This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft File: aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json) Hash identifier: iZ4FjqOA/qwO5znpSvlx8M+XHIZMaHPrhHFTtsL9U8c= Subject key identifier: 68:3C:FF:9F:71:51:F5:25:33:A0:E0:D1:BA:55:31:3C:7C:14:F9:B0 Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E Certificate issuer: /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e Certificate serial: 019B36B39E23684223E7FFDFE6D0531DE9CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 13:01:39 +0000 Manifest this update: Fri 19 Dec 2025 13:01:39 +0000 Manifest next update: Sat 20 Dec 2025 13:01:39 +0000 Files and hashes: 1: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: Mv6JGzsNPm1ruKIRO49e2ifTAfvN93gnShnJaQIV4N4=) 2: qnXqSBmvIClWRdSX3rmYASI_2Pc.roa (hash: 2FNK4DlE8j3wOu3WxQxB7a85ZmjXWPid3Sa9pj/6S3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:9e:23:68:42:23:e7:ff:df:e6:d0:53:1d:e9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e Validity Not Before: Dec 19 13:01:39 2025 GMT Not After : Dec 20 13:01:39 2025 GMT Subject: CN=683cff9f7151f52533a0e0d1ba55313c7c14f9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dd:e6:39:47:f0:a3:91:b5:84:41:92:42:b6: 98:d6:fe:3b:4a:27:5c:ac:3f:d6:b9:05:de:80:dc: df:cd:72:2a:95:b1:dc:64:b0:ed:d2:63:b4:87:2c: e6:3c:6a:64:f2:a7:b4:30:bc:d5:c4:c5:0f:25:4b: 8f:67:d8:a5:4c:cc:e9:67:1c:7f:7c:94:61:a2:fd: fb:cf:5d:01:86:69:94:cf:7c:de:91:6b:40:46:d8: 68:01:fb:42:b2:0a:12:25:f6:83:3b:c5:e7:7b:32: 42:d2:9c:8f:5f:8a:d1:ba:80:89:0a:83:da:ee:80: 72:ba:2c:42:90:4e:c7:8b:05:14:c2:6c:e4:8f:eb: 4b:ee:96:a5:c7:4f:b5:50:6e:92:af:35:1e:9b:40: 06:7a:d8:31:e7:be:ac:5c:2d:a2:7a:25:6a:79:33: e2:3f:93:00:2e:43:eb:01:8f:49:59:fb:59:8a:6f: 52:31:a6:1b:38:b3:e9:28:79:ad:e6:f5:cf:38:55: 9c:94:d6:89:79:93:be:2a:9a:e0:1b:66:f2:02:46: a6:41:f7:da:51:d7:8d:52:78:3b:d1:18:f2:cc:18: 77:2e:00:17:91:f7:68:6a:07:83:73:bc:0b:b6:04: 78:b3:a0:60:c4:8a:bf:66:71:00:60:d7:8e:49:de: e5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3C:FF:9F:71:51:F5:25:33:A0:E0:D1:BA:55:31:3C:7C:14:F9:B0 X509v3 Authority Key Identifier: keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:51:55:ed:9f:f6:49:27:2b:f5:72:e3:bb:d5:32:89:aa:70: 1a:09:d3:bd:44:d1:5d:47:4e:fb:8a:d6:34:7d:82:1b:d7:e9: 6d:e2:ce:01:6f:43:51:47:ff:af:15:29:87:a8:f6:a4:48:ba: 4e:7f:bd:99:1d:6d:5e:40:fb:54:5a:cc:47:62:e3:cd:e7:b9: 11:9c:fa:e8:1e:83:97:1f:c5:55:f6:ee:57:46:8c:42:8f:a2: 10:36:bc:00:52:24:96:b1:4f:87:63:06:85:84:3c:e9:4e:17: 17:a3:5e:d9:cb:3c:52:38:cf:df:fb:1d:19:c0:00:3d:52:a7: 00:51:08:f8:ab:3f:b9:37:dc:ee:a2:53:ee:f0:dd:18:8e:43: cb:c0:90:89:41:c1:7c:e1:df:e4:35:3a:92:fb:37:12:1a:44: 50:93:b3:b9:49:ba:0f:84:63:cc:97:54:2d:a4:db:f3:51:ba: dc:4a:7a:bd:5d:cf:e7:39:ef:f4:11:eb:5c:06:76:04:58:4d: 1f:e6:35:a8:a3:11:9b:cf:3e:d8:82:e1:ec:53:81:ce:7c:83: ce:62:02:16:b1:bd:3e:ed:2b:af:3f:73:c9:31:31:89:17:3c: 77:94:02:a3:93:24:55:37:0d:c8:aa:e5:6d:dd:51:33:a9:33: c0:91:70:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s54jaEIj5//f5tBTHenOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NTdhOWJiMjk3ZjBiM2M0NDRhYjBhZjY3M2E1Mjc1MGU5 NzliNGUwHhcNMjUxMjE5MTMwMTM5WhcNMjUxMjIwMTMwMTM5WjAzMTEwLwYDVQQD Eyg2ODNjZmY5ZjcxNTFmNTI1MzNhMGUwZDFiYTU1MzEzYzdjMTRmOWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt3mOUfwo5G1hEGSQraY1v47Sidc rD/WuQXegNzfzXIqlbHcZLDt0mO0hyzmPGpk8qe0MLzVxMUPJUuPZ9ilTMzpZxx/ fJRhov37z10BhmmUz3zekWtARthoAftCsgoSJfaDO8XnezJC0pyPX4rRuoCJCoPa 7oByuixCkE7HiwUUwmzkj+tL7palx0+1UG6SrzUem0AGetgx576sXC2ieiVqeTPi P5MALkPrAY9JWftZim9SMaYbOLPpKHmt5vXPOFWclNaJeZO+KprgG2byAkamQffa UdeNUng70RjyzBh3LgAXkfdoageDc7wLtgR4s6BgxIq/ZnEAYNeOSd7l+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGg8/59xUfUlM6Dg0bpVMTx8FPmwMB8GA1UdIwQY MBaAFGhXqbspfws8REqwr2c6UnUOl5tOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUZlcHV5bF9DenhFU3JDdlp6cFNkUTZYbTA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85ZDBhMTUtZDU0Ni00OTcwLTlhODEt ODU5NmMyYWY5ZGNjLzEvYUZlcHV5bF9DenhFU3JDdlp6cFNkUTZYbTA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85ZDBhMTUtZDU0Ni00OTcwLTlhODEtODU5NmMyYWY5ZGNj LzEvYUZlcHV5bF9DenhFU3JDdlp6cFNkUTZYbTA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVFV7Z/2 SScr9XLju9UyiapwGgnTvUTRXUdO+4rWNH2CG9fpbeLOAW9DUUf/rxUph6j2pEi6 Tn+9mR1tXkD7VFrMR2Ljzee5EZz66B6Dlx/FVfbuV0aMQo+iEDa8AFIklrFPh2MG hYQ86U4XF6Ne2cs8UjjP3/sdGcAAPVKnAFEI+Ks/uTfc7qJT7vDdGI5Dy8CQiUHB fOHf5DU6kvs3EhpEUJOzuUm6D4RjzJdULaTb81G63Ep6vV3P5znv9BHrXAZ2BFhN H+Y1qKMRm88+2ILh7FOBznyDzmICFrG9Pu0rrz9zyTExiRc8d5QCo5MkVTcNyKrl bd1RM6kzwJFwNw== -----END CERTIFICATE-----Generated at Fri Dec 19 17:56:57 2025 by rpki-client