This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft File: a4us2V8fS9Z1Un0ybSmZVoYsMho.mft (raw, json) Hash identifier: jCGoHscH5KXOt4+TKlarf0mYQ8dvaBArtTJGT8FPG3g= Subject key identifier: A0:4B:F6:20:24:87:B2:82:B4:8E:CA:EA:56:C7:DD:62:C7:04:5C:1F Authority key identifier: 6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A Certificate issuer: /CN=6b8bacd95f1f4bd675527d326d299956862c321a Certificate serial: 019AF20957BECC2ED8C19912CC5A4713B0DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft Manifest number: 1202 Signing time: Sat 06 Dec 2025 05:01:29 +0000 Manifest this update: Sat 06 Dec 2025 05:01:29 +0000 Manifest next update: Sun 07 Dec 2025 05:01:29 +0000 Files and hashes: 1: a4us2V8fS9Z1Un0ybSmZVoYsMho.crl (hash: /6mToqinjTikyrkdeGeONDuJt6diBBL57zzGWY+NsoI=) 2: pWHDIdvugLu8Y51LeZtocP5HOcI.roa (hash: fyvGZubWInNshv6PvFcn8DVCaqecv6kcINe/lSRIemw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:57:be:cc:2e:d8:c1:99:12:cc:5a:47:13:b0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b8bacd95f1f4bd675527d326d299956862c321a Validity Not Before: Dec 6 05:01:29 2025 GMT Not After : Dec 7 05:01:29 2025 GMT Subject: CN=a04bf6202487b282b48ecaea56c7dd62c7045c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:b4:5c:51:77:3c:b3:84:19:54:98:ab:79: fe:6f:8e:dc:da:67:ba:d8:04:5f:4b:87:e4:9e:e9: 4c:7c:29:8b:1a:da:c9:65:fe:f9:71:df:26:d2:62: bb:4b:d8:7a:50:f7:a1:e5:8a:72:67:c8:40:a2:eb: e7:cb:e6:83:05:8f:ce:88:50:dd:43:8e:5d:4b:85: 1f:34:21:57:0c:89:b8:ff:33:93:96:29:d6:5d:22: de:b1:31:43:83:b8:b4:09:6c:8f:62:68:ed:33:2a: 0b:6d:e1:cf:ca:17:3e:59:fd:ef:19:4c:5b:ce:4d: 8c:4a:86:47:53:fb:48:c1:e4:8c:73:6c:bd:34:c3: 68:00:01:95:3f:6d:82:db:7b:65:c5:7f:b8:d3:9f: 8a:7f:d6:24:67:40:34:2c:98:07:8b:ed:1a:fd:91: 0a:20:c3:1c:6b:cf:04:7b:46:8d:37:ea:b4:f4:ea: 4c:56:4d:e1:62:61:fc:82:1a:3f:37:4e:c0:9a:fe: 56:fd:c1:e0:4b:ea:a4:b4:c7:39:c8:28:7c:e1:b4: a8:6f:82:5d:e5:f3:74:b8:12:0b:cc:75:eb:5f:a2: 9a:ae:51:8e:67:db:cb:ae:5e:be:4a:a7:57:5d:0f: 91:8e:50:2e:7b:52:e4:79:de:93:f9:24:26:0f:ee: 19:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4B:F6:20:24:87:B2:82:B4:8E:CA:EA:56:C7:DD:62:C7:04:5C:1F X509v3 Authority Key Identifier: keyid:6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:4f:0c:1f:f5:9b:57:bf:74:b5:63:da:5a:6c:cf:26:7e:d2: 58:67:65:35:a2:37:9f:f1:35:db:dc:f2:89:77:74:09:3e:e9: 