This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft File: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json) Hash identifier: s7lmTv2D0A+vkwnVZ3cZ1bJe25anIKprVcZWijXDm0k= Subject key identifier: 08:C8:AA:81:EC:9D:CC:B7:A5:5F:63:7D:57:97:E5:EB:DC:97:32:AB Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34 Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234 Certificate serial: 019B052188B2F6A0CC9F4E4E5861A734E9B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft Manifest number: 178C Signing time: Tue 09 Dec 2025 22:00:42 +0000 Manifest this update: Tue 09 Dec 2025 22:00:42 +0000 Manifest next update: Wed 10 Dec 2025 22:00:42 +0000 Files and hashes: 1: 42hpqWqY72USafsvfiD_518D4aY.roa (hash: XyqSHkNb93lXjMdBQV3tT6d41VyHCZFCyukyVX/G7/A=) 2: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: CHS7V5iw2tfhV2t7cyP6pFzgEV4WXWCHGNL5i5dW1ws=) 3: B_3pca4XmmEyoD7_YWQ5xsaTGlA.roa (hash: n5M6+Js+wLuWN3HaqVwvyZeizy4tawLMu5EBkNvd9Nw=) 4: GNcGFP48VRO_QOUxz3CvJSh90oA.roa (hash: 9T1HgBLEzXKt2GaC2y8FBctN+punw/ln3V52HLktRUQ=) 5: JOvZJvxVCIjogtIv-LfIwpT-8XY.roa (hash: IRDQFzfaDrUN19oYWZOku8P+RpACtFrOm+7KAJXqJUs=) 6: g9Hs1uIFeelsIxcu9-JFATbg5r0.roa (hash: i1uLdd6dy3tsCAr6HgKPaDpJNpr4x+g5kpnEdrNnrzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 22:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:21:88:b2:f6:a0:cc:9f:4e:4e:58:61:a7:34:e9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234 Validity Not Before: Dec 9 22:00:42 2025 GMT Not After : Dec 10 22:00:42 2025 GMT Subject: CN=08c8aa81ec9dccb7a55f637d5797e5ebdc9732ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:00:dd:91:ef:9f:9d:22:a2:3c:ad:15:33:e8: 86:fa:be:ee:8a:3a:4d:77:1f:ac:81:a2:9b:02:d1: 05:ee:52:49:af:9d:34:f0:a7:4e:7f:44:a8:27:e1: 50:8c:33:2a:03:ea:ff:6b:7d:1b:f6:8b:9d:1e:0c: fd:76:82:a3:1e:b2:ba:ff:81:7e:4a:b6:00:b4:a4: 54:4a:85:6a:4c:88:d3:ec:09:ee:cd:bd:64:29:08: f1:e3:a5:d5:ac:c5:fa:d5:fd:7b:76:cb:c8:79:f8: 55:db:1f:d6:3e:a2:42:d4:b2:16:9f:58:85:82:9e: 9f:4e:db:98:45:ac:b2:99:06:f5:ad:d6:e2:4f:cc: cd:45:6e:f0:28:d4:64:9d:39:cc:05:a2:0c:3c:04: ee:63:a2:b3:7c:36:ae:fd:bf:9f:47:7b:dc:d1:30: bd:a2:c3:e2:a8:85:ee:27:17:a2:a0:c6:5f:45:b3: 7b:21:f7:36:8d:97:e5:07:e6:35:5f:73:17:ff:6d: f6:37:81:0c:29:75:3d:75:ac:54:4d:a1:83:f6:34: 54:f5:81:20:ba:60:9a:8c:e8:ad:08:5c:05:ce:eb: ae:50:a5:7d:b0:c8:9c:a4:f2:51:3c:9a:1f:34:ee: e6:d1:57:ca:23:54:d2:e8:30:d9:ae:b5:8b:5e:bf: