This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft File: AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json) Hash identifier: 5yQjtODEcMZJBxdAFyQyKcKgytoCLnv9qezgIq8VVh4= Subject key identifier: 3E:CB:27:3C:48:08:A3:BB:F5:EC:80:DE:2C:AC:0D:90:DE:37:04:96 Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be Certificate serial: 019B41A44810975E12FB2E2277D9E3FC990B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 16:00:43 +0000 Manifest this update: Sun 21 Dec 2025 16:00:43 +0000 Manifest next update: Mon 22 Dec 2025 16:00:43 +0000 Files and hashes: 1: 0KFOTw8mw8rqvR73lDvTvz4eLlM.roa (hash: czZq6CrDBuBW60D89viYE/HEQ3Elp6ceJu/itDlsmLQ=) 2: 1-IEGfanW1eDg4hey_mFD59jQ4Tw.roa (hash: TEwUAYBqywOE+CrQSa2/94fxmftWbXC3tqwYRSHTWvM=) 3: 7fvFmCf70OoyCtjW6q-YAjjiptE.roa (hash: lD6p2V3Fh7qOAiBluHoM70XX68qSFbEeobI0lYUOj4E=) 4: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: xF37ujb8Pgt4MVmgyiuQZmPXRJ6BbIW/yHglUyxh8Mc=) 5: XXc1R4QzqDrW8SviK6xRNkQ-hUM.roa (hash: YZxuonbhRtd70cdMZUvtG4tx6j8PhsH2pz0J9ByQ1UQ=) 6: mVS8rlA27Rm5BH1YZmHsYliJgHk.roa (hash: kSobMvLQWQPPJ+5wYRzt2RMBbz/GSTGKNOrc7qdwFJQ=) 7: svn5qGrzwkwprTn6parcyTvhbAo.roa (hash: /W0ZX7Qy3yFb8g6EosJAqdHBnY5DD0AAIXPV5XPQQ5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:48:10:97:5e:12:fb:2e:22:77:d9:e3:fc:99:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be Validity Not Before: Dec 21 16:00:43 2025 GMT Not After : Dec 22 16:00:43 2025 GMT Subject: CN=3ecb273c4808a3bbf5ec80de2cac0d90de370496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:79:dc:63:b7:70:2a:14:75:28:10:70:75: b1:b9:7a:2c:8a:a1:8f:bf:e7:43:8c:97:5d:b7:05: 26:03:d2:1e:fa:f6:d4:2c:2b:73:a5:f1:ad:38:b9: 1c:32:56:89:fd:4a:75:9d:5f:45:0a:ef:a8:8f:6f: bd:b5:63:79:26:53:f8:c1:08:8c:3c:2c:2b:6f:57: b8:76:61:7e:15:64:4d:f3:89:31:a0:74:82:dc:76: 16:cb:c0:ff:f0:19:de:a1:f7:93:96:cc:85:96:50: 5a:e2:1e:73:ab:67:49:ae:4e:c0:1b:27:35:d8:be: 4e:a2:ed:1a:5e:b6:b8:09:79:1a:2c:ad:7b:c8:b4: 1a:a5:a8:8c:69:a3:2b:73:b5:4b:c1:dc:fa:0f:25: ef:4d:11:fc:73:71:d5:b2:ee:20:e7:1e:55:91:d1: c7:3b:09:1f:7b:1b:0d:a6:13:b4:8e:1c:c6:2e:3d: 77:04:65:95:e0:71:5e:17:b4:7e:bc:1e:fc:72:80: d4:a4:25:cb:28:eb:7d:5b:94:51:11:d3:24:30:46: 7b:0e:24:d9:36:bb:be:a8:82:50:70:f6:d0:b0:7e: 5d:8b:05:48:bf:5f:4c:6c:cd:75:81:af:ab:ec:21: 91:8a:e0:96:9e:32:2a:ab:fe:45:f9:7a:86:95:fe: 48:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CB:27:3C:48:08:A3:BB:F5:EC:80:DE:2C:AC:0D:90:DE:37:04:96 