This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft File: aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json) Hash identifier: LhKltoS7Rs3WZPTya67UzPeSLFJ4FlwuTQjYqPIIIRk= Subject key identifier: F0:97:F6:52:D5:FD:48:EA:F6:B2:9F:0D:6B:FE:B2:54:01:71:3C:49 Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E Certificate issuer: /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e Certificate serial: 019B3C7EC1D1B3A207C8E68C3A90863291B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:01:38 +0000 Manifest this update: Sat 20 Dec 2025 16:01:38 +0000 Manifest next update: Sun 21 Dec 2025 16:01:38 +0000 Files and hashes: 1: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: 05hR3yROVd2SFOveD01mINz68Rc2+F8FTmky8Rb9c0o=) 2: qnXqSBmvIClWRdSX3rmYASI_2Pc.roa (hash: 2FNK4DlE8j3wOu3WxQxB7a85ZmjXWPid3Sa9pj/6S3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:c1:d1:b3:a2:07:c8:e6:8c:3a:90:86:32:91:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e Validity Not Before: Dec 20 16:01:38 2025 GMT Not After : Dec 21 16:01:38 2025 GMT Subject: CN=f097f652d5fd48eaf6b29f0d6bfeb25401713c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0a:5d:d1:41:2b:bf:5a:7f:47:f1:69:5e:04: b2:eb:09:fb:79:22:2b:82:bb:a8:e9:c9:ed:af:5c: 2b:98:32:b7:77:71:76:17:f0:75:ba:db:b0:ea:65: 2c:f3:2b:54:03:a5:50:65:01:9a:01:50:b8:5e:44: 11:36:2c:1b:70:e5:f4:28:16:c1:d9:30:b6:c1:58: 28:27:34:78:50:20:ad:44:37:e9:f6:b9:ad:93:9a: d6:4c:17:5b:eb:99:4e:b1:ba:fc:72:f2:ab:49:9a: ee:58:3c:82:47:16:a3:2e:8f:fe:50:b0:a9:46:de: cf:96:2f:36:26:34:f0:7b:82:16:f8:97:07:ba:af: a4:d0:e2:0e:61:95:e1:29:25:ef:8b:e7:a2:7e:be: 19:f0:aa:9c:ba:dc:34:3f:06:9b:25:5e:14:b6:fc: 40:da:9f:36:4b:9d:7a:ad:66:32:ff:c0:3e:e1:a2: aa:f8:e4:fd:54:70:e0:cd:3c:07:ad:c5:5c:e0:c0: 98:80:be:21:33:4c:25:59:b2:88:d2:72:24:ef:c4: 6b:54:85:43:ee:92:42:a0:31:3b:cb:ab:bb:ed:0d: 37:b3:d4:63:71:0e:43:55:df:25:25:10:54:51:99: 24:5d:1a:8e:37:d4:b0:7e:a3:41:26:f1:51:e9:a9: a3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:97:F6:52:D5:FD:48:EA:F6:B2:9F:0D:6B:FE:B2:54:01:71:3C:49 X509v3 Authority Key Identifier: keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:13:c3:ca:30:b9:ef:b6:08:2c:8f:cf:18:4b:49:16:ce:70: a4:70:76:bd:b9:91:03:4c:83:6c:b2:d1:0d:89:f7:04:87:ed: 26:dd:9a:db:85:53:9c:7b:c4:1b:ec:8c:6e:fe:d2:96:22:de: 39:6e:20:1f:73:d5:8b:37:5d:0c:32:7b:8b:0d:85:4b:59:18: c8:2d:8a:f4:be:8c:4a:84:1e:c4:b3:5f:9b:7a:fa:19:5a:49: 04:bd:9b:96:4a:82:bb:26:bf:da:52:c7:2a:98:fc:04:19:8f: ce:b1:2f:15:cd:e8:2d:3d:ba:87:6d:ad:cd:ab:cf:48:03:ba: bb:26:4c:f4:a7:8f:41:ba:a7:86:fe:50:58:9c:6b:5a:01:ee: b5:51:2d:07:2f:08:4f:dd:e3:41:33:89:5b:53:b3:6d:1a:61: 53:70:99:72:29:86:be:e1:dc:7a:f5:8c:50:89:b8:89:5b:b9: 38:86:58:1d:f9:91:b4:59:73:d9:47:34:79:ee:49:a9:bc:42: 89:ec:e9:8f:53:39:36:6c:8f:49:6b:3e:2b:42:61:3b:02:bf: bc:fa:9b:f1:86:60:63:ac:11:13:0d:65:18:60:67:ec:9e:18: 74:7e:da:b0:40:f7:1c:65:86:92:b6:e0:23:2e:4f:2e:a8:88: 4c:6f:84:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fsHRs6IHyOaMOpCGMpGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NTdhOWJiMjk3ZjBiM2M0NDRhYjBhZjY3M2E1Mjc1MGU5 NzliNGUwHhcNMjUxMjIwMTYwMTM4WhcNMjUxMjIxMTYwMTM4WjAzMTEwLwYDVQQD EyhmMDk3ZjY1MmQ1ZmQ0OGVhZjZiMjlmMGQ2YmZlYjI1NDAxNzEzYzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgpd0UErv1p/R/FpXgSy6wn7eSIr gruo6cntr1wrmDK3d3F2F/B1utuw6mUs8ytUA6VQZQGaAVC4XkQRNiwbcOX0KBbB 2TC2wVgoJzR4UCCtRDfp9rmtk5rWTBdb65lOsbr8cvKrSZruWDyCRxajLo/+ULCp Rt7Pli82JjTwe4IW+JcHuq+k0OIOYZXhKSXvi+eifr4Z8Kqcutw0PwabJV4UtvxA 2p82S516rWYy/8A+4aKq+OT9VHDgzTwHrcVc4MCYgL4hM0wlWbKI0nIk78RrVIVD 7pJCoDE7y6u77Q03s9RjcQ5DVd8lJRBUUZkkXRqON9SwfqNBJvFR6amjowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCX9lLV/Ujq9rKfDWv+slQBcTxJMB8GA1UdIwQY MBaAFGhXqbspfws8REqwr2c6UnUOl5tOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUZlcHV5bF9DenhFU3JDdlp6cFNkUTZYbTA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85ZDBhMTUtZDU0Ni00OTcwLTlhODEt ODU5NmMyYWY5ZGNjLzEvYUZlcHV5bF9DenhFU3JDdlp6cFNkUTZYbTA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85ZDBhMTUtZDU0Ni00OTcwLTlhODEtODU5NmMyYWY5ZGNj LzEvYUZlcHV5bF9DenhFU3JDdlp6cFNkUTZYbTA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRPDyjC5 77YILI/PGEtJFs5wpHB2vbmRA0yDbLLRDYn3BIftJt2a24VTnHvEG+yMbv7SliLe OW4gH3PVizddDDJ7iw2FS1kYyC2K9L6MSoQexLNfm3r6GVpJBL2blkqCuya/2lLH Kpj8BBmPzrEvFc3oLT26h22tzavPSAO6uyZM9KePQbqnhv5QWJxrWgHutVEtBy8I T93jQTOJW1OzbRphU3CZcimGvuHcevWMUIm4iVu5OIZYHfmRtFlz2Uc0ee5JqbxC iezpj1M5NmyPSWs+K0JhOwK/vPqb8YZgY6wREw1lGGBn7J4YdH7asED3HGWGkrbg Iy5PLqiITG+EPQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:20 2025 by rpki-client