This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json) Hash identifier: VnTuEFu1egfez1FLn2oKLx5mBlVnODqwTeqay92SoqI= Subject key identifier: 62:36:24:DE:8A:C6:A3:2B:F6:C1:D4:17:DC:E6:0D:36:DE:B6:86:08 Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6 Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6 Certificate serial: 019B34FB37EDBC81EAC15D8B5EB04B4BAF06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft Manifest number: 1105 Signing time: Fri 19 Dec 2025 05:00:37 +0000 Manifest this update: Fri 19 Dec 2025 05:00:37 +0000 Manifest next update: Sat 20 Dec 2025 05:00:37 +0000 Files and hashes: 1: 4_oN5t2VSIOq_-X5g3Ce-QiBlKY.roa (hash: xjVxZUWWNj0H8HPJGRtdhqp5nG1AYywGPAoN+0SYdO8=) 2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: BZRYdw4QB9PGeiUKagA437IUoCeRJ85XFlfU28OvC30=) 3: v3SUAtR9QWFlr-gp81uV9PqvwlY.roa (hash: mn3Ww15BCRBB13Jmxz3hObcdL3yCXwDoxW+3UuBjkwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:37:ed:bc:81:ea:c1:5d:8b:5e:b0:4b:4b:af:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6 Validity Not Before: Dec 19 05:00:37 2025 GMT Not After : Dec 20 05:00:37 2025 GMT Subject: CN=623624de8ac6a32bf6c1d417dce60d36deb68608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:53:41:3c:a4:b7:6b:ee:09:17:80:47:78:8b: 24:65:72:2c:36:54:7c:b8:0f:b8:21:bb:7e:cf:84: b9:23:c7:da:c4:83:f7:bd:dd:a1:eb:ac:d7:7f:04: 22:f4:23:14:02:b0:c6:eb:89:5b:85:2e:24:ed:15: f7:c9:70:7d:22:ad:0d:f2:49:e7:71:fc:01:20:7b: 72:95:ea:8c:fa:c5:b5:ae:86:f5:c8:73:ce:b7:56: e9:01:88:47:79:07:0a:cb:15:8c:d0:1d:96:a2:db: 6f:5e:9b:85:d8:d4:10:56:8f:65:e8:15:66:e2:9b: 72:92:b1:26:e5:44:69:80:ce:98:a9:37:15:fe:13: 8f:f8:7e:0c:e6:04:05:a5:9c:d3:43:65:85:8d:af: 3e:fd:93:27:1e:f8:6e:24:cf:f9:d4:82:5b:0a:4a: 46:26:28:9f:ce:48:ec:9c:d8:5e:b8:8a:4c:8a:1d: 12:37:11:2d:15:8b:13:d7:59:94:31:a7:dd:9b:73: 99:0a:37:1a:17:be:35:d7:bc:0c:42:d5:eb:f7:a5: e0:32:f6:2d:59:13:8c:41:ea:05:a3:f3:bb:33:5c: 3b:4e:fe:02:89:e2:c4:62:e4:b4:8f:90:50:72:bd: 1e:72:72:5c:db:49:c1:b2:9b:26:b9:a5:9f:57:97: ac:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:36:24:DE:8A:C6:A3:2B:F6:C1:D4:17:DC:E6:0D:36:DE:B6:86:08 X509v3 Authority Key Identifier: keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:79:6c:ce:60:2a:63:68:08:e6:98:98:c0:1f:a3:10:10:3d: a2:00:73:2f:55:29:04:ae:bb:13:1f:f8:d1:ba:7a:9d:be:32: bb:47:c7:33:02:d0:88:d5:03:7e:eb:65:eb:16:34:06:54:2f: 06:52:a7:e1:7d:bd:76:b3:14:98:4b:fc:7d:75:ab:65:18:dc: c1:bd:ac:6d:0d:dc:72:bd:e1:95:f9:65:88:85:4f:47:38:fb: f3:82:65:ec:28:e4:15:26:13:e2:8b:87:1a:54:65:50:31:79: c1:d1:99:5d:fa:0f:8f:e0:ae:f3:2e:40:58:c6:61:e4:d1:1b: ac:91:0c:a9:b5:38:cd:52:ce:62:fc:1d:a4:99:9c:55:58:05: 38:25:9e:94:dc:80:25:79:ca:dd:bd:d9:0c:97:a9:dc:42:36: 01:e1:a9:c6:2e:cc:3e:ab:21:c1:b7:64:08:01:a5:a0:f4:78: 62:22:f3:57:cd:ca:a9:8e:01:32:e1:fb:ff:46:67:03:92:cc: 25:90:98:97:61:3b:a3:49:73:98:e1:ef:69:00:ad:86:55:61: 4e:57:ff:04:ab:a3:d3:b1:fb:34:d5:d1:38:6e:4b:64:d8:ea: 1d:f6:e0:d1:7a:5f:d5:cc:cc:4b:ff:33:f0:e8:53:4c:cc:4a: 4e:12:1e:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+zftvIHqwV2LXrBLS68GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjczNTJkMDcxMzU2MjNlMzNmNWE3ZTYyOTI1ZDRiYWI3 MjJmYzYwHhcNMjUxMjE5MDUwMDM3WhcNMjUxMjIwMDUwMDM3WjAzMTEwLwYDVQQD Eyg2MjM2MjRkZThhYzZhMzJiZjZjMWQ0MTdkY2U2MGQzNmRlYjY4NjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVNBPKS3a+4JF4BHeIskZXIsNlR8 uA+4Ibt+z4S5I8faxIP3vd2h66zXfwQi9CMUArDG64lbhS4k7RX3yXB9Iq0N8knn cfwBIHtyleqM+sW1rob1yHPOt1bpAYhHeQcKyxWM0B2WottvXpuF2NQQVo9l6BVm 4ptykrEm5URpgM6YqTcV/hOP+H4M5gQFpZzTQ2WFja8+/ZMnHvhuJM/51IJbCkpG JiifzkjsnNheuIpMih0SNxEtFYsT11mUMafdm3OZCjcaF74117wMQtXr96XgMvYt WROMQeoFo/O7M1w7Tv4CieLEYuS0j5BQcr0ecnJc20nBspsmuaWfV5es5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGI2JN6KxqMr9sHUF9zmDTbetoYIMB8GA1UdIwQY MBaAFGn3NS0HE1Yj4z9afmKSXUurci/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEt MDcxNTE4ZTA1NzNlLzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEtMDcxNTE4ZTA1NzNl LzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnlszmAq Y2gI5piYwB+jEBA9ogBzL1UpBK67Ex/40bp6nb4yu0fHMwLQiNUDfutl6xY0BlQv BlKn4X29drMUmEv8fXWrZRjcwb2sbQ3ccr3hlflliIVPRzj784Jl7CjkFSYT4ouH GlRlUDF5wdGZXfoPj+Cu8y5AWMZh5NEbrJEMqbU4zVLOYvwdpJmcVVgFOCWelNyA JXnK3b3ZDJep3EI2AeGpxi7MPqshwbdkCAGloPR4YiLzV83KqY4BMuH7/0ZnA5LM JZCYl2E7o0lzmOHvaQCthlVhTlf/BKuj07H7NNXROG5LZNjqHfbg0Xpf1czMS/8z 8OhTTMxKThIefQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:29:03 2025 by rpki-client