This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json) Hash identifier: mMOng9RrchWLdCy8gJnYI7dySRSn1vEVSLPS6/4Fooo= Subject key identifier: 3F:3E:8B:F9:D9:0F:46:88:89:E4:3B:27:51:BC:96:92:A2:8D:FE:A6 Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71 Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71 Certificate serial: 019B2407D504B528CFFBE54EED9C04FC1F4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft Manifest number: 0639 Signing time: Mon 15 Dec 2025 22:00:51 +0000 Manifest this update: Mon 15 Dec 2025 22:00:51 +0000 Manifest next update: Tue 16 Dec 2025 22:00:51 +0000 Files and hashes: 1: N-BSf874DQvK549b1pSEfsfJ-W8.roa (hash: bW40XSisvNpm05Mkk5fR9GiNdKpGc7uzNKkhrhBHqx4=) 2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: +ONrX/ZSB9Kfsw6ZXq7uUj4ASqVQ110SW020OQLUl8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:07:d5:04:b5:28:cf:fb:e5:4e:ed:9c:04:fc:1f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71 Validity Not Before: Dec 15 22:00:51 2025 GMT Not After : Dec 16 22:00:51 2025 GMT Subject: CN=3f3e8bf9d90f468889e43b2751bc9692a28dfea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:d7:5d:d5:d3:78:18:eb:56:21:c9:7a:1e: ed:9d:27:d0:37:9a:15:23:e4:d5:7a:93:3c:cc:92: c2:70:74:55:74:0f:76:22:fb:6a:d7:a3:fc:8a:8e: ab:64:a4:7e:9a:53:63:af:40:7b:73:e9:62:9d:13: b4:7b:17:c9:5c:23:be:51:4c:fe:c7:02:0d:27:65: 0c:6e:0a:38:f7:7c:da:e4:7f:fa:8a:18:f9:e8:64: d1:17:00:8c:6b:13:2e:cc:80:a4:29:b6:54:cc:f2: 19:55:f4:34:dc:cb:5d:23:cb:c2:1d:24:52:d8:78: 83:db:7f:3e:dd:82:c9:07:d1:a0:89:95:c3:96:02: 56:61:b2:70:e2:04:23:d7:ad:f3:48:11:25:93:05: e2:cd:d8:ee:e8:81:83:e5:53:a1:3a:e4:5c:ce:9d: aa:40:6c:40:7d:19:53:c6:79:5d:21:3f:49:02:08: 04:a3:d9:ad:11:74:f3:b0:ae:01:48:8d:04:3b:e7: 58:5d:cd:04:ca:4c:9a:b9:ed:d2:71:1a:6b:6d:fb: 00:e9:04:de:a6:ee:47:a9:92:7c:e4:66:8d:0d:57: 2e:26:55:91:59:a9:fe:a6:e5:2f:47:04:41:cb:e7: 51:6a:cd:4f:7c:c3:92:88:da:70:05:cc:2e:44:52: f0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3E:8B:F9:D9:0F:46:88:89:E4:3B:27:51:BC:96:92:A2:8D:FE:A6 X509v3 Authority Key Identifier: keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:dc:b5:49:4e:6f:0e:af:e2:af:3f:11:c4:0e:62:0f:dd:dc: c6:6d:e8:72:41:9a:bf:22:e4:87:97:d8:aa:c1:ac:bd:81:60: b3:e8:b9:32:eb:c7:b3:cf:6c:ee:27:b4:86:7e:d7:85:9a:f1: 92:5f:23:2e:57:a3:53:ce:2d:cc:52:78:cb:c9:9f:36:26:50: 16:5a:fc:a2:6c:e8:b9:5e:15:47:33:4f:eb:61:b3:ec:5c:f3: c5:3c:4c:74:c1:12:7d:23:8a:7d:2c:2e:b4:b9:77:79:e8:45: 23:60:10:35:8c:c7:6d:15:35:56:26:c4:9c:cf:c5:26:0c:2e: 29:32:03:c6:77:50:17:f5:24:26:d0:22:90:a2:d2:d6:4d:9f: 8c:29:70:76:2f:50:60:96:48:36:18:82:82:b9:ae:ca:9f:0f: d3:99:67:1f:bb:ac:3e:3b:d8:aa:ee:8b:a0:8f:e9:93:f2:76: d3:26:a9:ce:1e:34:a1:d2:02:a7:5c:74:a9:68:8a:8a:32:27: 97:bd:81:f1:49:17:55:4e:e7:a3:72:4d:65:73:30:4b:f3:38: 77:33:a6:6d:59:26:9a:f9:0e:cc:ea:75:62:8f:61:98:cf:de: 81:7c:c0:3d:1c:2c:19:a5:6a:b6:3b:00:8d:b2:14:03:f5:13: e2:86:91:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskB9UEtSjP++VO7ZwE/B9OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZjgzZTJhMzQxNDVhZDQ3ZTBjYzJiM2M3OWZjNjMxMmJh ZTJjNzEwHhcNMjUxMjE1MjIwMDUxWhcNMjUxMjE2MjIwMDUxWjAzMTEwLwYDVQQD EygzZjNlOGJmOWQ5MGY0Njg4ODllNDNiMjc1MWJjOTY5MmEyOGRmZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXPXXdXTeBjrViHJeh7tnSfQN5oV I+TVepM8zJLCcHRVdA92Ivtq16P8io6rZKR+mlNjr0B7c+linRO0exfJXCO+UUz+ xwINJ2UMbgo493za5H/6ihj56GTRFwCMaxMuzICkKbZUzPIZVfQ03MtdI8vCHSRS 2HiD238+3YLJB9GgiZXDlgJWYbJw4gQj163zSBElkwXizdju6IGD5VOhOuRczp2q QGxAfRlTxnldIT9JAggEo9mtEXTzsK4BSI0EO+dYXc0Eykyaue3ScRprbfsA6QTe pu5HqZJ85GaNDVcuJlWRWan+puUvRwRBy+dRas1PfMOSiNpwBcwuRFLwBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8+i/nZD0aIieQ7J1G8lpKijf6mMB8GA1UdIwQY MBaAFGj4Pio0FFrUfgzCs8efxjErrixxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQt NzkyODAyYzQzOTI1LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQtNzkyODAyYzQzOTI1 LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNy1SU5v Dq/irz8RxA5iD93cxm3ockGavyLkh5fYqsGsvYFgs+i5MuvHs89s7ie0hn7XhZrx kl8jLlejU84tzFJ4y8mfNiZQFlr8omzouV4VRzNP62Gz7FzzxTxMdMESfSOKfSwu tLl3eehFI2AQNYzHbRU1VibEnM/FJgwuKTIDxndQF/UkJtAikKLS1k2fjClwdi9Q YJZINhiCgrmuyp8P05lnH7usPjvYqu6LoI/pk/J20yapzh40odICp1x0qWiKijIn l72B8UkXVU7no3JNZXMwS/M4dzOmbVkmmvkOzOp1Yo9hmM/egXzAPRwsGaVqtjsA jbIUA/UT4oaRlQ== -----END CERTIFICATE-----Generated at Tue Dec 16 06:21:27 2025 by rpki-client