This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft File: A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json) Hash identifier: BsANr2xTHZVKrurekWGSv8bEgAgm263ayroZPiOnPQg= Subject key identifier: BC:7A:39:EC:28:77:58:3B:52:0F:D4:E4:36:13:1B:BC:1F:0C:FB:BF Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97 Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397 Certificate serial: 019AF3F7B925CF9B174CF4F794F3FA42EC20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft Manifest number: 0E9B Signing time: Sat 06 Dec 2025 14:01:29 +0000 Manifest this update: Sat 06 Dec 2025 14:01:29 +0000 Manifest next update: Sun 07 Dec 2025 14:01:29 +0000 Files and hashes: 1: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: N4kDL3jNG04t4Zlw1DgEgmShidJHCfiS+JFsLfJZF3o=) 2: bdzpUxndz61zfLz7ajjz4tyOnrg.roa (hash: GGVEBdFUMRnBM929MvvBO/m7RzF/RhhQavvdN/BpLuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:b9:25:cf:9b:17:4c:f4:f7:94:f3:fa:42:ec:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397 Validity Not Before: Dec 6 14:01:29 2025 GMT Not After : Dec 7 14:01:29 2025 GMT Subject: CN=bc7a39ec2877583b520fd4e436131bbc1f0cfbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:61:e7:4b:28:27:f0:d8:39:3f:80:89:2f:9f: a5:b3:15:27:c2:2b:46:6c:01:8f:62:90:52:89:b6: 78:4a:a2:15:00:87:6b:e1:3e:20:17:a0:09:f7:c4: b1:0d:bc:40:16:c9:1e:af:e0:31:38:a0:ca:3e:54: d1:83:84:41:b4:f2:b6:19:74:05:2e:38:44:6a:bc: 7e:43:d9:3f:19:09:11:04:89:c7:4f:e7:9a:5e:df: 6d:eb:74:94:b3:12:40:51:61:23:59:f8:a6:e6:65: 1e:0b:fa:10:03:d0:74:47:14:78:75:b3:86:85:5e: ea:29:ff:73:c2:55:23:7f:bf:77:05:82:67:ea:80: 27:af:b4:27:46:d5:10:91:69:d7:7e:dd:fe:25:d2: 66:47:a5:b1:d0:e1:60:57:08:d9:39:ba:ba:ec:7e: e0:10:c8:48:20:a2:1a:9b:87:57:b2:18:3e:52:2f: 8c:06:30:9d:85:08:5b:fc:e6:88:de:3c:0d:c3:86: c8:3a:7f:91:d5:56:04:d9:ba:0e:e1:e2:d6:64:f0: 74:44:37:7e:fb:96:e8:63:da:78:7c:5f:25:90:bb: 54:01:f6:ea:de:db:dd:4d:64:de:94:ef:c1:2b:a0: 97:01:d8:9d:79:e8:70:a0:b2:fc:52:5d:24:42:77: e7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7A:39:EC:28:77:58:3B:52:0F:D4:E4:36:13:1B:BC:1F:0C:FB:BF X509v3 Authority Key Identifier: keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d7:a7:21:1f:80:0b:07:3d:82:0b:9c:fa:f1:30:77:8b:04: 33:c7:67:0a:35:84:30:15:5d:e5:9a:d0:2f:34:f2:68:a9:9c: 75:42:16:78:f5:c0:a7:f1:19:18:37:25:9b:d2:4d:de:f2:56: e7:85:04:26:ba:80:23:e4:2f:59:e2:c2:03:d6:90:cd:6c:b7: 0c:c8:90:08:9f:63:78:c9:54:3e:4c:2f:73:76:55:a6:00:8d: b6:36:ca:cc:33:94:61:dd:a6:4b:9c:15:70:cf:ad:c1:39:dd: c8:8f:94:15:ed:fd:4f:83:e2:bb:d0:aa:d3:cf:5e:90:17:b2: 6c:61:b3:ea:f4:dd:33:39:16:4a:2f:47:9e:39:61:ef:26:ba: 42:0e:de:87:ea:db:71:64:a5:7c:1d:ff:9a:07:03:76:de:81: 0d:89:b6:07:d4:6b:34:f5:57:26:ea:3a:43:85:c0:87:d0:f6: c5:ca:70:b4:04:48:16:a2:af:38:95:61:17:8d:a4:83:e6:31: 09:c6:43:ac:c1:a7:c4:41:1e:c9:25:32:2e:20:4d:26:38:34: 81:9b:92:eb:5c:17:fd:b2:1f:ab:ea:af:e5:06:94:6a:fe:b4: 9c:32:1d:2a:b8:32:f5:ee:19:64:bf:ec:08:fd:b1:14:ad:90: 7b:87:91:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97klz5sXTPT3lPP6QuwgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTkwZjU2MjA1MGQ5NzY5ZWQ1N2IwN2IxYmM5MzFlY2Rk ZjEzOTcwHhcNMjUxMjA2MTQwMTI5WhcNMjUxMjA3MTQwMTI5WjAzMTEwLwYDVQQD EyhiYzdhMzllYzI4Nzc1ODNiNTIwZmQ0ZTQzNjEzMWJiYzFmMGNmYmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2HnSygn8Ng5P4CJL5+lsxUnwitG bAGPYpBSibZ4SqIVAIdr4T4gF6AJ98SxDbxAFsker+AxOKDKPlTRg4RBtPK2GXQF LjhEarx+Q9k/GQkRBInHT+eaXt9t63SUsxJAUWEjWfim5mUeC/oQA9B0RxR4dbOG hV7qKf9zwlUjf793BYJn6oAnr7QnRtUQkWnXft3+JdJmR6Wx0OFgVwjZObq67H7g EMhIIKIam4dXshg+Ui+MBjCdhQhb/OaI3jwNw4bIOn+R1VYE2boO4eLWZPB0RDd+ +5boY9p4fF8lkLtUAfbq3tvdTWTelO/BK6CXAdideehwoLL8Ul0kQnfnOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLx6Oewod1g7Ug/U5DYTG7wfDPu/MB8GA1UdIwQY MBaAFANZD1YgUNl2ntV7B7G8kx7N3xOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAt ZWNjNGMxYzM2YjBkLzEvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAtZWNjNGMxYzM2YjBk LzEvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNenIR+A Cwc9gguc+vEwd4sEM8dnCjWEMBVd5ZrQLzTyaKmcdUIWePXAp/EZGDclm9JN3vJW 54UEJrqAI+QvWeLCA9aQzWy3DMiQCJ9jeMlUPkwvc3ZVpgCNtjbKzDOUYd2mS5wV cM+twTndyI+UFe39T4Piu9Cq089ekBeybGGz6vTdMzkWSi9Hnjlh7ya6Qg7eh+rb cWSlfB3/mgcDdt6BDYm2B9RrNPVXJuo6Q4XAh9D2xcpwtARIFqKvOJVhF42kg+Yx CcZDrMGnxEEeySUyLiBNJjg0gZuS61wX/bIfq+qv5QaUav60nDIdKrgy9e4ZZL/s CP2xFK2Qe4eR+g== -----END CERTIFICATE-----Generated at Sat Dec 6 16:02:24 2025 by rpki-client