This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft File: A2x42XMHxhcQhWc4FBzAvTlczJ4.mft (raw, json) Hash identifier: kCP8PD732MYv9gUzcRL5PdlLFdELfE4s2oWfwBLUM18= Subject key identifier: 98:D0:5F:68:33:0A:07:67:75:F2:0C:E5:9F:CA:24:D8:A0:00:6B:3F Authority key identifier: 03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E Certificate issuer: /CN=036c78d97307c61710856738141cc0bd395ccc9e Certificate serial: 019AF61C4DF69F20342450642A8E7C4A7678 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft Manifest number: 01F2 Signing time: Sun 07 Dec 2025 00:00:41 +0000 Manifest this update: Sun 07 Dec 2025 00:00:41 +0000 Manifest next update: Mon 08 Dec 2025 00:00:41 +0000 Files and hashes: 1: A2x42XMHxhcQhWc4FBzAvTlczJ4.crl (hash: Oihr2zSAoESGciraxQUSZC7qKaHulPEsPdy6MT3hY1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:4d:f6:9f:20:34:24:50:64:2a:8e:7c:4a:76:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036c78d97307c61710856738141cc0bd395ccc9e Validity Not Before: Dec 7 00:00:41 2025 GMT Not After : Dec 8 00:00:41 2025 GMT Subject: CN=98d05f68330a076775f20ce59fca24d8a0006b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b1:1a:63:41:52:f4:0e:39:a3:46:0e:7a:71: d1:34:a2:07:d3:d5:b6:22:8a:52:19:bd:d6:36:70: 3f:03:9a:e6:b7:d6:41:96:ca:4d:07:b0:06:20:87: 29:c0:ef:85:86:97:c3:8a:6e:25:ba:8a:07:4d:60: 7c:fb:3e:56:66:c2:84:b1:0b:8b:6f:f7:9e:10:1a: 86:d2:97:af:46:ed:0a:b3:9d:c7:cb:44:9c:be:da: 13:4c:58:3f:24:1b:2f:2d:e3:37:44:70:d3:34:ce: b2:36:13:f8:b2:c9:b7:d3:9a:da:ef:63:d6:b3:75: 1e:63:07:af:50:e5:fa:a3:13:63:9a:81:27:44:f5: 25:53:6a:d3:d9:f2:fd:d5:94:b2:59:09:2f:21:e6: a4:c0:60:fb:00:dc:7e:77:bb:6e:b4:5b:fc:8c:3b: e6:13:ba:3d:ac:8b:6e:14:41:96:a0:40:34:0e:19: 19:6d:f6:9c:20:de:7c:55:7a:fc:3d:a1:71:45:8e: 77:31:ae:f6:42:2d:1d:bd:1d:52:05:3f:66:6b:7c: 9a:e0:8d:c7:f8:f7:a4:fd:a0:f1:a2:7b:ff:54:95: 5e:1a:73:a5:da:fe:c8:11:a8:56:9f:dd:b9:2b:d8: df:c8:f7:97:da:26:b4:18:b8:ed:9d:58:3c:8e:28: 61:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D0:5F:68:33:0A:07:67:75:F2:0C:E5:9F:CA:24:D8:A0:00:6B:3F X509v3 Authority Key Identifier: keyid:03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:d2:55:c8:4d:09:63:c0:1f:13:65:31:10:96:2d:97:fe:2c: ee:63:2b:9c:53:db:12:85:7e:80:c1:90:f9:3b:2a:a0:44:14: 4b:ef:ed:54:b2:91:3e:9b:fe:2b:8a:42:02:16:c8:67:96:c5: 12:e6:01:a2:c2:c0:96:e1:67:41:4b:e7:84:54:be:ff:25:8a: b7:7b:6d:e5:f1:b2:7e:d4:fb:d5:9a:62:c2:a9:0d:55:63:60: 77:07:35:d4:b8:35:2a:7f:cf:c3:2c:28:04:b5:dd:5b:8f:75: f3:cb:93:50:1e:ee:6e:60:5a:65:17:ef:13:62:0b:10:f7:cb: 56:83:76:4d:ee:54:90:0d:52:12:f2:07:13:88:01:81:cb:07: ea:4b:2e:bf:91:12:bc:e0:5f:89:d0:6e:23:77:49:4f:8a:0d: 12:d0:c4:2b:e0:2a:79:d2:a3:a4:26:a0:40:af:be:ed:bd:b2: cf:fe:31:1e:08:a1:6f:6f:32:e2:ec:40:c3:15:0a:e4:24:16: b2:73:00:8d:0a:00:43:62:59:9a:15:dd:d1:bd:53:bf:ff:2d: ee:10:05:4b:fe:ec:de:96:35:d2:66:e2:b6:bb:8b:91:a3:e9: 51:fd:44:72:c5:74:29:37:99:b5:a6:22:a1:c5:ec:38:48:8d: b0:76:41:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HE32nyA0JFBkKo58SnZ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNmM3OGQ5NzMwN2M2MTcxMDg1NjczODE0MWNjMGJkMzk1 Y2NjOWUwHhcNMjUxMjA3MDAwMDQxWhcNMjUxMjA4MDAwMDQxWjAzMTEwLwYDVQQD Eyg5OGQwNWY2ODMzMGEwNzY3NzVmMjBjZTU5ZmNhMjRkOGEwMDA2YjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7EaY0FS9A45o0YOenHRNKIH09W2 IopSGb3WNnA/A5rmt9ZBlspNB7AGIIcpwO+FhpfDim4luooHTWB8+z5WZsKEsQuL b/eeEBqG0pevRu0Ks53Hy0ScvtoTTFg/JBsvLeM3RHDTNM6yNhP4ssm305ra72PW s3UeYwevUOX6oxNjmoEnRPUlU2rT2fL91ZSyWQkvIeakwGD7ANx+d7tutFv8jDvm E7o9rItuFEGWoEA0DhkZbfacIN58VXr8PaFxRY53Ma72Qi0dvR1SBT9ma3ya4I3H +Pek/aDxonv/VJVeGnOl2v7IEahWn925K9jfyPeX2ia0GLjtnVg8jihhpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjQX2gzCgdndfIM5Z/KJNigAGs/MB8GA1UdIwQY MBaAFANseNlzB8YXEIVnOBQcwL05XMyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTJ4NDJYTUh4aGNRaFdjNEZCekF2VGxjeko0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kYzcxMTctODg1MS00MzIyLTljNzkt ZTA3NTVmMDg5YzFhLzEvQTJ4NDJYTUh4aGNRaFdjNEZCekF2VGxjeko0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9kYzcxMTctODg1MS00MzIyLTljNzktZTA3NTVmMDg5YzFh LzEvQTJ4NDJYTUh4aGNRaFdjNEZCekF2VGxjeko0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1dJVyE0J Y8AfE2UxEJYtl/4s7mMrnFPbEoV+gMGQ+TsqoEQUS+/tVLKRPpv+K4pCAhbIZ5bF EuYBosLAluFnQUvnhFS+/yWKt3tt5fGyftT71ZpiwqkNVWNgdwc11Lg1Kn/Pwywo BLXdW49188uTUB7ubmBaZRfvE2ILEPfLVoN2Te5UkA1SEvIHE4gBgcsH6ksuv5ES vOBfidBuI3dJT4oNEtDEK+AqedKjpCagQK++7b2yz/4xHgihb28y4uxAwxUK5CQW snMAjQoAQ2JZmhXd0b1Tv/8t7hAFS/7s3pY10mbitruLkaPpUf1EcsV0KTeZtaYi ocXsOEiNsHZBZA== -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:51 2025 by rpki-client