This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft File: aZbfqRr5HsxjhBKLGMUDoywoNxM.mft (raw, json) Hash identifier: fnYDkbi18v6wHNaXU+B8rxELunyktY7Qb6ugafbk3uE= Subject key identifier: AF:9B:A5:20:FC:1D:B1:FA:2C:E5:69:CB:54:43:15:C7:15:63:35:53 Authority key identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13 Certificate issuer: /CN=6996dfa91af91ecc6384128b18c503a32c283713 Certificate serial: 019B5AF6BF88D5FF15562C6AB3EBD8DF926C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft Manifest number: 32 Signing time: Fri 26 Dec 2025 14:01:18 +0000 Manifest this update: Fri 26 Dec 2025 14:01:18 +0000 Manifest next update: Sat 27 Dec 2025 14:01:18 +0000 Files and hashes: 1: aZbfqRr5HsxjhBKLGMUDoywoNxM.crl (hash: i5G7yk+IUyE4qzJYtlG+wemd/wCkrwHv8/w1goZGRN8=) 2: jUId-yPrpp1bq5KB-9rQvm7Mrdo.roa (hash: uUGAF2zzX/6dYByi4Ip13xTq3kOULW2ZHotDQVbCuwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:bf:88:d5:ff:15:56:2c:6a:b3:eb:d8:df:92:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6996dfa91af91ecc6384128b18c503a32c283713 Validity Not Before: Dec 26 14:01:18 2025 GMT Not After : Dec 27 14:01:18 2025 GMT Subject: CN=af9ba520fc1db1fa2ce569cb544315c715633553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:22:c2:c9:ae:80:d2:27:82:ee:b3:e8:0d:fd: 97:f8:9f:9b:55:8d:a0:66:e7:0f:70:f7:75:63:ac: a8:58:b7:91:3e:18:a5:d3:73:a2:7a:d0:ac:06:74: be:ee:00:99:ae:67:27:13:7b:9a:1a:eb:d8:24:88: e4:c4:a7:e9:cd:78:b7:e8:b8:90:d5:90:ef:fa:14: 76:29:f0:07:2b:e1:20:5a:1b:4b:6b:d1:c6:70:4f: ff:5b:af:70:b4:7a:9d:9d:ef:d8:d2:69:ec:ca:b5: f1:f5:e9:93:59:0a:28:2a:db:2e:67:8c:c2:72:28: 94:39:c3:07:36:6b:bb:da:93:c0:53:2c:68:3b:47: 6a:c5:3c:c5:17:67:57:e8:01:8e:ca:cd:49:d0:e1: 29:50:eb:e7:25:17:a1:aa:bc:b3:06:1f:a6:c3:42: ad:fd:b6:f9:84:08:ee:5c:a0:b4:03:fb:ca:ff:cf: 94:e8:7d:7a:3e:a7:4b:ea:ee:62:f3:8e:cb:d2:ad: e0:fc:7a:84:54:9b:89:a9:42:92:81:61:c5:57:2d: 53:f8:e8:58:d7:fb:54:9b:c9:c5:9b:82:91:eb:47: fd:0c:ca:e3:99:6b:b3:1e:84:dc:bf:cd:55:17:98: 71:93:ed:eb:fd:00:dc:4c:63:ce:95:64:bc:eb:18: 44:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9B:A5:20:FC:1D:B1:FA:2C:E5:69:CB:54:43:15:C7:15:63:35:53 X509v3 Authority Key Identifier: keyid:69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:30:65:87:47:f2:fe:37:55:99:18:0c:7d:d3:75:9c:2d:25: 33:3b:e6:6a:c0:fe:fa:b2:a3:cd:2d:d7:b0:9f:8a:bc:fd:52: 