This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft File: A-VjR3yiveae95Q5kflTMwV7PjY.mft (raw, json) Hash identifier: RfWzK896v3KMHIGJbZz+Wpy91OEJgLNQCzcGMJxY++E= Subject key identifier: 36:2D:7F:BB:CB:36:5D:C8:D9:42:BB:5E:57:2D:53:C6:D1:7B:40:C6 Authority key identifier: 03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36 Certificate issuer: /CN=03e563477ca2bde69ef7943991f95333057b3e36 Certificate serial: 019AF12D42A64B8D3194F137D13059E5D84F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft Manifest number: 0595 Signing time: Sat 06 Dec 2025 01:01:06 +0000 Manifest this update: Sat 06 Dec 2025 01:01:06 +0000 Manifest next update: Sun 07 Dec 2025 01:01:06 +0000 Files and hashes: 1: A-VjR3yiveae95Q5kflTMwV7PjY.crl (hash: ACV0Nr3qZLWJz31MgmUl2rbb6+z66OfTDQHtuMooPQI=) 2: YPMFe5Bu5pnUfONKrKR7BiqfdCg.roa (hash: zPktxLB6En3ydjnKgIDNJDbBFlDMgM3cJospsMff0n8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:42:a6:4b:8d:31:94:f1:37:d1:30:59:e5:d8:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03e563477ca2bde69ef7943991f95333057b3e36 Validity Not Before: Dec 6 01:01:06 2025 GMT Not After : Dec 7 01:01:06 2025 GMT Subject: CN=362d7fbbcb365dc8d942bb5e572d53c6d17b40c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dc:c4:13:18:d1:5d:4c:48:63:80:c3:03:1f: fc:e8:c9:a3:4e:60:3f:d5:e5:07:7a:1f:bd:c2:ae: 8b:a8:5a:44:27:77:14:91:28:24:d2:fd:85:e5:02: c3:1e:95:75:2a:f9:fd:b1:a2:47:bf:5c:b5:0e:07: ec:51:c2:1e:72:2b:e0:72:93:f0:2b:0b:67:5c:32: d6:6b:af:3e:e8:2b:2d:cd:bb:2e:ba:85:95:40:76: 8c:c6:37:ab:85:b6:5d:64:93:ca:96:1b:60:60:a5: e7:ee:a6:c1:57:f6:52:c2:8e:31:0c:c9:c0:dc:1e: 2b:9d:e8:99:82:82:b9:1e:d6:ad:42:41:e1:d4:72: 7e:c2:57:bc:ff:7f:69:cf:8c:13:8c:e2:4a:34:16: 00:82:06:dc:a8:1c:47:86:25:e1:0d:0e:ca:5e:64: 7a:de:0e:1d:11:e2:ec:18:34:7b:7c:77:ae:ba:78: 4b:8d:d5:08:dc:5f:c3:f2:ee:3d:1f:5d:43:1c:49: ff:aa:be:87:5b:42:2d:16:6b:d2:ac:fa:35:5f:36: 61:f1:37:a8:d1:9f:5f:a2:02:68:2c:32:35:de:10: 01:db:e2:3b:b7:13:5a:5d:a0:16:01:63:02:b0:b1: a0:04:9c:05:8c:23:48:b4:e4:87:d5:d3:ca:e1:15: bb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2D:7F:BB:CB:36:5D:C8:D9:42:BB:5E:57:2D:53:C6:D1:7B:40:C6 X509v3 Authority Key Identifier: keyid:03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:f5:96:1c:42:9d:c2:7d:aa:74:d1:70:4e:0d:f3:1e:56:cf: 52:97:1a:3b:ab:fd:2b:53:66:38:f1:73:4b:92:04:06:1e:73: c0:09:54:d4:b9:74:ce:c0:83:56:d0:96:f2:ac:68:9d:99:1d: ab:bd:ac:ba:21:12:dd:66:40:d6:03:0c:cb:be:73:7f:bd:d8: 66:7c:e8:4f:61:77:23:0d:46:26:bd:6a:b6:68:84:93:18:c2: 48:74:6e:a8:37:1c:1e:3b:ef:1b:ba:c9:df:18:50:9f:43:60: eb:ab:cd:1b:99:b5:21:f9:87:8d:bf:5d:07:09:79:85:14:c9: 5d:9d:25:23:cb:36:97:49:11:44:4b:9c:5f:bb:e2:1e:23:ce: 86:d1:cc:52:39:68:c9:cd:7b:72:62:0f:ed:4a:c8:7b:0d:38: bd:9d:d1:1e:f0:2e:16:61:ef:0e:2d:01:bd:d4:01:6e:58:fe: e1:40:cb:62:22:a9:56:36:c6:94:b2:22:63:18:21:da:3e:fb: d1:a5:15:ee:5a:c3:d4:ef:0c:0b:f6:7f:43:87:13:d9:33:b9: 45:b2:64:a1:24:d7:96:6b:e8:c5:9b:e3:64:3f:6a:00:1d:11: 11:bd:eb:11:75:00:23:a6:6e:a4:15:77:c2:5a:26:a4:84:5d: 71:b8:b3:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUKmS40xlPE30TBZ5dhPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZTU2MzQ3N2NhMmJkZTY5ZWY3OTQzOTkxZjk1MzMzMDU3 YjNlMzYwHhcNMjUxMjA2MDEwMTA2WhcNMjUxMjA3MDEwMTA2WjAzMTEwLwYDVQQD EygzNjJkN2ZiYmNiMzY1ZGM4ZDk0MmJiNWU1NzJkNTNjNmQxN2I0MGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNzEExjRXUxIY4DDAx/86MmjTmA/ 1eUHeh+9wq6LqFpEJ3cUkSgk0v2F5QLDHpV1Kvn9saJHv1y1DgfsUcIecivgcpPw KwtnXDLWa68+6CstzbsuuoWVQHaMxjerhbZdZJPKlhtgYKXn7qbBV/ZSwo4xDMnA 3B4rneiZgoK5HtatQkHh1HJ+wle8/39pz4wTjOJKNBYAggbcqBxHhiXhDQ7KXmR6 3g4dEeLsGDR7fHeuunhLjdUI3F/D8u49H11DHEn/qr6HW0ItFmvSrPo1XzZh8Teo 0Z9fogJoLDI13hAB2+I7txNaXaAWAWMCsLGgBJwFjCNItOSH1dPK4RW7FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYtf7vLNl3I2UK7XlctU8bRe0DGMB8GA1UdIwQY MBaAFAPlY0d8or3mnveUOZH5UzMFez42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS1WalIzeWl2ZWFlOTVRNWtmbFRNd1Y3UGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83ZWIwNzQtMTMzMS00ZGVhLTllNjAt MWYxZWM0MDBmYTUwLzEvQS1WalIzeWl2ZWFlOTVRNWtmbFRNd1Y3UGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy83ZWIwNzQtMTMzMS00ZGVhLTllNjAtMWYxZWM0MDBmYTUw LzEvQS1WalIzeWl2ZWFlOTVRNWtmbFRNd1Y3UGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4fWWHEKd wn2qdNFwTg3zHlbPUpcaO6v9K1NmOPFzS5IEBh5zwAlU1Ll0zsCDVtCW8qxonZkd q72suiES3WZA1gMMy75zf73YZnzoT2F3Iw1GJr1qtmiEkxjCSHRuqDccHjvvG7rJ 3xhQn0Ng66vNG5m1IfmHjb9dBwl5hRTJXZ0lI8s2l0kRREucX7viHiPOhtHMUjlo yc17cmIP7UrIew04vZ3RHvAuFmHvDi0BvdQBblj+4UDLYiKpVjbGlLIiYxgh2j77 0aUV7lrD1O8MC/Z/Q4cT2TO5RbJkoSTXlmvoxZvjZD9qAB0REb3rEXUAI6ZupBV3 wlompIRdcbizCA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:29 2025 by rpki-client