This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json) Hash identifier: t/vJ8XLEZRFbHldMwi1K9sJc6Hys95etgckH8EbFFNA= Subject key identifier: 76:A3:66:BF:65:CA:DA:A1:22:2C:24:D8:56:6F:C1:D8:39:39:A4:78 Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c Certificate serial: 019AF509958296F6D15CC01E755A33146EF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft Manifest number: 0629 Signing time: Sat 06 Dec 2025 19:00:37 +0000 Manifest this update: Sat 06 Dec 2025 19:00:37 +0000 Manifest next update: Sun 07 Dec 2025 19:00:37 +0000 Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: OWA/DN01dyYwgtP1+P43/MhP6ec7KlwdBuZaTIDg8G8=) 2: ihNwlKbuNiGlnJM8yFd2Nxrvaqo.roa (hash: auV56nH817P5x20E5reCmB5GZHUds7d7BudXxN/HlG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:95:82:96:f6:d1:5c:c0:1e:75:5a:33:14:6e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c Validity Not Before: Dec 6 19:00:37 2025 GMT Not After : Dec 7 19:00:37 2025 GMT Subject: CN=76a366bf65cadaa1222c24d8566fc1d83939a478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:c1:41:44:04:37:94:e3:55:47:df:a3:30: d5:fe:30:a1:da:d3:07:f2:b4:4a:aa:ce:f5:3a:23: 7b:66:90:73:a5:88:16:6e:cb:60:40:53:d5:8c:72: f5:db:b0:35:0e:b9:ab:b8:e4:80:9f:06:da:b9:66: f8:9a:02:53:45:4b:eb:66:6e:6a:6c:32:0e:61:5c: 69:f5:e5:8a:c3:11:a4:85:57:f0:8f:a8:86:8e:ba: c7:ed:21:df:8a:6d:af:36:5e:0c:9e:3b:2f:e3:75: de:15:de:a5:6f:82:98:a1:13:56:da:44:c3:9a:1f: ee:21:fb:e7:97:90:25:95:87:bc:41:0a:0c:5b:81: d7:9a:1f:ee:b7:a7:1b:de:45:2e:90:8a:f3:cc:48: c8:82:d9:08:03:30:f2:6f:c5:fc:0e:22:44:ed:81: 0b:33:00:97:db:da:03:07:51:1d:6d:56:61:ef:94: 5a:0a:2d:2e:a3:e4:18:31:37:1c:57:04:67:b1:cf: ba:9e:d1:ae:e8:9b:ef:9f:32:b3:82:f6:5f:cf:63: 71:d6:78:08:5e:63:04:ad:7e:4e:f8:33:6e:19:6a: 47:61:5f:fc:99:e2:c7:fa:db:f8:15:f4:d0:59:b8: 3b:a3:ca:de:bd:66:75:ba:bc:86:b3:91:c0:84:32: 1b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A3:66:BF:65:CA:DA:A1:22:2C:24:D8:56:6F:C1:D8:39:39:A4:78 X509v3 Authority Key Identifier: keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f9:89:c5:9a:d2:3e:88:ec:02:b0:49:fb:9d:dc:86:dd:2e: 65:97:7d:a4:30:ad:6d:32:0e:57:9e:fa:e7:30:ee:c6:a2:40: 69:38:34:3f:5e:35:48:29:ec:a7:92:36:3a:82:d1:5b:79:71: 9f:43:1c:23:8c:98:12:0b:8f:1f:d7:40:2c:8d:33:ae:ee:89: 19:fc:98:74:6b:ac:a9:c2:4b:50:b3:14:35:99:6d:b3:f0:e3: 8e:d9:b5:09:7b:68:f8:96:56:71:43:e8:cb:fa:b2:5d:98:86: 43:da:99:ba:21:43:de:07:cc:81:07:56:0c:a5:b6:ad:60:54: 28:79:c4:2c:d7:f7:7c:89:c3:1d:d2:1e:e6:71:fc:1d:e1:77: 10:8e:db:4d:ad:85:fd:44:ab:fb:5b:54:8f:c2:cc:ee:c7:9e: a5:ac:4e:d5:69:9c:ac:52:52:a4:b1:32:97:a1:38:a0:31:eb: 20:e1:39:b3:c0:d0:a3:52:ff:0a:16:b8:a4:44:8c:e7:b4:09: 49:51:cd:3b:8c:0b:6e:d2:bd:27:f4:b9:02:f0:68:24:79:fd: 6a:5c:ec:75:9d:34:2e:56:2d:35:40:f5:ba:56:c2:c9:f5:e3: 7e:a5:7d:27:12:13:cb:2b:ae:35:75:cb:ab:e7:af:81:74:a3: 13:04:d7:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CZWClvbRXMAedVozFG74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzY2ViMDlkNWVlYTZhMThlNThkZmRlZmViZjI5YjQxMDVl MDI2N2MwHhcNMjUxMjA2MTkwMDM3WhcNMjUxMjA3MTkwMDM3WjAzMTEwLwYDVQQD Eyg3NmEzNjZiZjY1Y2FkYWExMjIyYzI0ZDg1NjZmYzFkODM5MzlhNDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk3BQUQEN5TjVUffozDV/jCh2tMH 8rRKqs71OiN7ZpBzpYgWbstgQFPVjHL127A1DrmruOSAnwbauWb4mgJTRUvrZm5q bDIOYVxp9eWKwxGkhVfwj6iGjrrH7SHfim2vNl4Mnjsv43XeFd6lb4KYoRNW2kTD mh/uIfvnl5AllYe8QQoMW4HXmh/ut6cb3kUukIrzzEjIgtkIAzDyb8X8DiJE7YEL MwCX29oDB1EdbVZh75RaCi0uo+QYMTccVwRnsc+6ntGu6JvvnzKzgvZfz2Nx1ngI XmMErX5O+DNuGWpHYV/8meLH+tv4FfTQWbg7o8revWZ1uryGs5HAhDIbiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHajZr9lytqhIiwk2FZvwdg5OaR4MB8GA1UdIwQY MBaAFAPOsJ1e6moY5Y397+vym0EF4CZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wYzQ2NTAtNzk2NC00OGFmLTk4NWEt MzQwMThkNWM5ZGY1LzEvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wYzQ2NTAtNzk2NC00OGFmLTk4NWEtMzQwMThkNWM5ZGY1 LzEvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/mJxZrS PojsArBJ+53cht0uZZd9pDCtbTIOV5765zDuxqJAaTg0P141SCnsp5I2OoLRW3lx n0McI4yYEguPH9dALI0zru6JGfyYdGusqcJLULMUNZlts/Djjtm1CXto+JZWcUPo y/qyXZiGQ9qZuiFD3gfMgQdWDKW2rWBUKHnELNf3fInDHdIe5nH8HeF3EI7bTa2F /USr+1tUj8LM7seepaxO1WmcrFJSpLEyl6E4oDHrIOE5s8DQo1L/Cha4pESM57QJ SVHNO4wLbtK9J/S5AvBoJHn9alzsdZ00LlYtNUD1ulbCyfXjfqV9JxITyyuuNXXL q+evgXSjEwTXJg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:24:46 2025 by rpki-client