8c:eb:44:09:e0:48:c7:2d:4d:4a:69:2e:a2:18:4d:3c:1f:35: cc:ed:d4:0f:43:d0:d1:79:8c:f2:c2:4c:dc:33:e0:7b:38:0e: 11:41:07:be:f6:ad:02:bd:fa:55:90:68:cb:24:78:61:60:71: 9b:9a:51:e1:48:8b:bf:4c:c8:89:b2:e4:ad:66:a0:6f:e8:df: bd:a3:61:90:56:d1:a7:af:2d:be:8b:ce:26:41:9a:1e:ef:85: 61:c1:8a:75:24:b1:f8:a2:52:c7:b2:19:44:4b:13:a2:eb:6a: 30:37:5e:8e:dc:49:5e:12:0b:52:f8:12:ea:cb:bd:e9:e9:e6: db:53:0f:40:15:81:cd:47:24:29:c6:4c:ee:67:6d:54:5f:15: b9:39:61:86:4b:98:eb:68:a7:42:a5:e1:41:a9:f3:53:41:2b: 74:21:8e:b7:13:51:93:57:4f:20:2b:31:b6:c7:74:09:d1:53: 66:95:19:8e:a1:a3:df:41:f8:32:be:a7:7d:7b:eb:21:b6:08: 1d:41:28:d0:39:0c:15:8b:a1:d1:30:1a:ef:81:6c:b9:30:68: c9:56:70:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9r+I1f8VVixqs+vY35JsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTZkZmE5MWFmOTFlY2M2Mzg0MTI4YjE4YzUwM2EzMmMy ODM3MTMwHhcNMjUxMjI2MTQwMTE4WhcNMjUxMjI3MTQwMTE4WjAzMTEwLwYDVQQD EyhhZjliYTUyMGZjMWRiMWZhMmNlNTY5Y2I1NDQzMTVjNzE1NjMzNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCLCya6A0ieC7rPoDf2X+J+bVY2g ZucPcPd1Y6yoWLeRPhil03OietCsBnS+7gCZrmcnE3uaGuvYJIjkxKfpzXi36LiQ 1ZDv+hR2KfAHK+EgWhtLa9HGcE//W69wtHqdne/Y0mnsyrXx9emTWQooKtsuZ4zC ciiUOcMHNmu72pPAUyxoO0dqxTzFF2dX6AGOys1J0OEpUOvnJRehqryzBh+mw0Kt /bb5hAjuXKC0A/vK/8+U6H16PqdL6u5i847L0q3g/HqEVJuJqUKSgWHFVy1T+OhY 1/tUm8nFm4KR60f9DMrjmWuzHoTcv81VF5hxk+3r/QDcTGPOlWS86xhEDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+bpSD8HbH6LOVpy1RDFccVYzVTMB8GA1UdIwQY MBaAFGmW36ka+R7MY4QSixjFA6MsKDcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpiZnFScjVIc3hqaEJLTEdNVURveXdvTnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODRmNzQtZTgzZi00NWI2LWFhMzIt OGFkM2MwZDExNTY1LzEvYVpiZnFScjVIc3hqaEJLTEdNVURveXdvTnhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82ODRmNzQtZTgzZi00NWI2LWFhMzItOGFkM2MwZDExNTY1 LzEvYVpiZnFScjVIc3hqaEJLTEdNVURveXdvTnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjBlh0fy /jdVmRgMfdN1nC0lMzvmasD++rKjzS3XsJ+KvP1SjOtECeBIxy1NSmkuohhNPB81 zO3UD0PQ0XmM8sJM3DPgezgOEUEHvvatAr36VZBoyyR4YWBxm5pR4UiLv0zIibLk rWagb+jfvaNhkFbRp68tvovOJkGaHu+FYcGKdSSx+KJSx7IZREsToutqMDdejtxJ XhILUvgS6su96enm21MPQBWBzUckKcZM7mdtVF8VuTlhhkuY62inQqXhQanzU0Er dCGOtxNRk1dPICsxtsd0CdFTZpUZjqGj30H4Mr6nfXvrIbYIHUEo0DkMFYuh0TAa 74FsuTBoyVZwGA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:12 2025 by rpki-client