This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json) Hash identifier: /ij5N6V6hO4LKAIbQsH4iMMJGaKzLj9h9W5I4IjX9f4= Subject key identifier: 09:F2:C8:CB:48:B2:FA:DA:71:F9:AD:D9:07:E7:B8:E1:E0:4C:DA:91 Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8 Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8 Certificate serial: 019AF1646C87C10C73242E477BAA6F3470C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft Manifest number: 0E00 Signing time: Sat 06 Dec 2025 02:01:21 +0000 Manifest this update: Sat 06 Dec 2025 02:01:21 +0000 Manifest next update: Sun 07 Dec 2025 02:01:21 +0000 Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: QZQjvB1mKaWYYsZHa70z9lwn80Z9Ds2sZUkzMpKDDxM=) 2: AThGgouxKv8fc_GjPfk1KTqcYJ8.roa (hash: pBwVTlstihKQTv02WIHNb7H+18sdn98VZXnJD5bJ+rM=) 3: O29Zxmmx6-HgpfQCaZNYO-hkBL0.roa (hash: AJ99xUwGr6nteSCZy2ZqWhrEmfyvYWpbIQR3DNjRUos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6c:87:c1:0c:73:24:2e:47:7b:aa:6f:34:70:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8 Validity Not Before: Dec 6 02:01:21 2025 GMT Not After : Dec 7 02:01:21 2025 GMT Subject: CN=09f2c8cb48b2fada71f9add907e7b8e1e04cda91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0d:52:04:0d:30:24:95:d7:7c:2e:e1:81:ec: 93:b6:21:8b:c5:7f:5c:b6:7b:bb:67:8c:62:d3:96: b6:04:66:30:4a:f3:e6:60:84:49:5e:9f:8f:fa:24: 3e:16:1a:5b:c7:41:69:8a:6f:9c:dc:8a:4a:79:d9: 43:d7:73:37:80:9c:94:e6:ea:ad:01:97:49:ae:f8: a3:a7:69:3d:bc:d9:bf:cf:e3:dd:6b:93:80:0d:42: 97:32:f7:9a:3e:eb:0c:6a:0c:37:d1:ee:96:ae:d6: 24:8b:fd:7a:f7:47:60:6c:72:fb:e3:cc:4b:64:77: f7:e5:d2:67:52:a1:94:9f:b6:1b:55:16:cf:d6:78: bc:15:91:c8:bb:87:20:34:6c:5e:fc:b5:3a:62:a7: 2f:79:13:76:e9:2e:d3:88:f3:43:3c:25:54:74:a7: df:72:bc:a6:7c:c6:eb:0b:89:89:0f:f9:ab:6f:d2: 13:28:3e:68:f6:38:08:1b:f1:06:69:f8:ff:15:b5: 92:45:bb:86:c4:52:8f:6e:72:83:54:21:df:cd:34: b9:33:ac:17:53:4b:48:c2:b0:e0:24:fd:d9:da:71: 91:6e:e3:ce:9f:da:20:38:9d:ce:a7:d3:18:d5:3f: e6:b1:2e:b6:ec:cc:c1:b5:a1:32:d5:08:86:2b:1a: 15:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F2:C8:CB:48:B2:FA:DA:71:F9:AD:D9:07:E7:B8:E1:E0:4C:DA:91 X509v3 Authority Key Identifier: keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:50:be:60:70:35:5c:13:c4:cf:20:15:85:c3:fe:4c:f4:e5: 31:85:d2:95:98:d0:c5:40:b8:ea:79:22:d5:42:e0:39:83:05: 8a:45:75:c5:ae:15:03:8b:f3:07:4b:95:f7:02:68:ec:95:67: c4:17:8f:ab:fe:81:d9:b3:58:3b:0a:d0:7e:83:a9:71:2a:22: c2:d1:25:a5:07:9d:55:f9:60:24:76:13:e2:65:72:2d:77:b9: 25:77:e0:df:3a:54:43:dc:5f:5d:ed:8f:2c:f2:3c:55:86:4a: fe:d6:27:49:a2:9e:3b:30:94:59:92:56:8a:a8:e8:2b:c5:cc: 00:34:a8:d3:a0:b1:ad:e7:d4:b0:7e:13:bb:5d:2b:4f:d2:5a: 52:bc:2b:f3:06:2a:50:c3:9c:93:c2:f8:c1:9d:b9:81:b9:a3: 5f:52:4b:d9:4c:d0:2f:76:aa:a3:b7:ec:1e:91:36:16:99:24: 8b:a2:97:96:82:30:15:c5:05:90:c5:ac:76:b1:0c:3b:e5:8a: 72:ad:a3:c0:ab:bf:9f:a9:15:5c:9a:06:69:a5:42:05:7f:53: 31:67:64:3f:12:fc:8b:87:8a:6a:5d:db:eb:72:fa:99:0e:14: d1:6d:64:6b:5b:88:41:c0:67:3e:7c:35:07:c0:eb:f2:c5:8f: c3:1f:ca:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGyHwQxzJC5He6pvNHDFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzODRlODhmYjc5YTM3NzZjYjA1ODNlMmI2N2EwYmVjNmRm YzY4YjgwHhcNMjUxMjA2MDIwMTIxWhcNMjUxMjA3MDIwMTIxWjAzMTEwLwYDVQQD EygwOWYyYzhjYjQ4YjJmYWRhNzFmOWFkZDkwN2U3YjhlMWUwNGNkYTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w1SBA0wJJXXfC7hgeyTtiGLxX9c tnu7Z4xi05a2BGYwSvPmYIRJXp+P+iQ+Fhpbx0Fpim+c3IpKedlD13M3gJyU5uqt AZdJrvijp2k9vNm/z+Pda5OADUKXMveaPusMagw30e6WrtYki/1690dgbHL748xL ZHf35dJnUqGUn7YbVRbP1ni8FZHIu4cgNGxe/LU6YqcveRN26S7TiPNDPCVUdKff crymfMbrC4mJD/mrb9ITKD5o9jgIG/EGafj/FbWSRbuGxFKPbnKDVCHfzTS5M6wX U0tIwrDgJP3Z2nGRbuPOn9ogOJ3Op9MY1T/msS627MzBtaEy1QiGKxoVpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnyyMtIsvracfmt2QfnuOHgTNqRMB8GA1UdIwQY MBaAFAOE6I+3mjd2ywWD4rZ6C+xt/Gi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMt MzMzYTM4NGQ0MTdkLzEvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMtMzMzYTM4NGQ0MTdk LzEvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVC+YHA1 XBPEzyAVhcP+TPTlMYXSlZjQxUC46nki1ULgOYMFikV1xa4VA4vzB0uV9wJo7JVn xBePq/6B2bNYOwrQfoOpcSoiwtElpQedVflgJHYT4mVyLXe5JXfg3zpUQ9xfXe2P LPI8VYZK/tYnSaKeOzCUWZJWiqjoK8XMADSo06CxrefUsH4Tu10rT9JaUrwr8wYq UMOck8L4wZ25gbmjX1JL2UzQL3aqo7fsHpE2Fpkki6KXloIwFcUFkMWsdrEMO+WK cq2jwKu/n6kVXJoGaaVCBX9TMWdkPxL8i4eKal3b63L6mQ4U0W1ka1uIQcBnPnw1 B8Dr8sWPwx/K1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:56 2025 by rpki-client