This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft File: af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft (raw, json) Hash identifier: Z9T4VS2lSxekGeVLlNnIr65/W5zTcyVYRm5mBidTH1Q= Subject key identifier: C9:7D:5B:5B:FE:6E:45:67:7E:A4:C7:BA:AC:42:7E:BA:DD:EF:E3:49 Authority key identifier: 69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC Certificate issuer: /CN=69fdfe8249f943aabad1881fca5836613a6a67bc Certificate serial: 019B484B18913203C1ABBE93DC2536CA76A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 23:00:39 +0000 Manifest this update: Mon 22 Dec 2025 23:00:39 +0000 Manifest next update: Tue 23 Dec 2025 23:00:39 +0000 Files and hashes: 1: Ceo-HVPoWV3_2SxJvVUz90MzCXU.roa (hash: hrbJxLsRN5MK/3GlRfITM4zehXoSXHDnVzwmbM92S3A=) 2: af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl (hash: Y7x8OzvjOV91hoYsHBQUM1hNK537pRaxz7n7Z/kIvzc=) 3: u-uD5eJkyZwHdvCGzRD30UcsPdQ.roa (hash: 972IpaBLO7W9fM3TeJorAGTATEI6lVsjC4rz1G6aPgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:18:91:32:03:c1:ab:be:93:dc:25:36:ca:76:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fdfe8249f943aabad1881fca5836613a6a67bc Validity Not Before: Dec 22 23:00:39 2025 GMT Not After : Dec 23 23:00:39 2025 GMT Subject: CN=c97d5b5bfe6e45677ea4c7baac427ebaddefe349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fd:1a:99:dc:43:f5:af:ea:05:ec:4f:1c:45: 50:33:9c:61:3f:ec:54:21:ce:82:96:8c:12:f6:86: 27:2f:2c:01:09:a3:e5:02:1c:9c:c3:f6:58:dc:f5: f2:5d:64:57:1e:dc:5e:55:1d:86:84:4b:72:85:7e: 23:24:40:ff:2f:ae:15:65:b1:1f:75:56:d4:df:c4: de:7b:4c:7f:e8:60:66:26:6f:62:55:94:e9:f6:3d: 01:ab:60:19:e0:d7:e1:35:2d:73:13:05:57:b5:63: 2c:e5:cb:a4:c2:ea:c2:d6:1f:f3:8b:04:85:10:7d: 78:cb:95:ec:c4:fb:ec:d0:98:c3:97:b6:19:84:40: bc:9b:3c:02:49:a8:9a:7c:4d:a2:b4:31:d5:05:ca: 40:6b:b9:e4:4d:60:71:ce:e6:52:33:d6:1d:42:66: aa:93:0f:70:eb:df:f2:4f:d3:d4:74:36:b5:1a:a3: 02:cc:74:73:75:33:f9:08:63:55:7e:03:7e:e9:f5: 01:92:73:73:a3:91:0f:f5:1d:13:c8:59:64:4c:03: c5:f9:a7:4e:73:58:6e:9e:33:2d:e2:aa:4b:84:27: a5:11:eb:5a:b6:48:5f:08:30:24:4c:fc:8f:1d:06: 73:f2:e3:04:6f:f9:d4:3c:4d:03:10:ac:fa:84:0f: 40:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7D:5B:5B:FE:6E:45:67:7E:A4:C7:BA:AC:42:7E:BA:DD:EF:E3:49 X509v3 Authority Key Identifier: keyid:69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:4b:eb:30:7e:c3:f6:8d:b7:a4:10:fd:79:9f:9c:37:a8:e4: 