This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft File: af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft (raw, json) Hash identifier: x1onavW02EBn6THAk1hyZabZP6SChlEjdU3Gqxr5FHY= Subject key identifier: 0D:C3:A8:60:7C:A3:1A:1D:81:03:E7:F8:FA:E4:0A:C5:92:6E:09:43 Authority key identifier: 69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC Certificate issuer: /CN=69fdfe8249f943aabad1881fca5836613a6a67bc Certificate serial: 019B6B0DDD6514521E6CD6B225B7D8D62771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft Manifest number: 17A0 Signing time: Mon 29 Dec 2025 17:00:29 +0000 Manifest this update: Mon 29 Dec 2025 17:00:29 +0000 Manifest next update: Tue 30 Dec 2025 17:00:29 +0000 Files and hashes: 1: Ceo-HVPoWV3_2SxJvVUz90MzCXU.roa (hash: hrbJxLsRN5MK/3GlRfITM4zehXoSXHDnVzwmbM92S3A=) 2: af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl (hash: JsCpnh9oudp8zDeDr+uNlHNnZbk1ClB79h016jN0oVc=) 3: u-uD5eJkyZwHdvCGzRD30UcsPdQ.roa (hash: 972IpaBLO7W9fM3TeJorAGTATEI6lVsjC4rz1G6aPgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:0d:dd:65:14:52:1e:6c:d6:b2:25:b7:d8:d6:27:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fdfe8249f943aabad1881fca5836613a6a67bc Validity Not Before: Dec 29 17:00:29 2025 GMT Not After : Dec 30 17:00:29 2025 GMT Subject: CN=0dc3a8607ca31a1d8103e7f8fae40ac5926e0943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f6:84:b8:a5:74:70:30:c6:53:31:5d:7a:40: dd:48:f3:b5:b2:08:1c:39:92:f2:a2:3e:f4:46:71: 29:b5:5d:15:6f:74:71:13:e2:3d:62:89:e0:1b:9b: 98:70:3f:de:6f:4e:4b:85:64:09:9e:f7:f4:08:a6: 3b:42:48:9c:ef:b7:78:87:d2:20:5e:cf:92:b7:11: 7f:d6:b2:93:26:20:68:51:e8:8e:91:73:9f:c5:21: f9:84:44:63:11:b2:19:2b:7b:a4:5a:c0:94:8a:90: fd:05:26:90:ed:35:0d:c6:11:0e:84:ee:17:ed:39: 24:b2:12:6d:76:e1:11:d0:16:09:88:06:f0:39:7d: ba:2f:c1:8f:c5:ca:07:b5:90:6c:45:94:19:8c:2e: 76:a3:65:4b:67:c9:0b:fc:5d:77:7a:4f:c0:fc:b8: 66:3a:b6:47:b9:0f:84:23:0f:27:7c:48:17:42:7e: 43:e3:62:c6:ad:23:1e:9a:25:ed:37:af:4a:b1:d5: 2d:18:b9:7d:ed:ce:66:f4:16:88:34:31:d1:97:39: 76:c0:46:ec:d4:15:bb:a0:0f:f8:74:6e:cf:c2:45: 25:5d:96:21:f7:f7:a4:ef:b0:7f:f3:73:18:cb:ea: e6:fb:a2:62:ad:51:03:2b:08:6a:27:b5:23:40:d0: b2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C3:A8:60:7C:A3:1A:1D:81:03:E7:F8:FA:E4:0A:C5:92:6E:09:43 X509v3 Authority Key Identifier: keyid:69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:06:bf:31:e0:80:9f:7c:f6:41:dc:f5:96:5e:f2:1b:e8:59: 