This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft File: A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json) Hash identifier: hcE/sRfmk9PSpxOLJCRWkosTExy0r5o0bfKrRBwMabw= Subject key identifier: 47:3B:4A:1E:F6:71:17:07:0F:81:B6:65:2A:53:DD:CB:46:1D:97:F5 Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77 Certificate issuer: /CN=039e78b45b5f59594eb811f3ac69062967f28c77 Certificate serial: 019B32D5D1D7DB62CEB84309D791E846D35D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft Manifest number: 05F7 Signing time: Thu 18 Dec 2025 19:00:31 +0000 Manifest this update: Thu 18 Dec 2025 19:00:31 +0000 Manifest next update: Fri 19 Dec 2025 19:00:31 +0000 Files and hashes: 1: 7h2grz8OfZg3_f3qnvjsQOWeT0M.roa (hash: F0gJrE4+UT2zrGrF6oXGx/pjZ35hmL1zwnN5iPSHMCs=) 2: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: QWxJFg9+sDDeBK9Q1mcaVRVsNQmFllnF/ne3Okv0J6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:d1:d7:db:62:ce:b8:43:09:d7:91:e8:46:d3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77 Validity Not Before: Dec 18 19:00:31 2025 GMT Not After : Dec 19 19:00:31 2025 GMT Subject: CN=473b4a1ef67117070f81b6652a53ddcb461d97f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bb:50:ff:a9:f5:65:07:c9:fa:b8:13:a0:77: a2:24:82:6d:70:8a:57:c3:ad:c6:a3:ee:57:15:b3: 58:be:e7:b2:3e:0f:10:bf:4f:f4:b7:1e:33:7a:e7: ff:af:2e:97:eb:34:8d:40:71:63:9e:61:2f:56:7d: 90:0c:1b:98:6d:93:cb:3d:48:7b:d3:5b:08:2e:88: 17:77:a6:4a:44:77:4c:d3:77:33:a8:78:9d:3f:d4: f7:fa:ed:8c:50:21:df:74:1c:79:d0:e5:93:be:ff: c5:3d:47:81:cf:01:14:32:8e:23:7f:3a:38:06:6b: 95:d5:43:ac:f3:2f:67:db:be:a3:c7:13:cf:90:f9: 13:af:f1:66:10:ce:5c:95:42:8b:8f:49:c7:9b:61: cc:1d:c7:18:e5:76:46:72:1d:c1:fc:cd:38:08:af: da:6b:cc:f4:90:fb:c8:4e:98:e1:ce:b7:2f:7a:fa: c3:b2:aa:2f:f8:83:0c:32:d3:77:7d:00:88:e5:8b: ee:33:d1:ec:d2:f5:d0:30:00:04:3d:39:20:42:4b: 38:6c:9b:2a:ea:ac:9f:f3:5f:f4:ec:fe:15:c5:15: 23:c5:02:d0:66:96:6e:58:15:56:9e:87:2d:0d:7c: 55:27:de:03:59:fe:14:98:0d:6a:c3:47:3e:0b:70: cc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3B:4A:1E:F6:71:17:07:0F:81:B6:65:2A:53:DD:CB:46:1D:97:F5 X509v3 Authority Key Identifier: keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:9f:35:a8:b6:49:4f:dd:0c:b6:79:30:41:ea:3b:3b:37:4f: 2d:88:fd:50:b7:d2:a5:ce:e8:94:58:c9:df:09:a6:07:de:1a: ea:76:6b:63:f7:ed:c5:a8:76:99:69:71:fc:1a:4f:8a:d8:1c: 9c:eb:53:84:ee:cb:45:80:9d:0a:b9:9d:43:5d:7b:52:39:a0: cc:98:29:ec:66:dc:8b:59:ad:33:dc:c6:43:42:10:c2:f2:ae: 62:34:75:cc:e5:1f:c0:9d:52:34:38:bd:5a:d0:05:12:7c:9d: 38:01:8e:fc:95:87:a8:62:2d:02:5d:3c:79:e9:85:9e:fb:ef: b9:80:19:4a:0d:97:46:da:39:dc:9d:59:87:40:69:98:66:99: c2:f0:ed:6a:8c:2c:fb:b7:b7:e9:ef:71:18:73:53:5c:34:40: 97:50:a4:ab:54:86:5b:49:61:a0:ce:67:c6:2f:8e:c0:09:b5: cb:2e:4f:11:81:10:fb:e0:f8:3e:3f:b0:54:c2:f1:6e:bc:27: d4:7b:92:0f:35:4c:80:1f:59:51:25:23:e6:d4:58:ce:4f:ab: f5:45:38:ee:ee:c6:21:e0:ce:ec:bc:f7:0d:90:14:eb:38:58: 76:1d:b2:a2:23:c3:17:d0:3e:ec:e7:ea:70:95:5a:19:97:b5: 57:c6:92:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1dHX22LOuEMJ15HoRtNdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOWU3OGI0NWI1ZjU5NTk0ZWI4MTFmM2FjNjkwNjI5Njdm MjhjNzcwHhcNMjUxMjE4MTkwMDMxWhcNMjUxMjE5MTkwMDMxWjAzMTEwLwYDVQQD Eyg0NzNiNGExZWY2NzExNzA3MGY4MWI2NjUyYTUzZGRjYjQ2MWQ5N2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rtQ/6n1ZQfJ+rgToHeiJIJtcIpX w63Go+5XFbNYvueyPg8Qv0/0tx4zeuf/ry6X6zSNQHFjnmEvVn2QDBuYbZPLPUh7 01sILogXd6ZKRHdM03czqHidP9T3+u2MUCHfdBx50OWTvv/FPUeBzwEUMo4jfzo4 BmuV1UOs8y9n276jxxPPkPkTr/FmEM5clUKLj0nHm2HMHccY5XZGch3B/M04CK/a a8z0kPvITpjhzrcvevrDsqov+IMMMtN3fQCI5YvuM9Hs0vXQMAAEPTkgQks4bJsq 6qyf81/07P4VxRUjxQLQZpZuWBVWnoctDXxVJ94DWf4UmA1qw0c+C3DMmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEc7Sh72cRcHD4G2ZSpT3ctGHZf1MB8GA1UdIwQY MBaAFAOeeLRbX1lZTrgR86xpBiln8ox3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQt MjZhMzhkYzg2NzBiLzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQtMjZhMzhkYzg2NzBi LzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI581qLZJ T90MtnkwQeo7OzdPLYj9ULfSpc7olFjJ3wmmB94a6nZrY/ftxah2mWlx/BpPitgc nOtThO7LRYCdCrmdQ117UjmgzJgp7Gbci1mtM9zGQ0IQwvKuYjR1zOUfwJ1SNDi9 WtAFEnydOAGO/JWHqGItAl08eemFnvvvuYAZSg2XRto53J1Zh0BpmGaZwvDtaows +7e36e9xGHNTXDRAl1Ckq1SGW0lhoM5nxi+OwAm1yy5PEYEQ++D4Pj+wVMLxbrwn 1HuSDzVMgB9ZUSUj5tRYzk+r9UU47u7GIeDO7Lz3DZAU6zhYdh2yoiPDF9A+7Ofq cJVaGZe1V8aSnA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:03:58 2025 by rpki-client