This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft File: 0AL76fCkE2A-3vtzOlMfLiwOnAY.mft (raw, json) Hash identifier: /UAC0Z4VKtNwp7fafZwvlJjPVxlAr4K+ErhMK6ZDc/Q= Subject key identifier: 55:B7:A2:F7:91:F5:D0:1E:91:52:E2:98:34:EE:FF:D9:D1:B2:7B:24 Authority key identifier: D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06 Certificate issuer: /CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06 Certificate serial: 019AF1D1DC7548088FE795566E66E915965A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:00:53 +0000 Manifest this update: Sat 06 Dec 2025 04:00:53 +0000 Manifest next update: Sun 07 Dec 2025 04:00:53 +0000 Files and hashes: 1: 0AL76fCkE2A-3vtzOlMfLiwOnAY.crl (hash: f+RR+BgzzD9X7Jh5omQBxaU0hl0Hjr+/wVi8NJuzG3g=) 2: _XUidn5LGX4qhZ_75ajbeYWe1Ao.roa (hash: b/pfq31DckGw+o1qBs5ugJl7vAflaGA+vdef1tZYmPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:dc:75:48:08:8f:e7:95:56:6e:66:e9:15:96:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06 Validity Not Before: Dec 6 04:00:53 2025 GMT Not After : Dec 7 04:00:53 2025 GMT Subject: CN=55b7a2f791f5d01e9152e29834eeffd9d1b27b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e0:58:d4:97:70:c6:08:09:ae:0c:c4:f4:f3: 28:12:d5:e5:f9:71:9f:5c:f3:f9:7e:31:f1:ea:2d: 9f:af:db:07:35:e6:9b:4a:04:c7:59:da:2b:ee:ae: bd:32:ed:a0:c6:30:ec:8e:e7:86:82:af:9c:4a:ec: a0:6f:7a:62:ee:b5:36:bc:89:bb:81:55:60:b9:b3: 7a:5c:b6:b3:56:96:c0:65:d7:41:75:05:78:0f:52: 73:9f:15:92:72:37:c8:03:b1:6b:28:f6:05:4e:17: ea:0e:f1:d9:4f:04:7b:2c:7d:cd:87:8e:cc:d0:ed: f4:63:36:f3:5c:66:21:05:f1:ed:d4:d5:90:0e:05: 7b:d1:8e:03:49:9a:66:11:9e:8c:cd:4b:0c:f0:62: 3d:62:71:53:87:01:f2:dc:96:de:6d:e1:40:f6:9f: f1:99:32:15:f9:c1:08:43:e6:f9:0d:2d:28:a8:15: 8b:c5:66:7c:f1:7e:88:9c:98:40:6d:14:43:93:8d: 32:c3:ec:58:56:32:1f:77:ba:e3:03:6f:a7:5f:2b: bd:77:a5:65:25:b0:75:15:0e:9e:f7:8d:07:a5:f4: 99:2e:d7:ca:eb:a8:3a:5b:be:f7:e6:00:d4:24:35: d3:d3:61:bb:2b:8e:b6:59:31:08:4d:82:74:0d:32: 29:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B7:A2:F7:91:F5:D0:1E:91:52:E2:98:34:EE:FF:D9:D1:B2:7B:24 X509v3 Authority Key Identifier: keyid:D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:91:0a:5d:4e:d5:ce:07:c0:1d:f8:d3:ed:1e:f9:7e:f9:d2: 44:ae:2b:8e:15:bc:22:7d:76:a5:80:7f:21:59:91:8c:86:44: af:6f:b7:ce:1d:8f:6c:f2:67:fc:2e:af:97:bf:66:65:15:39: 7e:7c:8a:35:42:11:76:f6:96:9c:7e:52:0a:a2:7c:de:ff:08: 99:5b:27:19:af:a6:1d:ff:dc:fa:51:b4:fa:e5:4d:01:20:dd: 36:03:22:e2:c0:2e:85:70:06:c9:ed:83:ef:ce:7e:0d:dc:15: 23:32:f3:63:52:69:2d:62:a3:01:28:f6:8a:45:30:a9:e5:b4: d3:23:3c:60:fb:5f:27:2e:f8:48:06:82:07:08:1b:ac:1a:b2: 8e:c3:e3:c9:ff:c9:31:bc:de:8a:6d:63:eb:7c:ea:ba:c8:14: 6d:e8:a3:dc:b5:50:3b:6a:5f:02:0a:f5:00:5d:67:ef:d7:20: 5f:ef:dc:7e:f0:f4:d4:52:fa:d0:74:78:49:37:7b:a8:95:4d: cb:ee:ef:83:02:db:35:2d:64:22:fa:49:24:ef:f1:2e:53:25: 8f:60:f9:af:e8:2a:30:b8:c2:67:fb:55:5a:3a:b3:7b:52:d7: 6b:5a:c2:96:83:46:c1:2c:30:dc:0f:cc:4c:b8:15:8c:b4:13: a3:4a:60:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dx1SAiP55VWbmbpFZZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMDJmYmU5ZjBhNDEzNjAzZWRlZmI3MzNhNTMxZjJlMmMw ZTljMDYwHhcNMjUxMjA2MDQwMDUzWhcNMjUxMjA3MDQwMDUzWjAzMTEwLwYDVQQD Eyg1NWI3YTJmNzkxZjVkMDFlOTE1MmUyOTgzNGVlZmZkOWQxYjI3YjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteBY1JdwxggJrgzE9PMoEtXl+XGf XPP5fjHx6i2fr9sHNeabSgTHWdor7q69Mu2gxjDsjueGgq+cSuygb3pi7rU2vIm7 gVVgubN6XLazVpbAZddBdQV4D1JznxWScjfIA7FrKPYFThfqDvHZTwR7LH3Nh47M 0O30YzbzXGYhBfHt1NWQDgV70Y4DSZpmEZ6MzUsM8GI9YnFThwHy3JbebeFA9p/x mTIV+cEIQ+b5DS0oqBWLxWZ88X6InJhAbRRDk40yw+xYVjIfd7rjA2+nXyu9d6Vl JbB1FQ6e940HpfSZLtfK66g6W7735gDUJDXT02G7K462WTEITYJ0DTIpywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFW3oveR9dAekVLimDTu/9nRsnskMB8GA1UdIwQY MBaAFNAC++nwpBNgPt77czpTHy4sDpwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85YmFmYjEtMGM0Mi00MjViLWFhMjkt MTljMDQ1YzZhMTRmLzEvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85YmFmYjEtMGM0Mi00MjViLWFhMjktMTljMDQ1YzZhMTRm LzEvMEFMNzZmQ2tFMkEtM3Z0ek9sTWZMaXdPbkFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZEKXU7V zgfAHfjT7R75fvnSRK4rjhW8In12pYB/IVmRjIZEr2+3zh2PbPJn/C6vl79mZRU5 fnyKNUIRdvaWnH5SCqJ83v8ImVsnGa+mHf/c+lG0+uVNASDdNgMi4sAuhXAGye2D 785+DdwVIzLzY1JpLWKjASj2ikUwqeW00yM8YPtfJy74SAaCBwgbrBqyjsPjyf/J Mbzeim1j63zqusgUbeij3LVQO2pfAgr1AF1n79cgX+/cfvD01FL60HR4STd7qJVN y+7vgwLbNS1kIvpJJO/xLlMlj2D5r+gqMLjCZ/tVWjqze1LXa1rCloNGwSww3A/M TLgVjLQTo0pgmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:55 2025 by rpki-client