15:01:b5:01:25:51:0d:1b:b6:1a:d2:b8:9e:7a:1d:44:19:e7: 52:dc:60:f4:d1:f2:ff:f1:ed:c1:c9:bd:b8:37:00:09:9d:b0: 36:66:ef:c2:93:58:ed:de:5e:c4:0d:be:65:77:d9:25:0d:e9: 01:df:8d:0c:19:89:c1:a8:8f:50:5c:74:40:77:86:6c:19:91: aa:fd:e6:de:52:24:d0:0f:89:0b:28:cb:7b:02:4f:0e:2b:ac: 11:e1:3e:8f:5f:b0:2d:c6:36:9d:4e:cd:24:a4:9f:bd:b9:6c: 2a:f3:f2:5c:c2:cf:13:e5:67:1b:88:c2:b0:5c:55:8f:89:ab: 93:5e:c0:43:b7:34:6f:55:d0:55:66:5e:58:d9:6c:35:2a:42: ff:6b:49:5e:78:d1:bb:a7:4e:40:53:88:ed:bb:f7:56:07:93: 9a:6e:9a:5f:5d:5c:b5:d5:50:13:db:ba:51:c6:49:5a:b7:ec: e3:ae:88:2b:e6:04:54:0e:55:b9:a5:cd:0f:0e:e0:aa:ca:1a: 77:80:f3:a4:6d:f9:25:f0:62:25:1c:a0:27:8b:c6:40:04:67: 96:97:47:08:02:41:18:1a:3c:a2:35:69:f8:60:b1:6e:dc:0b: 13:a6:c0:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrDd1lFFIebNayJbfY1idxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZmRmZTgyNDlmOTQzYWFiYWQxODgxZmNhNTgzNjYxM2E2 YTY3YmMwHhcNMjUxMjI5MTcwMDI5WhcNMjUxMjMwMTcwMDI5WjAzMTEwLwYDVQQD EygwZGMzYTg2MDdjYTMxYTFkODEwM2U3ZjhmYWU0MGFjNTkyNmUwOTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvaEuKV0cDDGUzFdekDdSPO1sggc OZLyoj70RnEptV0Vb3RxE+I9YongG5uYcD/eb05LhWQJnvf0CKY7Qkic77d4h9Ig Xs+StxF/1rKTJiBoUeiOkXOfxSH5hERjEbIZK3ukWsCUipD9BSaQ7TUNxhEOhO4X 7TkkshJtduER0BYJiAbwOX26L8GPxcoHtZBsRZQZjC52o2VLZ8kL/F13ek/A/Lhm OrZHuQ+EIw8nfEgXQn5D42LGrSMemiXtN69KsdUtGLl97c5m9BaINDHRlzl2wEbs 1BW7oA/4dG7PwkUlXZYh9/ek77B/83MYy+rm+6JirVEDKwhqJ7UjQNCyTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3DqGB8oxodgQPn+PrkCsWSbglDMB8GA1UdIwQY MBaAFGn9/oJJ+UOqutGIH8pYNmE6ame8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWYzLWdrbjVRNnE2MFlnZnlsZzJZVHBxWjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jY2Y3NzctOTQ2NS00YTJlLTgxMTIt NzFkOGI4ODUwODUzLzEvYWYzLWdrbjVRNnE2MFlnZnlsZzJZVHBxWjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jY2Y3NzctOTQ2NS00YTJlLTgxMTItNzFkOGI4ODUwODUz LzEvYWYzLWdrbjVRNnE2MFlnZnlsZzJZVHBxWjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewa/MeCA n3z2Qdz1ll7yG+hZFQG1ASVRDRu2GtK4nnodRBnnUtxg9NHy//Htwcm9uDcACZ2w NmbvwpNY7d5exA2+ZXfZJQ3pAd+NDBmJwaiPUFx0QHeGbBmRqv3m3lIk0A+JCyjL ewJPDiusEeE+j1+wLcY2nU7NJKSfvblsKvPyXMLPE+VnG4jCsFxVj4mrk17AQ7c0 b1XQVWZeWNlsNSpC/2tJXnjRu6dOQFOI7bv3VgeTmm6aX11ctdVQE9u6UcZJWrfs 466IK+YEVA5VuaXNDw7gqsoad4DzpG35JfBiJRygJ4vGQARnlpdHCAJBGBo8ojVp +GCxbtwLE6bAZA== -----END CERTIFICATE-----Generated at Tue Dec 30 02:10:39 2025 by rpki-client