This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json) Hash identifier: fmZpJiy04wNFdpP6NGjn3Di2lcVuWnm9X7s/8AOc73M= Subject key identifier: 0D:4A:FE:79:2C:C4:1B:F6:20:92:F5:DE:52:93:12:69:3E:6F:D9:30 Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17 Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517 Certificate serial: 019AF19AE2DB34B639E333E5B1A7C1D8612F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft Manifest number: 11E9 Signing time: Sat 06 Dec 2025 03:00:50 +0000 Manifest this update: Sat 06 Dec 2025 03:00:50 +0000 Manifest next update: Sun 07 Dec 2025 03:00:50 +0000 Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: Dy3KhM4KcmTNvSncfnTNG9MJN5imFFQDH40gWM9xcv8=) 2: cp23u9vhlMaqrHKUYwtPPiioz4s.roa (hash: vMJOgdz9BvyEVCpUUDvmbRYIMf8G3KzzC7uWtP3ziOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e2:db:34:b6:39:e3:33:e5:b1:a7:c1:d8:61:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517 Validity Not Before: Dec 6 03:00:50 2025 GMT Not After : Dec 7 03:00:50 2025 GMT Subject: CN=0d4afe792cc41bf62092f5de529312693e6fd930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c6:26:b8:54:9e:14:93:df:da:ac:34:57:4c: 94:00:2f:2c:2b:e3:82:08:4a:f1:ba:8d:c7:45:55: 82:2e:e5:d5:77:60:cd:3d:2b:2b:ca:84:06:b9:42: 3a:78:28:89:15:99:21:24:8e:9a:75:d0:b8:1a:35: 80:0a:c4:e5:30:78:95:dd:5b:70:9b:76:e3:65:8e: f6:17:7c:8a:a0:9c:e9:2f:93:12:09:0a:ee:bc:a2: 3a:6f:4a:52:83:60:ad:e6:14:8f:f8:41:6e:42:00: 69:fb:38:ce:18:cb:80:52:f9:7f:d3:08:09:1d:d2: 1a:98:4b:4a:d1:3d:8b:ee:96:64:a3:7d:97:1d:67: a9:cd:89:3a:05:37:af:dc:a7:31:41:54:9e:d9:30: 55:73:e3:d3:ae:e7:15:47:1f:b6:76:df:b7:da:42: c2:31:51:80:6f:f8:c0:ff:95:da:7a:f3:11:60:29: 24:0e:fc:ab:c5:36:1f:b9:63:81:0e:35:47:a9:31: 0c:5e:95:b1:f3:9f:60:61:a0:1a:e9:48:d7:38:bb: 50:2f:8f:46:30:29:d0:9b:76:9e:62:cd:87:8d:f6: 58:b2:30:0d:d1:f4:5b:69:ec:e1:80:c6:ff:8b:e8: a3:d7:39:13:6c:b2:2e:b7:d3:18:c9:7a:54:7e:0a: 4f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4A:FE:79:2C:C4:1B:F6:20:92:F5:DE:52:93:12:69:3E:6F:D9:30 X509v3 Authority Key Identifier: keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:6c:79:46:c9:73:e6:4a:6b:e2:75:cb:2b:83:7c:db:ed:f3: 19:78:2a:cd:65:38:52:67:e5:8c:47:43:e0:b6:55:96:af:13: 68:fd:0a:14:d4:2c:ce:ad:43:03:a8:08:fb:23:42:10:78:61: 1b:f3:b1:2b:88:36:97:e4:35:29:1e:28:9a:1e:0b:69:7f:b4: 8d:ab:d6:1a:32:c5:ad:0b:7f:b9:18:9f:47:61:4a:8f:09:4b: 29:29:86:a8:89:85:ca:d0:0e:2e:70:8c:57:32:0e:06:a2:0a: 3f:e5:d3:7f:2e:e9:bf:ca:fe:94:ed:06:55:58:73:41:15:75: 80:7d:9a:88:18:19:09:09:80:a7:25:bc:73:22:53:39:7f:ae: e6:15:c8:d3:be:13:fc:db:af:0a:c2:a2:79:44:1d:03:df:dd: a1:21:20:d0:db:f0:6e:7f:af:43:7b:8a:a8:92:27:f7:8a:12: 2e:df:a5:56:a3:52:c2:c8:12:86:81:3e:38:b3:d5:ea:da:30: ef:43:6b:f7:a7:a0:8e:6d:2b:0b:2f:b9:94:d3:50:89:94:9c: d0:46:f6:34:7a:90:c3:65:09:f2:18:a2:95:6a:77:b1:3c:a8: 56:b2:ae:89:51:ec:92:e1:b1:9d:cb:65:55:87:d3:b9:7f:5d: 8a:7c:f8:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuLbNLY54zPlsafB2GEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzZjZWEyYTgwMjIwMzYxMjMxYjZhZmJiYzhjOGNkYWE0 ZmQ1MTcwHhcNMjUxMjA2MDMwMDUwWhcNMjUxMjA3MDMwMDUwWjAzMTEwLwYDVQQD EygwZDRhZmU3OTJjYzQxYmY2MjA5MmY1ZGU1MjkzMTI2OTNlNmZkOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MYmuFSeFJPf2qw0V0yUAC8sK+OC CErxuo3HRVWCLuXVd2DNPSsryoQGuUI6eCiJFZkhJI6addC4GjWACsTlMHiV3Vtw m3bjZY72F3yKoJzpL5MSCQruvKI6b0pSg2Ct5hSP+EFuQgBp+zjOGMuAUvl/0wgJ HdIamEtK0T2L7pZko32XHWepzYk6BTev3KcxQVSe2TBVc+PTrucVRx+2dt+32kLC MVGAb/jA/5XaevMRYCkkDvyrxTYfuWOBDjVHqTEMXpWx859gYaAa6UjXOLtQL49G MCnQm3aeYs2HjfZYsjAN0fRbaezhgMb/i+ij1zkTbLIut9MYyXpUfgpPzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1K/nksxBv2IJL13lKTEmk+b9kwMB8GA1UdIwQY MBaAFAPGzqKoAiA2EjG2r7vIyM2qT9UXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQt ZjQ2ZDZhYjNkMzI2LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQtZjQ2ZDZhYjNkMzI2 LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2x5Rslz 5kpr4nXLK4N82+3zGXgqzWU4UmfljEdD4LZVlq8TaP0KFNQszq1DA6gI+yNCEHhh G/OxK4g2l+Q1KR4omh4LaX+0javWGjLFrQt/uRifR2FKjwlLKSmGqImFytAOLnCM VzIOBqIKP+XTfy7pv8r+lO0GVVhzQRV1gH2aiBgZCQmApyW8cyJTOX+u5hXI074T /NuvCsKieUQdA9/doSEg0Nvwbn+vQ3uKqJIn94oSLt+lVqNSwsgShoE+OLPV6tow 70Nr96egjm0rCy+5lNNQiZSc0Eb2NHqQw2UJ8hiilWp3sTyoVrKuiVHskuGxnctl VYfTuX9dinz4Kg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:49 2025 by rpki-client