This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json) Hash identifier: pfKvq9kwAb9b3iMMbxf3h6B4LHpuVPa/mz8hSoqR38k= Subject key identifier: 13:9F:81:BC:B2:18:2C:6F:8A:15:24:12:01:85:F0:DF:DE:3F:C5:1E Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Certificate serial: 019AF61C22BE4CDDC09CBD5C4C0B5B53A6FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft Manifest number: 0C50 Signing time: Sun 07 Dec 2025 00:00:30 +0000 Manifest this update: Sun 07 Dec 2025 00:00:30 +0000 Manifest next update: Mon 08 Dec 2025 00:00:30 +0000 Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: xODUjYr0dLG65ayuQbYxUlDsmKn0UE8OIxIlezI8pWU=) 2: UU-ZPgHLSl7n9-aFlFBn6cpPmcU.roa (hash: Q6YDAvzuzbvQcAN8CcizevWV2gHJhbtqI7OUoG4zkxk=) 3: eK7sZ1D_OT19uO-hHprpcrVXcWU.roa (hash: bVKg53TVS+OiFbk3Bkeg0BfOZQFTwlQ5IxwlXslILAc=) 4: hxpDIvDSUNYIW-RymDBwexWB-8g.roa (hash: Jv5BRt+QxxWpqyESuYnWjL1CPNaN/TrtWzKi1FkPja0=) 5: xLGL3BfWxMtcUVRxtiUbq631owE.roa (hash: +UNhAurOfSKP8/97u/DACbGsjraqdASOxaVTIj4mWJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:22:be:4c:dd:c0:9c:bd:5c:4c:0b:5b:53:a6:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Validity Not Before: Dec 7 00:00:30 2025 GMT Not After : Dec 8 00:00:30 2025 GMT Subject: CN=139f81bcb2182c6f8a1524120185f0dfde3fc51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:95:79:26:28:f5:b5:c7:91:66:9c:41:45: a7:4d:85:1a:02:be:9e:e1:f9:4b:14:a7:09:b2:1a: 68:dc:4a:c4:cc:a2:42:d0:cf:98:35:d9:36:5e:6d: f5:7e:9f:4e:cf:9a:c2:57:16:c2:6f:0c:dc:e0:1c: 67:b8:a1:de:0d:45:ae:df:5c:05:87:d2:b4:6e:ba: 90:b4:b1:30:ef:8f:87:f7:8e:17:8e:98:80:44:c9: 8e:e4:89:a5:fc:2c:77:ec:99:e2:65:82:42:fd:f5: b2:62:5b:33:d3:1f:e7:d1:a3:18:1e:9f:6a:34:47: 06:34:a6:7e:d5:de:3a:57:72:75:58:a5:58:0c:3f: 6b:7e:33:2b:ef:e8:09:38:69:a3:19:c3:5c:5e:61: 80:f8:43:85:51:82:9f:fc:3b:46:77:67:d1:6e:ea: fb:ae:6f:ad:57:5c:78:85:c8:71:53:ec:79:9f:63: 5d:26:32:28:a4:35:92:e6:3d:7a:63:2b:7a:cb:9c: 81:67:ae:f7:9c:b0:40:4a:ee:8d:a4:b2:9d:9a:fa: f5:bb:b3:aa:55:4f:75:65:36:f4:93:4c:06:e5:55: a3:e8:56:ed:89:d9:36:de:6e:8c:b1:9d:74:f6:73: 3a:bb:18:f6:91:89:9e:b7:dd:a6:ac:02:38:ba:98: 55:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9F:81:BC:B2:18:2C:6F:8A:15:24:12:01:85:F0:DF:DE:3F:C5:1E X509v3 Authority Key Identifier: keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:3b:a0:6a:2b:41:9d:5b:b0:c7:58:98:72:ff:0b:ef:52:c2: bc:97:c8:34:f1:ed:17:aa:a3:34:dc:cd:60:8f:69:87:04:4d: 2a:ec:1f:72:ad:bf:83:16:bf:99:6c:cd:d3:07:d9:69:f2:83: b1:7d:b5:02:1a:83:ed:bf:1e:26:22:82:01:bb:db:fe:26:7f: 95:ae:d8:51:25:80:b9:37:8e:87:3b:83:82:e6:40:38:a3:fa: c2:d6:ca:b5:62:94:41:8f:21:11:06:8c:1a:85:bb:15:bf:34: 1d:62:42:be:16:21:b1:c1:c6:34:67:f9:e5:41:82:78:eb:66: 2e:b1:69:4b:3a:00:b3:e5:47:a3:75:82:04:cd:90:7d:dc:81: 7f:2d:3c:61:8e:52:26:73:e2:ca:c5:44:d2:3f:f4:c6:44:d5: 14:f5:4f:52:a8:38:ff:1d:85:15:47:53:0a:3d:a4:90:8c:e3: f3:a7:8b:91:a9:be:35:5d:85:93:93:b2:a2:2d:e4:cb:2f:f8: 2f:44:c5:9e:86:10:cb:57:e8:44:d8:6c:7c:a0:7b:0e:7c:b1: ae:67:ce:51:dc:f0:37:a5:18:79:5b:f1:f1:67:82:7d:86:19: 88:a2:24:28:f3:86:00:03:c5:f2:72:9a:4a:cd:b6:2e:00:7a: 20:3f:28:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HCK+TN3AnL1cTAtbU6b/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzY2JkYjA1OTVmYzQ4OTAyOTM4YTc4ZjQyYzFlYWYwYTE1 OWJmNDYwHhcNMjUxMjA3MDAwMDMwWhcNMjUxMjA4MDAwMDMwWjAzMTEwLwYDVQQD EygxMzlmODFiY2IyMTgyYzZmOGExNTI0MTIwMTg1ZjBkZmRlM2ZjNTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRKVeSYo9bXHkWacQUWnTYUaAr6e 4flLFKcJshpo3ErEzKJC0M+YNdk2Xm31fp9Oz5rCVxbCbwzc4BxnuKHeDUWu31wF h9K0brqQtLEw74+H944XjpiARMmO5Iml/Cx37JniZYJC/fWyYlsz0x/n0aMYHp9q NEcGNKZ+1d46V3J1WKVYDD9rfjMr7+gJOGmjGcNcXmGA+EOFUYKf/DtGd2fRbur7 rm+tV1x4hchxU+x5n2NdJjIopDWS5j16Yyt6y5yBZ673nLBASu6NpLKdmvr1u7Oq VU91ZTb0k0wG5VWj6Fbtidk23m6MsZ109nM6uxj2kYmet92mrAI4uphV2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOfgbyyGCxvihUkEgGF8N/eP8UeMB8GA1UdIwQY MBaAFAPL2wWV/EiQKTinj0LB6vChWb9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYt ZjY2MTM4MDY2MzU4LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYtZjY2MTM4MDY2MzU4 LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTugaitB nVuwx1iYcv8L71LCvJfINPHtF6qjNNzNYI9phwRNKuwfcq2/gxa/mWzN0wfZafKD sX21AhqD7b8eJiKCAbvb/iZ/la7YUSWAuTeOhzuDguZAOKP6wtbKtWKUQY8hEQaM GoW7Fb80HWJCvhYhscHGNGf55UGCeOtmLrFpSzoAs+VHo3WCBM2QfdyBfy08YY5S JnPiysVE0j/0xkTVFPVPUqg4/x2FFUdTCj2kkIzj86eLkam+NV2Fk5Oyoi3kyy/4 L0TFnoYQy1foRNhsfKB7DnyxrmfOUdzwN6UYeVvx8WeCfYYZiKIkKPOGAAPF8nKa Ss22LgB6ID8oLw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:02 2025 by rpki-client