X509v3 Authority Key Identifier: keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:e6:d2:6c:df:b5:a9:37:e2:7f:be:e3:36:1c:81:ac:2b:00: a9:7d:d9:b4:47:0d:3f:f4:e7:50:61:ae:e3:cc:c1:cd:de:09: 0b:58:10:e4:88:49:2d:7e:c2:52:71:69:fe:8b:d9:10:de:a7: 1e:58:50:e1:0f:a2:2e:f6:35:5d:59:e1:1c:f4:55:70:55:1e: 72:80:d2:14:ed:d3:85:47:69:6e:8a:e0:87:c4:66:50:10:50: 00:56:df:58:8b:2c:4b:1e:36:b3:e0:91:25:8f:16:3c:dc:de: 8a:13:09:4f:52:8e:5c:5f:89:05:cd:d8:a9:67:35:97:a4:14: e0:71:e8:20:a3:bf:6c:84:50:01:f5:b7:65:2a:bd:9b:88:a9: f2:09:e8:72:92:59:5f:bd:10:ec:ec:42:cf:d8:8b:67:3d:8b: f4:e1:81:78:c8:ed:d6:67:ef:24:f9:9f:18:df:36:24:3a:0b: 21:87:cb:c4:64:69:04:0d:ab:3c:d2:5f:b6:8c:99:c2:f3:8f: ea:2b:a6:14:f6:82:17:ab:e3:7b:b9:42:b6:e9:ef:9d:e7:ab: 64:17:70:30:eb:68:b0:fe:55:b6:d5:a1:a4:a3:5a:7f:02:fd: be:83:18:a3:8d:ad:0c:22:06:b6:1c:32:b4:35:e8:30:0f:c7: c7:7e:1b:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpEgQl14S+y4id9nj/JkLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNWZmOWNjODljNjZhOGEzYTVkNzM0YTBkNjVjNjFmZGM4 NTE4YmUwHhcNMjUxMjIxMTYwMDQzWhcNMjUxMjIyMTYwMDQzWjAzMTEwLwYDVQQD EygzZWNiMjczYzQ4MDhhM2JiZjVlYzgwZGUyY2FjMGQ5MGRlMzcwNDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTF53GO3cCoUdSgQcHWxuXosiqGP v+dDjJddtwUmA9Ie+vbULCtzpfGtOLkcMlaJ/Up1nV9FCu+oj2+9tWN5JlP4wQiM PCwrb1e4dmF+FWRN84kxoHSC3HYWy8D/8BneofeTlsyFllBa4h5zq2dJrk7AGyc1 2L5Oou0aXra4CXkaLK17yLQapaiMaaMrc7VLwdz6DyXvTRH8c3HVsu4g5x5VkdHH OwkfexsNphO0jhzGLj13BGWV4HFeF7R+vB78coDUpCXLKOt9W5RREdMkMEZ7DiTZ Nru+qIJQcPbQsH5diwVIv19MbM11ga+r7CGRiuCWnjIqq/5F+XqGlf5IAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7LJzxICKO79eyA3iysDZDeNwSWMB8GA1UdIwQY MBaAFABf+cyJxmqKOl1zSg1lxh/chRi+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kNTNjNzgtMGQ1Yi00MjM3LTk5OTkt MGUyZDY5N2IyN2UzLzEvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9kNTNjNzgtMGQ1Yi00MjM3LTk5OTktMGUyZDY5N2IyN2Uz LzEvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMubSbN+1 qTfif77jNhyBrCsAqX3ZtEcNP/TnUGGu48zBzd4JC1gQ5IhJLX7CUnFp/ovZEN6n HlhQ4Q+iLvY1XVnhHPRVcFUecoDSFO3ThUdpborgh8RmUBBQAFbfWIssSx42s+CR JY8WPNzeihMJT1KOXF+JBc3YqWc1l6QU4HHoIKO/bIRQAfW3ZSq9m4ip8gnocpJZ X70Q7OxCz9iLZz2L9OGBeMjt1mfvJPmfGN82JDoLIYfLxGRpBA2rPNJftoyZwvOP 6iumFPaCF6vje7lCtunvneerZBdwMOtosP5VttWhpKNafwL9voMYo42tDCIGthwy tDXoMA/Hx34b1Q== -----END CERTIFICATE-----Generated at Mon Dec 22 01:02:20 2025 by rpki-client