This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json) Hash identifier: gdfexU+ZHAN9ebgqwetp/LpkJMAtDX5lVDnSYu3RN8A= Subject key identifier: 15:7C:85:6B:AD:1F:BB:BB:D8:45:BC:E2:C9:91:E4:33:6C:7D:77:05 Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2 Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2 Certificate serial: 019AF2E4283B9A2E7EFADC13AA206F25446B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft Manifest number: 0B76 Signing time: Sat 06 Dec 2025 09:00:30 +0000 Manifest this update: Sat 06 Dec 2025 09:00:30 +0000 Manifest next update: Sun 07 Dec 2025 09:00:30 +0000 Files and hashes: 1: 1-Gv3E907MTfXuMPmsscWz1qmn78.roa (hash: uBQT6rIDTqX3BYBvMNRkEwe9KRdLtsmbFCKT0keUzwo=) 2: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: JJXBYfxUMzt6q/JqjXWGJRE+WiTzOy8+4K0Ze+Hu6gI=) 3: XNJw0i5YROHsLdGqQV-sQNcutQk.roa (hash: jP7HL40L4UifhwI3DQuFuVlNNqWLOXwjBtyAaPoZl9M=) 4: hHiGsmfrhsgON9dzVYozxtuCCDg.roa (hash: z4ZF0Gqq/BQZKQszFHzmotHi4BZqgEpR8VtVskzydjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:28:3b:9a:2e:7e:fa:dc:13:aa:20:6f:25:44:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2 Validity Not Before: Dec 6 09:00:30 2025 GMT Not After : Dec 7 09:00:30 2025 GMT Subject: CN=157c856bad1fbbbbd845bce2c991e4336c7d7705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:48:c2:ba:31:d7:0e:b2:37:e9:c4:04:b4:67: 38:cc:88:5b:4e:ee:f9:7d:9d:d9:d8:1e:cd:e5:04: 0d:ef:13:13:82:ae:43:41:62:ab:31:cd:c8:db:ad: 8e:85:cf:40:14:b2:0d:d8:a9:45:ea:da:35:8f:6b: 64:3a:d3:ac:87:e3:24:8b:30:c2:f7:0d:dd:ea:65: 1f:fa:c6:31:28:e9:8c:49:83:c0:f6:17:f9:3e:4e: d2:b1:1b:85:d5:05:62:db:d4:eb:12:f9:45:1d:5b: e1:88:52:c3:8f:93:9c:74:9f:51:67:c0:5f:58:01: 0f:29:14:d4:d4:74:34:ae:45:3d:6b:e0:3d:85:64: c8:c5:fa:b4:fc:db:3a:97:d8:3c:11:31:85:4a:c0: ed:73:4e:a9:ec:3b:fd:20:64:e6:12:b8:b0:91:50: 98:57:50:01:02:67:f4:14:87:a5:ae:df:20:ce:c9: 0e:00:e5:28:8f:d8:85:25:87:77:c0:35:b7:17:8a: 09:11:9e:d5:82:c2:cf:08:86:b4:e8:af:d4:82:48: 29:bd:d9:fb:d8:c9:97:0a:f3:3d:cb:0a:6b:aa:f2: 34:90:47:4e:e5:7a:21:87:4c:19:01:84:e8:c6:a9: 96:05:10:d9:4c:85:6e:c9:d7:77:2f:05:28:97:9c: 9c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7C:85:6B:AD:1F:BB:BB:D8:45:BC:E2:C9:91:E4:33:6C:7D:77:05 X509v3 Authority Key Identifier: keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:14:43:00:67:c4:ca:94:5c:0d:6a:72:90:72:d9:cc:3a:d3: 14:fb:54:a0:a5:8e:e6:3b:70:69:d0:9c:f1:c9:5b:89:da:a6: 9c:e3:90:bd:b6:64:fe:a8:21:52:6e:20:f7:8b:bf:2d:55:55: 60:52:6b:01:70:e1:8e:8c:f4:4f:e8:d6:4b:92:63:63:7e:e7: be:c5:14:ab:f8:6f:52:9f:4a:32:1a:48:92:da:bf:c6:29:ed: e3:26:d8:4f:0b:7b:33:83:6c:0c:de:70:4d:93:7e:0d:f6:90: ee:81:dd:f9:72:51:12:17:a2:d9:02:27:62:7a:ea:0b:b1:24: 93:0e:08:1b:b3:c3:f4:8b:80:ec:3e:c8:59:4a:72:40:d0:00: 4e:e0:a2:f2:db:0f:3c:0d:86:af:c5:af:c6:e8:a3:9a:db:c9: 1a:85:f0:18:67:c2:35:99:e3:f4:fc:77:78:8e:18:d8:f7:db: e8:58:b9:3a:3f:e0:6b:52:32:32:3a:cc:4d:4e:da:ab:0b:7a: e3:f2:49:ae:4c:fe:0c:8a:5a:88:65:dd:75:dc:83:6c:f2:b7: 0d:f9:04:02:d0:5a:0e:61:d4:7b:08:39:54:4f:29:68:e3:7e: 48:81:0c:f0:f0:ee:37:79:c4:70:5e:18:f7:5d:3b:a3:9a:90: 6a:65:e5:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5Cg7mi5++twTqiBvJURrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZDYwMmI5ZTFkYTJiNTY4ZGY1NDRiZGE1MGU0MTU3OTli YmIxZTIwHhcNMjUxMjA2MDkwMDMwWhcNMjUxMjA3MDkwMDMwWjAzMTEwLwYDVQQD EygxNTdjODU2YmFkMWZiYmJiZDg0NWJjZTJjOTkxZTQzMzZjN2Q3NzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkjCujHXDrI36cQEtGc4zIhbTu75 fZ3Z2B7N5QQN7xMTgq5DQWKrMc3I262Ohc9AFLIN2KlF6to1j2tkOtOsh+MkizDC 9w3d6mUf+sYxKOmMSYPA9hf5Pk7SsRuF1QVi29TrEvlFHVvhiFLDj5OcdJ9RZ8Bf WAEPKRTU1HQ0rkU9a+A9hWTIxfq0/Ns6l9g8ETGFSsDtc06p7Dv9IGTmEriwkVCY V1ABAmf0FIelrt8gzskOAOUoj9iFJYd3wDW3F4oJEZ7VgsLPCIa06K/Ugkgpvdn7 2MmXCvM9ywprqvI0kEdO5Xohh0wZAYToxqmWBRDZTIVuydd3LwUol5ycuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBV8hWutH7u72EW84smR5DNsfXcFMB8GA1UdIwQY MBaAFAPWArnh2itWjfVEvaUOQVeZu7HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEt ZmI5N2RkZDU0ODkxLzEvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEtZmI5N2RkZDU0ODkx LzEvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBRDAGfE ypRcDWpykHLZzDrTFPtUoKWO5jtwadCc8clbidqmnOOQvbZk/qghUm4g94u/LVVV YFJrAXDhjoz0T+jWS5JjY37nvsUUq/hvUp9KMhpIktq/xint4ybYTwt7M4NsDN5w TZN+DfaQ7oHd+XJREhei2QInYnrqC7Ekkw4IG7PD9IuA7D7IWUpyQNAATuCi8tsP PA2Gr8WvxuijmtvJGoXwGGfCNZnj9Px3eI4Y2Pfb6Fi5Oj/ga1IyMjrMTU7aqwt6 4/JJrkz+DIpaiGXdddyDbPK3DfkEAtBaDmHUewg5VE8paON+SIEM8PDuN3nEcF4Y 9107o5qQamXlow== -----END CERTIFICATE-----Generated at Sat Dec 6 15:53:16 2025 by rpki-client