8f:99:01:b9:4a:56:a1:cb:00:48:32:b0:39:d5:00:b3:a0:f1: 73:97:de:9a:bd:cf:89:03:b4:11:0f:31:05:99:83:75:ab:7a: d5:19:6f:01:bf:39:5e:48:93:bf:11:84:29:6b:cf:9e:0b:15: 93:ea:e8:d6:ab:21:02:fe:ab:1c:59:a7:13:7c:4f:37:3d:b9: 2a:e6:a5:3a:1a:4e:e3:7a:01:b0:0f:07:1c:f5:77:cb:44:3d: 3d:8d:f7:63:f3:d2:86:39:42:db:5f:c5:43:91:e7:33:90:62: 35:4f:06:8d:84:0c:5c:58:94:4b:8e:a0:16:0c:d8:35:a9:f1: 17:ef:cf:2f:1c:fe:c9:0b:d3:fa:47:be:6c:d9:82:ac:43:1d: b6:73:47:13:92:6f:7f:05:0f:73:55:d8:c1:ed:5a:9f:3f:e4: 5d:13:58:88:76:8f:d8:d3:0e:14:9a:07:c3:04:e3:b2:ca:6a: b6:02:b0:b0:56:b8:0a:32:83:7d:91:87:cf:7c:37:7a:28:15: 9c:41:65:4b:7e:49:32:d6:f7:b4:52:bf:f6:44:e2:29:16:a9: 3b:7d:a0:fb:5f:77:d2:9a:c4:7f:14:33:d0:e5:c4:c7:b7:3a: 3e:80:8f:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtISxiRMgPBq76T3CU2ynalMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZmRmZTgyNDlmOTQzYWFiYWQxODgxZmNhNTgzNjYxM2E2 YTY3YmMwHhcNMjUxMjIyMjMwMDM5WhcNMjUxMjIzMjMwMDM5WjAzMTEwLwYDVQQD EyhjOTdkNWI1YmZlNmU0NTY3N2VhNGM3YmFhYzQyN2ViYWRkZWZlMzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f0amdxD9a/qBexPHEVQM5xhP+xU Ic6ClowS9oYnLywBCaPlAhycw/ZY3PXyXWRXHtxeVR2GhEtyhX4jJED/L64VZbEf dVbU38Tee0x/6GBmJm9iVZTp9j0Bq2AZ4NfhNS1zEwVXtWMs5cukwurC1h/ziwSF EH14y5XsxPvs0JjDl7YZhEC8mzwCSaiafE2itDHVBcpAa7nkTWBxzuZSM9YdQmaq kw9w69/yT9PUdDa1GqMCzHRzdTP5CGNVfgN+6fUBknNzo5EP9R0TyFlkTAPF+adO c1hunjMt4qpLhCelEetatkhfCDAkTPyPHQZz8uMEb/nUPE0DEKz6hA9A+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMl9W1v+bkVnfqTHuqxCfrrd7+NJMB8GA1UdIwQY MBaAFGn9/oJJ+UOqutGIH8pYNmE6ame8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWYzLWdrbjVRNnE2MFlnZnlsZzJZVHBxWjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jY2Y3NzctOTQ2NS00YTJlLTgxMTIt NzFkOGI4ODUwODUzLzEvYWYzLWdrbjVRNnE2MFlnZnlsZzJZVHBxWjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jY2Y3NzctOTQ2NS00YTJlLTgxMTItNzFkOGI4ODUwODUz LzEvYWYzLWdrbjVRNnE2MFlnZnlsZzJZVHBxWjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUvrMH7D 9o23pBD9eZ+cN6jkj5kBuUpWocsASDKwOdUAs6Dxc5femr3PiQO0EQ8xBZmDdat6 1RlvAb85XkiTvxGEKWvPngsVk+ro1qshAv6rHFmnE3xPNz25KualOhpO43oBsA8H HPV3y0Q9PY33Y/PShjlC21/FQ5HnM5BiNU8GjYQMXFiUS46gFgzYNanxF+/PLxz+ yQvT+ke+bNmCrEMdtnNHE5JvfwUPc1XYwe1anz/kXRNYiHaP2NMOFJoHwwTjsspq tgKwsFa4CjKDfZGHz3w3eigVnEFlS35JMtb3tFK/9kTiKRapO32g+1930prEfxQz 0OXEx7c6PoCPbg== -----END CERTIFICATE-----Generated at Tue Dec 23 07:54:41 2025 by rpki-client