This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json) Hash identifier: rlkZ5Dwkt2wyTgYPKDHg7PyQuYbn1wV/fOVi+jxP9x0= Subject key identifier: AB:02:0A:32:20:D1:FB:5A:07:A5:7E:C0:DE:E0:16:4D:62:53:80:DF Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2 Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2 Certificate serial: 019B348D430A7CF8DC7C4467E14BDB0F263C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft Manifest number: 0B98 Signing time: Fri 19 Dec 2025 03:00:31 +0000 Manifest this update: Fri 19 Dec 2025 03:00:31 +0000 Manifest next update: Sat 20 Dec 2025 03:00:31 +0000 Files and hashes: 1: 1-Gv3E907MTfXuMPmsscWz1qmn78.roa (hash: uBQT6rIDTqX3BYBvMNRkEwe9KRdLtsmbFCKT0keUzwo=) 2: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: 8AicJhGzvfmSMdpk+85UCie34JLHZfSrGJ/QuMtOQwQ=) 3: XNJw0i5YROHsLdGqQV-sQNcutQk.roa (hash: jP7HL40L4UifhwI3DQuFuVlNNqWLOXwjBtyAaPoZl9M=) 4: hHiGsmfrhsgON9dzVYozxtuCCDg.roa (hash: z4ZF0Gqq/BQZKQszFHzmotHi4BZqgEpR8VtVskzydjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:8d:43:0a:7c:f8:dc:7c:44:67:e1:4b:db:0f:26:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2 Validity Not Before: Dec 19 03:00:31 2025 GMT Not After : Dec 20 03:00:31 2025 GMT Subject: CN=ab020a3220d1fb5a07a57ec0dee0164d625380df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:84:7e:62:ec:2e:44:ca:73:5b:b1:71:7b: 12:11:b7:99:74:15:62:89:5a:a9:84:ab:6e:f7:62: fb:52:51:98:fe:01:0d:49:7a:02:b1:8d:dd:e2:6c: fb:3f:ba:04:e1:9e:69:82:23:41:00:1d:4f:47:41: 25:5e:12:fc:ba:2d:83:a1:a4:79:13:a0:b1:8a:71: 2e:97:97:1d:3f:4c:b7:33:30:88:fa:dd:7e:f9:92: 70:e7:0f:43:63:84:ee:9f:61:bf:75:bd:56:a4:8b: 96:19:18:3b:25:3b:c2:a0:ba:0f:10:7c:69:85:cd: d1:2c:68:c8:02:ba:43:77:82:47:46:c7:16:a3:04: fa:b6:d6:31:c0:8d:ff:d2:b1:67:09:2c:51:d8:a3: ef:e4:3e:8a:54:17:76:00:99:3c:8e:23:c2:52:07: ec:48:c4:be:94:a0:26:fe:20:3a:e8:fa:64:03:16: bd:65:d8:f9:d1:2d:49:0b:7c:ad:27:90:d0:b6:a3: 1a:d7:55:09:6b:c4:a8:8c:6b:62:65:77:e2:9e:2d: 9d:c8:ee:30:30:41:99:9b:75:aa:1b:30:57:aa:f9: 55:39:f8:e8:0c:30:38:0b:ad:b6:2b:1e:19:c2:9f: 48:28:51:be:9b:3c:bf:ae:98:7f:7f:6b:08:cd:e8: e2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:02:0A:32:20:D1:FB:5A:07:A5:7E:C0:DE:E0:16:4D:62:53:80:DF X509v3 Authority Key Identifier: keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:52:ce:f9:d6:fa:fe:65:05:72:e7:b7:89:87:0d:9b:9e:d4: 85:83:77:c7:68:8b:2a:48:0b:19:4a:52:2f:8d:c4:f5:b9:fd: a4:ed:5f:2b:5c:24:15:f4:6f:df:51:fa:95:e0:f2:53:d1:32: fc:7c:5a:bd:e6:d3:36:8e:dd:09:dd:b8:34:15:84:48:16:3c: 26:e8:49:19:45:fd:f7:81:2a:97:58:2b:45:1c:2b:84:8c:41: 4e:8e:0a:d5:4f:4b:33:98:1e:ff:38:ad:1b:95:f2:c9:59:34: 1f:40:6c:2a:94:4d:0f:15:e4:15:6c:d0:49:2d:25:3a:bb:cd: 46:b1:94:c7:ea:76:02:56:df:14:7a:2b:a8:70:f8:3c:23:3d: e6:e5:3f:b5:04:0a:15:9e:bb:2f:67:b6:6f:3a:70:5b:86:81: b2:4a:84:31:0e:2c:ce:2e:d1:ed:86:40:1a:3f:36:a6:7f:22: 1f:04:1e:55:89:07:fa:21:e0:f3:a4:ca:16:6f:9b:ae:2d:67: 87:8d:4b:6f:c0:fa:8e:c7:a9:15:2f:2e:f8:1b:08:74:d0:21: c1:67:24:86:eb:e3:30:fc:81:ee:ac:e4:d3:f9:2d:3c:a9:6c: ab:de:17:5a:c8:70:63:71:29:9e:0a:4a:a4:bc:64:52:6b:f9: e0:e5:35:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0jUMKfPjcfERn4UvbDyY8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZDYwMmI5ZTFkYTJiNTY4ZGY1NDRiZGE1MGU0MTU3OTli YmIxZTIwHhcNMjUxMjE5MDMwMDMxWhcNMjUxMjIwMDMwMDMxWjAzMTEwLwYDVQQD EyhhYjAyMGEzMjIwZDFmYjVhMDdhNTdlYzBkZWUwMTY0ZDYyNTM4MGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ6EfmLsLkTKc1uxcXsSEbeZdBVi iVqphKtu92L7UlGY/gENSXoCsY3d4mz7P7oE4Z5pgiNBAB1PR0ElXhL8ui2DoaR5 E6CxinEul5cdP0y3MzCI+t1++ZJw5w9DY4Tun2G/db1WpIuWGRg7JTvCoLoPEHxp hc3RLGjIArpDd4JHRscWowT6ttYxwI3/0rFnCSxR2KPv5D6KVBd2AJk8jiPCUgfs SMS+lKAm/iA66PpkAxa9Zdj50S1JC3ytJ5DQtqMa11UJa8SojGtiZXfini2dyO4w MEGZm3WqGzBXqvlVOfjoDDA4C622Kx4Zwp9IKFG+mzy/rph/f2sIzejiOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsCCjIg0ftaB6V+wN7gFk1iU4DfMB8GA1UdIwQY MBaAFAPWArnh2itWjfVEvaUOQVeZu7HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEt ZmI5N2RkZDU0ODkxLzEvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEtZmI5N2RkZDU0ODkx LzEvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFLO+db6 /mUFcue3iYcNm57UhYN3x2iLKkgLGUpSL43E9bn9pO1fK1wkFfRv31H6leDyU9Ey /HxavebTNo7dCd24NBWESBY8JuhJGUX994Eql1grRRwrhIxBTo4K1U9LM5ge/zit G5XyyVk0H0BsKpRNDxXkFWzQSS0lOrvNRrGUx+p2AlbfFHorqHD4PCM95uU/tQQK FZ67L2e2bzpwW4aBskqEMQ4szi7R7YZAGj82pn8iHwQeVYkH+iHg86TKFm+bri1n h41Lb8D6jsepFS8u+BsIdNAhwWckhuvjMPyB7qzk0/ktPKlsq94XWshwY3EpngpK pLxkUmv54OU19Q== -----END CERTIFICATE-----Generated at Fri Dec 19 13:29:13 2025 by rpki-client