This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json) Hash identifier: Cx87Ft/b2zfz6Yada18fcJ1tXiT2WaLTMg29QYiDy1M= Subject key identifier: 7D:12:45:94:96:B9:49:DC:3F:AC:4D:B2:4D:BE:46:27:A1:C9:74:47 Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49 Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149 Certificate serial: 019AF276B90C97A012DC0302FDB52F667033 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:58 +0000 Manifest this update: Sat 06 Dec 2025 07:00:58 +0000 Manifest next update: Sun 07 Dec 2025 07:00:58 +0000 Files and hashes: 1: 3Et5DSQTmjw5JoMUf-Wa1H5e4PY.roa (hash: FOwnE+/UGLrWULx1HSQ846yUR+XWmJ/pKo/EVwX3S1M=) 2: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: p7tJbbX3ZpKsH0Sv0AxNWuu/t1mLdcvuB2bEWmicB94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b9:0c:97:a0:12:dc:03:02:fd:b5:2f:66:70:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149 Validity Not Before: Dec 6 07:00:58 2025 GMT Not After : Dec 7 07:00:58 2025 GMT Subject: CN=7d12459496b949dc3fac4db24dbe4627a1c97447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a6:a9:ad:f0:90:5a:21:91:b6:e2:86:50:a4: c5:7f:78:5b:09:a7:33:fc:65:36:8d:03:d9:8a:42: 38:1d:da:f4:cc:43:e7:0b:5e:d1:32:d9:3a:fb:4c: 17:8b:7d:4e:bc:05:21:93:3b:f4:02:6a:68:ff:85: 6d:2f:3b:b7:12:a8:ab:4b:8c:ca:2e:6c:0d:a3:98: 71:00:e4:0d:d6:7a:cd:39:0d:cb:82:7b:e1:3d:87: d2:4f:19:6f:30:e5:6e:1c:c5:fe:62:b6:44:a9:ed: 40:03:49:04:94:54:5a:78:cb:ba:fe:d7:0c:d2:de: 71:11:b3:c9:10:1d:2c:10:4f:36:4e:f6:71:25:37: 17:48:3f:5d:d8:7b:37:ba:33:4e:95:89:6a:af:23: 77:f0:3a:3d:ad:d5:7c:50:60:74:60:32:26:ae:45: 4e:4f:6b:9f:21:a7:f2:ea:83:0a:13:98:bb:7d:df: b7:a2:b0:c0:f3:89:65:30:37:18:19:d4:83:ea:bd: c4:66:f5:c7:f5:f9:c6:53:51:9d:b7:36:0e:48:ac: 28:88:4d:0b:d6:e7:58:a0:85:2d:ee:24:7c:36:09: ba:07:0a:92:5f:6a:de:a2:62:f4:3b:37:40:60:19: da:f4:c8:2d:d2:5d:96:d3:b5:9b:88:73:ea:bb:6a: be:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:12:45:94:96:B9:49:DC:3F:AC:4D:B2:4D:BE:46:27:A1:C9:74:47 X509v3 Authority Key Identifier: keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6b:e7:b3:eb:70:96:ec:eb:85:27:14:37:93:cc:e4:6a:7a: a7:5e:d5:dd:e7:d2:02:19:31:e9:b4:ae:f0:e0:3b:16:8e:9c: b3:5a:55:f7:d5:b3:a3:3d:95:0a:58:87:00:b5:da:ba:69:d7: 36:d0:f0:ee:80:56:f6:13:fa:f0:7a:73:46:78:51:e4:9f:07: 47:c9:79:ff:c3:51:54:ee:50:a4:26:01:32:f6:fb:ae:e0:df: 15:09:ce:9d:21:63:6f:b9:36:4e:4b:eb:1e:93:7a:ba:99:67: 88:1a:29:fc:b4:cf:d1:27:03:98:95:c1:56:ee:84:45:db:6c: 66:18:8f:00:56:d4:b8:aa:dc:82:b8:be:bd:33:fc:21:9e:e2: d2:6e:7b:04:a1:37:fc:1d:56:3d:3d:4b:85:91:71:b7:b4:d5: 22:ef:9c:e4:be:b2:bc:f7:5e:ee:0a:87:4c:4c:39:6f:65:b4: 20:1e:98:0b:6d:36:cf:78:e5:8a:02:df:58:10:eb:de:79:eb: 7b:bf:af:d7:06:04:89:d9:3d:90:49:b7:f7:dc:d2:32:ae:ac: 58:db:5a:65:1f:e6:57:5c:47:ba:b5:be:ad:6c:9b:a4:25:64: 58:ff:c9:4f:b3:99:47:9c:ef:0e:0d:b9:9d:4e:70:b0:94:9f: a3:8c:02:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrkMl6AS3AMC/bUvZnAzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOGI5OTYzYzk3MmMxZDdhMDNkZjk2ZmFkMjVmNjhlYmQ0 ZmExNDkwHhcNMjUxMjA2MDcwMDU4WhcNMjUxMjA3MDcwMDU4WjAzMTEwLwYDVQQD Eyg3ZDEyNDU5NDk2Yjk0OWRjM2ZhYzRkYjI0ZGJlNDYyN2ExYzk3NDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KaprfCQWiGRtuKGUKTFf3hbCacz /GU2jQPZikI4Hdr0zEPnC17RMtk6+0wXi31OvAUhkzv0Ampo/4VtLzu3EqirS4zK LmwNo5hxAOQN1nrNOQ3LgnvhPYfSTxlvMOVuHMX+YrZEqe1AA0kElFRaeMu6/tcM 0t5xEbPJEB0sEE82TvZxJTcXSD9d2Hs3ujNOlYlqryN38Do9rdV8UGB0YDImrkVO T2ufIafy6oMKE5i7fd+3orDA84llMDcYGdSD6r3EZvXH9fnGU1GdtzYOSKwoiE0L 1udYoIUt7iR8Ngm6BwqSX2reomL0OzdAYBna9Mgt0l2W07WbiHPqu2q+owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0SRZSWuUncP6xNsk2+RiehyXRHMB8GA1UdIwQY MBaAFAOLmWPJcsHXoD35b60l9o69T6FJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWIt NjE2M2I5OTdiNjQyLzEvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWItNjE2M2I5OTdiNjQy LzEvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2vns+tw luzrhScUN5PM5Gp6p17V3efSAhkx6bSu8OA7Fo6cs1pV99Wzoz2VCliHALXaumnX NtDw7oBW9hP68HpzRnhR5J8HR8l5/8NRVO5QpCYBMvb7ruDfFQnOnSFjb7k2Tkvr HpN6uplniBop/LTP0ScDmJXBVu6ERdtsZhiPAFbUuKrcgri+vTP8IZ7i0m57BKE3 /B1WPT1LhZFxt7TVIu+c5L6yvPde7gqHTEw5b2W0IB6YC202z3jligLfWBDr3nnr e7+v1wYEidk9kEm399zSMq6sWNtaZR/mV1xHurW+rWybpCVkWP/JT7OZR5zvDg25 nU5wsJSfo4wCGg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:14:50 2025 by rpki-client