fc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C8:AA:81:EC:9D:CC:B7:A5:5F:63:7D:57:97:E5:EB:DC:97:32:AB X509v3 Authority Key Identifier: keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:40:05:18:c0:cb:c8:5e:c6:b4:04:12:08:81:dd:4c:f1:3f: 6f:03:04:9f:c2:00:cb:6b:56:e3:d3:99:db:50:de:92:a3:c7: f3:02:97:16:13:8e:e9:b6:6c:24:3d:c3:a0:a3:77:22:f3:c9: 2e:80:82:e8:d3:3d:3e:ea:d9:ec:d1:fc:74:da:b6:11:5c:f3: 41:67:40:df:72:ed:67:5b:06:05:ab:89:20:6d:a0:42:06:8d: a8:ee:ff:6a:d3:f8:67:94:3d:e7:8f:e0:11:fb:1c:92:3e:ac: f1:f7:cd:60:d9:47:9b:9e:dd:30:e7:80:73:48:b0:7f:60:00: 71:ca:d8:65:21:2b:66:e2:e3:55:03:ef:78:59:fa:bc:82:9c: 28:33:c4:a6:99:34:31:66:4f:95:b2:29:53:4c:2a:8b:11:75: 8d:6a:97:d2:83:ed:20:53:36:6e:fe:2a:e9:6c:5b:00:f7:ba: 0a:aa:b3:b7:43:ec:bc:8f:f5:f3:2f:ac:0e:5e:38:b9:07:8a: ea:b0:40:6e:2c:00:b1:bc:db:8c:88:93:d3:fa:98:4d:d0:c2: 0c:35:86:d8:f5:31:4c:f5:a3:8a:d4:a7:1e:98:32:a0:bc:bc: 31:0d:09:e0:ad:2d:ce:f1:11:8e:94:71:41:33:19:7e:2c:3f: 6b:f7:c2:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFIYiy9qDMn05OWGGnNOmyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZjNlZjNlMGVhOTVhOTc1NTM3ZDVjMjVkOTNjYjc2YWY2 ODcyMzQwHhcNMjUxMjA5MjIwMDQyWhcNMjUxMjEwMjIwMDQyWjAzMTEwLwYDVQQD EygwOGM4YWE4MWVjOWRjY2I3YTU1ZjYzN2Q1Nzk3ZTVlYmRjOTczMmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgDdke+fnSKiPK0VM+iG+r7uijpN dx+sgaKbAtEF7lJJr5008KdOf0SoJ+FQjDMqA+r/a30b9oudHgz9doKjHrK6/4F+ SrYAtKRUSoVqTIjT7Anuzb1kKQjx46XVrMX61f17dsvIefhV2x/WPqJC1LIWn1iF gp6fTtuYRayymQb1rdbiT8zNRW7wKNRknTnMBaIMPATuY6KzfDau/b+fR3vc0TC9 osPiqIXuJxeioMZfRbN7Ifc2jZflB+Y1X3MX/232N4EMKXU9daxUTaGD9jRU9YEg umCajOitCFwFzuuuUKV9sMicpPJRPJofNO7m0VfKI1TS6DDZrrWLXr/8RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjIqoHsncy3pV9jfVeX5evclzKrMB8GA1UdIwQY MBaAFAHz7z4OqVqXVTfVwl2Ty3avaHI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEt MzUzYjNhNjMzYWRhLzEvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEtMzUzYjNhNjMzYWRh LzEvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxUAFGMDL yF7GtAQSCIHdTPE/bwMEn8IAy2tW49OZ21DekqPH8wKXFhOO6bZsJD3DoKN3IvPJ LoCC6NM9PurZ7NH8dNq2EVzzQWdA33LtZ1sGBauJIG2gQgaNqO7/atP4Z5Q954/g Efsckj6s8ffNYNlHm57dMOeAc0iwf2AAccrYZSErZuLjVQPveFn6vIKcKDPEppk0 MWZPlbIpU0wqixF1jWqX0oPtIFM2bv4q6WxbAPe6Cqqzt0PsvI/18y+sDl44uQeK 6rBAbiwAsbzbjIiT0/qYTdDCDDWG2PUxTPWjitSnHpgyoLy8MQ0J4K0tzvERjpRx QTMZfiw/a/fCQw== -----END CERTIFICATE-----Generated at Wed Dec 10 05:26:19 2025 by rpki-client