This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json) Hash identifier: y8C8iaqcdhMc+rEdIc5hmFza0apsTS7UKel+VZIpCUg= Subject key identifier: F3:E5:A4:F6:5F:26:4F:EA:AF:28:EB:04:E7:44:D5:0A:B0:89:90:2D Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4 Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4 Certificate serial: 019AF1D24F6595FFFF3E4EF6D99B2418BE1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft Manifest number: 1366 Signing time: Sat 06 Dec 2025 04:01:23 +0000 Manifest this update: Sat 06 Dec 2025 04:01:23 +0000 Manifest next update: Sun 07 Dec 2025 04:01:23 +0000 Files and hashes: 1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: pdAFYRKXwuIzF6msCvP08S0NF6TgTPI7liQc5QqLXZE=) 2: nMVNf2lQw6OBO1n2yk42KKveQrw.roa (hash: wyqNzIcUGswTCmLW0W5XZCdk6EXaGRyb1txoc0qPRcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4f:65:95:ff:ff:3e:4e:f6:d9:9b:24:18:be:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4 Validity Not Before: Dec 6 04:01:23 2025 GMT Not After : Dec 7 04:01:23 2025 GMT Subject: CN=f3e5a4f65f264feaaf28eb04e744d50ab089902d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5c:4a:fc:6d:0c:9e:cd:6d:44:12:58:83:72: ae:fb:d1:26:da:50:29:f5:c2:90:4c:06:25:20:60: 3a:33:50:25:1b:65:88:65:56:4f:46:35:4e:ba:31: 45:98:0b:d7:e2:67:6d:ac:b8:0e:9e:f4:97:4f:34: 94:af:b9:4c:c3:78:74:fd:57:b8:2d:e9:e5:51:82: be:36:8e:70:be:86:9c:d3:d1:06:50:a6:f5:09:1e: 4c:f4:2f:06:83:dc:43:ad:6c:82:10:b2:1b:42:6b: 5f:8f:74:02:79:ff:62:87:4d:ea:ae:1a:7a:d5:3e: b9:10:15:d9:3e:53:82:b8:05:85:09:89:7f:ad:bf: 82:ad:e7:d5:19:cb:a6:fc:43:6a:f4:dc:88:a3:00: 51:9d:fa:75:0f:62:79:05:3c:38:95:0a:f9:95:9c: fb:3d:b1:08:d9:67:74:7d:5c:d0:bd:68:79:be:fc: d3:22:d0:70:fe:29:80:4b:16:75:96:f3:0e:06:b1: 66:e1:84:98:03:f6:03:8f:bd:ea:3f:d9:15:fb:c0: d7:02:07:d1:ec:31:c8:bc:59:6d:6c:b9:9b:c1:0c: 44:b4:fa:21:9f:47:32:fa:97:37:fa:04:de:51:7f: 1e:b3:bf:8e:a3:19:35:f4:5e:80:c2:18:9a:1f:24: a1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E5:A4:F6:5F:26:4F:EA:AF:28:EB:04:E7:44:D5:0A:B0:89:90:2D X509v3 Authority Key Identifier: keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5e:4a:6e:a6:e6:12:32:16:cd:3f:12:3f:e8:e7:60:82:69: de:a2:91:e7:dc:a8:a1:d1:2d:f3:39:71:36:e9:21:c5:2f:1f: a7:90:a2:14:5e:70:f2:27:34:bb:10:99:9e:7e:c3:0d:03:77: c2:c3:67:6a:84:1b:dc:24:90:1f:44:c3:43:36:59:10:f7:12: 7e:38:f8:b7:f1:3d:75:e9:e3:03:f0:3b:a1:0a:f0:4f:74:8a: 5f:00:20:2e:a8:53:be:82:8e:3e:85:e3:4c:22:c0:d4:fb:45: 97:ac:f2:33:ec:3a:21:00:fe:e7:d0:7a:e2:ed:f3:1c:28:3f: 95:c8:6a:36:cf:4a:09:ab:35:d3:9b:1e:61:87:09:09:78:59: 2e:60:de:b6:57:78:15:e3:d5:7a:e6:dc:1a:76:03:8b:97:06: 19:44:f1:09:59:2f:2f:35:6b:f8:0f:da:cf:59:00:8b:f5:29: ba:15:51:5a:e3:c9:30:e5:32:f4:97:0c:98:5f:65:fd:6b:9e: 24:fb:1c:41:3f:6d:b2:5c:d6:f6:bc:ff:05:e8:27:bb:50:75: 82:27:8d:cb:b5:b1:40:ea:90:18:bb:04:80:db:46:d1:26:14: da:90:88:bf:95:1d:8d:ab:27:50:17:bb:8a:21:1f:fe:73:42: ec:1c:87:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0k9llf//Pk722ZskGL4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNDg1ZmJkYjBiMWEwNGQ1MmU4MWRjZGI5NTg1ODkxNmEx ZGRhZTQwHhcNMjUxMjA2MDQwMTIzWhcNMjUxMjA3MDQwMTIzWjAzMTEwLwYDVQQD EyhmM2U1YTRmNjVmMjY0ZmVhYWYyOGViMDRlNzQ0ZDUwYWIwODk5MDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1xK/G0Mns1tRBJYg3Ku+9Em2lAp 9cKQTAYlIGA6M1AlG2WIZVZPRjVOujFFmAvX4mdtrLgOnvSXTzSUr7lMw3h0/Ve4 LenlUYK+No5wvoac09EGUKb1CR5M9C8Gg9xDrWyCELIbQmtfj3QCef9ih03qrhp6 1T65EBXZPlOCuAWFCYl/rb+CrefVGcum/ENq9NyIowBRnfp1D2J5BTw4lQr5lZz7 PbEI2Wd0fVzQvWh5vvzTItBw/imASxZ1lvMOBrFm4YSYA/YDj73qP9kV+8DXAgfR 7DHIvFltbLmbwQxEtPohn0cy+pc3+gTeUX8es7+Ooxk19F6AwhiaHySh4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPlpPZfJk/qryjrBOdE1QqwiZAtMB8GA1UdIwQY MBaAFANIX72wsaBNUugdzblYWJFqHdrkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTBoZnZiQ3hvRTFTNkIzTnVWaFlrV29kMnVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81MjRlNWItYThhZS00NWFiLWJiZDkt NDQ5MTg0NWRjZDQ3LzEvQTBoZnZiQ3hvRTFTNkIzTnVWaFlrV29kMnVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81MjRlNWItYThhZS00NWFiLWJiZDktNDQ5MTg0NWRjZDQ3 LzEvQTBoZnZiQ3hvRTFTNkIzTnVWaFlrV29kMnVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjV5Kbqbm EjIWzT8SP+jnYIJp3qKR59yoodEt8zlxNukhxS8fp5CiFF5w8ic0uxCZnn7DDQN3 wsNnaoQb3CSQH0TDQzZZEPcSfjj4t/E9denjA/A7oQrwT3SKXwAgLqhTvoKOPoXj TCLA1PtFl6zyM+w6IQD+59B64u3zHCg/lchqNs9KCas105seYYcJCXhZLmDetld4 FePVeubcGnYDi5cGGUTxCVkvLzVr+A/az1kAi/UpuhVRWuPJMOUy9JcMmF9l/Wue JPscQT9tslzW9rz/Begnu1B1gieNy7WxQOqQGLsEgNtG0SYU2pCIv5UdjasnUBe7 iiEf/nNC7ByHew== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:03 2025 by rpki-client