This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft File: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft (raw, json) Hash identifier: k/sTxRHPP9uz58Fco1fm0UgqO0pmeLfj7r+BlGQU610= Subject key identifier: EA:D6:CE:40:A4:F8:B0:0F:73:94:5A:7B:B2:A7:0B:EC:42:45:E7:BA Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24 Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524 Certificate serial: 019AF50B05EDEF37913BA340BDAF85EBA4E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 19:02:11 +0000 Manifest this update: Sat 06 Dec 2025 19:02:11 +0000 Manifest next update: Sun 07 Dec 2025 19:02:11 +0000 Files and hashes: 1: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl (hash: S9aXjticgLgA3Vq/e5AGcBjgdtvcEyXszxoJFXpw5OY=) 2: SM900vRB7gei6pS6Q178I2UX-lU.roa (hash: EDUY4+JtCT9uXEY3z6PPpKcKtOUgL6hoTy+pDX+nuro=) 3: rE12S5_UCVz_qE96OpsYCotvRdo.roa (hash: HmY8gAlqRzAv6/rOzxQZtJmfpwofsJXd2sCI5/LnmTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:05:ed:ef:37:91:3b:a3:40:bd:af:85:eb:a4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524 Validity Not Before: Dec 6 19:02:11 2025 GMT Not After : Dec 7 19:02:11 2025 GMT Subject: CN=ead6ce40a4f8b00f73945a7bb2a70bec4245e7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:44:17:0f:dd:04:ef:97:81:a5:3e:eb:2f:08: f8:66:d8:58:80:44:56:2c:3a:f1:ce:48:7a:c2:78: 94:22:1a:21:ca:92:7f:d6:fa:d5:a6:21:6a:55:0d: 55:ae:bb:86:c1:2d:f4:bd:ef:0d:cb:16:e4:15:36: c0:77:1d:af:e6:65:87:1a:94:7d:95:4b:14:ca:b0: f6:a3:aa:74:a1:51:98:44:4e:46:f1:a0:56:6b:ae: 54:f4:9e:b8:e9:2a:1d:45:18:e0:49:2e:88:d3:06: 6c:dc:38:16:f3:27:89:ba:06:bb:8e:71:b0:9a:71: ad:40:48:97:ca:46:a9:b3:ed:31:c6:9a:ea:97:e9: a7:80:04:c3:12:1f:a6:69:d7:09:8f:1a:60:2b:3a: 69:01:8b:2b:75:5d:05:bd:29:79:3b:74:bc:c7:d4: 52:17:a3:7f:3d:b4:44:e8:c2:8d:11:0b:d0:a8:38: 64:1b:82:42:d1:38:01:18:09:0b:41:90:de:cc:48: 6e:eb:f2:4f:f0:fd:6b:15:29:07:9d:a9:4b:a1:8a: a8:0a:23:19:56:9b:af:c9:40:dd:e3:a9:dd:10:0a: ca:57:86:da:d5:a2:27:52:68:56:3c:ff:e2:9a:86: c1:9c:51:e6:c6:fe:1a:7c:6e:70:f6:d5:05:fb:51: f7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D6:CE:40:A4:F8:B0:0F:73:94:5A:7B:B2:A7:0B:EC:42:45:E7:BA X509v3 Authority Key Identifier: keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3a:8d:ec:2d:68:40:52:f9:63:3a:1e:4e:7d:27:12:64:8f: 9d:23:82:0d:82:8f:15:df:cf:1a:8b:fd:ee:68:ff:1f:01:36: 69:3d:9d:44:4e:2e:a2:7f:59:d9:14:80:17:d4:47:3a:3f:5a: a6:b9:99:6c:c3:69:89:32:06:81:a4:0f:21:7e:a0:67:23:ff: 55:2a:87:84:03:94:49:64:be:ee:d0:69:ce:c3:b4:74:5c:37: 27:2d:74:17:07:15:68:5a:fa:ed:7f:f0:c8:b9:2a:da:96:79: 1d:c6:9a:fe:9a:52:1d:1f:bf:3e:73:e0:d0:6f:ec:7a:7c:44: e9:f9:ef:6a:92:31:a3:b6:64:bb:dc:ce:c5:43:63:11:0c:45: 3f:87:02:cb:74:d1:9b:a5:da:c8:bb:5c:cb:67:4c:33:3c:91: 1d:6b:af:fd:3f:2b:ec:4f:b4:6b:c0:dd:fc:5b:b4:78:15:44: be:84:e0:e9:9b:77:72:b4:e9:65:3d:14:59:14:88:01:3e:a6: 11:d6:37:b8:df:7b:29:de:47:73:80:92:04:eb:53:4b:1c:c1: 37:ea:45:af:38:db:1c:6a:7a:6d:e7:9b:a1:53:a6:e4:73:f8: be:43:b4:28:b3:28:db:8f:4d:18:80:e6:e5:d6:9a:f2:ad:ca: f0:3e:c5:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CwXt7zeRO6NAva+F66TgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZTUzZDE4ZjVmMjEyYWUwODAyYTE3ZWU1OTk0YzMzMzFh NDM1MjQwHhcNMjUxMjA2MTkwMjExWhcNMjUxMjA3MTkwMjExWjAzMTEwLwYDVQQD EyhlYWQ2Y2U0MGE0ZjhiMDBmNzM5NDVhN2JiMmE3MGJlYzQyNDVlN2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEQXD90E75eBpT7rLwj4ZthYgERW LDrxzkh6wniUIhohypJ/1vrVpiFqVQ1VrruGwS30ve8NyxbkFTbAdx2v5mWHGpR9 lUsUyrD2o6p0oVGYRE5G8aBWa65U9J646SodRRjgSS6I0wZs3DgW8yeJuga7jnGw mnGtQEiXykaps+0xxprql+mngATDEh+madcJjxpgKzppAYsrdV0FvSl5O3S8x9RS F6N/PbRE6MKNEQvQqDhkG4JC0TgBGAkLQZDezEhu6/JP8P1rFSkHnalLoYqoCiMZ VpuvyUDd46ndEArKV4ba1aInUmhWPP/imobBnFHmxv4afG5w9tUF+1H3AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrWzkCk+LAPc5Rae7KnC+xCRee6MB8GA1UdIwQY MBaAFAPlPRj18hKuCAKhfuWZTDMxpDUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kZGQ5ZjEtMGYyZS00ZDVmLTg1N2Qt MDJiYWI5ZjZmOTU1LzEvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9kZGQ5ZjEtMGYyZS00ZDVmLTg1N2QtMDJiYWI5ZjZmOTU1 LzEvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDqN7C1o QFL5YzoeTn0nEmSPnSOCDYKPFd/PGov97mj/HwE2aT2dRE4uon9Z2RSAF9RHOj9a prmZbMNpiTIGgaQPIX6gZyP/VSqHhAOUSWS+7tBpzsO0dFw3Jy10FwcVaFr67X/w yLkq2pZ5Hcaa/ppSHR+/PnPg0G/senxE6fnvapIxo7Zku9zOxUNjEQxFP4cCy3TR m6XayLtcy2dMMzyRHWuv/T8r7E+0a8Dd/Fu0eBVEvoTg6Zt3crTpZT0UWRSIAT6m EdY3uN97Kd5Hc4CSBOtTSxzBN+pFrzjbHGp6beeboVOm5HP4vkO0KLMo249NGIDm 5daa8q3K8D7Fbg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:15:18 2025 by rpki-client