This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json) Hash identifier: qS55rHaEAawzvEyRfj7ewzovVyOYtLj40kJIsmFVgCQ= Subject key identifier: 3E:57:4D:F8:33:E6:FE:4B:12:8D:99:3D:0F:E2:DD:45:CF:88:FF:F2 Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f Certificate serial: 019AF2AD7F49959DD7D046A30DBCED04F33D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft Manifest number: 0BB0 Signing time: Sat 06 Dec 2025 08:00:47 +0000 Manifest this update: Sat 06 Dec 2025 08:00:47 +0000 Manifest next update: Sun 07 Dec 2025 08:00:47 +0000 Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: FOuFUBzhic71wnQGkb8NVuXlNieJmxBr/AV66EdexAg=) 2: aAJKdn_u125mac3iiC8QVztvInI.roa (hash: 3b7fusF13hIUnZIhVd8QQY5Oa5mdPkxjIJ0o8cOzBGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7f:49:95:9d:d7:d0:46:a3:0d:bc:ed:04:f3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f Validity Not Before: Dec 6 08:00:47 2025 GMT Not After : Dec 7 08:00:47 2025 GMT Subject: CN=3e574df833e6fe4b128d993d0fe2dd45cf88fff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:35:93:3d:89:fa:43:0b:fd:7e:9d:cb:26:ae: 3d:e1:2e:92:58:a7:fa:84:3f:4b:3a:1d:71:3f:82: e1:18:90:4e:45:ec:c3:16:fe:b8:a1:bc:df:ca:73: 4e:65:b9:00:77:d5:4e:1b:40:52:5e:20:00:12:9c: 5c:f5:f6:c6:dc:5e:a0:7d:93:9f:94:64:7d:de:2d: b3:c2:87:45:5b:f4:30:2a:81:f2:23:b0:02:e2:fb: 67:aa:a4:48:ae:92:d8:f8:79:68:27:63:b2:bd:fa: f4:1b:b9:fe:f2:2c:4d:55:85:36:59:9b:88:0f:a8: 58:be:9b:5e:28:e2:9c:17:51:e3:b1:9c:5a:cb:72: fb:30:49:5c:80:cf:f6:d9:ec:84:a0:a8:bf:b8:e5: 83:e4:85:c3:d3:10:cb:aa:df:6f:5c:11:50:17:12: ba:59:a6:49:d9:bb:cc:d6:b5:e7:ea:25:4e:65:f7: 16:51:16:f6:b1:75:44:39:4f:c1:3d:97:d7:87:b9: 97:a7:e0:7c:81:75:ab:62:1d:6d:02:33:bd:13:b5: aa:f5:c1:70:56:a8:91:fb:5f:c2:1f:14:2d:c6:f4: 82:fe:3c:6f:62:16:cb:3a:c5:f3:88:a0:1b:c5:be: d3:0d:24:75:34:e2:45:bd:4a:e0:6d:62:08:1a:33: 46:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:57:4D:F8:33:E6:FE:4B:12:8D:99:3D:0F:E2:DD:45:CF:88:FF:F2 X509v3 Authority Key Identifier: keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:fc:86:0e:3a:64:c6:e8:12:50:ff:7c:04:64:f2:79:8e:3c: 2d:c4:00:93:d5:43:92:30:6b:3a:d7:d4:da:f6:22:b3:01:fa: 33:80:92:4c:3e:78:4f:15:bc:62:35:20:79:d4:3d:0a:d7:67: 18:ce:c6:df:27:79:28:24:3c:d3:a4:07:29:90:55:2b:ae:18: 3a:f0:e5:02:1c:c8:e7:6a:2a:20:90:ad:71:93:87:ee:62:26: 62:10:ef:bd:8e:14:4e:06:71:71:75:b6:a3:e0:c3:f9:ff:d1: 4a:1f:72:10:38:1b:75:22:71:c1:64:38:0c:00:23:de:53:f0: 21:de:cf:7d:8f:59:8f:36:5b:87:ed:26:97:82:c1:21:4e:79: 9d:54:1c:3a:c5:71:a0:5d:26:1e:d3:af:0a:99:ea:19:43:95: 9e:27:12:b3:24:68:5e:8b:a0:ac:0a:ff:fb:ac:c1:d6:53:b8: 14:5d:1b:f7:72:db:c8:23:50:62:6d:99:b8:70:45:24:8f:7d: 8e:de:31:66:e1:25:a0:d3:07:3c:e1:f2:34:8f:e4:c6:af:5f: b9:5c:4d:d7:69:59:a7:3d:8f:aa:2e:a1:eb:af:c0:e2:3b:29: b7:25:4d:0b:f1:34:ce:e5:e4:ce:dc:7d:a1:91:20:f6:f3:75: d5:c3:a2:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrX9JlZ3X0EajDbztBPM9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTE1ZmZlMWRiZmU3NmE4MDVmZDBkZmIyZTBjOGQ3ZTQ5 YWY1OWYwHhcNMjUxMjA2MDgwMDQ3WhcNMjUxMjA3MDgwMDQ3WjAzMTEwLwYDVQQD EygzZTU3NGRmODMzZTZmZTRiMTI4ZDk5M2QwZmUyZGQ0NWNmODhmZmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzWTPYn6Qwv9fp3LJq494S6SWKf6 hD9LOh1xP4LhGJBORezDFv64obzfynNOZbkAd9VOG0BSXiAAEpxc9fbG3F6gfZOf lGR93i2zwodFW/QwKoHyI7AC4vtnqqRIrpLY+HloJ2Oyvfr0G7n+8ixNVYU2WZuI D6hYvpteKOKcF1HjsZxay3L7MElcgM/22eyEoKi/uOWD5IXD0xDLqt9vXBFQFxK6 WaZJ2bvM1rXn6iVOZfcWURb2sXVEOU/BPZfXh7mXp+B8gXWrYh1tAjO9E7Wq9cFw VqiR+1/CHxQtxvSC/jxvYhbLOsXziKAbxb7TDSR1NOJFvUrgbWIIGjNGDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5XTfgz5v5LEo2ZPQ/i3UXPiP/yMB8GA1UdIwQY MBaAFANRX/4dv+dqgF/Q37LgyNfkmvWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAt ZDM4NDk1ZmIwOWEwLzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAtZDM4NDk1ZmIwOWEw LzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/yGDjpk xugSUP98BGTyeY48LcQAk9VDkjBrOtfU2vYiswH6M4CSTD54TxW8YjUgedQ9Ctdn GM7G3yd5KCQ806QHKZBVK64YOvDlAhzI52oqIJCtcZOH7mImYhDvvY4UTgZxcXW2 o+DD+f/RSh9yEDgbdSJxwWQ4DAAj3lPwId7PfY9ZjzZbh+0ml4LBIU55nVQcOsVx oF0mHtOvCpnqGUOVnicSsyRoXougrAr/+6zB1lO4FF0b93LbyCNQYm2ZuHBFJI99 jt4xZuEloNMHPOHyNI/kxq9fuVxN12lZpz2Pqi6h66/A4jsptyVNC/E0zuXkztx9 oZEg9vN11cOicA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:54 2025 by rpki-client