This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft File: 0AL76fCkE2A-3vtzOlMfLiwOnAY.mft (raw, json) Hash identifier: gKDgD3GByKz7VMxCl3bTYlUxKJ9UGCaQdhFvq3aZhrU= Subject key identifier: AD:DD:89:16:96:4E:94:E0:17:EF:04:42:3B:63:68:5D:01:0F:B6:62 Authority key identifier: D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06 Certificate issuer: /CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06 Certificate serial: 019B2BC1CDB445675DAFFD4AE9ADF9DEFE26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 10:01:19 +0000 Manifest this update: Wed 17 Dec 2025 10:01:19 +0000 Manifest next update: Thu 18 Dec 2025 10:01:19 +0000 Files and hashes: 1: 0AL76fCkE2A-3vtzOlMfLiwOnAY.crl (hash: RdolD+sbTeMilAXbBGt3fLasxUqzz82YvyoERHehM3M=) 2: _XUidn5LGX4qhZ_75ajbeYWe1Ao.roa (hash: b/pfq31DckGw+o1qBs5ugJl7vAflaGA+vdef1tZYmPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:cd:b4:45:67:5d:af:fd:4a:e9:ad:f9:de:fe:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06 Validity Not Before: Dec 17 10:01:19 2025 GMT Not After : Dec 18 10:01:19 2025 GMT Subject: CN=addd8916964e94e017ef04423b63685d010fb662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:b1:08:c1:8f:dd:fc:d0:51:ff:e6:4a:15: a3:56:20:35:bc:58:d1:ed:fe:f7:d5:c1:f9:a5:17: b3:f2:fd:4e:7b:b5:84:53:47:69:15:36:08:8b:8a: 30:6f:77:5a:83:30:e3:23:97:8b:9c:0d:82:59:2b: 6f:ce:3d:6c:3b:62:9d:c2:48:52:85:f1:34:a2:b5: 59:d7:ea:7f:84:d7:4b:e5:5c:17:79:c1:10:ee:d9: f1:07:e4:61:09:09:21:bb:ae:1f:81:a1:b3:57:a2: f8:e4:60:b8:af:06:f4:12:c7:83:6a:e5:6f:70:9f: 62:10:e7:7f:64:52:54:57:5d:9a:f1:74:f5:e3:b9: 98:22:62:ab:4b:5a:0d:f1:9c:ba:be:18:11:31:fc: a7:6b:cb:ff:35:59:fb:1d:f6:3a:84:8e:77:23:62: f7:50:58:ff:a8:41:8d:e7:10:40:1e:06:f7:2b:ba: ba:54:40:87:92:50:91:1c:b9:44:db:37:d4:de:4c: 88:70:92:51:e7:3e:81:72:30:33:2c:b0:02:f2:bb: 0e:24:11:78:3e:20:b2:ff:f7:bb:43:61:fc:1f:b1: b3:07:02:4a:76:a0:16:c9:ec:60:e9:2d:4a:99:be: 97:08:9d:cd:1d:7b:cc:d2:c8:d8:1a:e2:16:33:41: 44:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DD:89:16:96:4E:94:E0:17:EF:04:42:3B:63:68:5D:01:0F:B6:62 X509v3 Authority Key Identifier: keyid:D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:d5:21:ca:3a:61:1d:ac:e4:82:17:88:33:e1:91:30:c0:49: b4:b0:1e:db:09:7b:52:ee:13:02:09:48:3c:bf:aa:02:b8:18: 80:43:63:4c:a6:9b:c0:bd:b0:11:21:7d:26:d3:63:67:8b:5e: 8e:37:bb:18:a8:22:5a:4b:22:5e:41:f7:a4:3a:20:f2:bc:bd: d8:09:e9:18:a7:c5:7c:03:4b:dd:3c:17:ec:63:f4:9b:4a:f7: 9d:4b:73:84:43:70:9e:07:87:bd:2c:20:76:76:d2:ed:3e:b9: f1:b3:8f:ed:bd:3e:ce:6c:3a:38:7f:8e:75:dc:d0:54:11:12: 43:7f:1f:28:3b:db:23:bc:85:a7:de:42:9f:22:14:71:25:3f: df:0e:cb:18:ae:cd:e3:91:52:79:5f:e9:7d:28:7a:5b:4f:b9: dd:20:fb:db:16:6c:40:c6:1d:15:10:6f:09:54:1d:05:aa:26: 53:6e:d8:82:3c:42:37:db:b5:cf:07:d3:83:5c:33:11:45:5a: f6:70:9b:6b:4e:d0:6b:06:3b:a4:b6:b9:ef:11:75:24:8f:af: de:c9:3f:1f:04:75:d8:00:99:9d:af:b1:31:53:6c:9d:76:79: 4e:92:8b:a1:13:b3:36:32:cc:40:89:a6:75:ff:bf:8e:c2:46: 44:c7:c3:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwc20RWddr/1K6a353v4mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMDJmYmU5ZjBhNDEzNjAzZWRlZmI3MzNhNTMxZjJlMmMw ZTljMDYwHhcNMjUxMjE3MTAwMTE5WhcNMjUxMjE4MTAwMTE5WjAzMTEwLwYDVQQD EyhhZGRkODkxNjk2NGU5NGUwMTdlZjA0NDIzYjYzNjg1ZDAxMGZiNjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHOxCMGP3fzQUf/mShWjViA1vFjR 7f731cH5pRez8v1Oe7WEU0dpFTYIi4owb3dagzDjI5eLnA2CWStvzj1sO2KdwkhS hfE0orVZ1+p/hNdL5VwXecEQ7tnxB+RhCQkhu64fgaGzV6L45GC4rwb0EseDauVv cJ9iEOd/ZFJUV12a8XT147mYImKrS1oN8Zy6vhgRMfyna8v/NVn7HfY6hI53I2L3 UFj/qEGN5xBAHgb3K7q6VECHklCRHLlE2zfU3kyIcJJR5z6BcjAzLLAC8rsOJBF4 PiCy//e7Q2H8H7GzBwJKdqAWyexg6S1Kmb6XCJ3NHXvM0sjYGuIWM0FEhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3diRaWTpTgF+8EQjtjaF0BD7ZiMB8GA1UdIwQY MBaAFNAC++nwpBNgPt77czpTHy4sDpwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85YmFmYjEtMGM0Mi00MjViLWFhMjkt MTljMDQ1YzZhMTRmLzEvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85YmFmYjEtMGM0Mi00MjViLWFhMjktMTljMDQ1YzZhMTRm LzEvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNUhyjph HazkgheIM+GRMMBJtLAe2wl7Uu4TAglIPL+qArgYgENjTKabwL2wESF9JtNjZ4te jje7GKgiWksiXkH3pDog8ry92AnpGKfFfANL3TwX7GP0m0r3nUtzhENwngeHvSwg dnbS7T658bOP7b0+zmw6OH+OddzQVBESQ38fKDvbI7yFp95CnyIUcSU/3w7LGK7N 45FSeV/pfSh6W0+53SD72xZsQMYdFRBvCVQdBaomU27YgjxCN9u1zwfTg1wzEUVa 9nCba07QawY7pLa57xF1JI+v3sk/HwR12ACZna+xMVNsnXZ5TpKLoROzNjLMQImm df+/jsJGRMfDhQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:35:02 2025 by rpki-client