This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft File: A4r4Z5VBejWE1hY3UgmnLv7iRis.mft (raw, json) Hash identifier: SB/T3zwiB6F8zetCeeL2AM7xwBbBRdSZAbHUezaBqME= Subject key identifier: A5:07:30:B6:24:23:A4:75:E9:B2:E1:6F:50:3D:D3:F2:C5:41:00:4E Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B Certificate issuer: /CN=038af86795417a3584d616375209a72efee2462b Certificate serial: 019AF2092FDECC3C6B7406A8FEBEA4049655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft Manifest number: 0EE8 Signing time: Sat 06 Dec 2025 05:01:19 +0000 Manifest this update: Sat 06 Dec 2025 05:01:19 +0000 Manifest next update: Sun 07 Dec 2025 05:01:19 +0000 Files and hashes: 1: 1-ojoRJbswRkkiGkqXab5Mi6LHY.roa (hash: 60oY4GGKsVQvbVXZplutdFLjGZggdXVeIQnzzP1SLeY=) 2: A4r4Z5VBejWE1hY3UgmnLv7iRis.crl (hash: wko0tc8SgzzjLXp+aKcCRzwU4VT7F287+J3/sK8hZO8=) 3: WIaOGWdkdCPNTnZSI-W-XTK4te4.roa (hash: jVJuCp2YFk4DEa8ZbdmENwzLLMmsULw4LDZkckWi3gI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2f:de:cc:3c:6b:74:06:a8:fe:be:a4:04:96:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038af86795417a3584d616375209a72efee2462b Validity Not Before: Dec 6 05:01:19 2025 GMT Not After : Dec 7 05:01:19 2025 GMT Subject: CN=a50730b62423a475e9b2e16f503dd3f2c541004e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:c5:59:7c:e4:6a:99:75:d7:2c:a9:95:5d: bf:bc:e8:96:f3:28:67:9e:47:50:4d:93:28:57:6b: 1b:b3:6f:34:34:fb:bf:05:52:4f:a7:c0:4d:0f:fd: 5c:b1:17:9b:48:1e:6b:1d:d7:02:00:0a:f6:e6:00: 95:cc:17:2e:65:e5:cc:59:cd:02:62:b3:b4:88:2b: d6:71:1d:bb:dc:f1:2c:97:29:eb:7c:bb:15:c4:83: 36:20:92:a6:17:a6:7c:46:ea:a5:fe:e1:a5:67:49: 2d:e0:2b:0b:5f:28:f8:75:b4:bf:b2:d0:ee:d2:5b: 69:c9:b9:37:95:1f:10:b8:90:23:f8:53:fa:f9:7f: cc:12:31:66:4c:ab:04:2e:5c:8e:97:0e:79:4d:cf: e9:ce:18:00:70:2b:4f:00:4a:7a:4d:a4:9b:95:59: f0:51:e4:32:e0:1f:1d:4e:71:c9:fc:6d:c1:f7:87: b6:0d:56:96:97:a5:d9:b2:0a:50:cc:7a:e6:6d:e1: 78:9e:9c:7a:22:73:c2:d4:e3:6b:95:58:c4:bf:d1: 43:32:a0:bf:f9:11:b4:5a:e0:79:8d:8f:9b:43:4c: 98:62:69:5b:fa:95:a1:5a:23:80:8e:31:c5:f0:6d: 33:72:b5:12:94:dc:e5:90:cc:e4:b5:aa:ef:fa:d1: 17:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:07:30:B6:24:23:A4:75:E9:B2:E1:6F:50:3D:D3:F2:C5:41:00:4E X509v3 Authority Key Identifier: keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b2:2c:26:c5:82:a9:61:a0:5f:87:12:f1:18:70:23:06:e5: 