This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json) Hash identifier: QJXrSKUTrZFIHi/bshkyq/lR3Gied4ECdRUGku/UB8k= Subject key identifier: A3:E0:BC:38:88:68:C1:B6:41:BD:8F:5A:68:0D:B0:9D:77:B6:EE:3A Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b Certificate serial: 019B247613F6A862977D42ED261C3B5D5758 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft Manifest number: 177B Signing time: Tue 16 Dec 2025 00:01:16 +0000 Manifest this update: Tue 16 Dec 2025 00:01:16 +0000 Manifest next update: Wed 17 Dec 2025 00:01:16 +0000 Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: h91sZmW3aAVSSptsoVE8w6hflYYaEVJhZ8kXMoengrM=) 2: xXvr5N3cdjjVXwcVtqed053TqTM.roa (hash: RPXbgfGCQVhnjZtFi6ez4KE4+8jSRCf133mSXRnDHCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:76:13:f6:a8:62:97:7d:42:ed:26:1c:3b:5d:57:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b Validity Not Before: Dec 16 00:01:16 2025 GMT Not After : Dec 17 00:01:16 2025 GMT Subject: CN=a3e0bc388868c1b641bd8f5a680db09d77b6ee3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ea:77:29:a1:96:6e:08:fd:7e:fc:ab:e7:ba: a4:08:cb:f5:aa:f5:63:10:ab:b0:5d:48:9f:57:be: 4b:e9:0a:5b:ef:62:48:6e:34:2e:51:0e:a3:2c:52: a9:41:87:da:32:b6:10:dc:b9:e1:75:89:5a:82:95: b6:15:ef:9f:94:c5:33:ad:4f:71:51:39:3d:1a:a0: e7:0f:fb:3c:d0:08:fb:51:35:ba:f4:37:46:3c:94: 66:fd:2b:1a:7f:39:f1:70:7a:32:51:a7:16:ea:ee: 4b:9d:0c:c8:6a:07:50:8d:33:08:26:89:44:b8:84: 09:86:d1:e2:2e:7c:27:4e:46:76:c7:24:8d:e4:b0: 49:b8:ff:95:3d:6f:10:c7:40:06:47:a9:00:17:21: d8:ad:7a:b0:47:6e:94:90:95:cb:3f:ec:0b:61:33: 19:64:6a:cd:70:39:5c:f7:b1:59:68:a4:fc:82:98: 17:a1:8d:a2:cc:6a:f3:4b:f9:c4:db:ca:10:4b:79: 95:84:f3:14:ca:c2:36:55:60:09:4f:0e:de:5d:f7: e5:9c:33:c6:01:fb:74:cb:da:63:3d:4d:4a:1b:36: 22:6c:d8:3d:b1:c6:9b:3f:93:3e:88:97:24:b1:61: 2d:88:9d:d2:b3:cf:a6:92:e4:f2:ec:33:12:0c:7d: a9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E0:BC:38:88:68:C1:B6:41:BD:8F:5A:68:0D:B0:9D:77:B6:EE:3A X509v3 Authority Key Identifier: keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:29:e6:7a:a6:e2:82:46:5b:f5:53:49:12:14:a3:c1:d3:8a: e1:48:0a:f9:c5:af:66:d9:1b:fd:19:1a:78:a5:3a:28:23:bd: 0a:cc:34:9d:69:b5:d2:87:e9:6f:6c:13:f7:6d:6d:09:3c:58: 46:f3:52:1e:b3:5d:dc:83:d5:0e:21:9d:25:cf:9d:76:de:3a: 9f:a8:b1:ca:ee:6f:8f:f6:36:b1:6a:26:b5:c7:3a:e8:22:a9: b1:31:c1:81:b8:ec:f8:d4:08:7c:e8:3c:3c:dd:19:69:94:3d: 51:82:f9:63:2c:83:a0:ef:99:0f:d8:38:e2:f3:d6:9e:53:20: 81:0b:86:ff:ba:89:35:6f:ec:d1:c1:4d:06:b8:61:c0:27:74: 69:14:d7:60:da:a2:fa:9e:21:58:08:a7:3d:f9:c4:1d:34:31: 7d:4c:46:15:31:63:01:b7:4d:fa:20:52:e7:3b:2a:69:97:25: 3c:ab:7e:29:39:88:03:22:df:be:93:ba:98:6b:1c:4b:c0:c9: 26:cc:bc:41:d1:b6:bc:4f:59:27:8e:d9:04:6b:6e:9e:d2:0d: 65:36:0d:5f:cc:27:a2:22:a3:0c:dd:f6:37:6e:1f:73:e9:36: 90:7d:f4:30:c6:1d:a7:5c:14:fd:60:c9:3e:01:23:16:86:54: 78:d7:7d:30 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZskdhP2qGKXfULtJhw7XVdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YTM1MjBmZDljMjk5YTI4NzRkZjVlNDdiNjMwMmE0MjUy YTcyNmIwHhcNMjUxMjE2MDAwMTE2WhcNMjUxMjE3MDAwMTE2WjAzMTEwLwYDVQQD EyhhM2UwYmMzODg4NjhjMWI2NDFiZDhmNWE2ODBkYjA5ZDc3YjZlZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxep3KaGWbgj9fvyr57qkCMv1qvVj EKuwXUifV75L6Qpb72JIbjQuUQ6jLFKpQYfaMrYQ3LnhdYlagpW2Fe+flMUzrU9x UTk9GqDnD/s80Aj7UTW69DdGPJRm/SsafznxcHoyUacW6u5LnQzIagdQjTMIJolE uIQJhtHiLnwnTkZ2xySN5LBJuP+VPW8Qx0AGR6kAFyHYrXqwR26UkJXLP+wLYTMZ ZGrNcDlc97FZaKT8gpgXoY2izGrzS/nE28oQS3mVhPMUysI2VWAJTw7eXfflnDPG Aft0y9pjPU1KGzYibNg9scabP5M+iJcksWEtiJ3Ss8+mkuTy7DMSDH2plQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKPgvDiIaMG2Qb2PWmgNsJ13tu46MB8GA1UdIwQY MBaAFPmjUg/Zwpmih0315HtjAqQlKnJrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1hTlNEOW5DbWFLSFRmWGtlMk1DcENVcWNtcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvODQwNzU3LTgxNDktNDBmZS1hNDli LWFlNWU3NGVkNWJhMC8xLzEtYU5TRDluQ21hS0hUZlhrZTJNQ3BDVXFjbXMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI1Lzg0MDc1Ny04MTQ5LTQwZmUtYTQ5Yi1hZTVlNzRlZDVi YTAvMS8xLWFOU0Q5bkNtYUtIVGZYa2UyTUNwQ1VxY21zLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkinm eqbigkZb9VNJEhSjwdOK4UgK+cWvZtkb/RkaeKU6KCO9Csw0nWm10ofpb2wT921t CTxYRvNSHrNd3IPVDiGdJc+ddt46n6ixyu5vj/Y2sWomtcc66CKpsTHBgbjs+NQI fOg8PN0ZaZQ9UYL5YyyDoO+ZD9g44vPWnlMggQuG/7qJNW/s0cFNBrhhwCd0aRTX YNqi+p4hWAinPfnEHTQxfUxGFTFjAbdN+iBS5zsqaZclPKt+KTmIAyLfvpO6mGsc S8DJJsy8QdG2vE9ZJ47ZBGtuntINZTYNX8wnoiKjDN32N24fc+k2kH30MMYdp1wU /WDJPgEjFoZUeNd9MA== -----END CERTIFICATE-----Generated at Tue Dec 16 07:08:15 2025 by rpki-client