This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json) Hash identifier: JwgalqrcX+S4dzWbJv4QHpAwp7t+I48Mv2WTL60FRgQ= Subject key identifier: 9F:8E:D4:0C:90:D7:4E:78:F1:AD:0C:AB:8B:D1:18:49:C1:60:27:BB Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f Certificate serial: 019AF31C25B0B1CE34E38343587D40EE7191 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft Manifest number: 0840 Signing time: Sat 06 Dec 2025 10:01:39 +0000 Manifest this update: Sat 06 Dec 2025 10:01:39 +0000 Manifest next update: Sun 07 Dec 2025 10:01:39 +0000 Files and hashes: 1: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: +qlwD4NsrQP5MvgUk2kErEU+Rrc/B/0UUk/CElMipyA=) 2: lKpyDy3PB0VVOKumldUJ5R7DcrY.roa (hash: bAnBEKlnNSPWwWtu1bOB6beqo4iFn6Nt2CccoFRqSNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:25:b0:b1:ce:34:e3:83:43:58:7d:40:ee:71:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f Validity Not Before: Dec 6 10:01:39 2025 GMT Not After : Dec 7 10:01:39 2025 GMT Subject: CN=9f8ed40c90d74e78f1ad0cab8bd11849c16027bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:94:d0:71:e1:63:4b:a0:7b:e5:14:73:f3:cd: f7:3b:79:72:27:4b:a6:d0:fe:d8:ae:d5:75:15:d4: 36:2c:71:07:c7:7f:bd:9a:fa:ff:fe:66:09:65:97: 98:cd:62:24:14:df:c8:21:e2:14:b5:80:fe:3e:e8: 27:d3:19:a7:06:02:97:44:d2:24:3d:ed:c5:75:0e: f4:15:b9:c7:74:8b:06:26:39:b8:a4:04:01:ce:6b: 80:5b:47:84:88:e9:62:6d:9b:62:17:ac:10:b2:94: 52:9b:b7:1c:a5:6b:f9:52:f0:cb:84:69:d1:78:39: 7a:71:4b:db:cf:8d:cb:7b:5c:32:ad:e5:ce:f4:5d: c8:cb:c9:40:23:82:f1:c6:ec:8f:37:8a:cb:b9:f7: f4:c1:18:c7:3d:65:b1:41:63:f0:a7:58:d2:ba:2c: 6c:db:9c:68:cb:c1:1c:23:a0:aa:f5:eb:0a:b6:d5: 19:98:10:a8:26:b9:03:49:bc:47:0e:5b:65:52:e5: 3a:ef:24:8c:e8:a7:d1:79:5b:a1:7f:ad:af:94:3b: 81:eb:0a:23:3d:fb:79:88:63:69:ea:37:af:06:ff: e8:ec:07:52:9b:75:8d:6a:fc:4b:54:01:ee:bc:f1: 8e:c8:49:26:a1:ef:83:99:2f:55:9e:6c:dd:c0:1c: 23:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8E:D4:0C:90:D7:4E:78:F1:AD:0C:AB:8B:D1:18:49:C1:60:27:BB X509v3 Authority Key Identifier: keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:43:a0:e8:1c:9d:25:92:f8:f6:4c:00:ee:f6:f2:e5:a9:8a: 73:2f:be:2b:e7:fe:7b:db:60:1c:63:38:4f:d6:29:e6:f5:01: 5f:18:85:d3:b8:25:8d:2c:48:6c:b0:61:59:17:e3:41:59:fe: 27:8b:dc:10:d6:7d:a8:5b:e4:f2:b9:a6:fc:6f:90:f0:c6:04: d1:25:b7:98:51:00:d3:3b:d2:26:df:db:15:bd:73:7d:15:9b: c1:46:32:ff:3e:e9:a9:c0:9a:d6:08:17:33:89:27:9f:46:7e: 59:55:c0:2a:49:f7:ac:34:cf:9b:74:74:e6:c0:5f:38:db:d3: 5b:ee:2b:e7:8f:28:df:44:ec:9b:94:fb:f2:4e:51:04:4e:ab: 16:b7:80:76:aa:03:58:cb:74:f5:6a:f1:4a:3d:96:8c:2b:6b: 01:7c:4e:1c:c8:5c:b6:4b:98:56:e8:ee:ac:96:ff:6c:58:e6: 8f:69:50:b8:31:3d:a1:ee:d8:96:6e:b0:0a:a8:17:77:29:9e: 8b:94:1d:61:9f:11:0f:27:bc:ee:6c:78:fb:ca:c3:05:dc:48: c0:14:fa:c4:88:8c:d3:e9:f1:76:ff:2f:b2:9e:bd:35:5c:d2: 68:c4:8e:e6:0d:eb:96:9a:f2:e6:c8:f8:37:3e:b1:54:25:55: 15:dc:3e:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCWwsc4044NDWH1A7nGRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYWQ2MzY1MjMxZWQ3OTM5Njk0MDkyMDE0OWRmNzFjMGFh MDhlMWYwHhcNMjUxMjA2MTAwMTM5WhcNMjUxMjA3MTAwMTM5WjAzMTEwLwYDVQQD Eyg5ZjhlZDQwYzkwZDc0ZTc4ZjFhZDBjYWI4YmQxMTg0OWMxNjAyN2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJTQceFjS6B75RRz8833O3lyJ0um 0P7YrtV1FdQ2LHEHx3+9mvr//mYJZZeYzWIkFN/IIeIUtYD+Pugn0xmnBgKXRNIk Pe3FdQ70FbnHdIsGJjm4pAQBzmuAW0eEiOlibZtiF6wQspRSm7ccpWv5UvDLhGnR eDl6cUvbz43Le1wyreXO9F3Iy8lAI4LxxuyPN4rLuff0wRjHPWWxQWPwp1jSuixs 25xoy8EcI6Cq9esKttUZmBCoJrkDSbxHDltlUuU67ySM6KfReVuhf62vlDuB6woj Pft5iGNp6jevBv/o7AdSm3WNavxLVAHuvPGOyEkmoe+DmS9VnmzdwBwjDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+O1AyQ10548a0Mq4vRGEnBYCe7MB8GA1UdIwQY MBaAFAOtY2UjHteTlpQJIBSd9xwKoI4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzM5NDgtZjlhMy00YjQ0LWE0YTkt NDE0OWRlNTI4ODMzLzEvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yMzM5NDgtZjlhMy00YjQ0LWE0YTktNDE0OWRlNTI4ODMz LzEvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEOg6Byd JZL49kwA7vby5amKcy++K+f+e9tgHGM4T9Yp5vUBXxiF07gljSxIbLBhWRfjQVn+ J4vcENZ9qFvk8rmm/G+Q8MYE0SW3mFEA0zvSJt/bFb1zfRWbwUYy/z7pqcCa1ggX M4knn0Z+WVXAKkn3rDTPm3R05sBfONvTW+4r548o30Tsm5T78k5RBE6rFreAdqoD WMt09WrxSj2WjCtrAXxOHMhctkuYVujurJb/bFjmj2lQuDE9oe7Ylm6wCqgXdyme i5QdYZ8RDye87mx4+8rDBdxIwBT6xIiM0+nxdv8vsp69NVzSaMSO5g3rlpry5sj4 Nz6xVCVVFdw+3A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:35 2025 by rpki-client