This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json) Hash identifier: gff1EpZ/T//wnlcs6hOgrPlnhf864LVB4uzhO70Fcjs= Subject key identifier: 4D:F6:C6:BA:E0:26:B4:D2:6A:35:57:F2:41:22:08:F4:DF:77:88:4B Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda Certificate serial: 019AF3F73EC21B2FAD471A4D3F2347A90D64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft Manifest number: 0370 Signing time: Sat 06 Dec 2025 14:00:58 +0000 Manifest this update: Sat 06 Dec 2025 14:00:58 +0000 Manifest next update: Sun 07 Dec 2025 14:00:58 +0000 Files and hashes: 1: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: hW4R/hggrvDOWOEx5qvrVLut8OPsVC49qSqIyP7j/ns=) 2: jMIN8b0BVc9eEY8W0xUyZYn9gu0.roa (hash: T+38e+ztuuV+6KtpVMPU6c7/hBQtyKbXl9bJ797XzNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:3e:c2:1b:2f:ad:47:1a:4d:3f:23:47:a9:0d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda Validity Not Before: Dec 6 14:00:58 2025 GMT Not After : Dec 7 14:00:58 2025 GMT Subject: CN=4df6c6bae026b4d26a3557f2412208f4df77884b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d1:19:ba:0d:cf:9b:db:b1:ef:5d:a8:17:28: 66:21:6c:28:0a:d6:3e:e7:9d:15:14:ba:8e:e4:66: 2a:55:e8:2e:96:7e:4f:36:8b:e0:75:b4:90:0f:49: 90:8b:f6:e1:af:1a:ea:43:90:d1:8c:03:e2:8f:9b: ec:9d:38:cb:a4:1a:b6:4f:29:76:7c:e4:87:d2:36: c2:4a:82:d4:b3:40:7b:b6:10:1c:5c:40:2d:81:0f: db:5d:b3:d1:35:ec:94:aa:aa:5a:18:51:82:7a:32: 04:f2:29:09:94:51:17:76:e1:45:98:87:66:06:5a: b3:dd:04:ae:ca:10:15:e5:11:6e:81:b3:be:34:14: 75:53:48:d4:9a:e4:54:67:e2:97:12:51:8c:56:4a: df:e8:65:9f:3b:1b:c0:24:04:0f:33:6d:1c:d4:70: a8:5c:08:a1:73:7f:b1:3d:42:39:40:35:40:e3:f5: 9f:8c:55:c6:c9:28:51:90:c7:e2:94:81:7b:d5:1f: 4e:49:d5:29:67:f6:5c:eb:30:4a:6f:44:b3:7d:b6: 36:b0:4f:56:88:a3:37:29:76:19:4a:d9:26:41:ab: b5:31:6c:86:ad:70:e1:d1:71:3b:cb:06:cf:70:51: a2:78:f4:34:81:05:a4:95:3b:1c:f8:7a:33:9f:ed: 7e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F6:C6:BA:E0:26:B4:D2:6A:35:57:F2:41:22:08:F4:DF:77:88:4B X509v3 Authority Key Identifier: keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:af:80:bf:ba:81:7a:a3:f1:49:fe:5a:3e:2e:f8:f6:1a:90: 38:d8:d6:e0:8a:04:23:ed:73:e5:df:2d:2a:30:d1:21:0d:a0: f2:fe:db:d4:d8:26:0e:8f:71:2c:a7:94:9b:a6:01:d7:a2:11: 30:3b:16:1f:2a:78:15:b2:78:3e:5b:78:ab:5b:14:71:c9:ed: ee:2f:e4:c3:b1:cd:b4:c9:b0:d3:e4:f7:98:3c:92:bb:c0:1d: 76:e5:3b:33:c4:38:f2:cc:a8:4c:a2:25:71:b4:18:fe:25:e6: 0b:59:13:46:50:6f:4b:b3:33:c7:9d:02:8b:87:db:67:8a:98: 0c:99:33:9c:45:87:94:84:ae:fb:72:a6:81:f0:4b:cd:8a:df: c2:77:a5:f6:65:cf:6b:51:57:a8:69:c8:e8:39:23:76:a8:71: 49:70:a7:dc:46:3a:4e:c4:65:12:49:64:8e:31:54:89:79:d1: 30:85:38:ab:f7:60:cd:5b:29:9e:78:de:d9:f1:b7:91:b3:1a: 92:ee:d2:11:a0:1b:45:2c:cb:5b:f1:f5:0a:b8:e6:88:46:27: b2:0a:44:ef:48:0e:bd:0c:d7:1d:80:c4:1c:0d:12:23:5c:74: 8e:78:12:bd:06:9c:28:5a:e6:88:46:56:df:2b:6e:d5:5d:56: 5b:68:24:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9z7CGy+tRxpNPyNHqQ1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzllYTRmOTY1ODhiMTZiZDRmY2EzOGQ0YzFkZGY2NWMx YWJmZGEwHhcNMjUxMjA2MTQwMDU4WhcNMjUxMjA3MTQwMDU4WjAzMTEwLwYDVQQD Eyg0ZGY2YzZiYWUwMjZiNGQyNmEzNTU3ZjI0MTIyMDhmNGRmNzc4ODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tEZug3Pm9ux712oFyhmIWwoCtY+ 550VFLqO5GYqVeguln5PNovgdbSQD0mQi/bhrxrqQ5DRjAPij5vsnTjLpBq2Tyl2 fOSH0jbCSoLUs0B7thAcXEAtgQ/bXbPRNeyUqqpaGFGCejIE8ikJlFEXduFFmIdm Blqz3QSuyhAV5RFugbO+NBR1U0jUmuRUZ+KXElGMVkrf6GWfOxvAJAQPM20c1HCo XAihc3+xPUI5QDVA4/WfjFXGyShRkMfilIF71R9OSdUpZ/Zc6zBKb0SzfbY2sE9W iKM3KXYZStkmQau1MWyGrXDh0XE7ywbPcFGiePQ0gQWklTsc+Hozn+1+IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE32xrrgJrTSajVX8kEiCPTfd4hLMB8GA1UdIwQY MBaAFAPJ6k+WWIsWvU/KONTB3fZcGr/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lN2QwZjAtZjQ4MS00ZmUzLTg2Nzct MWNkMzNjNjJjNDVjLzEvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lN2QwZjAtZjQ4MS00ZmUzLTg2NzctMWNkMzNjNjJjNDVj LzEvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXq+Av7qB eqPxSf5aPi749hqQONjW4IoEI+1z5d8tKjDRIQ2g8v7b1NgmDo9xLKeUm6YB16IR MDsWHyp4FbJ4Plt4q1sUccnt7i/kw7HNtMmw0+T3mDySu8AdduU7M8Q48syoTKIl cbQY/iXmC1kTRlBvS7Mzx50Ci4fbZ4qYDJkznEWHlISu+3KmgfBLzYrfwnel9mXP a1FXqGnI6DkjdqhxSXCn3EY6TsRlEklkjjFUiXnRMIU4q/dgzVspnnje2fG3kbMa ku7SEaAbRSzLW/H1CrjmiEYnsgpE70gOvQzXHYDEHA0SI1x0jngSvQacKFrmiEZW 3ytu1V1WW2gk5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 16:47:19 2025 by rpki-client