This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json) Hash identifier: T8lUKm7nIqgqfeZNL/dBROlkud+/H9oOVMIHijruVQs= Subject key identifier: AC:BE:31:5A:7C:1D:F5:4F:8A:18:A3:4B:3A:EF:D7:77:C6:F9:0F:44 Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1 Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1 Certificate serial: 019B0E92E9623A15C47135426D7EF5F61E27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 18:01:07 +0000 Manifest this update: Thu 11 Dec 2025 18:01:07 +0000 Manifest next update: Fri 12 Dec 2025 18:01:07 +0000 Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: T0zEwVdrZeWCAjPf+tp8jclDGV1kVmv9TM4WP/lgnDY=) 2: qUUjm1H90-uL9euvKLjFEczkCzY.roa (hash: oUTa5+ocukOmAJZqVNEO6dDqsHnc1xufuifi9duph8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:e9:62:3a:15:c4:71:35:42:6d:7e:f5:f6:1e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1 Validity Not Before: Dec 11 18:01:07 2025 GMT Not After : Dec 12 18:01:07 2025 GMT Subject: CN=acbe315a7c1df54f8a18a34b3aefd777c6f90f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3a:1a:40:dd:c6:d1:2f:6e:91:18:8d:55:bc: b0:b1:b7:27:45:e0:86:81:59:9d:23:b8:5f:93:7f: 86:96:64:03:26:4e:9d:cd:68:8d:d0:62:99:91:2d: d9:cb:9e:eb:de:62:2b:70:a1:1c:48:20:3f:b3:4f: 14:5e:cd:4c:ec:2f:6b:93:3e:2e:0e:b7:c6:74:26: fb:7c:6c:d2:1f:b1:61:57:6f:2d:7b:d2:b2:ab:2d: fe:54:1c:c1:c5:22:e1:69:7c:d1:14:c7:8c:a2:a6: 06:e4:2d:16:5c:de:cc:16:81:b2:b5:28:88:3a:eb: 75:0b:6b:f0:bc:07:16:a3:88:48:02:d6:b8:d7:08: 4e:ad:18:e3:d5:88:9f:4c:e2:91:2d:50:3c:d1:ac: e8:f7:a5:3f:51:cd:95:91:0d:24:89:d3:90:2d:d5: 41:23:84:b7:94:e1:78:95:01:25:50:f7:f1:2c:de: 3e:9b:8a:d0:e4:97:3a:c1:f3:89:fc:c5:3c:ec:5d: 97:00:20:c2:52:b1:83:59:9a:33:77:92:06:a9:84: f3:37:ca:5f:92:55:dd:ce:06:f6:61:08:69:9f:2a: 74:48:ec:fa:f6:df:4e:1e:1f:a5:08:3b:78:d4:fd: e5:37:63:7a:8d:fa:ac:4b:be:a4:94:cc:b1:c8:be: d4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BE:31:5A:7C:1D:F5:4F:8A:18:A3:4B:3A:EF:D7:77:C6:F9:0F:44 X509v3 Authority Key Identifier: keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f8:41:9a:f2:cc:21:67:44:79:e7:01:ea:e9:5b:1a:6e:b0:70: 92:7a:d5:8c:ae:f4:41:09:68:80:52:c3:ad:b4:92:38:a5:69: f3:ef:ca:88:81:b0:39:a8:45:e4:77:6e:9d:ed:f5:90:f8:7e: 84:b6:f9:68:0f:10:5e:d1:68:79:01:ad:c9:11:8b:25:41:07: c7:bf:d6:8c:af:23:ca:6f:cf:33:31:8d:fb:f3:09:dd:f1:07: f8:cb:e0:3b:53:7e:a4:e9:c8:1b:6b:e0:ab:a3:09:db:1e:ba: 86:33:a6:35:67:de:40:a3:9f:85:e6:ec:22:40:37:a0:7f:4e: 7e:02:df:d4:03:26:7e:29:5c:a6:c1:f1:9a:a2:ef:4e:78:36: 3a:94:d8:5c:cb:80:a7:fa:b9:35:c7:3c:87:9f:ef:f5:25:81: f6:da:70:de:89:a7:c3:df:07:ad:66:9e:c2:83:ba:95:1f:67: 1a:8a:e9:c7:23:91:1e:d9:28:5d:97:05:38:e5:ab:04:ec:92: 0d:71:79:52:0b:d1:31:59:ed:68:6a:17:8d:b7:11:f2:31:ff: 3a:f4:ba:21:5d:80:19:6f:63:d7:90:c6:67:78:7a:96:7f:34: 07:bd:10:08:63:e8:b0:91:ee:4f:cd:3b:e4:1b:03:cd:e5:ef: 02:85:89:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkuliOhXEcTVCbX719h4nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMGE2NzE4ZDUzOTE1NWMyNzMwMDQwMWYyYzQ2Njc1MTNl ZWM1YjEwHhcNMjUxMjExMTgwMTA3WhcNMjUxMjEyMTgwMTA3WjAzMTEwLwYDVQQD EyhhY2JlMzE1YTdjMWRmNTRmOGExOGEzNGIzYWVmZDc3N2M2ZjkwZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DoaQN3G0S9ukRiNVbywsbcnReCG gVmdI7hfk3+GlmQDJk6dzWiN0GKZkS3Zy57r3mIrcKEcSCA/s08UXs1M7C9rkz4u DrfGdCb7fGzSH7FhV28te9Kyqy3+VBzBxSLhaXzRFMeMoqYG5C0WXN7MFoGytSiI Out1C2vwvAcWo4hIAta41whOrRjj1YifTOKRLVA80azo96U/Uc2VkQ0kidOQLdVB I4S3lOF4lQElUPfxLN4+m4rQ5Jc6wfOJ/MU87F2XACDCUrGDWZozd5IGqYTzN8pf klXdzgb2YQhpnyp0SOz69t9OHh+lCDt41P3lN2N6jfqsS76klMyxyL7UCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKy+MVp8HfVPihijSzrv13fG+Q9EMB8GA1UdIwQY MBaAFAAKZxjVORVcJzAEAfLEZnUT7sWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMt OWRkODU2MWNhZWRlLzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMtOWRkODU2MWNhZWRl LzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA+EGa8swh Z0R55wHq6VsabrBwknrVjK70QQlogFLDrbSSOKVp8+/KiIGwOahF5Hdune31kPh+ hLb5aA8QXtFoeQGtyRGLJUEHx7/WjK8jym/PMzGN+/MJ3fEH+MvgO1N+pOnIG2vg q6MJ2x66hjOmNWfeQKOfhebsIkA3oH9OfgLf1AMmfilcpsHxmqLvTng2OpTYXMuA p/q5Ncc8h5/v9SWB9tpw3omnw98HrWaewoO6lR9nGorpxyORHtkoXZcFOOWrBOyS DXF5UgvRMVntaGoXjbcR8jH/OvS6IV2AGW9j15DGZ3h6ln80B70QCGPosJHuT807 5BsDzeXvAoWJeQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:08:21 2025 by rpki-client