This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft File: DnSXlvuOtxaowjxHZJ0jvz0-apg.mft (raw, json) Hash identifier: h9qUkWt+VRVn/IhaTCFfWakuzKQGn3obD+BIngE+rDk= Subject key identifier: BE:5E:BB:C8:4F:FA:65:6A:05:3C:0F:2A:B4:D5:B2:1F:43:E7:A7:26 Authority key identifier: 0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98 Certificate issuer: /CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98 Certificate serial: 019B42EEDBBEABEA39CC6CBDC47BB5186CFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft Manifest number: 0352 Signing time: Sun 21 Dec 2025 22:01:48 +0000 Manifest this update: Sun 21 Dec 2025 22:01:48 +0000 Manifest next update: Mon 22 Dec 2025 22:01:48 +0000 Files and hashes: 1: DnSXlvuOtxaowjxHZJ0jvz0-apg.crl (hash: V1PkqsunLOpIz5RMEjPJnRVKZZQrubTCNcSHwLxGQW4=) 2: KVIjbEYwlYHNE7SjeBSZ9snwsuM.roa (hash: jHpTUbyUDvIBB9d7GvdlvIiOW08/ogM82drw/TrRWfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:db:be:ab:ea:39:cc:6c:bd:c4:7b:b5:18:6c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98 Validity Not Before: Dec 21 22:01:48 2025 GMT Not After : Dec 22 22:01:48 2025 GMT Subject: CN=be5ebbc84ffa656a053c0f2ab4d5b21f43e7a726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:ce:4f:8c:23:1a:f4:35:06:0e:3c:f8:f5: 22:0c:c2:5d:e1:50:6f:20:8c:fd:f7:04:e9:e3:e9: 8a:aa:cc:ad:47:50:cd:79:09:6b:cd:7f:ed:49:a5: 81:7f:d0:d9:2e:6d:b4:6d:60:36:77:39:71:ce:ef: c4:ac:88:a3:b0:8c:a2:20:82:00:03:bc:86:4a:19: c2:47:13:61:87:90:18:ae:30:d9:67:7f:e2:31:12: f3:07:75:fe:93:2b:e6:ef:8f:da:f1:28:1e:09:df: 5f:41:ad:1a:e5:ed:6b:bc:d9:16:3d:c4:65:6d:bb: a5:b7:87:8a:ca:09:62:44:55:e3:56:40:fc:bf:fc: d5:72:11:19:8b:ad:f9:30:3d:a7:a6:18:4b:36:72: 3d:77:9e:c0:f5:bd:8c:ff:0c:ab:44:5c:0f:cc:9a: 7f:02:04:68:4f:a4:43:08:c9:13:cf:3e:2b:c8:7a: fa:82:ac:93:f1:86:e3:93:f1:49:8e:c7:28:6c:d5: 6e:75:ee:50:78:93:69:1e:c9:2c:bb:9c:14:e9:57: 36:66:9c:53:72:17:83:74:72:7a:41:ec:6a:14:38: 46:84:ac:96:33:2d:f1:f7:09:17:12:06:ca:06:72: 1f:5c:5f:39:66:48:a6:0e:c2:c0:20:1c:cb:b2:2d: 98:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5E:BB:C8:4F:FA:65:6A:05:3C:0F:2A:B4:D5:B2:1F:43:E7:A7:26 X509v3 Authority Key Identifier: keyid:0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d5:e5:1c:05:75:4e:2d:8f:d5:cc:b3:26:ae:ef:e2:72:fb: 92:53:79:d7:dd:a0:69:4f:1f:d0:93:b9:db:80:61:f5:33:f6: 0b:a7:5d:ea:62:21:94:f5:a6:dd:3d:51:5d:d7:f8:f6:86:31: 61:a5:93:e4:73:ab:bc:d1:ea:d9:c1:49:23:af:7e:bb:98:40: 39:f0:a9:fb:8c:82:6a:58:d2:51:95:8b:4a:77:a6:c7:55:eb: f9:9c:03:75:82:eb:ba:43:2f:37:47:15:bb:b5:26:ae:ea:4a: d5:f6:07:61:ba:f9:ba:ae:c5:7a:22:25:ef:3c:8b:94:c0:3d: c1:5d:b6:be:1c:7f:a1:f0:b4:9f:6d:e2:12:03:7d:6a:65:25: 1f:98:60:2a:87:bf:3e:dd:6e:fa:dd:56:e4:8a:74:ca:01:ff: 50:82:46:e6:53:9a:b5:c1:fb:07:fe:3c:71:dd:3e:b2:ae:b3: a8:0d:c6:0b:89:a9:61:00:ce:8a:cc:6d:57:82:d7:2e:fe:31: 95:9c:1c:cf:64:fb:4a:34:7c:de:e3:77:0d:5e:e5:e7:ce:56: 8e:fa:37:f1:7a:e5:68:22:27:7c:c3:ad:9f:ce:56:e8:c7:3a: 12:89:eb:52:50:0b:5a:78:a5:07:f0:8d:39:56:49:33:4c:75: 50:09:da:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7tu+q+o5zGy9xHu1GGz/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzQ5Nzk2ZmI4ZWI3MTZhOGMyM2M0NzY0OWQyM2JmM2Qz ZTZhOTgwHhcNMjUxMjIxMjIwMTQ4WhcNMjUxMjIyMjIwMTQ4WjAzMTEwLwYDVQQD EyhiZTVlYmJjODRmZmE2NTZhMDUzYzBmMmFiNGQ1YjIxZjQzZTdhNzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArszOT4wjGvQ1Bg48+PUiDMJd4VBv IIz99wTp4+mKqsytR1DNeQlrzX/tSaWBf9DZLm20bWA2dzlxzu/ErIijsIyiIIIA A7yGShnCRxNhh5AYrjDZZ3/iMRLzB3X+kyvm74/a8SgeCd9fQa0a5e1rvNkWPcRl bbult4eKygliRFXjVkD8v/zVchEZi635MD2nphhLNnI9d57A9b2M/wyrRFwPzJp/ AgRoT6RDCMkTzz4ryHr6gqyT8Ybjk/FJjscobNVude5QeJNpHsksu5wU6Vc2ZpxT cheDdHJ6QexqFDhGhKyWMy3x9wkXEgbKBnIfXF85ZkimDsLAIBzLsi2YDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5eu8hP+mVqBTwPKrTVsh9D56cmMB8GA1UdIwQY MBaAFA50l5b7jrcWqMI8R2SdI789PmqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xNzIyNmItMzJiYS00OGQxLWI3ZTIt ZGY4YjJhYTZiYmU2LzEvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8xNzIyNmItMzJiYS00OGQxLWI3ZTItZGY4YjJhYTZiYmU2 LzEvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9XlHAV1 Ti2P1cyzJq7v4nL7klN5192gaU8f0JO524Bh9TP2C6dd6mIhlPWm3T1RXdf49oYx YaWT5HOrvNHq2cFJI69+u5hAOfCp+4yCaljSUZWLSnemx1Xr+ZwDdYLrukMvN0cV u7UmrupK1fYHYbr5uq7FeiIl7zyLlMA9wV22vhx/ofC0n23iEgN9amUlH5hgKoe/ Pt1u+t1W5Ip0ygH/UIJG5lOatcH7B/48cd0+sq6zqA3GC4mpYQDOisxtV4LXLv4x lZwcz2T7SjR83uN3DV7l585Wjvo38XrlaCInfMOtn85W6Mc6EonrUlALWnilB/CN OVZJM0x1UAnaLg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:24:07 2025 by rpki-client