This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json) Hash identifier: K0nhKOKj+5KDsT+lbHb2fO9klcFtNlXx41mYggDK6mQ= Subject key identifier: 61:26:66:E3:77:02:4E:F3:11:F4:80:FD:7A:31:94:36:FB:85:66:38 Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af Certificate serial: 019AF31C0E1E77FBF71CB861DCAFAAB50BB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft Manifest number: 13AF Signing time: Sat 06 Dec 2025 10:01:33 +0000 Manifest this update: Sat 06 Dec 2025 10:01:33 +0000 Manifest next update: Sun 07 Dec 2025 10:01:33 +0000 Files and hashes: 1: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: fomGX3/9G8ARPQ5+SKSPPHtFmuZ5K12rBPNeaI7nuRk=) 2: PAFl-pG2JHaMz_7ipR6yMf63H8w.roa (hash: byy0wWUqy3xmET5bVuzwYGsa7Zk9Dk0kE6IQV8R/QgY=) 3: jZL5Xhdd_DQTPlseqK0seytctFM.roa (hash: iK3t86giIYaf8WbR2Oyl7XO/RS0ik8f6mwnnTPsecrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:0e:1e:77:fb:f7:1c:b8:61:dc:af:aa:b5:0b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d8024188491a319c5276721f940efae7fc21af Validity Not Before: Dec 6 10:01:33 2025 GMT Not After : Dec 7 10:01:33 2025 GMT Subject: CN=612666e377024ef311f480fd7a319436fb856638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7e:8e:36:62:b8:64:1f:3a:f5:6e:da:24:2e: 86:b2:11:f1:58:3e:a7:ee:32:98:01:56:b3:85:c6: 96:bb:ff:cc:ac:25:72:37:0b:d8:60:fb:97:bd:f2: 01:ae:61:a8:f8:63:84:79:b3:1d:1d:4b:da:52:13: 6b:66:0e:53:a3:3a:b6:e0:68:49:db:b6:47:b1:31: 6f:92:68:ad:97:57:4e:9d:89:c7:77:14:b8:e9:d8: b2:ef:15:84:2a:dc:98:38:3e:c0:3d:74:45:94:39: c4:cc:e8:63:9d:7e:c8:47:ee:a7:de:76:e1:61:ef: 87:b9:63:ef:a0:51:fe:52:37:d6:0a:dd:61:d6:11: fd:9a:35:69:d0:79:58:0c:ef:12:e1:a5:0f:f6:7a: 65:41:90:21:b4:ba:7b:3c:f7:41:ff:d2:b7:11:66: d3:8a:ae:a9:ff:f1:f3:39:2e:e8:63:af:ab:a2:e0: cf:8d:8c:06:7f:b5:68:8e:98:bc:03:e5:53:e6:e9: 23:d7:3d:0a:bb:06:a3:53:1c:de:13:7a:cf:4b:c3: 1c:1a:87:3e:70:cc:46:52:58:2d:5d:a3:1a:ac:ea: 08:d0:e2:eb:fa:2d:17:c7:57:02:3c:62:61:57:b3: 67:3e:d4:ec:2c:c0:85:7a:1f:c6:9c:b0:2d:e4:55: d4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:26:66:E3:77:02:4E:F3:11:F4:80:FD:7A:31:94:36:FB:85:66:38 X509v3 Authority Key Identifier: keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4b:90:40:ed:53:20:16:dc:67:c4:0b:c5:ff:a8:54:18:06: 0d:3e:52:17:ac:0c:95:4b:78:e0:be:65:bc:a5:57:c6:f7:5d: d2:ce:e9:7d:58:23:d2:e3:7e:70:7a:cd:2e:b0:d8:0a:12:91: e8:88:db:56:66:9a:7c:95:59:d9:67:e3:37:1c:83:2c:03:56: 36:14:27:08:5b:dc:bd:01:4d:03:8d:84:be:ae:5b:57:61:ca: e2:77:1c:f4:e5:6d:ba:60:d7:ef:81:af:31:75:b3:c7:69:ac: 5a:44:a5:ec:0b:70:a9:53:c2:c3:71:90:0b:19:62:94:06:d0: ff:6b:86:0d:8d:5c:e5:67:93:11:86:f0:ff:9e:ea:1d:0b:ce: cc:3f:e3:dc:0c:49:2b:a7:77:f1:c8:94:48:39:01:6f:12:11: 7f:98:3b:57:97:4f:7b:a8:ce:36:03:1d:ca:af:12:a4:9d:d4: 6b:c3:aa:c8:05:89:f1:55:43:e3:63:61:1d:8a:63:36:c8:53: 62:9b:c0:2a:0b:d9:3d:9f:cf:f8:f8:d7:14:f8:3e:4c:e2:92: 6a:37:d0:ae:8e:ba:fa:9d:7a:0f:25:3a:86:49:03:82:05:c9: fe:41:94:c5:b1:a8:e5:fe:24:54:09:5c:59:c2:4c:0c:e2:c8: 8b:bc:40:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHA4ed/v3HLhh3K+qtQu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZDgwMjQxODg0OTFhMzE5YzUyNzY3MjFmOTQwZWZhZTdm YzIxYWYwHhcNMjUxMjA2MTAwMTMzWhcNMjUxMjA3MTAwMTMzWjAzMTEwLwYDVQQD Eyg2MTI2NjZlMzc3MDI0ZWYzMTFmNDgwZmQ3YTMxOTQzNmZiODU2NjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo36ONmK4ZB869W7aJC6GshHxWD6n 7jKYAVazhcaWu//MrCVyNwvYYPuXvfIBrmGo+GOEebMdHUvaUhNrZg5Tozq24GhJ 27ZHsTFvkmitl1dOnYnHdxS46diy7xWEKtyYOD7APXRFlDnEzOhjnX7IR+6n3nbh Ye+HuWPvoFH+UjfWCt1h1hH9mjVp0HlYDO8S4aUP9nplQZAhtLp7PPdB/9K3EWbT iq6p//HzOS7oY6+rouDPjYwGf7Vojpi8A+VT5ukj1z0KuwajUxzeE3rPS8McGoc+ cMxGUlgtXaMarOoI0OLr+i0Xx1cCPGJhV7NnPtTsLMCFeh/GnLAt5FXUjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEmZuN3Ak7zEfSA/XoxlDb7hWY4MB8GA1UdIwQY MBaAFAPYAkGISRoxnFJ2ch+UDvrn/CGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODct N2JiYWM4Y2MyNzgzLzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODctN2JiYWM4Y2MyNzgz LzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEuQQO1T IBbcZ8QLxf+oVBgGDT5SF6wMlUt44L5lvKVXxvdd0s7pfVgj0uN+cHrNLrDYChKR 6IjbVmaafJVZ2WfjNxyDLANWNhQnCFvcvQFNA42Evq5bV2HK4ncc9OVtumDX74Gv MXWzx2msWkSl7AtwqVPCw3GQCxlilAbQ/2uGDY1c5WeTEYbw/57qHQvOzD/j3AxJ K6d38ciUSDkBbxIRf5g7V5dPe6jONgMdyq8SpJ3Ua8OqyAWJ8VVD42NhHYpjNshT YpvAKgvZPZ/P+PjXFPg+TOKSajfQro66+p16DyU6hkkDggXJ/kGUxbGo5f4kVAlc WcJMDOLIi7xAmg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:18:55 2025 by rpki-client