This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft File: A83mT0Foo_OZt3SU2Urqdyksm88.mft (raw, json) Hash identifier: XnFAPEXDfo8odovMeA8Bio+C5O0E5eg3jiuZCneHEag= Subject key identifier: 10:79:F9:7A:59:35:9A:B7:10:CC:D3:94:7D:CE:C4:EF:CD:AA:DA:A0 Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF Certificate issuer: /CN=03cde64f4168a3f399b77494d94aea77292c9bcf Certificate serial: 019AF2403382CB2AB75C55430BB0565B39EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft Manifest number: 12C7 Signing time: Sat 06 Dec 2025 06:01:24 +0000 Manifest this update: Sat 06 Dec 2025 06:01:24 +0000 Manifest next update: Sun 07 Dec 2025 06:01:24 +0000 Files and hashes: 1: A83mT0Foo_OZt3SU2Urqdyksm88.crl (hash: Y89Bbu+l3hubVDyPttOapWo3CYHTCXhkeS3vOdXqOtg=) 2: e11Y1BzeTv89ORv01AAdP5K30II.roa (hash: N7EMAlCoADAa7ySQW7940rPsHLZnRpbv9iF4uLAj9Lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:33:82:cb:2a:b7:5c:55:43:0b:b0:56:5b:39:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf Validity Not Before: Dec 6 06:01:24 2025 GMT Not After : Dec 7 06:01:24 2025 GMT Subject: CN=1079f97a59359ab710ccd3947dcec4efcdaadaa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6e:d4:d5:af:f2:a8:5e:8d:72:ec:00:07:fa: ef:a0:54:4a:e8:d1:3d:be:37:2b:24:ef:f2:63:ca: ec:21:ef:1f:fa:18:01:be:57:47:14:e2:b2:4b:6a: ff:a3:91:12:70:24:a6:0d:90:21:64:3b:78:f5:68: bc:fc:d1:bd:dc:08:b5:ce:37:c1:3f:1a:ed:cd:95: ff:dd:6d:f3:e1:d2:30:64:a9:ce:a3:e7:fd:57:26: fd:2e:0d:03:92:d2:63:d0:81:58:6d:1b:73:6d:f4: a4:a3:53:a8:6d:dc:c1:24:06:96:9b:e6:62:94:24: 78:1d:aa:0d:b7:8c:e5:27:8d:9e:1d:01:f6:84:4f: 85:9e:c2:a1:56:13:16:fd:28:86:fe:71:f8:2c:d0: 4a:59:0a:49:3a:46:bc:01:db:0b:bf:93:ec:77:8d: b4:c6:b8:da:94:e0:7a:36:09:be:df:9c:bd:78:4e: 0f:9c:66:ff:5b:42:03:0d:0d:f3:74:b0:4a:9b:3a: a9:88:ec:1b:be:e5:b6:94:f9:32:fc:3d:e3:ab:05: ed:ff:6d:68:4d:56:55:67:e9:c1:c4:7f:60:6d:a0: dc:3e:ef:49:5a:4d:d5:02:0a:42:a1:e5:90:14:0b: cb:a5:b5:e3:4e:ac:55:61:43:fd:52:65:58:69:14: 28:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:79:F9:7A:59:35:9A:B7:10:CC:D3:94:7D:CE:C4:EF:CD:AA:DA:A0 X509v3 Authority Key Identifier: keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:64:31:64:4e:c4:c9:a6:18:7c:87:b0:c5:f8:a6:88:e1:60: b7:92:cb:6e:f8:19:f5:63:0c:bb:bf:a6:ac:65:b4:80:98:5b: