This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft File: A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json) Hash identifier: kArtzErxoQsYNaZ34TKpSPM/xMa9OuAKZ42MPWK8eIw= Subject key identifier: DD:6B:31:3A:4A:5C:D2:98:EB:F3:CE:45:8C:5A:1E:95:5D:BB:38:87 Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2 Certificate issuer: /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2 Certificate serial: 019AF19AA0532D7DCBE522017FB1641416F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft Manifest number: 136E Signing time: Sat 06 Dec 2025 03:00:33 +0000 Manifest this update: Sat 06 Dec 2025 03:00:33 +0000 Manifest next update: Sun 07 Dec 2025 03:00:33 +0000 Files and hashes: 1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: sshUgejh/Sm71qa7Jh1Lm46HEQlzvxUJ3OmWZ9why0g=) 2: woal0JSD05J3-HE_srcu4HZklsQ.roa (hash: K5meebvZSg84nTxN3gUNn0hvuS4tbvBQ0f3EUj0mZV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a0:53:2d:7d:cb:e5:22:01:7f:b1:64:14:16:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2 Validity Not Before: Dec 6 03:00:33 2025 GMT Not After : Dec 7 03:00:33 2025 GMT Subject: CN=dd6b313a4a5cd298ebf3ce458c5a1e955dbb3887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:c5:f3:5c:fa:1b:07:bd:84:9d:a7:c2:28: 72:db:8b:29:aa:3e:5f:fd:48:1b:64:17:cd:fc:df: 1f:28:af:3f:2e:5b:3c:29:05:5b:ce:63:69:9b:79: ec:dd:b4:a0:81:ec:2a:a6:a2:c1:57:df:09:1d:95: d4:0b:db:4b:4f:06:7f:d1:cc:86:07:28:af:f3:24: fa:cb:5b:c2:77:6c:e9:03:cb:64:42:83:ce:b8:aa: 5f:0f:bf:cc:f7:36:37:93:8d:e0:bd:12:d9:90:59: 4b:6e:52:46:ba:96:63:6f:1b:4c:08:bc:2d:3c:1b: d3:f0:71:c7:ce:26:0b:41:5c:a8:dc:fe:9f:89:bf: d0:4a:fd:45:87:92:f7:5d:b8:02:f9:98:29:8e:92: aa:9a:0e:fc:59:59:dd:70:c0:ef:51:62:79:e6:4c: 58:90:19:e0:4b:c6:22:d3:a4:2d:ca:a0:77:35:e7: 0e:c3:66:27:4c:44:f1:11:5f:14:8d:6c:b4:ac:0c: bc:ac:2f:44:40:e7:7a:09:47:e9:0e:b5:8a:f0:6d: 1c:cb:1d:be:d1:1c:7c:b6:01:9b:76:0f:ab:14:5d: 54:0d:d3:6a:0f:ad:5b:3a:2f:25:cc:25:95:0f:f4: 41:28:33:17:f6:c8:38:97:79:e6:2a:f5:a2:0b:54: 2d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6B:31:3A:4A:5C:D2:98:EB:F3:CE:45:8C:5A:1E:95:5D:BB:38:87 X509v3 Authority Key Identifier: keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:c3:f2:2c:56:fc:f0:75:d3:d1:64:a2:a7:df:c2:95:4e:ac: c7:a8:a0:8d:bc:de:ed:40:85:cb:f4:4b:73:50:74:b5:6c:6f: 78:84:26:f7:48:d9:62:24:c2:92:ee:ae:28:b9:5e:0d:14:c3: 4a:46:98:03:63:bd:4e:cc:fc:8f:e3:58:9a:c1:58:18:09:58: 9c:b1:29:ce:25:61:73:6f:7e:28:b3:d0:90:b7:84:92:a0:42: a6:49:9c:3d:23:b5:b5:89:cb:c9:f0:37:1c:df:31:98:c5:13: ba:91:bc:bd:4d:3e:f1:ff:4f:60:3f:53:30:d0:ba:a0:e5:8a: 38:6d:19:f4:f8:5a:d5:1f:3b:7a:a6:02:25:46:97:19:85:24: c2:06:6d:28:f9:a4:17:d4:b1:1d:a4:60:c8:51:d1:cb:31:aa: 9f:2b:35:b6:0f:47:ef:49:4e:91:f6:95:9f:a7:45:8c:b5:1a: 7e:d6:9d:5a:8e:af:56:04:a3:4e:ae:96:47:cb:1f:b3:a1:9b: 07:42:d6:0f:45:fc:fb:fe:75:cd:24:da:78:2a:00:27:93:b1: e3:90:3a:bf:0a:d0:65:e8:cd:66:43:0b:8c:24:c7:65:b7:27: 6c:c3:eb:e8:fc:6d:5a:27:b5:35:94:d0:d2:7d:21:dd:e3:af: 6d:1a:f9:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqBTLX3L5SIBf7FkFBbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZTg1ZmE0YmU2Njk0MmU1OTA5ZmQzYTFmZDRhMGMyNmUz NmEwZDIwHhcNMjUxMjA2MDMwMDMzWhcNMjUxMjA3MDMwMDMzWjAzMTEwLwYDVQQD EyhkZDZiMzEzYTRhNWNkMjk4ZWJmM2NlNDU4YzVhMWU5NTVkYmIzODg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVXF81z6Gwe9hJ2nwihy24spqj5f /UgbZBfN/N8fKK8/Lls8KQVbzmNpm3ns3bSggewqpqLBV98JHZXUC9tLTwZ/0cyG Byiv8yT6y1vCd2zpA8tkQoPOuKpfD7/M9zY3k43gvRLZkFlLblJGupZjbxtMCLwt PBvT8HHHziYLQVyo3P6fib/QSv1Fh5L3XbgC+ZgpjpKqmg78WVndcMDvUWJ55kxY kBngS8Yi06QtyqB3NecOw2YnTETxEV8UjWy0rAy8rC9EQOd6CUfpDrWK8G0cyx2+ 0Rx8tgGbdg+rFF1UDdNqD61bOi8lzCWVD/RBKDMX9sg4l3nmKvWiC1QtYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1rMTpKXNKY6/PORYxaHpVduziHMB8GA1UdIwQY MBaAFAPoX6S+ZpQuWQn9Oh/UoMJuNqDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS1oZnBMNW1sQzVaQ2YwNkg5U2d3bTQyb05JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMjczMjktM2VjZi00ODg1LWE3NzMt NThlNWI3NmJlYmI3LzEvQS1oZnBMNW1sQzVaQ2YwNkg5U2d3bTQyb05JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMjczMjktM2VjZi00ODg1LWE3NzMtNThlNWI3NmJlYmI3 LzEvQS1oZnBMNW1sQzVaQ2YwNkg5U2d3bTQyb05JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8PyLFb8 8HXT0WSip9/ClU6sx6igjbze7UCFy/RLc1B0tWxveIQm90jZYiTCku6uKLleDRTD SkaYA2O9Tsz8j+NYmsFYGAlYnLEpziVhc29+KLPQkLeEkqBCpkmcPSO1tYnLyfA3 HN8xmMUTupG8vU0+8f9PYD9TMNC6oOWKOG0Z9Pha1R87eqYCJUaXGYUkwgZtKPmk F9SxHaRgyFHRyzGqnys1tg9H70lOkfaVn6dFjLUaftadWo6vVgSjTq6WR8sfs6Gb B0LWD0X8+/51zSTaeCoAJ5Ox45A6vwrQZejNZkMLjCTHZbcnbMPr6PxtWie1NZTQ 0n0h3eOvbRr5rg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:28 2025 by rpki-client