This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json) Hash identifier: PklE18aYV8DoM2qErFEG3niss+3l8dEW7CxDdCLwMlQ= Subject key identifier: 54:A0:58:A8:6C:64:CA:84:50:22:39:11:EA:80:F9:30:9A:63:FC:74 Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1 Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1 Certificate serial: 019B390F839D2BCDFA826C567909939C867F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 00:01:16 +0000 Manifest this update: Sat 20 Dec 2025 00:01:16 +0000 Manifest next update: Sun 21 Dec 2025 00:01:16 +0000 Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: jUPOLvI+FdEs5/AhaO6TNx+I7G7zhBUEUq9Geni2jEo=) 2: qUUjm1H90-uL9euvKLjFEczkCzY.roa (hash: oUTa5+ocukOmAJZqVNEO6dDqsHnc1xufuifi9duph8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:83:9d:2b:cd:fa:82:6c:56:79:09:93:9c:86:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1 Validity Not Before: Dec 20 00:01:16 2025 GMT Not After : Dec 21 00:01:16 2025 GMT Subject: CN=54a058a86c64ca8450223911ea80f9309a63fc74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:90:4d:62:40:63:4f:63:0a:6a:69:30:14:57: 98:2d:6e:e6:d4:0c:39:3e:22:47:c7:c6:ea:d6:b2: c1:b3:32:1f:81:be:a6:cb:87:5a:3c:a7:08:75:f7: f1:66:12:54:9f:da:f2:97:50:46:42:5c:93:97:d8: 7b:37:6d:61:36:32:99:f0:db:92:dc:e0:fd:a6:ac: 51:5e:d7:a5:e3:f2:75:5b:9d:d2:2f:66:00:92:61: 9e:00:1a:9d:8d:17:e6:b8:bb:a0:30:d3:d6:3b:71: 95:89:c7:0f:6c:f3:32:e3:f7:43:da:3d:40:97:14: 72:9c:7f:4d:78:5c:10:db:00:cb:d8:2b:45:35:97: c2:e4:f0:a7:11:5e:e4:c1:f0:a7:84:48:4c:35:48: 7b:04:80:c9:7e:6a:90:95:42:83:7c:11:1b:c5:7a: 31:a6:f6:ef:1f:60:36:73:c4:8a:98:3a:ea:5d:a4: 42:19:37:2c:38:04:94:1f:09:57:75:9c:f8:1e:19: f9:12:33:69:dc:91:23:f3:f7:60:95:69:6d:82:c0: 59:4c:59:6a:f0:56:16:3a:fe:a8:5f:d6:16:3b:d6: 63:d7:a7:f3:72:a0:e7:1e:66:86:02:e6:28:46:e5: 33:6e:37:17:92:1e:2c:77:a0:57:8b:6d:17:ae:be: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A0:58:A8:6C:64:CA:84:50:22:39:11:EA:80:F9:30:9A:63:FC:74 X509v3 Authority Key Identifier: keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1a:13:06:73:d3:d1:0b:39:3b:40:a2:25:c9:7a:a9:1e:e3: 84:99:95:18:49:ff:47:de:dc:cf:d3:a6:b1:d0:47:2c:4e:31: db:d2:12:12:3b:43:a3:ec:db:61:43:ff:e0:e6:b8:96:32:d6: d7:d1:9f:71:02:04:de:d4:de:06:82:c9:7e:2b:cf:84:2c:ba: 3c:53:f4:ec:2d:d9:11:8f:4d:ea:8f:a8:a8:b6:7d:f8:05:20: 1f:a7:13:3f:55:42:f4:29:f2:16:32:e3:17:6e:3a:2d:d5:93: 50:ea:09:64:50:3f:39:ba:ba:7b:4b:12:90:2d:df:ce:b9:12: 69:19:07:44:c5:71:59:aa:b0:16:8e:9c:ca:54:5f:0c:27:34: 89:f1:bc:64:3a:be:00:74:54:c6:4b:ea:b1:38:92:5b:0a:c1: b3:ee:2c:0b:0d:2b:22:35:b0:9a:65:ef:66:f8:5b:17:43:0d: 7d:5a:60:98:1a:ec:70:ad:88:4e:d8:f2:78:e0:cb:75:d0:a3: 83:9c:de:5f:19:95:55:fd:e0:6f:b4:65:e9:25:3b:d2:1d:f3: e1:8b:98:b8:63:53:37:32:c2:24:0f:c7:b5:1a:cc:4d:71:3f: 38:09:48:85:36:e5:35:33:65:2a:9c:27:f1:ac:b2:13:66:78: d5:25:1c:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D4OdK836gmxWeQmTnIZ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMGE2NzE4ZDUzOTE1NWMyNzMwMDQwMWYyYzQ2Njc1MTNl ZWM1YjEwHhcNMjUxMjIwMDAwMTE2WhcNMjUxMjIxMDAwMTE2WjAzMTEwLwYDVQQD Eyg1NGEwNThhODZjNjRjYTg0NTAyMjM5MTFlYTgwZjkzMDlhNjNmYzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pBNYkBjT2MKamkwFFeYLW7m1Aw5 PiJHx8bq1rLBszIfgb6my4daPKcIdffxZhJUn9ryl1BGQlyTl9h7N21hNjKZ8NuS 3OD9pqxRXtel4/J1W53SL2YAkmGeABqdjRfmuLugMNPWO3GViccPbPMy4/dD2j1A lxRynH9NeFwQ2wDL2CtFNZfC5PCnEV7kwfCnhEhMNUh7BIDJfmqQlUKDfBEbxXox pvbvH2A2c8SKmDrqXaRCGTcsOASUHwlXdZz4Hhn5EjNp3JEj8/dglWltgsBZTFlq 8FYWOv6oX9YWO9Zj16fzcqDnHmaGAuYoRuUzbjcXkh4sd6BXi20Xrr4kCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSgWKhsZMqEUCI5EeqA+TCaY/x0MB8GA1UdIwQY MBaAFAAKZxjVORVcJzAEAfLEZnUT7sWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMt OWRkODU2MWNhZWRlLzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMtOWRkODU2MWNhZWRl LzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRoTBnPT 0Qs5O0CiJcl6qR7jhJmVGEn/R97cz9OmsdBHLE4x29ISEjtDo+zbYUP/4Oa4ljLW 19GfcQIE3tTeBoLJfivPhCy6PFP07C3ZEY9N6o+oqLZ9+AUgH6cTP1VC9CnyFjLj F246LdWTUOoJZFA/Obq6e0sSkC3fzrkSaRkHRMVxWaqwFo6cylRfDCc0ifG8ZDq+ AHRUxkvqsTiSWwrBs+4sCw0rIjWwmmXvZvhbF0MNfVpgmBrscK2ITtjyeODLddCj g5zeXxmVVf3gb7Rl6SU70h3z4YuYuGNTNzLCJA/HtRrMTXE/OAlIhTblNTNlKpwn 8ayyE2Z41SUczw== -----END CERTIFICATE-----Generated at Sat Dec 20 06:52:08 2025 by rpki-client