83:da:7d:5a:8a:df:ed:75:42:04:a2:57:c2:af:6a:f6:a4:30: c4:1f:18:8a:14:50:ff:de:70:6f:13:64:e3:76:8b:72:72:7b: 84:1e:12:3a:d7:fc:6c:76:b1:a0:9b:93:9e:06:9e:44:b5:c1: fc:94:32:23:8e:46:3c:e0:3a:e0:8e:ed:5c:fe:45:18:92:c9: 70:db:be:f9:1d:eb:9f:33:20:f2:4d:5d:79:1a:86:54:9b:7f: 73:db:5c:8f:de:72:72:b8:a2:52:bc:02:b0:d7:6b:29:67:14: bd:17:e7:b5:5a:bd:f6:e2:39:64:80:13:cf:e7:a9:fe:f3:70: ee:d0:0e:fc:88:6e:e5:91:0d:62:41:fa:cd:39:2c:be:63:99: bd:4b:8b:4f:11:e6:25:02:9e:e2:ca:26:50:ff:57:d3:91:09: 8b:ab:13:a0:86:38:a9:84:05:7e:98:b0:04:d0:34:97:a7:39: b4:65:46:b8:b9:4c:36:95:bf:97:bd:eb:73:30:a8:95:75:24: 09:ef:f4:09:5b:33:b6:d7:10:c7:62:2d:a8:d4:21:5d:28:a7: 45:19:6c:5e:57:a7:f0:d5:07:e5:fb:9d:1a:06:45:56:8a:25: 64:35:56:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCS/ezDxrdAao/r6kBJZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOGFmODY3OTU0MTdhMzU4NGQ2MTYzNzUyMDlhNzJlZmVl MjQ2MmIwHhcNMjUxMjA2MDUwMTE5WhcNMjUxMjA3MDUwMTE5WjAzMTEwLwYDVQQD EyhhNTA3MzBiNjI0MjNhNDc1ZTliMmUxNmY1MDNkZDNmMmM1NDEwMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvADFWXzkapl11yyplV2/vOiW8yhn nkdQTZMoV2sbs280NPu/BVJPp8BND/1csRebSB5rHdcCAAr25gCVzBcuZeXMWc0C YrO0iCvWcR273PEslynrfLsVxIM2IJKmF6Z8Ruql/uGlZ0kt4CsLXyj4dbS/stDu 0ltpybk3lR8QuJAj+FP6+X/MEjFmTKsELlyOlw55Tc/pzhgAcCtPAEp6TaSblVnw UeQy4B8dTnHJ/G3B94e2DVaWl6XZsgpQzHrmbeF4npx6InPC1ONrlVjEv9FDMqC/ +RG0WuB5jY+bQ0yYYmlb+pWhWiOAjjHF8G0zcrUSlNzlkMzktarv+tEXNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUHMLYkI6R16bLhb1A90/LFQQBOMB8GA1UdIwQY MBaAFAOK+GeVQXo1hNYWN1IJpy7+4kYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTRyNFo1VkJlaldFMWhZM1VnbW5MdjdpUmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81N2U0MTktNDJmNC00ZDhjLWI2YjQt NDMxZjI3YTYyZWQ4LzEvQTRyNFo1VkJlaldFMWhZM1VnbW5MdjdpUmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi81N2U0MTktNDJmNC00ZDhjLWI2YjQtNDMxZjI3YTYyZWQ4 LzEvQTRyNFo1VkJlaldFMWhZM1VnbW5MdjdpUmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrIsJsWC qWGgX4cS8RhwIwblg9p9Worf7XVCBKJXwq9q9qQwxB8YihRQ/95wbxNk43aLcnJ7 hB4SOtf8bHaxoJuTngaeRLXB/JQyI45GPOA64I7tXP5FGJLJcNu++R3rnzMg8k1d eRqGVJt/c9tcj95ycriiUrwCsNdrKWcUvRfntVq99uI5ZIATz+ep/vNw7tAO/Ihu 5ZENYkH6zTksvmOZvUuLTxHmJQKe4somUP9X05EJi6sToIY4qYQFfpiwBNA0l6c5 tGVGuLlMNpW/l73rczColXUkCe/0CVszttcQx2ItqNQhXSinRRlsXlen8NUH5fud GgZFVoolZDVWOw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:17 2025 by rpki-client