This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft File: A1KD5iNe2yXotUdJtihfXj74U3E.mft (raw, json) Hash identifier: ma9Lk17cTVpeP+K0+3AFlgKCwtVp85xtpzmaWNhS5Mc= Subject key identifier: AB:E5:1F:77:65:33:BF:51:4B:89:9F:DF:B0:96:1D:80:BE:F1:95:CC Authority key identifier: 03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71 Certificate issuer: /CN=035283e6235edb25e8b54749b6285f5e3ef85371 Certificate serial: 019AF2400668A4AABE71B612DA56962B011B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft Manifest number: 02AF Signing time: Sat 06 Dec 2025 06:01:13 +0000 Manifest this update: Sat 06 Dec 2025 06:01:13 +0000 Manifest next update: Sun 07 Dec 2025 06:01:13 +0000 Files and hashes: 1: A1KD5iNe2yXotUdJtihfXj74U3E.crl (hash: vXyaGUpWJ8qddY5op5aKWM/G4OxwqfvSbWIjlIbQwZQ=) 2: z96_ZJgr9Ouwu3H857DM3qPVUxI.roa (hash: XUjlH+TkzMgkjT2OPVskc/V8eVbqCCBWMoR0ix6MWrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:06:68:a4:aa:be:71:b6:12:da:56:96:2b:01:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035283e6235edb25e8b54749b6285f5e3ef85371 Validity Not Before: Dec 6 06:01:13 2025 GMT Not After : Dec 7 06:01:13 2025 GMT Subject: CN=abe51f776533bf514b899fdfb0961d80bef195cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9a:37:ff:a9:51:6d:ba:39:2e:b9:ee:7a:2a: 0c:6d:d4:5e:00:b3:42:05:ab:78:86:91:89:4b:e9: 64:75:0d:c9:71:03:14:c4:86:a4:11:72:e5:90:52: 98:e2:c3:ea:72:63:de:4a:99:7e:21:97:54:73:0b: 1a:d6:1f:19:4f:b4:8f:87:0e:1a:37:07:86:4f:19: b6:ef:72:77:a9:62:96:74:49:da:11:9b:09:98:52: 3c:3c:dc:ca:24:0b:c1:c5:d4:0e:91:cb:9b:49:1a: b3:c9:0e:e2:d4:42:b0:82:63:8f:46:7c:70:6c:28: a8:16:58:85:8e:88:89:a2:b7:35:65:e1:2e:f6:e2: 14:45:94:80:e3:3e:3f:cc:1a:37:7e:e4:33:67:96: 5c:6d:6f:fe:a8:16:66:f0:4e:72:c0:5d:c4:4d:89: 0b:1c:f2:5d:03:6c:b0:82:f4:03:54:9e:55:e1:4b: 79:70:91:8e:40:c9:6c:7f:87:33:31:66:a1:59:56: c4:63:25:86:6a:a7:af:d2:ca:eb:a0:8e:91:5a:3f: 6a:83:f4:44:53:44:0a:57:b4:94:3e:e1:f1:00:65: 55:a7:5b:f2:ef:f7:33:6e:97:f4:e1:04:0d:96:06: 08:4b:ef:be:cb:68:4b:e5:a7:02:d1:22:1a:8d:1b: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E5:1F:77:65:33:BF:51:4B:89:9F:DF:B0:96:1D:80:BE:F1:95:CC X509v3 Authority Key Identifier: keyid:03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:46:f8:c6:14:66:d8:da:a2:dd:d0:01:b0:bb:b9:e1:50:a0: c5:08:b7:74:e4:64:d8:ce:86:b8:fa:7e:4b:f9:a6:76:db:41: de:04:98:0d:8f:79:2e:57:64:36:72:ef:13:5e:1d:b0:db:18: f2:54:9a:61:8c:3e:c9:12:5f:bb:d9:48:31:d6:b5:77:19:ba: e0:82:d5:71:a8:10:22:ae:8d:64:44:69:d5:50:0b:1c:02:28: 62:d5:49:f2:47:81:7b:37:9d:bf:4c:a7:85:64:3e:4c:08:30: 64:37:a5:09:5c:41:9f:fc:ff:a9:8d:24:3c:1e:7a:a7:7e:5f: 9f:67:f4:34:81:03:5b:fc:a6:5e:bc:26:3c:5a:3a:a5:cb:ed: fc:69:fa:45:b5:14:8b:b3:1d:23:f4:8e:79:e9:4d:50:1a:a2: ce:cb:68:3f:70:3b:46:c7:ce:ac:2f:c0:5e:f7:12:1c:42:b6: 88:8c:9b:0f:e4:d5:11:3c:e4:a1:34:f4:f9:31:66:10:e6:8f: bf:0f:d3:d1:0a:f0:ae:94:07:52:e0:4c:12:a2:1e:d3:b7:b3: af:2d:a2:b8:0a:5e:c5:c2:2e:d7:c1:98:28:94:b3:70:ef:66: dd:8c:fb:9e:de:17:f3:b4:dd:37:d4:c6:4c:63:61:6c:f0:d3: f8:ce:9c:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAZopKq+cbYS2laWKwEbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTI4M2U2MjM1ZWRiMjVlOGI1NDc0OWI2Mjg1ZjVlM2Vm ODUzNzEwHhcNMjUxMjA2MDYwMTEzWhcNMjUxMjA3MDYwMTEzWjAzMTEwLwYDVQQD EyhhYmU1MWY3NzY1MzNiZjUxNGI4OTlmZGZiMDk2MWQ4MGJlZjE5NWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpo3/6lRbbo5LrnueioMbdReALNC Bat4hpGJS+lkdQ3JcQMUxIakEXLlkFKY4sPqcmPeSpl+IZdUcwsa1h8ZT7SPhw4a NweGTxm273J3qWKWdEnaEZsJmFI8PNzKJAvBxdQOkcubSRqzyQ7i1EKwgmOPRnxw bCioFliFjoiJorc1ZeEu9uIURZSA4z4/zBo3fuQzZ5ZcbW/+qBZm8E5ywF3ETYkL HPJdA2ywgvQDVJ5V4Ut5cJGOQMlsf4czMWahWVbEYyWGaqev0srroI6RWj9qg/RE U0QKV7SUPuHxAGVVp1vy7/czbpf04QQNlgYIS+++y2hL5acC0SIajRuRtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvlH3dlM79RS4mf37CWHYC+8ZXMMB8GA1UdIwQY MBaAFANSg+YjXtsl6LVHSbYoX14++FNxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMTFmNTctNjQwNC00NDZhLTlmMDgt MTFiOTI5MDY0MDZkLzEvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMTFmNTctNjQwNC00NDZhLTlmMDgtMTFiOTI5MDY0MDZk LzEvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxUb4xhRm 2Nqi3dABsLu54VCgxQi3dORk2M6GuPp+S/mmdttB3gSYDY95LldkNnLvE14dsNsY 8lSaYYw+yRJfu9lIMda1dxm64ILVcagQIq6NZERp1VALHAIoYtVJ8keBezedv0yn hWQ+TAgwZDelCVxBn/z/qY0kPB56p35fn2f0NIEDW/ymXrwmPFo6pcvt/Gn6RbUU i7MdI/SOeelNUBqizstoP3A7RsfOrC/AXvcSHEK2iIybD+TVETzkoTT0+TFmEOaP vw/T0QrwrpQHUuBMEqIe07ezry2iuApexcIu18GYKJSzcO9m3Yz7nt4X87TdN9TG TGNhbPDT+M6cLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:30 2025 by rpki-client