This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft File: A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json) Hash identifier: CFMRzBs3ERk4JHhB8FenJtpA94kme86jbZS2kNdJztQ= Subject key identifier: CE:47:2C:F2:3A:2A:D0:0B:F1:B6:22:C1:BE:D0:6E:3F:51:D2:49:03 Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44 Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544 Certificate serial: 019AF31BC659D2CB4BF75A73F27DBAD1F351 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:01:14 +0000 Manifest this update: Sat 06 Dec 2025 10:01:14 +0000 Manifest next update: Sun 07 Dec 2025 10:01:14 +0000 Files and hashes: 1: 9t22owOYC7Mw8jA_t9_7gDwHF1o.roa (hash: iV2EeKk18zEE+h5tJ2D8tk3awOGzeRIEDnvnGsDqR3g=) 2: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: AB9FewXeIounTFsI51hqR7a9+ARj/ZvXybN/Y/EBVTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c6:59:d2:cb:4b:f7:5a:73:f2:7d:ba:d1:f3:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544 Validity Not Before: Dec 6 10:01:14 2025 GMT Not After : Dec 7 10:01:14 2025 GMT Subject: CN=ce472cf23a2ad00bf1b622c1bed06e3f51d24903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ee:03:f9:6a:a3:76:6a:4a:26:07:c4:fa:e4: 11:00:3c:a3:ae:11:33:db:1f:91:18:da:59:3d:8a: 39:74:0a:0d:9f:7b:39:61:11:01:b9:55:46:c7:27: 97:ae:09:88:a0:8f:65:e9:66:9d:31:76:0f:e0:06: 68:b1:97:cf:71:eb:b9:62:7c:7e:8b:19:d3:5c:0b: b1:c9:54:e8:5e:44:15:cc:89:8f:35:8e:c9:ee:bc: 65:60:db:48:7e:b0:cf:94:10:36:ea:85:1a:e7:ae: 43:ef:cd:d1:b6:39:d6:c5:69:e9:b5:2b:5b:ab:3f: 32:99:f6:b1:41:71:ae:d3:47:e7:b0:79:18:ba:b9: ac:dd:24:e4:e2:2f:5f:11:f8:ac:14:3b:d3:55:80: b0:90:39:6e:8b:64:85:1f:7f:5f:46:63:b3:5c:32: 2c:5c:91:41:b9:5f:8c:1f:e2:96:43:f4:32:4f:7c: 1d:3d:ab:93:cb:2f:b9:4f:34:cb:fd:6e:79:c6:50: e3:b4:8d:67:95:7c:8e:5a:cb:e4:c8:f6:e4:83:bd: 63:4a:87:31:2a:8e:02:a6:82:6a:93:9e:75:24:d2: 14:55:8e:70:c7:04:d1:5a:6c:74:a3:ff:57:c2:9a: 21:16:5b:23:2b:e9:68:7b:a1:7b:2c:1b:74:35:3e: fe:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:47:2C:F2:3A:2A:D0:0B:F1:B6:22:C1:BE:D0:6E:3F:51:D2:49:03 X509v3 Authority Key Identifier: keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b4:06:2b:b7:9c:e3:38:59:25:cc:01:8b:cb:d5:aa:a7:fd: 7c:3d:df:97:f3:1d:10:bc:48:fd:15:18:0d:eb:5a:45:a4:ec: 39:90:02:45:ba:4f:f9:a4:94:bf:c3:65:7d:91:85:bf:bc:76: 91:38:3a:67:7d:f7:5e:30:8a:f1:4a:eb:fb:55:9d:d7:bb:0f: 97:81:f9:7c:bc:b5:c7:37:2e:2b:d2:08:9b:f6:25:a3:cc:66: 79:9c:ef:8d:da:19:80:2b:ac:c1:9c:e4:84:69:00:2c:7d:5d: 43:59:cd:47:7f:ca:da:79:11:bc:b0:13:8e:9c:12:a0:51:91: 52:0b:1b:5c:88:a4:8f:31:34:e2:11:69:53:5e:f1:1e:1d:6e: 66:16:b4:5b:b3:d5:9c:b9:6d:a9:f0:4f:5a:2d:bf:f2:2a:3c: 21:0f:6c:4e:e3:db:20:28:1d:3a:32:cf:89:7e:4d:48:90:6b: ab:86:01:3a:be:dc:fe:ae:ae:f2:5f:b1:c1:4b:5a:b2:32:07: 0c:79:c2:5b:b8:c7:bd:4c:02:4d:19:ea:51:d9:22:28:f8:ac: f1:16:d6:ad:3a:05:05:aa:1c:4d:c6:3a:48:85:fa:35:27:ef: fe:85:24:8e:15:f0:fa:30:3e:f5:7c:cb:13:be:17:25:b4:6b: 9e:9c:0e:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8ZZ0stL91pz8n260fNRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZjgzODgzNzJkYzMzMmM3Y2M2Zjc3NjZhZDc4ZDU4YTIz YjI1NDQwHhcNMjUxMjA2MTAwMTE0WhcNMjUxMjA3MTAwMTE0WjAzMTEwLwYDVQQD EyhjZTQ3MmNmMjNhMmFkMDBiZjFiNjIyYzFiZWQwNmUzZjUxZDI0OTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu4D+WqjdmpKJgfE+uQRADyjrhEz 2x+RGNpZPYo5dAoNn3s5YREBuVVGxyeXrgmIoI9l6WadMXYP4AZosZfPceu5Ynx+ ixnTXAuxyVToXkQVzImPNY7J7rxlYNtIfrDPlBA26oUa565D783RtjnWxWnptStb qz8ymfaxQXGu00fnsHkYurms3STk4i9fEfisFDvTVYCwkDlui2SFH39fRmOzXDIs XJFBuV+MH+KWQ/QyT3wdPauTyy+5TzTL/W55xlDjtI1nlXyOWsvkyPbkg71jSocx Ko4CpoJqk551JNIUVY5wxwTRWmx0o/9XwpohFlsjK+loe6F7LBt0NT7+xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5HLPI6KtAL8bYiwb7Qbj9R0kkDMB8GA1UdIwQY MBaAFAP4OINy3DMsfMb3dmrXjViiOyVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZTExNjUtYzYxMC00OTg4LWE0OWQt OTQ1NTg1OGU5YzA2LzEvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85ZTExNjUtYzYxMC00OTg4LWE0OWQtOTQ1NTg1OGU5YzA2 LzEvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrQGK7ec 4zhZJcwBi8vVqqf9fD3fl/MdELxI/RUYDetaRaTsOZACRbpP+aSUv8NlfZGFv7x2 kTg6Z333XjCK8Urr+1Wd17sPl4H5fLy1xzcuK9IIm/Ylo8xmeZzvjdoZgCuswZzk hGkALH1dQ1nNR3/K2nkRvLATjpwSoFGRUgsbXIikjzE04hFpU17xHh1uZha0W7PV nLltqfBPWi2/8io8IQ9sTuPbICgdOjLPiX5NSJBrq4YBOr7c/q6u8l+xwUtasjIH DHnCW7jHvUwCTRnqUdkiKPis8RbWrToFBaocTcY6SIX6NSfv/oUkjhXw+jA+9XzL E74XJbRrnpwOXA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:08 2025 by rpki-client