This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft File: A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json) Hash identifier: HoAiDNT1cgEJxldrXWWk2Ku+OTyQCGyc6DxsDPNFPd4= Subject key identifier: E3:74:0F:A3:0A:23:4D:82:6F:42:20:BE:6B:32:1A:BD:FB:72:66:8E Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3 Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3 Certificate serial: 019AF12CEED0658C80425E75F92A1A7AC3F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft Manifest number: 07CB Signing time: Sat 06 Dec 2025 01:00:45 +0000 Manifest this update: Sat 06 Dec 2025 01:00:45 +0000 Manifest next update: Sun 07 Dec 2025 01:00:45 +0000 Files and hashes: 1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: +RP6g42an/aN18dKKZXE3XG1jU0xbmBgEKpAQd4n0Ds=) 2: p0cL-vdhY3KSfcwz6s4koNapmbw.roa (hash: 9RImGj5UfNKUq/CzlTB6jfp8TR4Xc1sqYedIB3MDaIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ee:d0:65:8c:80:42:5e:75:f9:2a:1a:7a:c3:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3 Validity Not Before: Dec 6 01:00:45 2025 GMT Not After : Dec 7 01:00:45 2025 GMT Subject: CN=e3740fa30a234d826f4220be6b321abdfb72668e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:0c:ed:95:d2:5e:b9:ed:9b:9b:91:68:ee:c5: a6:9a:9f:17:d9:c9:7e:a6:4f:61:d9:9f:d6:86:ae: a7:c1:b8:ab:f1:93:be:d0:29:17:d8:02:db:62:b5: e5:2e:e2:bd:4d:dc:da:78:8a:e4:9c:37:df:b7:3f: 3a:dc:d6:49:51:9c:be:18:8b:c9:bc:aa:19:81:ad: 09:d3:2d:d7:4d:08:72:57:78:8c:2c:bb:ea:e0:2d: de:b8:4c:22:d8:5b:0b:79:2a:d6:ba:c9:44:ad:15: dc:b1:06:1a:81:47:aa:69:4f:35:a1:88:a7:3d:1a: 0f:61:59:2d:f3:4a:76:ec:fe:c8:4e:af:f7:15:54: b2:4c:d3:a4:07:2b:72:b4:24:c0:c7:16:ef:c0:bd: d8:2a:aa:00:c9:4b:24:5b:33:88:35:27:78:32:b7: 39:52:a8:b0:4b:12:7a:1c:6b:ee:94:91:8d:8f:56: 59:ea:ae:1e:0c:f7:4b:5a:2c:9d:da:2c:ef:24:7b: 8c:c2:aa:c0:59:20:c0:ca:f4:39:e2:75:51:b0:a4: 70:6c:36:28:a2:11:1c:34:45:0d:5d:e6:e4:db:59: 8e:3c:79:4c:0f:84:71:36:67:1b:6d:2f:23:c7:06: 7e:7b:20:01:81:80:e8:58:02:de:17:14:1d:9f:b5: 70:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:74:0F:A3:0A:23:4D:82:6F:42:20:BE:6B:32:1A:BD:FB:72:66:8E X509v3 Authority Key Identifier: keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:0c:53:59:d5:e5:05:fa:f5:6c:4b:f1:5c:e4:0e:16:e5:6a: 08:e2:50:8e:51:77:21:82:64:58:2b:ac:f2:b4:4a:6b:6a:59: 12:3f:c6:66:57:15:b2:cd:2b:e7:47:4c:30:11:58:63:6f:d6: ad:cb:9b:33:2b:ac:50:00:93:d1:78:c8:d7:2c:a1:09:23:47: fa:88:9a:9f:cb:5d:e1:a0:94:f3:6d:cb:ea:e6:2a:19:cb:6d: d2:9a:2c:69:95:69:d9:a9:ae:85:85:0b:1d:07:18:e7:35:53: c6:5f:fb:54:cb:11:af:8e:ef:d5:a1:82:83:e4:22:c3:26:9e: 12:52:cd:2b:aa:44:67:93:4f:78:1c:a1:17:ac:60:dd:5d:55: d9:44:6c:60:88:ce:ce:13:cb:54:9b:ba:80:10:d8:20:c6:b5: 44:70:98:f5:83:00:04:92:70:3a:5e:2b:03:fc:26:3b:3a:d6: 1c:d9:7b:f3:d7:a6:03:9a:41:ed:bb:21:c9:e1:03:bf:43:8b: 57:2b:f9:90:2e:90:d9:8a:75:0f:8d:8b:b2:43:5d:1f:86:c2: 53:0f:1e:77:c3:25:3f:a4:15:22:54:d5:65:44:2c:6d:64:e0: a1:f1:29:24:0f:c6:26:98:37:c8:df:ef:78:5c:5d:c6:03:2b: 57:85:d9:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLO7QZYyAQl51+SoaesP5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOTgzMWY3YmEzZGUyZmJlZjE2ZDQ2NDlmZDQ4NjBjMTVl OWQ2YzMwHhcNMjUxMjA2MDEwMDQ1WhcNMjUxMjA3MDEwMDQ1WjAzMTEwLwYDVQQD EyhlMzc0MGZhMzBhMjM0ZDgyNmY0MjIwYmU2YjMyMWFiZGZiNzI2NjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+gztldJeue2bm5Fo7sWmmp8X2cl+ pk9h2Z/Whq6nwbir8ZO+0CkX2ALbYrXlLuK9TdzaeIrknDfftz863NZJUZy+GIvJ vKoZga0J0y3XTQhyV3iMLLvq4C3euEwi2FsLeSrWuslErRXcsQYagUeqaU81oYin PRoPYVkt80p27P7ITq/3FVSyTNOkBytytCTAxxbvwL3YKqoAyUskWzOINSd4Mrc5 UqiwSxJ6HGvulJGNj1ZZ6q4eDPdLWiyd2izvJHuMwqrAWSDAyvQ54nVRsKRwbDYo ohEcNEUNXebk21mOPHlMD4RxNmcbbS8jxwZ+eyABgYDoWALeFxQdn7VwTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFON0D6MKI02Cb0IgvmsyGr37cmaOMB8GA1UdIwQY MBaAFAOYMfe6PeL77xbUZJ/UhgwV6dbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lNDQ5NGUtMWUzMy00NDM3LTg0MzMt MDM3YjVhN2I5NTQ0LzEvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lNDQ5NGUtMWUzMy00NDM3LTg0MzMtMDM3YjVhN2I5NTQ0 LzEvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswxTWdXl Bfr1bEvxXOQOFuVqCOJQjlF3IYJkWCus8rRKa2pZEj/GZlcVss0r50dMMBFYY2/W rcubMyusUACT0XjI1yyhCSNH+oian8td4aCU823L6uYqGctt0posaZVp2amuhYUL HQcY5zVTxl/7VMsRr47v1aGCg+QiwyaeElLNK6pEZ5NPeByhF6xg3V1V2URsYIjO zhPLVJu6gBDYIMa1RHCY9YMABJJwOl4rA/wmOzrWHNl789emA5pB7bshyeEDv0OL Vyv5kC6Q2Yp1D42LskNdH4bCUw8ed8MlP6QVIlTVZUQsbWTgofEpJA/GJpg3yN/v eFxdxgMrV4XZLg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:04:22 2025 by rpki-client