This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft File: pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft (raw, json) Hash identifier: 8uQ7jUd6k3+NpVldVOEu0Xo1EPJ6tfb+1GOMB7M/djo= Subject key identifier: 88:56:A5:AC:DD:3E:2B:A1:BC:85:7B:A5:CF:43:4A:81:38:11:4C:A9 Authority key identifier: A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66 Certificate issuer: /CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866 Certificate serial: 019B3CECA638B8C58443824D5D242A6998A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft Manifest number: 0B54 Signing time: Sat 20 Dec 2025 18:01:40 +0000 Manifest this update: Sat 20 Dec 2025 18:01:40 +0000 Manifest next update: Sun 21 Dec 2025 18:01:40 +0000 Files and hashes: 1: L_XmzwrYuu-3rRY_iMRM0yQHIg4.roa (hash: RmMXdLfBhblx+m1KktkkN/nQ0YOW2Tp0s4LZY86DblA=) 2: pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl (hash: ODZ5TDyijsJIyogJlIG4NExnWhFRht4b48pKO7DfDeI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:a6:38:b8:c5:84:43:82:4d:5d:24:2a:69:98:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866 Validity Not Before: Dec 20 18:01:40 2025 GMT Not After : Dec 21 18:01:40 2025 GMT Subject: CN=8856a5acdd3e2ba1bc857ba5cf434a8138114ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d7:81:19:9c:f0:f5:17:c1:ee:eb:11:9a:af: e4:66:77:23:94:e1:0d:43:15:d0:1a:95:c3:cf:e4: 22:bc:c6:fe:62:2b:09:e8:4d:e9:bc:77:95:d1:d3: 4a:61:48:9e:c8:8f:e5:91:4f:b2:d6:f9:81:30:72: df:61:ae:a7:31:7f:e9:5e:ef:ab:e7:85:d3:10:6b: f3:46:2c:76:50:24:26:5b:28:ab:58:45:f2:04:4c: 5d:6b:e9:17:8c:5f:c4:ce:f7:63:62:4c:dc:9d:78: 83:50:97:86:d7:c0:7c:6d:37:4c:50:7d:f4:aa:92: 94:28:5b:d1:7b:f7:05:77:f2:0d:1b:1d:2e:0f:df: 8b:45:20:56:54:f3:95:11:87:9d:e7:85:32:a4:f1: 37:45:af:af:57:b0:c0:4c:e9:55:90:e7:72:92:ca: 76:a6:43:8c:dc:86:e5:74:19:e6:25:6f:4b:69:39: 42:78:66:ea:6e:bf:50:65:f2:e6:41:4d:22:00:15: af:fe:b4:33:d6:97:7e:97:83:a5:5f:21:d2:96:6e: 12:c5:22:4e:b8:21:2e:e9:7c:00:36:10:4a:ef:42: d9:59:64:4b:2e:f3:d1:76:a3:3e:91:b5:68:b6:20: 9a:66:5c:da:e9:12:58:a4:ce:d3:0c:03:a3:c9:ac: 26:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:56:A5:AC:DD:3E:2B:A1:BC:85:7B:A5:CF:43:4A:81:38:11:4C:A9 X509v3 Authority Key Identifier: keyid:A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a1:1a:85:83:7b:bc:b2:da:64:f6:4f:02:2a:1b:af:26:65: 71:2b:59:4d:4a:a8:88:bc:4f:ef:b3:c3:cb:80:fb:b8:2f:ba: 97:bb:0f:a6:35:37:89:07:fd:b4:0e:73:63:e1:d2:f6:9c:3f: c5:7d:a7:4d:f3:28:87:7f:ff:3e:39:8b:9c:df:6f:d0:f3:92: 05:85:85:b6:ee:24:66:12:0e:93:08:09:ec:55:92:f1:e4:9c: ef:54:61:79:db:8d:34:5b:af:e1:8f:66:6d:c5:9d:ca:cb:17: 46:bb:6d:48:0a:26:10:be:92:b4:23:22:13:31:dd:57:34:df: 04:32:9b:41:06:ac:47:d1:c5:f9:d0:d6:45:34:a4:ff:eb:92: ec:56:8c:3e:f5:71:c1:99:23:cc:54:ad:f6:da:a0:85:aa:81: ff:c2:95:7b:2c:f1:63:70:47:8c:7b:44:a2:63:c2:11:a1:f0: 9a:ba:0f:bd:73:5c:9f:e4:ae:25:52:55:3c:5d:cd:a8:d8:a9: 2c:6a:b1:ad:9c:4e:6b:02:b4:60:75:e4:e8:ca:6b:00:50:74: 5c:65:e1:21:4b:ec:04:c1:52:14:db:d7:72:fa:19:9b:cf:43: 02:c5:78:a0:c8:ec:66:18:3f:19:13:9f:1b:a7:36:75:89:8b: 12:b8:c0:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87KY4uMWEQ4JNXSQqaZiiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWZjNTQzNWZjYmJlMzQ4ZDJiNTYwMTZhN2JjN2JjYWNm MWI4NjYwHhcNMjUxMjIwMTgwMTQwWhcNMjUxMjIxMTgwMTQwWjAzMTEwLwYDVQQD Eyg4ODU2YTVhY2RkM2UyYmExYmM4NTdiYTVjZjQzNGE4MTM4MTE0Y2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdeBGZzw9RfB7usRmq/kZncjlOEN QxXQGpXDz+QivMb+YisJ6E3pvHeV0dNKYUieyI/lkU+y1vmBMHLfYa6nMX/pXu+r 54XTEGvzRix2UCQmWyirWEXyBExda+kXjF/EzvdjYkzcnXiDUJeG18B8bTdMUH30 qpKUKFvRe/cFd/INGx0uD9+LRSBWVPOVEYed54UypPE3Ra+vV7DATOlVkOdyksp2 pkOM3IbldBnmJW9LaTlCeGbqbr9QZfLmQU0iABWv/rQz1pd+l4OlXyHSlm4SxSJO uCEu6XwANhBK70LZWWRLLvPRdqM+kbVotiCaZlza6RJYpM7TDAOjyawmIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhWpazdPiuhvIV7pc9DSoE4EUypMB8GA1UdIwQY MBaAFKWvxUNfy740jStWAWp7x7ys8bhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFfRlExX0x2alNOSzFZQmFudkh2S3p4dUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80MTlhZjAtY2JkNi00MjMzLWI1MmYt ZDc0ODRiZjljYTJiLzEvcGFfRlExX0x2alNOSzFZQmFudkh2S3p4dUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC80MTlhZjAtY2JkNi00MjMzLWI1MmYtZDc0ODRiZjljYTJi LzEvcGFfRlExX0x2alNOSzFZQmFudkh2S3p4dUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6EahYN7 vLLaZPZPAiobryZlcStZTUqoiLxP77PDy4D7uC+6l7sPpjU3iQf9tA5zY+HS9pw/ xX2nTfMoh3//PjmLnN9v0POSBYWFtu4kZhIOkwgJ7FWS8eSc71RheduNNFuv4Y9m bcWdyssXRrttSAomEL6StCMiEzHdVzTfBDKbQQasR9HF+dDWRTSk/+uS7FaMPvVx wZkjzFSt9tqghaqB/8KVeyzxY3BHjHtEomPCEaHwmroPvXNcn+SuJVJVPF3NqNip LGqxrZxOawK0YHXk6MprAFB0XGXhIUvsBMFSFNvXcvoZm89DAsV4oMjsZhg/GROf G6c2dYmLErjATw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:43:31 2025 by rpki-client