This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft File: DnSXlvuOtxaowjxHZJ0jvz0-apg.mft (raw, json) Hash identifier: 8TKdSWF3aR75Nz6JbiHDeHSHdd1MCwJvDqm1KkM9K3k= Subject key identifier: 66:9A:B0:32:AB:48:93:3A:CF:3F:EB:3F:A1:41:2A:9A:7E:49:4E:AA Authority key identifier: 0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98 Certificate issuer: /CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98 Certificate serial: 019B6F58EE85ABF0B510E641CAC9BA1DEB05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft Manifest number: 0369 Signing time: Tue 30 Dec 2025 13:00:57 +0000 Manifest this update: Tue 30 Dec 2025 13:00:57 +0000 Manifest next update: Wed 31 Dec 2025 13:00:57 +0000 Files and hashes: 1: DnSXlvuOtxaowjxHZJ0jvz0-apg.crl (hash: styfgx9AhUqNfihaCpAMN89XKfN5PO8EzYQbWfclG+k=) 2: KVIjbEYwlYHNE7SjeBSZ9snwsuM.roa (hash: jHpTUbyUDvIBB9d7GvdlvIiOW08/ogM82drw/TrRWfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:58:ee:85:ab:f0:b5:10:e6:41:ca:c9:ba:1d:eb:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98 Validity Not Before: Dec 30 13:00:57 2025 GMT Not After : Dec 31 13:00:57 2025 GMT Subject: CN=669ab032ab48933acf3feb3fa1412a9a7e494eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3b:5c:26:94:25:b2:ce:5f:23:23:2f:6b:c1: e3:e1:a3:58:e8:92:76:3b:25:25:5e:9e:78:ff:0d: 93:d6:cf:41:ef:7a:71:be:d1:f0:1d:68:fb:a8:51: b7:51:c4:16:b6:27:ad:d2:d6:24:c1:bd:67:40:16: 49:d0:fe:9d:fc:2c:ce:e5:bc:e8:20:8e:ee:22:e7: a5:1d:33:a5:2d:b9:81:d0:e3:0f:21:68:b5:89:6d: 60:e6:58:df:90:44:26:3e:bb:ad:3c:ab:24:7e:b2: 1d:91:70:5e:56:7a:76:a8:24:1b:1f:d9:d4:3b:f6: c9:1d:e2:4e:50:36:e0:da:22:0c:a2:ea:c8:86:97: c7:ca:53:1c:36:b0:e6:5d:08:46:8a:84:9d:76:82: 7d:e9:89:26:5c:18:e8:a8:4b:21:ed:d0:c6:15:8f: 0e:4a:be:e8:ef:85:52:7c:11:a4:42:15:8f:73:ff: 9f:dd:67:5c:78:9b:ee:9d:4e:df:2c:03:00:53:15: cc:dd:87:c7:cf:90:05:76:7b:38:db:d5:1d:86:13: 6f:f1:3b:d0:6f:cb:4e:89:ed:61:06:1c:73:60:b5: 37:10:8f:a5:9e:b3:b8:3e:75:85:3c:d0:33:4c:86: 61:36:f8:6a:34:31:f6:a5:16:6a:5d:65:a3:05:f6: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9A:B0:32:AB:48:93:3A:CF:3F:EB:3F:A1:41:2A:9A:7E:49:4E:AA X509v3 Authority Key Identifier: keyid:0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:65:9b:65:b1:8f:31:6d:81:b1:51:19:ca:44:35:83:86:b4: bc:b9:05:2d:a5:bc:a6:55:d2:c2:f9:d8:d3:5d:ea:91:0a:79: 2c:6e:93:6a:0c:14:2f:a1:97:43:be:80:5a:9f:a3:2f:53:9d: 18:f4:fa:a6:e0:41:61:d0:73:49:67:98:d4:b1:48:2f:42:2b: 02:72:86:07:2c:23:52:a7:4b:da:98:9a:90:06:92:68:20:5f: 65:a2:8b:13:55:23:4d:c8:3f:3d:0e:97:2d:4a:d4:e4:46:09: bd:c3:52:62:62:f6:5f:d1:62:83:b5:9a:a3:5b:17:19:77:b1: 29:a9:df:46:c9:35:9a:71:40:85:ba:8d:42:41:84:e3:c8:92: d3:a9:d1:79:c1:d9:18:56:a1:ba:0a:9e:9f:c0:6c:6b:78:53: 1a:e2:4b:f1:72:c1:f3:72:56:12:52:d0:99:88:e0:73:09:b7: cc:38:07:73:be:d6:4e:13:af:d0:02:f8:94:b9:80:93:c5:47: 6c:72:4d:92:65:e8:d8:60:fc:c2:9b:48:9b:77:18:37:28:08: a4:5f:cc:98:71:34:3c:6b:53:9e:2c:f9:0d:90:31:26:d1:f9: f3:dc:25:59:08:a0:c7:0d:71:2b:50:8a:7f:18:0c:99:69:4c: d1:47:ef:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvWO6Fq/C1EOZBysm6HesFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzQ5Nzk2ZmI4ZWI3MTZhOGMyM2M0NzY0OWQyM2JmM2Qz ZTZhOTgwHhcNMjUxMjMwMTMwMDU3WhcNMjUxMjMxMTMwMDU3WjAzMTEwLwYDVQQD Eyg2NjlhYjAzMmFiNDg5MzNhY2YzZmViM2ZhMTQxMmE5YTdlNDk0ZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmztcJpQlss5fIyMva8Hj4aNY6JJ2 OyUlXp54/w2T1s9B73pxvtHwHWj7qFG3UcQWtiet0tYkwb1nQBZJ0P6d/CzO5bzo II7uIuelHTOlLbmB0OMPIWi1iW1g5ljfkEQmPrutPKskfrIdkXBeVnp2qCQbH9nU O/bJHeJOUDbg2iIMourIhpfHylMcNrDmXQhGioSddoJ96YkmXBjoqEsh7dDGFY8O Sr7o74VSfBGkQhWPc/+f3WdceJvunU7fLAMAUxXM3YfHz5AFdns429UdhhNv8TvQ b8tOie1hBhxzYLU3EI+lnrO4PnWFPNAzTIZhNvhqNDH2pRZqXWWjBfaA+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaasDKrSJM6zz/rP6FBKpp+SU6qMB8GA1UdIwQY MBaAFA50l5b7jrcWqMI8R2SdI789PmqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xNzIyNmItMzJiYS00OGQxLWI3ZTIt ZGY4YjJhYTZiYmU2LzEvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8xNzIyNmItMzJiYS00OGQxLWI3ZTItZGY4YjJhYTZiYmU2 LzEvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2WbZbGP MW2BsVEZykQ1g4a0vLkFLaW8plXSwvnY013qkQp5LG6TagwUL6GXQ76AWp+jL1Od GPT6puBBYdBzSWeY1LFIL0IrAnKGBywjUqdL2piakAaSaCBfZaKLE1UjTcg/PQ6X LUrU5EYJvcNSYmL2X9Fig7Wao1sXGXexKanfRsk1mnFAhbqNQkGE48iS06nRecHZ GFahugqen8Bsa3hTGuJL8XLB83JWElLQmYjgcwm3zDgHc77WThOv0AL4lLmAk8VH bHJNkmXo2GD8wptIm3cYNygIpF/MmHE0PGtTniz5DZAxJtH589wlWQigxw1xK1CK fxgMmWlM0UfvSw== -----END CERTIFICATE-----Generated at Tue Dec 30 14:56:07 2025 by rpki-client