This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft File: A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft (raw, json) Hash identifier: D27ymsOngZDKBoVh4ZGQVm2ylJu9EX/+YlKCwJRYDcQ= Subject key identifier: 9F:B1:D5:96:01:3E:55:8F:F0:15:A7:5C:D4:9D:F6:93:6A:B4:C6:13 Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77 Certificate issuer: /CN=039b01353e51a3a87e835963bd8833ed81853d77 Certificate serial: 019AF6533BF1B0EBB3C2F12E7929C1934A04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft Manifest number: 1765 Signing time: Sun 07 Dec 2025 01:00:41 +0000 Manifest this update: Sun 07 Dec 2025 01:00:41 +0000 Manifest next update: Mon 08 Dec 2025 01:00:41 +0000 Files and hashes: 1: A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl (hash: R7zzsoJqAiO07nkQnJDo8BdOnngm6YEVqduDU2npeAc=) 2: aFAF2a0pf2_iQW_Ah5PtSVGIIsU.roa (hash: CRoJAvxL/AEhIjj3BGa3AOSm/IAStthRp+t6FhfWlZc=) 3: g0yUXdYSuBEU7wpjF_M-dIueuPE.roa (hash: PIV5IbeiUmm5gi+hdOXD1voi9O/jmaGDnpkEJZ2+Rwg=) 4: kLgY3X5leR0VtUr8VPTZGFKR1kc.roa (hash: LBSLrR+c9iEdXN69yxUzikKKOnVtulDFWy14eJ7VP9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:3b:f1:b0:eb:b3:c2:f1:2e:79:29:c1:93:4a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77 Validity Not Before: Dec 7 01:00:41 2025 GMT Not After : Dec 8 01:00:41 2025 GMT Subject: CN=9fb1d596013e558ff015a75cd49df6936ab4c613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8f:58:ad:2f:c0:09:f4:5c:d8:f8:5e:be:1c: f9:b3:5b:e0:c5:31:5d:42:e8:d5:c5:ac:3c:31:f4: c7:f9:59:e2:78:7e:10:0b:bd:19:e0:91:eb:56:be: 8f:39:78:68:0c:6a:80:e6:0b:78:52:9f:9d:c1:3d: 8a:9d:0b:39:90:24:97:78:a0:cf:8d:08:a1:fc:26: d7:d4:bf:72:40:94:26:8c:61:7a:c6:63:9e:01:c0: dd:37:24:4b:dc:26:c8:7f:31:8f:6e:71:37:5d:d8: 30:96:21:0a:06:d5:fd:af:1e:15:4c:66:40:9b:6e: 8c:cd:f7:5d:20:d1:4b:ef:0a:d9:df:74:9e:3b:71: c9:fd:de:69:15:bd:32:e3:ed:a7:5d:d9:d5:41:cf: fc:09:e1:98:e7:c3:f3:49:91:5e:f9:e3:70:b8:ee: 09:70:22:d7:61:96:da:b2:98:68:53:58:e4:d0:f4: 30:b1:57:d1:af:99:99:b8:9b:c2:db:4a:3d:fe:69: 75:70:09:b0:7e:54:05:af:2f:5c:3b:3c:30:2f:4d: 97:16:80:fe:c6:e7:57:32:78:ad:77:fa:24:eb:5d: 57:5e:e9:b7:3c:cc:b9:23:4f:87:7c:8c:d7:bf:fc: 41:b0:3e:90:cc:dc:aa:6c:95:17:73:8e:bc:21:db: 53:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B1:D5:96:01:3E:55:8F:F0:15:A7:5C:D4:9D:F6:93:6A:B4:C6:13 X509v3 