1:b3: 44:5a:8e:13:27:02:27:3a:74:ab:8e:96:0e:7b:54:1b:42:01: 1b:4b:17:b1:66:f6:46:2b:fd:c8:d7:54:0e:6d:20:cf:87:6d: b5:6a:17:a6:95:ba:3c:dc:24:94:12:a4:26:13:85:9e:ac:79: a0:cc:41:08:d8:27:5a:6f:fb:9a:c9:42:e3:48:3f:b4:24:20: a7:db:be:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kK52zlagoZhnJT2sM8jFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjAwNzBhZjg3N2Q2Yjk4NmIzMDdiOWJjMDRlZjE5YzQ0 MDQzM2QwHhcNMjUxMjIwMDcwMTU4WhcNMjUxMjIxMDcwMTU4WjAzMTEwLwYDVQQD EygxOTFiYTIwNGNkNDQzMTEyYWRkODRkNGU0ZmE1ZTIyZmFlYTg0OTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbtmVlphQ9EWhc3kutTk8fiHQl19 8qd/xMPh2yVw2oni8cGHgoQpJzdw1AEiZnhvQ/clbQGhz+bh13D/699r8b4nRqfE L5djg8QborkUvfgP22le4EdCGEWwWNspwyeAJ1gMbrpDHXvzWWI3RldzTwUSSa0t 2VpFc5ixwm+II685FlQTWXRmxe/C/zUrKgsuimb4VfBumk0WZlNx5Wg/KNgPysU5 akr/hi/ry8Uosum2i9J+SGHCWvvtfymm0d/RyDNfefOwddd/8wCi/dy1EsAcH2ED Geb8CfKeKoG6iu+8YFk9f0qhbkRud8UKszKiEc+hqrrk2R9OhePtjhWbbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkbogTNRDESrdhNTk+l4i+uqEk7MB8GA1UdIwQY MBaAFGnwBwr4d9a5hrMHubwE7xnEQEM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZBSEN2aDMxcm1Hc3dlNXZBVHZHY1JBUXowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hYjlmYTYtYTkwNi00YWM0LWFjMGMt NjM4OTIyMGIyNmM2LzEvYWZBSEN2aDMxcm1Hc3dlNXZBVHZHY1JBUXowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hYjlmYTYtYTkwNi00YWM0LWFjMGMtNjM4OTIyMGIyNmM2 LzEvYWZBSEN2aDMxcm1Hc3dlNXZBVHZHY1JBUXowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiScFLtQ cObThOtrHlgjGWJoaAbjkB2lQO1SN2tR9EtlOSBFt5STMUBBg2cBA4wv5mIbnTWp KnWFAJ8EF5blzHwEN1Csm5WFnswYBAombNyIB+ny7FJ+sIP/twuhD8YwihY2P7BC cvS9oxS0NlsbZWnwWvMTAE7Ne/E649P6yy/DfoCzh5DI8PP7gozFz7TWyNp4SLnd OUOFh2uSSHzTAuF/+EKSGDhrir15+cWXzbjzfsGzRFqOEycCJzp0q46WDntUG0IB G0sXsWb2Riv9yNdUDm0gz4dttWoXppW6PNwklBKkJhOFnqx5oMxBCNgnWm/7mslC 40g/tCQgp9u+5Q== -----END CERTIFICATE-----Generated at Sat Dec 20 08:39:49 2025 by rpki-client