This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft File: A9yMYjke_dTdGORoGeF3gAKpoYc.mft (raw, json) Hash identifier: bLFi55/6i4AO829ZLp/Wxud7WIoTgpUEkY63UEet1H0= Subject key identifier: DD:74:A9:0C:C1:25:20:6E:7B:0D:68:C5:00:42:6F:76:EF:33:BF:03 Authority key identifier: 03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87 Certificate issuer: /CN=03dc8c62391efdd4dd18e46819e1778002a9a187 Certificate serial: 019AF3F73411C20715E9A77F35542CAD315B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft Manifest number: 0522 Signing time: Sat 06 Dec 2025 14:00:55 +0000 Manifest this update: Sat 06 Dec 2025 14:00:55 +0000 Manifest next update: Sun 07 Dec 2025 14:00:55 +0000 Files and hashes: 1: A9yMYjke_dTdGORoGeF3gAKpoYc.crl (hash: 8IlEco8GuycY8nRaHy7KrAzbT11yL5nHsUapArnmBbE=) 2: KMKlBIWdbSLJxhG6mlrGw76dE8w.roa (hash: wMSY3OLmFX6U/ZLAS1pVuwf7520K0rZUrgx8A8ShiM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:34:11:c2:07:15:e9:a7:7f:35:54:2c:ad:31:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03dc8c62391efdd4dd18e46819e1778002a9a187 Validity Not Before: Dec 6 14:00:55 2025 GMT Not After : Dec 7 14:00:55 2025 GMT Subject: CN=dd74a90cc125206e7b0d68c500426f76ef33bf03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4c:ef:4f:25:ca:14:9b:3d:ae:ed:fc:5c:89: b3:b3:70:19:a8:b4:c2:ca:9f:24:ac:3c:57:d7:5b: 39:bf:df:fa:63:95:d0:31:f7:c0:52:5f:52:ac:3d: 21:13:12:1e:1e:d6:2b:3b:76:60:0e:ec:5b:93:4c: ad:9d:f0:3e:e0:7f:c8:8f:b2:39:67:7f:2f:f2:58: e5:6c:b1:b3:62:ac:eb:0c:56:4e:65:d9:a0:ed:d9: 91:39:dc:b1:0b:ec:11:08:7f:c9:80:f5:b2:ee:1b: 13:db:97:ca:e5:73:46:db:3c:e6:c6:f6:18:31:9d: e7:2c:ff:eb:5c:91:63:d7:3a:7c:a2:ea:b8:2b:98: 29:75:5c:71:6e:38:6b:91:86:34:24:fa:dd:3b:0a: cf:c2:65:6a:e9:67:7f:ef:99:e1:8d:5f:e0:c1:37: b3:0b:68:c4:63:fa:bf:f0:9a:c6:b6:69:de:35:04: d1:be:fa:fa:17:85:f5:99:3d:c4:a7:68:29:30:0d: 23:c8:e2:71:d7:51:6f:e5:fd:38:14:97:87:de:22: 8f:b4:08:32:ca:d9:e7:91:83:4b:f7:f5:cc:e1:a2: 62:da:37:fa:96:3b:2d:a9:9d:4a:27:63:fb:87:85: e0:a4:bc:80:4b:93:6e:bb:bc:1e:e8:89:58:d1:ed: 7e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:74:A9:0C:C1:25:20:6E:7B:0D:68:C5:00:42:6F:76:EF:33:BF:03 X509v3 Authority Key Identifier: keyid:03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:a4:d5:41:ba:06:f5:37:ca:78:7d:f7:b3:a4:c2:ed:38:4b: 17:37:61:d0:f6:6d:c7:e3:bf:cd:35:a7:dc:13:74:0d:84:8b: