This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json) Hash identifier: qEvHNtbbVU+5QoxG44GKIFdrSiKCW520Aqb6GBKVdeQ= Subject key identifier: 0E:EF:58:A5:D6:DB:37:9C:9C:15:1D:0C:23:92:35:75:92:6D:F2:27 Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56 Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456 Certificate serial: 019B4438BB998EE1DB1C9E4B028D747C4418 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 04:02:07 +0000 Manifest this update: Mon 22 Dec 2025 04:02:07 +0000 Manifest next update: Tue 23 Dec 2025 04:02:07 +0000 Files and hashes: 1: 0ya4sfz42L60TJ0bcAyUqtENC28.roa (hash: 8fugK/0QqnnO0V3k6nBzfLlx/GUIRpJ1ovogrf7zS2I=) 2: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: vPo3WYAtlM68AMF5SZ12VThz8dfSBqEImkOd72hEhzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:bb:99:8e:e1:db:1c:9e:4b:02:8d:74:7c:44:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456 Validity Not Before: Dec 22 04:02:07 2025 GMT Not After : Dec 23 04:02:07 2025 GMT Subject: CN=0eef58a5d6db379c9c151d0c23923575926df227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:66:87:51:09:1e:1a:89:a5:7e:60:2b:56:c4: 80:22:75:30:13:3f:83:ca:6e:a2:f7:7d:bb:9c:f3: d8:fc:b5:02:96:7a:1c:b8:4e:8d:22:6a:76:40:9e: 4d:36:c9:18:51:69:63:24:69:cc:b9:64:59:d1:3e: 65:43:0c:b2:04:29:6c:dd:fd:33:1c:0c:d9:ef:f8: f2:69:ea:65:10:23:7c:34:67:08:f8:bc:2e:4e:ba: 3b:3e:01:0e:7c:bf:d5:bb:3a:ae:03:a3:d2:58:97: af:91:72:26:c6:d9:dc:b4:80:19:93:e3:f9:99:73: 6c:f2:4a:a8:ef:d8:cd:1d:2c:f9:48:8a:6f:bf:a8: e6:ca:c7:cc:3d:97:db:99:b9:be:df:f9:e3:5c:e0: fe:91:24:fa:9a:a4:15:33:63:31:9d:1a:28:54:f1: e2:3d:a5:27:25:01:68:1f:24:c6:e3:91:b5:36:27: 87:0c:e9:c7:98:80:07:18:28:82:d7:f3:da:ab:98: c3:85:a0:a7:10:ba:5d:0b:08:63:a5:e5:9d:38:25: dd:82:9b:08:a1:49:11:9d:2a:a3:2e:c1:d0:52:ad: fe:a7:82:a3:9a:40:d8:1b:3a:57:a5:7b:3a:55:b8: 64:02:09:ec:5e:f8:15:c6:fc:47:71:20:44:04:4a: 19:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EF:58:A5:D6:DB:37:9C:9C:15:1D:0C:23:92:35:75:92:6D:F2:27 X509v3 Authority Key Identifier: keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b1:cd:94:08:51:e0:93:e1:7d:9c:5a:f9:4f:5f:b9:b9:46: cb:88:d6:36:b0:76:82:3d:d3:16:6c:6d:27:20:d2:5a:67:14: 94:be:47:52:39:54:55:e3:29:22:f6:05:04:f3:9d:26:e0:b3: 6c:a7:20:8d:a4:1a:61:f4:13:77:3f:d7:5f:09:12:f4:d3:ad: 25:29:b2:f6:66:c0:ed:72:7e:b6:13:30:f0:b2:f3:03:1f:c2: e4:6b:56:51:66:34:94:1b:40:2f:e7:52:d7:88:ce:32:7e:01: ce:48:26:eb:3a:ad:ca:3e:51:b1:9c:56:de:cb:26:40:fe:28: 7f:cf:eb:f8:d4:5b:41:d3:43:8f:36:41:00:4e:8f:a3:c8:01: d0:2f:6e:18:a0:4f:e1:e4:6b:c9:ad:f0:30:21:e2:be:a0:44: 9c:0d:4e:6e:4d:a9:f4:4b:c9:cc:f8:5b:5a:7d:a2:46:57:da: bd:42:b5:dd:ed:25:e2:b2:1a:5d:74:33:70:a0:c1:2f:0e:42: 44:d2:51:21:95:bb:ff:ed:2d:87:da:91:77:7c:32:24:93:75: 59:3e:9c:f2:d6:90:9a:f3:59:74:24:64:10:88:2d:68:bc:e4: c7:1f:05:bd:74:36:6b:4c:a8:7f:5a:dd:10:91:c8:8c:f1:fa: 29:2e:2e:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOLuZjuHbHJ5LAo10fEQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNTQ4ODI0MDFiMDcyNDg2NGE4Y2NjYmFlYWZlNDJjODUy NDA0NTYwHhcNMjUxMjIyMDQwMjA3WhcNMjUxMjIzMDQwMjA3WjAzMTEwLwYDVQQD EygwZWVmNThhNWQ2ZGIzNzljOWMxNTFkMGMyMzkyMzU3NTkyNmRmMjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmaHUQkeGomlfmArVsSAInUwEz+D ym6i9327nPPY/LUClnocuE6NImp2QJ5NNskYUWljJGnMuWRZ0T5lQwyyBCls3f0z HAzZ7/jyaeplECN8NGcI+LwuTro7PgEOfL/VuzquA6PSWJevkXImxtnctIAZk+P5 mXNs8kqo79jNHSz5SIpvv6jmysfMPZfbmbm+3/njXOD+kST6mqQVM2MxnRooVPHi PaUnJQFoHyTG45G1NieHDOnHmIAHGCiC1/Paq5jDhaCnELpdCwhjpeWdOCXdgpsI oUkRnSqjLsHQUq3+p4KjmkDYGzpXpXs6VbhkAgnsXvgVxvxHcSBEBEoZMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7vWKXW2zecnBUdDCOSNXWSbfInMB8GA1UdIwQY MBaAFABUiCQBsHJIZKjMy66v5CyFJARWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUt NDZlZTk5YTFlZTMwLzEvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUtNDZlZTk5YTFlZTMw LzEvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrHNlAhR 4JPhfZxa+U9fublGy4jWNrB2gj3TFmxtJyDSWmcUlL5HUjlUVeMpIvYFBPOdJuCz bKcgjaQaYfQTdz/XXwkS9NOtJSmy9mbA7XJ+thMw8LLzAx/C5GtWUWY0lBtAL+dS 14jOMn4Bzkgm6zqtyj5RsZxW3ssmQP4of8/r+NRbQdNDjzZBAE6Po8gB0C9uGKBP 4eRrya3wMCHivqBEnA1Obk2p9EvJzPhbWn2iRlfavUK13e0l4rIaXXQzcKDBLw5C RNJRIZW7/+0th9qRd3wyJJN1WT6c8taQmvNZdCRkEIgtaLzkxx8FvXQ2a0yof1rd EJHIjPH6KS4uKg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:47:08 2025 by rpki-client