This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft File: A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json) Hash identifier: I6ieEgmQ9pQilqW4X3J6rok1NIbIDxqImuj8UpTco68= Subject key identifier: 18:0A:31:07:65:0F:BE:E8:E6:DC:1C:77:C6:4C:1D:EC:73:AE:8D:09 Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8 Certificate issuer: /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8 Certificate serial: 019AF3521B55B4D07A35A36383C6604085F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft Manifest number: 041E Signing time: Sat 06 Dec 2025 11:00:35 +0000 Manifest this update: Sat 06 Dec 2025 11:00:35 +0000 Manifest next update: Sun 07 Dec 2025 11:00:35 +0000 Files and hashes: 1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: lGo2vr7ogrG06n3u4Ln1Ek/u5ltk5Lw6VaGL/E3O0AM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:1b:55:b4:d0:7a:35:a3:63:83:c6:60:40:85:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8 Validity Not Before: Dec 6 11:00:35 2025 GMT Not After : Dec 7 11:00:35 2025 GMT Subject: CN=180a3107650fbee8e6dc1c77c64c1dec73ae8d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:bc:d9:f4:03:61:e7:c9:1b:8a:8d:7a:6b: f2:36:54:3f:80:3a:ce:ac:8e:f1:99:0b:a9:4f:81: f1:b7:55:8b:1e:3a:c9:26:87:5d:17:42:4d:0a:a3: 02:c1:aa:1b:cc:64:4a:1b:ac:d0:df:a7:39:23:02: 5b:09:98:58:0c:eb:ee:f3:34:0f:1d:4f:a7:c5:7f: 3b:e7:e7:2b:19:39:62:5d:5c:9b:ba:fd:96:e2:cd: 83:67:f0:5f:3c:aa:a9:3e:9b:7d:0f:33:87:57:2e: 00:91:8b:23:36:c2:ed:f2:8a:d7:61:3a:95:de:dc: 98:b5:5e:55:b0:c7:7b:c2:26:6c:50:eb:ba:27:27: 9d:7f:23:04:16:6c:7a:e9:3b:e2:23:cd:eb:be:18: 0e:0f:5f:3b:66:f2:1f:bf:46:cf:a4:23:d6:c4:59: 4f:14:99:3c:78:2f:34:35:f2:d1:d6:4e:d9:e4:17: 89:fd:55:e4:2e:2b:94:86:a0:26:91:4a:16:7e:96: 84:5a:2d:c4:18:e1:a7:62:13:5f:df:c3:78:7f:e4: 34:c6:10:eb:b7:59:72:6a:e0:a9:62:dc:2d:2f:37: ac:0c:aa:32:ba:12:e9:43:c8:6e:4d:7d:fa:9f:96: cf:44:77:fc:4f:7e:65:a2:f6:cf:05:86:ff:a4:76: 0f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0A:31:07:65:0F:BE:E8:E6:DC:1C:77:C6:4C:1D:EC:73:AE:8D:09 X509v3 Authority Key Identifier: keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:60:0d:88:9d:37:33:c1:f1:ea:77:df:cc:1d:d7:e4:ae:98: 7f:90:57:d6:82:a8:f0:f1:0e:7a:24:8b:53:86:b4:b5:7f:fc: 07:ac:45:d6:2e:02:e2:f3:fe:12:94:a7:3e:61:2d:3f:b3:08: 20:81:35:f5:08:da:24:e8:fb:9a:18:5f:76:38:29:48:ba:18: 68:f9:61:ad:17:65:cb:7f:f5:19:c2:e6:af:a9:87:3f:28:a8: f1:26:f6:1a:77:9c:ac:c9:2f:11:17:3c:97:b3:3b:79:f9:33: c0:7e:db:e7:4f:a6:6b:db:ae:a9:c8:ca:9e:91:c0:7f:13:7f: f6:5e:0b:28:21:ab:90:b5:af:ba:1c:55:8c:ac:e2:95:06:f6: 64:dc:75:42:9b:69:0b:51:0c:a0:c8:e1:b3:d3:85:22:ca:60: d5:72:37:a8:bc:d3:13:f5:87:95:c1:bc:68:61:61:e5:6a:a2: 12:49:46:62:22:8a:81:19:32:18:51:6b:e0:2f:94:11:a3:00: dc:3f:26:b5:c2:8d:23:ef:d6:e7:af:60:9d:a0:6c:f4:22:fb: ea:5f:e5:7a:75:22:f2:df:01:47:38:e0:71:c5:81:de:d0:cf: 17:25:eb:2b:63:8c:37:e5:4d:f5:fa:ce:e9:eb:36:91:a9:1c: 89:79:36:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUhtVtNB6NaNjg8ZgQIXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZWVlMjdkZGI0OTBiYjk2NjllZWJhMGUxMTY5NDE2NGNh MmU4ZTgwHhcNMjUxMjA2MTEwMDM1WhcNMjUxMjA3MTEwMDM1WjAzMTEwLwYDVQQD EygxODBhMzEwNzY1MGZiZWU4ZTZkYzFjNzdjNjRjMWRlYzczYWU4ZDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufS82fQDYefJG4qNemvyNlQ/gDrO rI7xmQupT4Hxt1WLHjrJJoddF0JNCqMCwaobzGRKG6zQ36c5IwJbCZhYDOvu8zQP HU+nxX875+crGTliXVybuv2W4s2DZ/BfPKqpPpt9DzOHVy4AkYsjNsLt8orXYTqV 3tyYtV5VsMd7wiZsUOu6JyedfyMEFmx66TviI83rvhgOD187ZvIfv0bPpCPWxFlP FJk8eC80NfLR1k7Z5BeJ/VXkLiuUhqAmkUoWfpaEWi3EGOGnYhNf38N4f+Q0xhDr t1lyauCpYtwtLzesDKoyuhLpQ8huTX36n5bPRHf8T35lovbPBYb/pHYPRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgKMQdlD77o5twcd8ZMHexzro0JMB8GA1UdIwQY MBaAFAPu4n3bSQu5Zp7roOEWlBZMoujoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS03aWZkdEpDN2xtbnV1ZzRSYVVGa3lpNk9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9kNGQyMzEtYTlhNS00MDdiLWJhMjUt OGQ4YzU5MmRhNDIwLzEvQS03aWZkdEpDN2xtbnV1ZzRSYVVGa3lpNk9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9kNGQyMzEtYTlhNS00MDdiLWJhMjUtOGQ4YzU5MmRhNDIw LzEvQS03aWZkdEpDN2xtbnV1ZzRSYVVGa3lpNk9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWANiJ03 M8Hx6nffzB3X5K6Yf5BX1oKo8PEOeiSLU4a0tX/8B6xF1i4C4vP+EpSnPmEtP7MI IIE19QjaJOj7mhhfdjgpSLoYaPlhrRdly3/1GcLmr6mHPyio8Sb2GnecrMkvERc8 l7M7efkzwH7b50+ma9uuqcjKnpHAfxN/9l4LKCGrkLWvuhxVjKzilQb2ZNx1Qptp C1EMoMjhs9OFIspg1XI3qLzTE/WHlcG8aGFh5WqiEklGYiKKgRkyGFFr4C+UEaMA 3D8mtcKNI+/W569gnaBs9CL76l/lenUi8t8BRzjgccWB3tDPFyXrK2OMN+VN9frO 6es2kakciXk2Og== -----END CERTIFICATE-----Generated at Sat Dec 6 14:31:37 2025 by rpki-client