This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft File: afURWpSbKIPEzDxJX_uJk97Z2F0.mft (raw, json) Hash identifier: +hgSOq/x5f50aMcREEBwom7P9rVEiNgb+blHANrXX54= Subject key identifier: DE:E5:B6:7D:BF:2A:76:36:5A:60:B6:A4:07:D8:53:B9:AE:86:8E:70 Authority key identifier: 69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D Certificate issuer: /CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d Certificate serial: 019B3CECA8A06F43E7A2B13E6F249FD2F40F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft Manifest number: 01A6 Signing time: Sat 20 Dec 2025 18:01:41 +0000 Manifest this update: Sat 20 Dec 2025 18:01:41 +0000 Manifest next update: Sun 21 Dec 2025 18:01:41 +0000 Files and hashes: 1: 4BZY4KShEUmhrY8s7jFk_wJEp5k.roa (hash: UlyxYtAIHY75kSHD+hMXhTJxJxd+/SUaiDAFT6/piUg=) 2: afURWpSbKIPEzDxJX_uJk97Z2F0.crl (hash: hqOULw7sz/s/++pzEaVSxZ3xIE7lFlQfIHvjPeotT4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:a8:a0:6f:43:e7:a2:b1:3e:6f:24:9f:d2:f4:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d Validity Not Before: Dec 20 18:01:41 2025 GMT Not After : Dec 21 18:01:41 2025 GMT Subject: CN=dee5b67dbf2a76365a60b6a407d853b9ae868e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4f:0b:34:fe:d3:36:98:36:b2:08:e1:2a:9b: 43:d0:14:6c:59:c5:aa:c2:a1:d8:99:ef:76:d9:19: fc:52:85:ee:73:92:79:6c:85:97:2a:ca:e3:9a:bc: 6e:f5:f4:95:e9:e4:cf:3b:37:fc:83:f1:73:f3:fd: 54:d4:7f:a8:a5:09:5c:1e:8b:d3:49:4c:67:8c:75: 67:27:88:6a:cf:db:90:38:3b:25:ee:e1:f0:58:a9: 6c:cd:be:85:07:e4:10:6c:e9:9e:5b:c6:a2:0d:8d: 3a:ea:ee:97:05:37:2e:f2:f6:46:6c:56:12:53:c2: 40:b5:89:10:90:20:7d:06:f3:32:90:ca:46:71:8d: 65:19:f4:00:74:ec:80:4f:7a:0a:30:e5:4f:93:31: 44:68:24:b7:f2:69:2d:30:f9:e4:a2:2d:c9:a1:cd: 2d:85:24:fc:b3:c0:78:a5:a9:5d:53:f3:65:21:bb: c5:89:58:26:38:cf:20:47:e3:21:1e:89:eb:68:a1: f6:5d:a4:15:f3:63:36:c5:be:de:9b:d5:5f:e0:49: f8:30:3c:25:45:b3:4c:ed:a5:86:2d:29:10:c2:8b: e2:02:3d:27:4b:3c:03:66:93:e3:11:6c:de:74:54: dc:39:51:27:0b:f7:22:79:46:18:a0:aa:2b:bf:66: 69:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E5:B6:7D:BF:2A:76:36:5A:60:B6:A4:07:D8:53:B9:AE:86:8E:70 X509v3 Authority Key Identifier: keyid:69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:17:bc:c4:d5:f6:32:fd:5b:b4:f1:b0:92:71:e6:3c:90:f6: a5:87:b6:c7:db:c1:9a:66:6a:a6:7d:48:45:a3:35:92:0a:42: 54:d2:b7:02:99:80:0d:a7:4c:63:6f:06:d4:01:65:5b:47:b0: 9b:be:30:eb:d3:c6:e7:d7:d6:4d:dc:c8:ac:14:f9:a0:e7:d2: 1c:d4:3c:2c:48:a4:05:73:58:b3:77:30:95:10:2f:54:e4:47: ae:7f:5d:d1:b6:34:80:f1:8d:5e:42:8c:ef:cb:83:a8:7b:29: bc:e5:94:a3:f2:2f:68:c6:d6:2c:28:2c:6f:ff:ff:80:36:34: 4e:ad:f4:b7:94:24:6f:1e:3b:23:42:7d:06:0f:f4:52:b8:b4: a8:b9:5b:f8:a2:48:7e:9c:a3:fd:d3:88:3b:6c:c2:d0:75:b4: a8:ee:27:8f:9b:43:36:98:9e:7f:6b:4d:5f:2d:44:86:ea:e2: b0:5b:58:47:fb:13:d3:e2:74:4a:6e:92:ad:84:33:91:2a:e4: b7:d4:95:f9:ee:b0:4a:96:96:49:87:4c:70:23:18:7c:30:da: 70:35:6b:1d:c2:a0:37:84:3b:8d:13:10:0d:7c:19:5f:e6:67: 44:2d:43:4e:1b:79:b5:51:c4:65:26:4a:23:2e:24:66:9a:38: bd:c5:e2:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87Kigb0PnorE+bySf0vQPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjUxMTVhOTQ5YjI4ODNjNGNjM2M0OTVmZmI4OTkzZGVk OWQ4NWQwHhcNMjUxMjIwMTgwMTQxWhcNMjUxMjIxMTgwMTQxWjAzMTEwLwYDVQQD EyhkZWU1YjY3ZGJmMmE3NjM2NWE2MGI2YTQwN2Q4NTNiOWFlODY4ZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz08LNP7TNpg2sgjhKptD0BRsWcWq wqHYme922Rn8UoXuc5J5bIWXKsrjmrxu9fSV6eTPOzf8g/Fz8/1U1H+opQlcHovT SUxnjHVnJ4hqz9uQODsl7uHwWKlszb6FB+QQbOmeW8aiDY066u6XBTcu8vZGbFYS U8JAtYkQkCB9BvMykMpGcY1lGfQAdOyAT3oKMOVPkzFEaCS38mktMPnkoi3Joc0t hST8s8B4paldU/NlIbvFiVgmOM8gR+MhHonraKH2XaQV82M2xb7em9Vf4En4MDwl RbNM7aWGLSkQwoviAj0nSzwDZpPjEWzedFTcOVEnC/cieUYYoKorv2ZpRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7ltn2/KnY2WmC2pAfYU7muho5wMB8GA1UdIwQY MBaAFGn1EVqUmyiDxMw8SV/7iZPe2dhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jMDY1MzYtMDFhYS00ZTM5LTg5YjYt YjU4NzA0ZjI4NTkxLzEvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jMDY1MzYtMDFhYS00ZTM5LTg5YjYtYjU4NzA0ZjI4NTkx LzEvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORe8xNX2 Mv1btPGwknHmPJD2pYe2x9vBmmZqpn1IRaM1kgpCVNK3ApmADadMY28G1AFlW0ew m74w69PG59fWTdzIrBT5oOfSHNQ8LEikBXNYs3cwlRAvVORHrn9d0bY0gPGNXkKM 78uDqHspvOWUo/IvaMbWLCgsb///gDY0Tq30t5Qkbx47I0J9Bg/0Uri0qLlb+KJI fpyj/dOIO2zC0HW0qO4nj5tDNpief2tNXy1EhurisFtYR/sT0+J0Sm6SrYQzkSrk t9SV+e6wSpaWSYdMcCMYfDDacDVrHcKgN4Q7jRMQDXwZX+ZnRC1DTht5tVHEZSZK Iy4kZpo4vcXiVA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:45:37 2025 by rpki-client