This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json) Hash identifier: oxO3NF/nH3eyPMhmR2BRae119dtNQdUPn4TOmCa0MVk= Subject key identifier: 65:38:CC:8F:87:C9:1A:2F:24:44:F6:BA:F5:9B:45:F4:82:50:67:05 Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56 Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456 Certificate serial: 019B066BA8831A9316034950928CDF6B7591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft Manifest number: 176D Signing time: Wed 10 Dec 2025 04:01:17 +0000 Manifest this update: Wed 10 Dec 2025 04:01:17 +0000 Manifest next update: Thu 11 Dec 2025 04:01:17 +0000 Files and hashes: 1: 0ya4sfz42L60TJ0bcAyUqtENC28.roa (hash: 8fugK/0QqnnO0V3k6nBzfLlx/GUIRpJ1ovogrf7zS2I=) 2: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: TPW/BV7BBwxBC4GvEEfWhIdgI7r39OO4zMIEwviVnMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6b:a8:83:1a:93:16:03:49:50:92:8c:df:6b:75:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456 Validity Not Before: Dec 10 04:01:17 2025 GMT Not After : Dec 11 04:01:17 2025 GMT Subject: CN=6538cc8f87c91a2f2444f6baf59b45f482506705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:9c:f5:38:e4:1f:1d:0a:c8:ba:34:04:64: 95:4a:32:9b:7f:9f:a1:05:60:c2:b0:46:36:2c:13: ca:69:38:71:5f:97:b1:84:e9:ef:16:18:80:64:e6: 19:40:78:3d:82:13:5a:fb:36:16:25:20:fd:8b:68: 12:45:9a:4c:88:45:ce:2c:29:d7:ac:b5:93:5c:03: 92:99:4a:02:aa:b7:00:d1:f8:b9:81:60:52:ef:27: 0d:41:e9:35:03:a0:bc:1c:f0:33:66:22:00:f7:e4: 4b:58:43:66:4f:f3:dc:1d:16:dc:6a:16:3c:27:c6: bc:81:b6:ad:0d:7b:3d:ba:b3:b5:c6:fd:8b:b5:48: 88:76:2f:c4:ca:6a:6e:74:f8:b7:7a:7e:a7:fa:bb: 64:34:4a:ad:a2:68:a1:c4:94:64:e6:69:92:47:85: 5e:ce:61:17:3d:d5:44:cd:eb:5f:ce:d6:96:42:d7: 3c:9c:15:74:f9:91:b2:49:a9:e4:4f:b1:4e:e6:b4: 2c:ae:e9:ff:ac:8c:cb:81:68:1b:bc:cc:4e:8c:43: f2:39:a7:a4:79:43:2d:8a:dc:2e:4b:0d:7a:1e:25: 12:2c:cd:b7:a3:df:b9:2e:07:34:91:39:c4:b1:8c: 96:7a:0b:b2:e0:40:af:2b:a0:28:e9:a3:c8:3b:10: bb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:38:CC:8F:87:C9:1A:2F:24:44:F6:BA:F5:9B:45:F4:82:50:67:05 X509v3 Authority Key Identifier: keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:da:56:96:5a:58:7d:5a:c1:ac:f1:47:33:d8:39:dd:33:d6: c6:c8:08:f2:0b:f6:db:d9:94:20:a0:85:56:02:42:30:4b:d6: 71:1a:10:d1:fd:a2:75:d1:30:8c:b2:ec:66:0d:f6:a2:7b:5f: 71:cd:10:72:1d:ad:ad:ee:ae:0e:0a:cc:68:ce:5a:11:01:ac: 6c:d0:93:33:be:53:12:23:eb:08:89:3b:9d:0d:ce:65:49:86: 49:1b:78:83:e5:b3:37:32:7f:22:9e:87:f2:ad:98:6a:2c:9e: e2:c2:62:30:57:e6:be:d8:e8:e4:5a:3f:c4:8d:63:75:c4:40: be:77:9e:32:0e:6c:e4:33:04:30:c8:51:d1:51:b1:92:a0:64: ed:43:7b:16:af:30:94:15:b3:77:9d:96:fa:5d:40:3b:09:35: 1c:c9:2d:f2:18:9f:ca:99:8d:8d:05:ef:69:8c:e5:1a:57:e0: 77:71:b3:d1:72:dd:cb:ad:5e:06:9f:38:83:43:89:92:42:43: 7e:74:b5:6b:74:0a:50:29:d3:44:71:c8:f6:b4:d8:24:92:9f: 1c:c5:f3:64:73:9c:9c:c6:a0:52:f6:35:2d:ba:ab:f3:d4:d2: e5:f5:3a:46:28:ca:f0:4e:2b:97:70:36:30:3b:3e:15:58:4e: 8d:b4:58:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGa6iDGpMWA0lQkozfa3WRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNTQ4ODI0MDFiMDcyNDg2NGE4Y2NjYmFlYWZlNDJjODUy NDA0NTYwHhcNMjUxMjEwMDQwMTE3WhcNMjUxMjExMDQwMTE3WjAzMTEwLwYDVQQD Eyg2NTM4Y2M4Zjg3YzkxYTJmMjQ0NGY2YmFmNTliNDVmNDgyNTA2NzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQOc9TjkHx0KyLo0BGSVSjKbf5+h BWDCsEY2LBPKaThxX5exhOnvFhiAZOYZQHg9ghNa+zYWJSD9i2gSRZpMiEXOLCnX rLWTXAOSmUoCqrcA0fi5gWBS7ycNQek1A6C8HPAzZiIA9+RLWENmT/PcHRbcahY8 J8a8gbatDXs9urO1xv2LtUiIdi/EympudPi3en6n+rtkNEqtomihxJRk5mmSR4Ve zmEXPdVEzetfztaWQtc8nBV0+ZGySankT7FO5rQsrun/rIzLgWgbvMxOjEPyOaek eUMtitwuSw16HiUSLM23o9+5Lgc0kTnEsYyWeguy4ECvK6Ao6aPIOxC7cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGU4zI+HyRovJET2uvWbRfSCUGcFMB8GA1UdIwQY MBaAFABUiCQBsHJIZKjMy66v5CyFJARWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUt NDZlZTk5YTFlZTMwLzEvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUtNDZlZTk5YTFlZTMw LzEvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9pWllpY fVrBrPFHM9g53TPWxsgI8gv229mUIKCFVgJCMEvWcRoQ0f2iddEwjLLsZg32ontf cc0Qch2tre6uDgrMaM5aEQGsbNCTM75TEiPrCIk7nQ3OZUmGSRt4g+WzNzJ/Ip6H 8q2Yaiye4sJiMFfmvtjo5Fo/xI1jdcRAvneeMg5s5DMEMMhR0VGxkqBk7UN7Fq8w lBWzd52W+l1AOwk1HMkt8hifypmNjQXvaYzlGlfgd3Gz0XLdy61eBp84g0OJkkJD fnS1a3QKUCnTRHHI9rTYJJKfHMXzZHOcnMagUvY1Lbqr89TS5fU6RijK8E4rl3A2 MDs+FVhOjbRYlQ== -----END CERTIFICATE-----Generated at Wed Dec 10 12:55:44 2025 by rpki-client