0a:8f:00:b4:53:4d:d9:24:84:b3:4e:90:3c:7f:34:bc:d6:24: 89:b1:c1:0d:36:7e:1a:81:31:ab:2d:2a:b0:5f:a5:2a:90:92: 3d:10:e8:1c:7a:fa:23:6b:ae:c5:49:08:64:fc:e1:9c:8c:11: e6:11:b2:c9:3a:16:6a:ff:4b:b5:e4:5a:d9:e5:32:66:ca:36: f6:f3:f9:f7:c6:2c:47:68:03:57:0a:ed:f0:a3:fb:8d:ad:d9: a4:59:dc:23:8f:c4:76:a1:25:59:94:b7:fc:d6:a5:a2:3b:03: 62:c8:9d:e8:72:16:a6:03:5b:1b:85:14:ef:0b:1e:48:2d:9d: 3f:05:5f:c3:08:11:69:9b:83:0c:e2:d7:da:86:09:f4:d7:eb: 4a:78:f8:d5:44:7f:56:19:b2:7f:a6:2a:de:22:3b:13:4d:9a: b3:70:fc:3d:1b:e1:39:2a:49:38:4a:52:f8:be:0b:65:0d:98: 64:fa:2c:01:4c:b9:81:88:a9:54:ce:3b:c2:29:d7:ab:cb:ea: 4f:83:79:29:f4:0f:20:2d:34:54:fb:d5:27:d0:11:c3:74:49: 34:73:7f:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVe+zC7YwZkSzFpHE7DbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiOGJhY2Q5NWYxZjRiZDY3NTUyN2QzMjZkMjk5OTU2ODYy YzMyMWEwHhcNMjUxMjA2MDUwMTI5WhcNMjUxMjA3MDUwMTI5WjAzMTEwLwYDVQQD EyhhMDRiZjYyMDI0ODdiMjgyYjQ4ZWNhZWE1NmM3ZGQ2MmM3MDQ1YzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQK0XFF3PLOEGVSYq3n+b47c2me6 2ARfS4fknulMfCmLGtrJZf75cd8m0mK7S9h6UPeh5YpyZ8hAouvny+aDBY/OiFDd Q45dS4UfNCFXDIm4/zOTlinWXSLesTFDg7i0CWyPYmjtMyoLbeHPyhc+Wf3vGUxb zk2MSoZHU/tIweSMc2y9NMNoAAGVP22C23tlxX+405+Kf9YkZ0A0LJgHi+0a/ZEK IMMca88Ee0aNN+q09OpMVk3hYmH8gho/N07Amv5W/cHgS+qktMc5yCh84bSob4Jd 5fN0uBILzHXrX6KarlGOZ9vLrl6+SqdXXQ+RjlAue1Lked6T+SQmD+4ZbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBL9iAkh7KCtI7K6lbH3WLHBFwfMB8GA1UdIwQY MBaAFGuLrNlfH0vWdVJ9Mm0pmVaGLDIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTR1czJWOGZTOVoxVW4weWJTbVpWb1lzTWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85Y2U1NTAtMmI3ZS00ZjhmLThlZTEt MTJlZDM5OTVlNWRlLzEvYTR1czJWOGZTOVoxVW4weWJTbVpWb1lzTWhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85Y2U1NTAtMmI3ZS00ZjhmLThlZTEtMTJlZDM5OTVlNWRl LzEvYTR1czJWOGZTOVoxVW4weWJTbVpWb1lzTWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArU8MH/Wb V790tWPaWmzPJn7SWGdlNaI3n/E129zyiXd0CT7pCo8AtFNN2SSEs06QPH80vNYk ibHBDTZ+GoExqy0qsF+lKpCSPRDoHHr6I2uuxUkIZPzhnIwR5hGyyToWav9LteRa 2eUyZso29vP598YsR2gDVwrt8KP7ja3ZpFncI4/EdqElWZS3/NalojsDYsid6HIW pgNbG4UU7wseSC2dPwVfwwgRaZuDDOLX2oYJ9NfrSnj41UR/Vhmyf6Yq3iI7E02a s3D8PRvhOSpJOEpS+L4LZQ2YZPosAUy5gYipVM47winXq8vqT4N5KfQPIC00VPvV J9ARw3RJNHN/NA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:23 2025 by rpki-client