Authority Key Identifier: keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:56:76:0e:22:4a:37:b1:3e:cb:52:d3:1b:fd:22:38:b1:d7: db:a7:78:f0:3b:f1:c7:28:53:03:0a:5c:55:24:93:34:89:67: 8c:fb:e0:59:d9:0a:db:86:be:a3:a2:c8:eb:bf:32:52:81:0d: 08:b4:a1:54:b9:5c:7d:0e:80:d4:a1:60:13:c3:94:b4:4d:59: 36:ae:ca:91:f6:d8:8a:df:6a:25:98:35:78:d2:f3:23:5e:5e: df:28:a1:cd:d5:d3:bf:08:86:66:e4:25:e1:fd:a6:2d:f9:39: 61:4e:68:76:e8:0a:b7:66:ed:20:19:1c:3a:1a:7f:76:75:c2: 70:b3:ee:ce:50:35:bc:3f:6e:48:b8:4b:dc:5b:84:10:1d:19: 83:a6:dd:61:a4:ee:cb:6d:b6:f6:9c:06:24:98:75:0e:89:07: eb:b4:f7:5e:75:80:34:bb:63:8e:ea:f8:c6:20:58:78:8b:29: f7:04:11:e1:24:16:6d:30:ed:ac:78:72:59:88:88:49:1d:58: 09:96:37:45:a4:f5:de:8b:e9:91:e8:47:65:17:1d:86:ce:e3: a0:16:2d:b8:d7:30:f7:40:3c:cc:ba:a2:f9:1a:dd:27:65:c0: 7a:5c:72:05:61:f5:32:e8:cd:40:7b:78:ff:cb:d1:f4:7f:3b: 02:99:3e:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2UzvxsOuzwvEueSnBk0oEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOWIwMTM1M2U1MWEzYTg3ZTgzNTk2M2JkODgzM2VkODE4 NTNkNzcwHhcNMjUxMjA3MDEwMDQxWhcNMjUxMjA4MDEwMDQxWjAzMTEwLwYDVQQD Eyg5ZmIxZDU5NjAxM2U1NThmZjAxNWE3NWNkNDlkZjY5MzZhYjRjNjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA449YrS/ACfRc2Phevhz5s1vgxTFd QujVxaw8MfTH+VnieH4QC70Z4JHrVr6POXhoDGqA5gt4Up+dwT2KnQs5kCSXeKDP jQih/CbX1L9yQJQmjGF6xmOeAcDdNyRL3CbIfzGPbnE3XdgwliEKBtX9rx4VTGZA m26MzfddINFL7wrZ33SeO3HJ/d5pFb0y4+2nXdnVQc/8CeGY58PzSZFe+eNwuO4J cCLXYZbasphoU1jk0PQwsVfRr5mZuJvC20o9/ml1cAmwflQFry9cOzwwL02XFoD+ xudXMnitd/ok611XXum3PMy5I0+HfIzXv/xBsD6QzNyqbJUXc468IdtTbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+x1ZYBPlWP8BWnXNSd9pNqtMYTMB8GA1UdIwQY MBaAFAObATU+UaOofoNZY72IM+2BhT13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUt NGE4YjZiNDA4MmIxLzEvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUtNGE4YjZiNDA4MmIx LzEvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlZ2DiJK N7E+y1LTG/0iOLHX26d48DvxxyhTAwpcVSSTNIlnjPvgWdkK24a+o6LI678yUoEN CLShVLlcfQ6A1KFgE8OUtE1ZNq7KkfbYit9qJZg1eNLzI15e3yihzdXTvwiGZuQl 4f2mLfk5YU5odugKt2btIBkcOhp/dnXCcLPuzlA1vD9uSLhL3FuEEB0Zg6bdYaTu y2229pwGJJh1DokH67T3XnWANLtjjur4xiBYeIsp9wQR4SQWbTDtrHhyWYiISR1Y CZY3RaT13ovpkehHZRcdhs7joBYtuNcw90A8zLqi+RrdJ2XAelxyBWH1MujNQHt4 /8vR9H87Apk+BA== -----END CERTIFICATE-----Generated at Sun Dec 7 07:44:47 2025 by rpki-client