This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json) Hash identifier: vWdr5roovkll49n3m4IJwzIyYVq8uGdANO8/zQ1qGZI= Subject key identifier: 13:C6:E8:64:02:B9:27:6F:D5:24:16:50:20:11:58:E7:70:1B:AA:0C Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19 Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319 Certificate serial: 019B37C6058C87E9C8CA7E18FEE36E0C8F6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft Manifest number: 13BA Signing time: Fri 19 Dec 2025 18:01:22 +0000 Manifest this update: Fri 19 Dec 2025 18:01:22 +0000 Manifest next update: Sat 20 Dec 2025 18:01:22 +0000 Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: rLQ7wpgPfC5Et/nBE7kIXI3kCeXXaWyGLte6WQSfUsQ=) 2: FpXlOOnsbwOYeT36IscKSuN8OMU.roa (hash: A+XYmuaYnslHDaJLV17tPt7jw//813JyNtz/WmswEK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c6:05:8c:87:e9:c8:ca:7e:18:fe:e3:6e:0c:8f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319 Validity Not Before: Dec 19 18:01:22 2025 GMT Not After : Dec 20 18:01:22 2025 GMT Subject: CN=13c6e86402b9276fd5241650201158e7701baa0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:ce:ff:6e:cc:25:d5:92:cd:dd:ee:4c:d8: 20:ab:84:77:eb:d7:50:b4:fb:44:59:79:43:7a:a5: c3:2e:13:d1:17:60:04:fe:e1:50:99:8e:d1:8f:30: 7c:db:f2:ff:82:ab:ca:f2:3e:20:5f:9b:42:9f:3e: 34:ab:e5:15:3a:67:84:6d:ed:4c:e0:48:b4:a5:8c: 0d:45:fd:e3:ae:dd:aa:10:66:12:7b:c3:d8:fb:4c: 54:ee:a3:da:3b:20:06:3b:40:15:99:f2:1b:29:53: aa:92:15:ad:b0:13:cf:91:03:67:f7:31:67:7c:0d: 62:50:59:3f:f9:90:c3:88:6b:5d:1c:45:18:cf:b1: 6a:d3:fd:8f:15:86:b1:f4:e2:7f:ed:95:3a:c3:07: 6e:ac:3b:4a:42:0f:7b:6f:69:5a:45:aa:47:38:da: 07:1c:57:55:70:04:04:79:d2:50:ed:ca:c7:9f:52: 64:c5:74:03:75:89:b1:0b:22:8d:96:84:32:0c:dd: 71:7c:4d:f6:d6:e5:74:ac:79:eb:51:9b:a0:f8:e4: ea:a2:38:ad:22:c6:e6:57:b8:1d:99:b5:e8:ce:1b: 7e:a7:b2:d9:a8:03:8b:5e:d9:ca:7c:2c:0e:94:48: 62:ca:3e:6d:a3:b7:d8:c4:51:ce:3e:c6:d2:99:54: a4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C6:E8:64:02:B9:27:6F:D5:24:16:50:20:11:58:E7:70:1B:AA:0C X509v3 Authority Key Identifier: keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ca:ba:77:9c:9c:29:29:76:6b:5e:0d:dd:24:4d:cb:ec:2f: 58:c5:67:dd:8c:af:51:e6:47:c9:d6:d2:7f:70:65:a9:c3:78: 77:00:5c:44:68:7d:9f:c0:a3:ac:2c:97:33:0a:9b:36:fd:44: c9:64:e2:67:24:1d:1a:c8:04:c4:d0:04:70:2d:34:bb:e5:c3: 63:94:96:7b:0c:18:a7:70:8c:cf:d9:87:e9:1e:af:02:33:cb: c1:e4:c4:f4:9c:dc:ea:3c:af:e6:17:63:1e:68:cd:b6:fb:6a: d3:0a:95:87:e2:e5:70:99:15:50:b0:45:12:52:8a:6b:44:ce: 2a:b3:eb:cf:2c:59:fa:b5:24:c5:61:af:72:14:90:13:90:61: 84:44:b1:88:c0:91:47:c4:ca:84:46:85:4d:45:c2:1f:8b:aa: 9a:7e:5d:2e:e2:d0:b3:12:c4:2a:23:24:1d:d5:66:40:11:cc: 75:4f:56:f8:ef:63:b6:73:be:5b:48:9a:52:97:e5:86:87:21: da:b6:f6:f6:d4:3d:11:f9:05:81:04:11:da:da:7a:3c:38:0b: 0d:cd:cc:f1:fe:c4:c9:69:dc:5d:ec:c1:05:a5:52:65:ce:f9: 79:ab:2b:98:36:7f:f9:1b:40:2e:63:c8:e9:40:e2:61:05:87: 71:70:c8:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xgWMh+nIyn4Y/uNuDI9vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZTdjMzA0NTkzNTZhOTAwZGM2MzM2OTc2NGE3NTRjNWMx ZjMzMTkwHhcNMjUxMjE5MTgwMTIyWhcNMjUxMjIwMTgwMTIyWjAzMTEwLwYDVQQD EygxM2M2ZTg2NDAyYjkyNzZmZDUyNDE2NTAyMDExNThlNzcwMWJhYTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPfO/27MJdWSzd3uTNggq4R369dQ tPtEWXlDeqXDLhPRF2AE/uFQmY7RjzB82/L/gqvK8j4gX5tCnz40q+UVOmeEbe1M 4Ei0pYwNRf3jrt2qEGYSe8PY+0xU7qPaOyAGO0AVmfIbKVOqkhWtsBPPkQNn9zFn fA1iUFk/+ZDDiGtdHEUYz7Fq0/2PFYax9OJ/7ZU6wwdurDtKQg97b2laRapHONoH HFdVcAQEedJQ7crHn1JkxXQDdYmxCyKNloQyDN1xfE321uV0rHnrUZug+OTqojit IsbmV7gdmbXozht+p7LZqAOLXtnKfCwOlEhiyj5to7fYxFHOPsbSmVSkBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPG6GQCuSdv1SQWUCARWOdwG6oMMB8GA1UdIwQY MBaAFAHnwwRZNWqQDcYzaXZKdUxcHzMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xOWMxNjQtZWFlNy00NmJkLWExZGUt YmYyOWM0MTg4ZDdlLzEvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xOWMxNjQtZWFlNy00NmJkLWExZGUtYmYyOWM0MTg4ZDdl LzEvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMq6d5yc KSl2a14N3SRNy+wvWMVn3YyvUeZHydbSf3BlqcN4dwBcRGh9n8CjrCyXMwqbNv1E yWTiZyQdGsgExNAEcC00u+XDY5SWewwYp3CMz9mH6R6vAjPLweTE9Jzc6jyv5hdj HmjNtvtq0wqVh+LlcJkVULBFElKKa0TOKrPrzyxZ+rUkxWGvchSQE5BhhESxiMCR R8TKhEaFTUXCH4uqmn5dLuLQsxLEKiMkHdVmQBHMdU9W+O9jtnO+W0iaUpflhoch 2rb29tQ9EfkFgQQR2tp6PDgLDc3M8f7EyWncXezBBaVSZc75easrmDZ/+RtALmPI 6UDiYQWHcXDINg== -----END CERTIFICATE-----Generated at Fri Dec 19 20:27:16 2025 by rpki-client