This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json) Hash identifier: icnJuiPntNXAiz1cKkz3HyZSRAKsHtpvQT1sm+32tIY= Subject key identifier: 45:37:87:58:5A:1A:0D:B9:09:A1:D3:6E:CF:D9:FB:A1:66:DF:C8:58 Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc Certificate serial: 019AF31BD82D6D1F0B693A13D192A2463D55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft Manifest number: 0445 Signing time: Sat 06 Dec 2025 10:01:19 +0000 Manifest this update: Sat 06 Dec 2025 10:01:19 +0000 Manifest next update: Sun 07 Dec 2025 10:01:19 +0000 Files and hashes: 1: 9EiTee9k8nFjET11hPatStF9nkM.roa (hash: rKaveA0rfCcy5/zhxw6q4cAzgO9tcO/IcjE7cyeyoGI=) 2: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: JQumNX6q1NEDPbl6q4xeNsALo28oJ9MJuwbnafBrfjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d8:2d:6d:1f:0b:69:3a:13:d1:92:a2:46:3d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc Validity Not Before: Dec 6 10:01:19 2025 GMT Not After : Dec 7 10:01:19 2025 GMT Subject: CN=453787585a1a0db909a1d36ecfd9fba166dfc858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c4:c3:3f:b3:7c:7c:74:05:cf:c0:3b:3f:67: ee:82:4a:c1:98:35:87:4c:7c:ca:dd:3c:b3:7e:7e: d8:8a:be:2a:67:2b:90:ba:07:7a:ff:1d:51:08:87: 40:91:16:21:46:56:37:44:3e:ed:9d:b8:e5:b6:37: 32:c1:22:1b:85:74:6d:76:e7:ff:d1:95:93:45:be: 4e:30:1c:54:1e:d2:15:e9:fb:76:cf:5f:ed:88:6d: 81:f5:be:d2:a2:68:6e:c3:4e:4c:26:85:25:5b:d8: 57:e2:84:f4:a1:9a:34:7d:f6:7f:68:f6:7f:bd:04: 27:b3:be:fe:ff:9b:69:2e:49:fe:9f:42:76:e5:0f: 15:88:b4:39:5e:d1:06:9b:2a:b9:25:15:cd:d0:72: 33:a7:6c:16:31:aa:f6:f8:50:1d:0a:a4:63:cd:6d: 41:a2:67:3e:5a:c2:aa:e8:e5:8d:5b:ef:5b:71:52: 8c:13:ed:98:6c:3d:69:b6:2b:82:91:17:9d:83:fc: 1e:19:a1:e3:3e:ec:36:4c:6f:f6:dc:87:3e:2e:43: 2e:83:1e:20:7d:2a:12:97:21:1b:4c:a7:ea:06:0e: 47:5d:29:9c:4a:c7:b1:11:34:6e:80:2d:dd:79:f9: e9:cf:d5:26:92:3a:4c:7e:50:bc:15:6b:b6:24:cc: 1a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:37:87:58:5A:1A:0D:B9:09:A1:D3:6E:CF:D9:FB:A1:66:DF:C8:58 X509v3 Authority Key Identifier: keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:20:4d:a0:b1:f8:76:e3:e5:13:6e:71:c9:41:83:2e:87:80: 83:30:64:9c:0d:80:c4:15:f6:bd:35:19:32:1d:d3:14:cc:6a: d8:c9:a5:da:31:1c:78:93:8f:b6:b4:6a:41:cc:d7:18:01:cb: 90:1f:0b:0e:77:8b:d0:22:6a:60:be:06:33:9f:06:fb:86:f1: 53:fb:59:e0:39:11:1e:d2:af:1b:9b:54:09:97:da:bf:ac:51: 95:7b:ab:72:8b:54:28:d1:ae:03:43:54:1b:70:f2:ed:ff:27: 40:28:c5:41:17:5b:2e:f8:9c:fe:2b:b2:72:6e:05:67:02:a8: 10:bc:8c:9e:5a:8e:54:bb:35:03:24:8f:34:2f:a3:f9:ff:64: 32:23:c8:57:65:4d:ad:c0:fc:93:cf:ef:b8:ac:6b:53:e2:e3: 6c:22:b4:67:b6:4c:93:a7:43:6e:b1:4c:d2:2e:68:77:6f:3a: b6:b2:c2:d5:58:b5:c5:7d:e9:c7:6b:eb:0e:d4:18:16:87:d9: 50:1f:90:30:b2:6a:08:ae:8c:6f:04:3b:6c:34:89:97:4b:6b: 8b:e2:37:8c:5a:11:82:92:8e:f4:cf:0e:85:87:d5:16:4a:46: d9:56:44:cd:64:da:f9:97:6d:5e:42:6d:7c:e7:68:20:b1:1f: ff:70:db:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9gtbR8LaToT0ZKiRj1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZDZhOGE2MzlmODhhYWYxZjQzNmQ2YTIwYjQxNzdiMzhk MzkwZmMwHhcNMjUxMjA2MTAwMTE5WhcNMjUxMjA3MTAwMTE5WjAzMTEwLwYDVQQD Eyg0NTM3ODc1ODVhMWEwZGI5MDlhMWQzNmVjZmQ5ZmJhMTY2ZGZjODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8TDP7N8fHQFz8A7P2fugkrBmDWH THzK3Tyzfn7Yir4qZyuQugd6/x1RCIdAkRYhRlY3RD7tnbjltjcywSIbhXRtduf/ 0ZWTRb5OMBxUHtIV6ft2z1/tiG2B9b7Somhuw05MJoUlW9hX4oT0oZo0ffZ/aPZ/ vQQns77+/5tpLkn+n0J25Q8ViLQ5XtEGmyq5JRXN0HIzp2wWMar2+FAdCqRjzW1B omc+WsKq6OWNW+9bcVKME+2YbD1ptiuCkRedg/weGaHjPuw2TG/23Ic+LkMugx4g fSoSlyEbTKfqBg5HXSmcSsexETRugC3defnpz9UmkjpMflC8FWu2JMwaqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEU3h1haGg25CaHTbs/Z+6Fm38hYMB8GA1UdIwQY MBaAFAPWqKY5+IqvH0NtaiC0F3s405D8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQt YzIwZGU1NDNjMGRmLzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQtYzIwZGU1NDNjMGRm LzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyBNoLH4 duPlE25xyUGDLoeAgzBknA2AxBX2vTUZMh3TFMxq2Mml2jEceJOPtrRqQczXGAHL kB8LDneL0CJqYL4GM58G+4bxU/tZ4DkRHtKvG5tUCZfav6xRlXurcotUKNGuA0NU G3Dy7f8nQCjFQRdbLvic/iuycm4FZwKoELyMnlqOVLs1AySPNC+j+f9kMiPIV2VN rcD8k8/vuKxrU+LjbCK0Z7ZMk6dDbrFM0i5od286trLC1Vi1xX3px2vrDtQYFofZ UB+QMLJqCK6MbwQ7bDSJl0tri+I3jFoRgpKO9M8OhYfVFkpG2VZEzWTa+ZdtXkJt fOdoILEf/3DbfA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:44 2025 by rpki-client