This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json) Hash identifier: 3ih/cwALaR7kv5Np4m2XW0vlWZlYczuKjUGiKGcrTHY= Subject key identifier: 2E:38:38:D3:2B:97:94:F4:6B:10:11:A9:0D:EC:6C:AF:D9:14:7B:9C Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7 Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7 Certificate serial: 019AF1D252A704AD384B8BD1E446E8A725D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft Manifest number: 1181 Signing time: Sat 06 Dec 2025 04:01:23 +0000 Manifest this update: Sat 06 Dec 2025 04:01:23 +0000 Manifest next update: Sun 07 Dec 2025 04:01:23 +0000 Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: ishWAi9mBbzwDv66S7VXubeF1Xzz4317t96pc42o5R8=) 2: YWZ9Y-_nf9hJ3PCcQZw9nBpADV0.roa (hash: 8GJk/xJD9TDW949jEwNVPLQ5jxG7+jInYSsAj0hFBHo=) 3: hL7gjsE__TvimmJVNhYnW8HxcTk.roa (hash: fSQmS4KDtYP+UxUBfXGw0aeIOC4KTOr+x3hlF+s6H3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:52:a7:04:ad:38:4b:8b:d1:e4:46:e8:a7:25:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7 Validity Not Before: Dec 6 04:01:23 2025 GMT Not After : Dec 7 04:01:23 2025 GMT Subject: CN=2e3838d32b9794f46b1011a90dec6cafd9147b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:54:37:d7:b4:d6:2a:5d:c3:03:38:2a:5a: cf:90:87:77:36:9f:68:3b:da:23:b1:e3:e1:60:51: f5:9c:c6:26:40:6d:2a:63:3a:11:f1:f9:7f:8e:3f: 89:4b:73:2b:36:78:e7:4c:52:40:67:30:30:a6:00: 21:de:b8:f0:5c:3f:e1:c8:92:7f:fd:24:fa:0f:32: bf:5d:5b:c6:68:3e:65:c8:ad:53:b1:fb:48:b4:b7: 4a:be:e3:df:c5:41:72:2f:51:2a:1b:99:92:0a:2f: 5e:c2:a8:ee:d3:a8:f7:00:9e:c0:94:35:c8:fa:86: f0:bc:ef:13:1d:2a:01:01:34:69:c6:17:f3:f4:ef: a4:c1:c6:69:de:6d:ec:b4:07:81:cf:1f:c6:ed:3f: a9:20:36:ce:1d:d6:89:9e:0e:17:e2:96:ac:05:6a: c8:82:9d:d5:0b:5c:f0:49:af:55:74:0d:4c:85:61: e6:99:56:bf:7c:64:2d:8a:04:3b:b5:17:7d:12:3d: a0:90:b8:3c:1c:15:58:f1:14:73:bc:4b:40:d3:62: b7:d9:18:37:f6:85:2e:93:94:9a:0f:54:d7:2d:54: c4:89:27:4b:fc:93:da:87:c7:87:ce:d9:25:dd:78: ff:57:00:7e:58:b7:2e:2d:7f:77:60:f8:8f:15:1f: d9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:38:38:D3:2B:97:94:F4:6B:10:11:A9:0D:EC:6C:AF:D9:14:7B:9C X509v3 Authority Key Identifier: keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:1e:ab:5c:af:55:19:37:be:18:4a:29:7f:b6:7b:54:04:b1: be:71:31:bb:0c:b6:6c:e0:de:9e:e8:ba:0f:87:11:7d:7d:10: 10:64:78:80:a8:05:9b:a9:55:e2:bb:4c:0e:de:75:63:4b:70: 78:50:1c:93:4d:76:d5:55:a9:c1:f7:8d:25:7a:6f:33:1c:f3: cd:30:14:85:49:b3:cc:0e:8e:2b:a1:4d:a6:87:1b:ed:b4:81: 02:94:a8:22:34:28:eb:37:c1:2e:b5:39:03:5a:f3:5e:1b:7a: 13:32:e7:42:4d:18:1c:f4:a6:45:7a:a8:66:6a:c2:6d:3a:ff: a2:4a:32:5e:3a:40:a0:6e:fa:5b:1e:6c:59:7f:c4:bc:22:60: ac:b1:07:57:2e:a9:d0:32:3d:9d:2f:36:06:12:81:ca:eb:40: 0b:a6:ea:42:be:1c:d5:3b:12:68:75:e6:15:c6:c0:fc:75:3e: d3:9e:a3:1d:59:2d:de:0c:b7:60:fb:4f:1e:e6:e9:b9:4d:41: d8:f2:5c:a5:26:34:79:ac:0a:49:7c:ea:59:9b:f2:39:4c:17: 61:9f:dd:e8:87:ca:06:89:ad:09:a8:9a:09:31:ba:b5:af:0e: 3b:29:bf:0f:ab:b8:91:9d:b8:1e:31:06:c5:21:06:92:4d:c3: 01:f0:ad:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lKnBK04S4vR5EbopyXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTBkZjc4ZmM3ODU4MTM3MjRlYzY2NjQ4ZGY5YjQ5NGY5 YjhkYTcwHhcNMjUxMjA2MDQwMTIzWhcNMjUxMjA3MDQwMTIzWjAzMTEwLwYDVQQD EygyZTM4MzhkMzJiOTc5NGY0NmIxMDExYTkwZGVjNmNhZmQ5MTQ3YjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsFUN9e01ipdwwM4KlrPkId3Np9o O9ojsePhYFH1nMYmQG0qYzoR8fl/jj+JS3MrNnjnTFJAZzAwpgAh3rjwXD/hyJJ/ /ST6DzK/XVvGaD5lyK1TsftItLdKvuPfxUFyL1EqG5mSCi9ewqju06j3AJ7AlDXI +obwvO8THSoBATRpxhfz9O+kwcZp3m3stAeBzx/G7T+pIDbOHdaJng4X4pasBWrI gp3VC1zwSa9VdA1MhWHmmVa/fGQtigQ7tRd9Ej2gkLg8HBVY8RRzvEtA02K32Rg3 9oUuk5SaD1TXLVTEiSdL/JPah8eHztkl3Xj/VwB+WLcuLX93YPiPFR/Z6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC44ONMrl5T0axARqQ3sbK/ZFHucMB8GA1UdIwQY MBaAFANQ33j8eFgTck7GZkjfm0lPm42nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgt ZDI5MmFiN2NlOWZhLzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgtZDI5MmFiN2NlOWZh LzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJR6rXK9V GTe+GEopf7Z7VASxvnExuwy2bODenui6D4cRfX0QEGR4gKgFm6lV4rtMDt51Y0tw eFAck0121VWpwfeNJXpvMxzzzTAUhUmzzA6OK6FNpocb7bSBApSoIjQo6zfBLrU5 A1rzXht6EzLnQk0YHPSmRXqoZmrCbTr/okoyXjpAoG76Wx5sWX/EvCJgrLEHVy6p 0DI9nS82BhKByutAC6bqQr4c1TsSaHXmFcbA/HU+056jHVkt3gy3YPtPHubpuU1B 2PJcpSY0eawKSXzqWZvyOUwXYZ/d6IfKBomtCaiaCTG6ta8OOym/D6u4kZ24HjEG xSEGkk3DAfCtdw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:49 2025 by rpki-client