b1:f1:9c:1c:b1:00:cd:4f:b7:43:eb:d0:6e:f9:4d:0d:a9:e6: bd:68:b1:ca:7b:0e:14:9a:d3:57:49:59:4e:0e:f1:03:ba:12: 24:cf:55:de:d3:e6:e5:0a:2b:59:32:35:70:cb:d3:f1:33:59: d6:a9:14:ad:3f:29:63:f9:87:56:0b:b4:d4:68:cb:db:08:55: 10:8b:a2:4e:f1:73:fb:80:12:84:1a:02:66:35:84:5f:19:53: d3:dd:68:d7:72:23:e1:05:78:21:ba:48:38:47:4d:2c:a1:42: 17:7c:52:fa:8a:98:4c:43:7e:48:40:72:69:93:70:43:30:6e: 09:d5:83:82:86:07:61:17:af:1a:00:24:b5:31:25:d3:2b:dd: ab:b4:8b:2c:a8:9a:c0:39:cc:ae:da:1c:8b:d2:20:65:74:83: 18:dc:eb:ed:92:67:fd:a7:77:f6:b3:9a:ad:42:26:dd:a8:81: 7d:6c:0a:bc:3a:d9:1d:b2:e5:fc:96:2a:91:a8:8a:50:d1:68: ed:50:8b:a6:77:ec:25:d9:84:6d:ae:d6:c1:7a:b3:0a:b9:c4: 97:39:0c:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQDOCyyq3XFVDC7BWWznvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzY2RlNjRmNDE2OGEzZjM5OWI3NzQ5NGQ5NGFlYTc3Mjky YzliY2YwHhcNMjUxMjA2MDYwMTI0WhcNMjUxMjA3MDYwMTI0WjAzMTEwLwYDVQQD EygxMDc5Zjk3YTU5MzU5YWI3MTBjY2QzOTQ3ZGNlYzRlZmNkYWFkYWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW7U1a/yqF6NcuwAB/rvoFRK6NE9 vjcrJO/yY8rsIe8f+hgBvldHFOKyS2r/o5EScCSmDZAhZDt49Wi8/NG93Ai1zjfB PxrtzZX/3W3z4dIwZKnOo+f9Vyb9Lg0DktJj0IFYbRtzbfSko1OobdzBJAaWm+Zi lCR4HaoNt4zlJ42eHQH2hE+FnsKhVhMW/SiG/nH4LNBKWQpJOka8AdsLv5Psd420 xrjalOB6Ngm+35y9eE4PnGb/W0IDDQ3zdLBKmzqpiOwbvuW2lPky/D3jqwXt/21o TVZVZ+nBxH9gbaDcPu9JWk3VAgpCoeWQFAvLpbXjTqxVYUP9UmVYaRQohwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBB5+XpZNZq3EMzTlH3OxO/NqtqgMB8GA1UdIwQY MBaAFAPN5k9BaKPzmbd0lNlK6ncpLJvPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTgzbVQwRm9vX09adDNTVTJVcnFkeWtzbTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kYzEzMTgtYzMzMC00YjRkLTk0YWUt ZjFiMDBjODQyOGVkLzEvQTgzbVQwRm9vX09adDNTVTJVcnFkeWtzbTg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9kYzEzMTgtYzMzMC00YjRkLTk0YWUtZjFiMDBjODQyOGVk LzEvQTgzbVQwRm9vX09adDNTVTJVcnFkeWtzbTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGQxZE7E yaYYfIewxfimiOFgt5LLbvgZ9WMMu7+mrGW0gJhbsfGcHLEAzU+3Q+vQbvlNDanm vWixynsOFJrTV0lZTg7xA7oSJM9V3tPm5QorWTI1cMvT8TNZ1qkUrT8pY/mHVgu0 1GjL2whVEIuiTvFz+4AShBoCZjWEXxlT091o13Ij4QV4IbpIOEdNLKFCF3xS+oqY TEN+SEByaZNwQzBuCdWDgoYHYRevGgAktTEl0yvdq7SLLKiawDnMrtoci9IgZXSD GNzr7ZJn/ad39rOarUIm3aiBfWwKvDrZHbLl/JYqkaiKUNFo7VCLpnfsJdmEba7W wXqzCrnElzkMeA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:07 2025 by rpki-client