ae:10:15:35:92:f9:44:c5:4b:71:c7:d3:fb:6d:2c:4c:86:4d: 2a:e3:eb:84:06:37:af:36:88:29:eb:88:de:43:9a:1d:7e:07: 1c:18:0a:fa:00:39:da:51:62:83:ad:68:bc:00:2c:d0:f8:3b: bf:ca:8a:3d:ee:8d:7d:01:d0:9f:b1:82:8b:9c:5b:c4:f5:90: 90:e8:bf:56:34:f6:f1:03:7b:e0:ef:5d:84:4e:51:9e:a6:41: 4b:6f:df:86:d3:02:99:70:a4:d2:2e:1a:c3:99:10:25:6d:51: 31:9f:17:fd:65:00:a4:a9:5a:09:ca:0c:ac:6b:95:69:f3:ec: 12:b2:f2:55:ce:70:84:d4:09:37:46:61:42:71:d0:fb:67:0d: e0:b0:88:77:7f:08:bb:13:44:d9:bf:10:75:95:46:18:45:70: d2:cb:57:e6:f2:da:7a:d8:36:c8:b0:b0:6e:6b:8c:be:b0:2f: 43:cf:de:59:86:9a:d8:ed:e3:8e:31:c0:f2:7e:73:9d:73:cb: 49:8d:8a:a6:8c:80:fe:41:97:2a:85:55:c5:50:dd:29:0d:f6: 31:01:50:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9zQRwgcV6ad/NVQsrTFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZGM4YzYyMzkxZWZkZDRkZDE4ZTQ2ODE5ZTE3NzgwMDJh OWExODcwHhcNMjUxMjA2MTQwMDU1WhcNMjUxMjA3MTQwMDU1WjAzMTEwLwYDVQQD EyhkZDc0YTkwY2MxMjUyMDZlN2IwZDY4YzUwMDQyNmY3NmVmMzNiZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUzvTyXKFJs9ru38XImzs3AZqLTC yp8krDxX11s5v9/6Y5XQMffAUl9SrD0hExIeHtYrO3ZgDuxbk0ytnfA+4H/Ij7I5 Z38v8ljlbLGzYqzrDFZOZdmg7dmROdyxC+wRCH/JgPWy7hsT25fK5XNG2zzmxvYY MZ3nLP/rXJFj1zp8ouq4K5gpdVxxbjhrkYY0JPrdOwrPwmVq6Wd/75nhjV/gwTez C2jEY/q/8JrGtmneNQTRvvr6F4X1mT3Ep2gpMA0jyOJx11Fv5f04FJeH3iKPtAgy ytnnkYNL9/XM4aJi2jf6ljstqZ1KJ2P7h4XgpLyAS5Nuu7we6IlY0e1+PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN10qQzBJSBuew1oxQBCb3bvM78DMB8GA1UdIwQY MBaAFAPcjGI5Hv3U3RjkaBnhd4ACqaGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTl5TVlqa2VfZFRkR09Sb0dlRjNnQUtwb1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kMDgwYzctY2VlNi00YjQxLThjMWMt MGVmOGMwMzZiNjE2LzEvQTl5TVlqa2VfZFRkR09Sb0dlRjNnQUtwb1ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9kMDgwYzctY2VlNi00YjQxLThjMWMtMGVmOGMwMzZiNjE2 LzEvQTl5TVlqa2VfZFRkR09Sb0dlRjNnQUtwb1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKTVQboG 9TfKeH33s6TC7ThLFzdh0PZtx+O/zTWn3BN0DYSLrhAVNZL5RMVLccfT+20sTIZN KuPrhAY3rzaIKeuI3kOaHX4HHBgK+gA52lFig61ovAAs0Pg7v8qKPe6NfQHQn7GC i5xbxPWQkOi/VjT28QN74O9dhE5RnqZBS2/fhtMCmXCk0i4aw5kQJW1RMZ8X/WUA pKlaCcoMrGuVafPsErLyVc5whNQJN0ZhQnHQ+2cN4LCId38IuxNE2b8QdZVGGEVw 0stX5vLaetg2yLCwbmuMvrAvQ8/eWYaa2O3jjjHA8n5znXPLSY2KpoyA/kGXKoVV xVDdKQ32MQFQ8w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:19:22 2025 by rpki-client