This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft File: A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json) Hash identifier: kT8hOpNKNYv5JAg7Be2dawDsq4uDf7uRSdz4jt9dcZQ= Subject key identifier: B1:24:67:93:87:1E:35:83:1E:76:0C:50:AE:F5:E8:FD:9F:F3:B3:0B Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2 Certificate issuer: /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2 Certificate serial: 019B2F677C0AC8A234C9F19E9171A5C5C0E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft Manifest number: 138E Signing time: Thu 18 Dec 2025 03:01:09 +0000 Manifest this update: Thu 18 Dec 2025 03:01:09 +0000 Manifest next update: Fri 19 Dec 2025 03:01:09 +0000 Files and hashes: 1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: +t0DJe7k6VoxCHriKKLXjy+HF0EMh4765S8yKgneU+8=) 2: woal0JSD05J3-HE_srcu4HZklsQ.roa (hash: K5meebvZSg84nTxN3gUNn0hvuS4tbvBQ0f3EUj0mZV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:7c:0a:c8:a2:34:c9:f1:9e:91:71:a5:c5:c0:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2 Validity Not Before: Dec 18 03:01:09 2025 GMT Not After : Dec 19 03:01:09 2025 GMT Subject: CN=b1246793871e35831e760c50aef5e8fd9ff3b30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:45:75:32:68:9f:99:97:a5:93:71:81:33:52: 7e:3e:b9:a6:ea:26:86:98:43:88:00:44:a9:25:13: 59:bf:75:f2:6f:87:a3:19:34:bc:6f:6f:93:36:cb: 99:72:11:e2:85:42:7e:82:f5:75:e1:2e:00:2b:70: ea:29:05:12:49:ea:28:d0:99:5e:9a:02:34:25:ce: 21:9c:3a:20:d7:10:bb:4f:df:ab:bb:3a:e1:3d:93: 6b:de:a7:1b:be:88:02:38:5e:df:9e:80:c2:67:0b: ee:f7:6e:50:01:67:e7:3e:82:c1:28:91:c0:c9:2b: ad:23:2a:21:6b:3b:d1:f1:f0:5d:eb:ad:3b:ac:8f: e0:d0:6a:02:ea:fe:e9:5a:d1:d6:f0:5e:6d:41:4b: f8:4e:f9:88:25:0f:33:69:87:34:f9:fd:69:dd:c8: bd:f9:fb:2a:50:91:35:3c:39:a3:64:56:05:aa:29: e5:8b:f7:f3:7d:9e:d6:07:a1:6a:5c:79:99:f2:e6: 76:9b:98:aa:2f:82:d1:99:74:20:0d:2e:36:2b:0b: 5e:b0:ca:1a:22:92:dc:04:1b:50:3c:99:6a:21:40: 78:db:c8:13:e8:80:a4:4c:40:12:bf:b5:8b:4e:65: 01:ca:d5:8b:91:9e:84:41:6b:62:a7:1f:16:79:a4: 44:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:24:67:93:87:1E:35:83:1E:76:0C:50:AE:F5:E8:FD:9F:F3:B3:0B X509v3 Authority Key Identifier: keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:37:a5:20:4b:0c:fc:38:38:1d:80:a3:4b:72:0c:d8:05:61: ba:1d:13:8e:af:16:5c:e7:19:83:08:43:94:85:a4:f5:f4:cc: b1:d5:4a:e0:24:98:9d:cf:e4:dc:39:9c:05:8c:e6:c2:cb:2a: b8:d8:a8:e1:3d:9e:b1:af:1d:23:45:10:c3:fd:71:e9:2e:89: 78:97:09:2a:3d:09:df:1b:bb:61:37:e4:8b:7e:e6:c0:93:ee: 74:91:73:cb:de:76:34:8e:37:d8:0c:e1:0e:5e:29:f3:94:82: fe:1e:06:fe:82:38:dc:ab:dd:e8:10:da:a8:03:aa:04:4d:62: 8e:78:e6:b0:3d:bc:21:38:9a:b9:61:6c:aa:b5:6f:9a:0f:49: 6c:c4:1c:a0:13:7b:0e:0b:49:75:48:3e:cd:05:4d:8e:f1:b7: 04:d1:b4:db:10:83:50:cb:24:06:6f:fb:43:57:69:26:f5:c2: 7a:c2:4d:55:06:0b:a8:42:87:24:f3:a5:6e:73:84:12:37:37: 0f:56:d7:02:ea:5c:49:dd:8f:40:2b:d0:40:51:d8:99:48:75: c5:0e:d8:84:46:cb:24:a4:31:68:85:2f:6f:54:79:57:8c:3c: bf:ed:e8:20:17:b2:1d:c3:64:23:53:dc:f0:f2:c3:a6:8c:39: bb:ec:38:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ3wKyKI0yfGekXGlxcDnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZTg1ZmE0YmU2Njk0MmU1OTA5ZmQzYTFmZDRhMGMyNmUz NmEwZDIwHhcNMjUxMjE4MDMwMTA5WhcNMjUxMjE5MDMwMTA5WjAzMTEwLwYDVQQD EyhiMTI0Njc5Mzg3MWUzNTgzMWU3NjBjNTBhZWY1ZThmZDlmZjNiMzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEV1MmifmZelk3GBM1J+Prmm6iaG mEOIAESpJRNZv3Xyb4ejGTS8b2+TNsuZchHihUJ+gvV14S4AK3DqKQUSSeoo0Jle mgI0Jc4hnDog1xC7T9+ruzrhPZNr3qcbvogCOF7fnoDCZwvu925QAWfnPoLBKJHA ySutIyohazvR8fBd6607rI/g0GoC6v7pWtHW8F5tQUv4TvmIJQ8zaYc0+f1p3ci9 +fsqUJE1PDmjZFYFqinli/fzfZ7WB6FqXHmZ8uZ2m5iqL4LRmXQgDS42KwtesMoa IpLcBBtQPJlqIUB428gT6ICkTEASv7WLTmUBytWLkZ6EQWtipx8WeaREIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEkZ5OHHjWDHnYMUK716P2f87MLMB8GA1UdIwQY MBaAFAPoX6S+ZpQuWQn9Oh/UoMJuNqDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS1oZnBMNW1sQzVaQ2YwNkg5U2d3bTQyb05JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMjczMjktM2VjZi00ODg1LWE3NzMt NThlNWI3NmJlYmI3LzEvQS1oZnBMNW1sQzVaQ2YwNkg5U2d3bTQyb05JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMjczMjktM2VjZi00ODg1LWE3NzMtNThlNWI3NmJlYmI3 LzEvQS1oZnBMNW1sQzVaQ2YwNkg5U2d3bTQyb05JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjelIEsM /Dg4HYCjS3IM2AVhuh0Tjq8WXOcZgwhDlIWk9fTMsdVK4CSYnc/k3DmcBYzmwssq uNio4T2esa8dI0UQw/1x6S6JeJcJKj0J3xu7YTfki37mwJPudJFzy952NI432Azh Dl4p85SC/h4G/oI43Kvd6BDaqAOqBE1ijnjmsD28ITiauWFsqrVvmg9JbMQcoBN7 DgtJdUg+zQVNjvG3BNG02xCDUMskBm/7Q1dpJvXCesJNVQYLqEKHJPOlbnOEEjc3 D1bXAupcSd2PQCvQQFHYmUh1xQ7YhEbLJKQxaIUvb1R5V4w8v+3oIBeyHcNkI1Pc 8PLDpow5u+w4rQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:06:07 2025 by rpki-client