This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json) Hash identifier: 4Y/ufplc5RTXRkmDKf2CoRBNOgqVBH42JP5MjvgBjss= Subject key identifier: 20:41:6E:2A:95:CB:39:87:70:6C:4A:BB:69:8A:41:E2:D9:BC:D4:6B Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43 Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43 Certificate serial: 019AF1645920BB6FE7D60339A251E11C0D81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:16 +0000 Manifest this update: Sat 06 Dec 2025 02:01:16 +0000 Manifest next update: Sun 07 Dec 2025 02:01:16 +0000 Files and hashes: 1: 6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa (hash: nJO5IBDQ2MODS/Zojmv3q8UXuHQA1f7Z7pPIMcFUXg8=) 2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: E12t8tOtSl9A/4rxtpekFHTODZmBd4TTR5rkSHOH2ak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:59:20:bb:6f:e7:d6:03:39:a2:51:e1:1c:0d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43 Validity Not Before: Dec 6 02:01:16 2025 GMT Not After : Dec 7 02:01:16 2025 GMT Subject: CN=20416e2a95cb3987706c4abb698a41e2d9bcd46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ad:f9:f9:d9:64:19:99:4c:2a:26:f0:49:28: 3b:bd:d0:ff:29:b7:c7:f0:fa:1b:0a:0d:c6:22:d3: dc:8c:15:17:64:b8:0d:d4:dc:31:78:3d:54:59:aa: 44:30:8b:5e:25:78:b9:0e:b6:bb:34:87:28:2d:65: 43:21:e7:2d:77:a0:86:e5:0b:3e:e4:d0:91:b2:50: 4d:7c:53:66:71:6e:8f:f9:07:20:29:13:69:73:4a: c4:a9:e9:0a:a3:ef:2a:bf:61:d3:a9:b0:2c:14:02: ed:c0:05:6e:4e:d9:43:52:e7:2d:31:96:5f:c2:5f: ce:94:0f:ff:35:08:b5:8b:65:6e:00:d3:08:d0:bb: 68:3d:b7:43:73:83:cf:3f:8e:2d:88:76:ff:e3:fe: de:4c:c7:22:00:04:c2:bc:37:05:6f:77:f4:aa:80: 0a:a4:56:77:ad:da:2d:27:d9:d0:f5:e0:a1:c1:93: 19:70:78:95:a7:9a:c7:ba:9a:77:3e:ad:f6:2c:7f: e0:07:7e:4e:55:ac:85:94:00:c7:16:1c:e1:0e:0d: 09:e0:9c:9c:62:75:fd:a1:54:5a:b8:f0:c5:81:8c: c7:f8:67:ac:49:df:f5:31:00:fe:8a:dd:6d:6f:3b: 07:7e:08:fd:1f:e3:37:45:28:83:ec:7b:ef:b5:ab: 76:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:41:6E:2A:95:CB:39:87:70:6C:4A:BB:69:8A:41:E2:D9:BC:D4:6B X509v3 Authority Key Identifier: keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:1e:c8:41:8a:5f:a6:cc:30:85:0f:d2:2f:06:ac:66:7e:61: 95:24:51:b6:82:30:6a:e3:b6:72:16:02:47:d3:21:44:26:b1: 77:a2:42:0d:21:9e:c1:21:33:63:c9:dd:f4:8d:db:bf:31:83: 18:2f:98:dd:c5:16:fa:89:0e:94:08:30:ae:54:7a:8c:23:63: 98:96:7d:c7:6d:4a:19:b8:f0:cd:10:a6:ba:a6:77:9c:70:cb: 62:2d:ef:e0:d4:8d:c6:ae:c5:51:8d:8b:6e:96:f0:43:23:23: 2e:49:fb:98:61:8b:93:c6:ba:19:7c:eb:42:ac:0b:0f:31:fc: ae:b6:ec:3a:7a:39:8c:a8:d0:2e:9c:36:da:06:85:6f:18:de: 3c:5f:f9:3a:0b:65:cf:aa:0d:ed:b5:36:96:50:20:2f:49:17: d2:56:13:3e:96:e6:fa:7e:6e:7f:20:df:21:47:f7:61:41:1c: 9b:99:57:57:00:11:21:8a:de:75:4b:3a:ec:75:7f:0a:ac:6b: a1:cc:c7:7f:a7:32:be:d8:0f:d8:72:d5:50:59:51:60:12:52: 22:3d:b9:5c:e8:4a:90:46:8a:61:65:5e:37:09:3e:64:f9:cd: 66:a6:1d:d6:1a:7b:ab:d5:9f:35:c6:f3:8e:88:7e:3b:56:a9: da:47:ae:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFkgu2/n1gM5olHhHA2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTM2ZTFhNjhlOTQ0YjIzNDc5MDhiOGJkZmU3NzQwZDhl OGFhNDMwHhcNMjUxMjA2MDIwMTE2WhcNMjUxMjA3MDIwMTE2WjAzMTEwLwYDVQQD EygyMDQxNmUyYTk1Y2IzOTg3NzA2YzRhYmI2OThhNDFlMmQ5YmNkNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq35+dlkGZlMKibwSSg7vdD/KbfH 8PobCg3GItPcjBUXZLgN1NwxeD1UWapEMIteJXi5Dra7NIcoLWVDIectd6CG5Qs+ 5NCRslBNfFNmcW6P+QcgKRNpc0rEqekKo+8qv2HTqbAsFALtwAVuTtlDUuctMZZf wl/OlA//NQi1i2VuANMI0LtoPbdDc4PPP44tiHb/4/7eTMciAATCvDcFb3f0qoAK pFZ3rdotJ9nQ9eChwZMZcHiVp5rHupp3Pq32LH/gB35OVayFlADHFhzhDg0J4Jyc YnX9oVRauPDFgYzH+GesSd/1MQD+it1tbzsHfgj9H+M3RSiD7Hvvtat2pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBBbiqVyzmHcGxKu2mKQeLZvNRrMB8GA1UdIwQY MBaAFANTbhpo6USyNHkIuL3+d0DY6KpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzkt NWEzNzdjODc5MWY1LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzktNWEzNzdjODc5MWY1 LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyh7IQYpf pswwhQ/SLwasZn5hlSRRtoIwauO2chYCR9MhRCaxd6JCDSGewSEzY8nd9I3bvzGD GC+Y3cUW+okOlAgwrlR6jCNjmJZ9x21KGbjwzRCmuqZ3nHDLYi3v4NSNxq7FUY2L bpbwQyMjLkn7mGGLk8a6GXzrQqwLDzH8rrbsOno5jKjQLpw22gaFbxjePF/5Ogtl z6oN7bU2llAgL0kX0lYTPpbm+n5ufyDfIUf3YUEcm5lXVwARIYredUs67HV/Cqxr oczHf6cyvtgP2HLVUFlRYBJSIj25XOhKkEaKYWVeNwk+ZPnNZqYd1hp7q9WfNcbz joh+O1ap2keu7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:14 2025 by rpki-client