This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft File: 1-A4BfPFxFRmw_59lhYxJGy-l1As.mft (raw, json) Hash identifier: OfjbZ4HbPEHnLgtQjnSBnOCx3yXbG2ZshXD5zXVjpoI= Subject key identifier: 0C:23:3F:C4:EC:24:3B:77:BA:E3:85:D1:1D:F9:D9:B1:AA:4F:93:90 Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b Certificate serial: 019AF19ADF215D40BFA134567E0012808A8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft Manifest number: 1334 Signing time: Sat 06 Dec 2025 03:00:49 +0000 Manifest this update: Sat 06 Dec 2025 03:00:49 +0000 Manifest next update: Sun 07 Dec 2025 03:00:49 +0000 Files and hashes: 1: 0cg-ABQ5F07wo1zUc9k0K5Ly8to.roa (hash: Rkj4lRwYBqE7QsZIcMHOzWOT71EQLWq7kKtekOL+dc8=) 2: 1-A4BfPFxFRmw_59lhYxJGy-l1As.crl (hash: 0Cqp5vAr73Pvx3fmkPnN7Lb8BJ0OX5OzGPjliteSh98=) 3: BQSRgsrnX8JnjaCE0pOBIpQ5ebc.roa (hash: h3wwdJrizfCgG4S/e0JuPLlbVsXDFB1J+2NlIEyZmsM=) 4: TntDV8H0cxrOGkDYWiJ5vwYXM6U.roa (hash: U/d+Fv7E47cWBLg/rWP1IbXjQkA8lalBfzHWx2kVZS4=) 5: Wem4R1HhiLTH9JF3d-SZOmy37u0.roa (hash: 7MdQgNFI/gw33JrzBz7PAxkDLsGz7qoxKurvzPVxBTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:df:21:5d:40:bf:a1:34:56:7e:00:12:80:8a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b Validity Not Before: Dec 6 03:00:49 2025 GMT Not After : Dec 7 03:00:49 2025 GMT Subject: CN=0c233fc4ec243b77bae385d11df9d9b1aa4f9390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:2a:5d:40:2c:db:be:bb:d5:ef:69:4c:5c: 6e:e2:11:bb:bc:4c:60:b1:d0:a0:26:b8:79:63:74: 56:11:d9:24:f4:5a:da:97:bd:21:67:7e:87:e6:97: f7:07:fe:7e:4d:fe:49:d4:52:ca:4b:c7:6c:a9:e7: 59:2b:56:6f:69:39:47:66:07:81:17:28:cc:02:70: 30:75:dd:c3:fb:49:5b:17:69:7f:af:2a:ab:d5:a7: 88:a8:a9:a3:4f:ac:f4:af:a3:73:6e:53:cf:f4:51: da:0b:52:12:18:40:5e:13:f5:ff:0d:a1:71:3e:55: ee:54:b4:5b:c7:d3:99:50:5b:85:fd:d9:d7:1b:65: 23:e5:7e:13:ad:27:3c:a0:8e:44:69:5f:f9:d9:da: bb:a9:ab:6a:c0:55:bc:a6:47:6c:27:ba:83:78:92: 63:d3:fb:96:a9:dc:a7:37:8e:0b:ec:a4:ae:5c:8e: b5:70:b3:4f:16:fa:68:20:21:2f:3b:be:52:56:e8: 57:6b:f1:fb:b2:23:b9:79:32:c1:91:31:54:34:f3: 85:86:cf:4b:49:13:e9:fa:91:26:20:e2:f8:1d:24: 14:dd:9a:bb:95:1d:32:be:d1:a0:c2:58:86:bf:13: 65:6d:f5:b5:01:26:da:ad:b1:47:33:c2:f6:93:55: 58:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:23:3F:C4:EC:24:3B:77:BA:E3:85:D1:1D:F9:D9:B1:AA:4F:93:90 X509v3 Authority Key Identifier: keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2e:47:97:1a:a4:30:aa:3d:46:5f:47:d7:36:36:e6:67:0d: 13:45:bc:63:b7:50:17:d2:6d:37:5a:50:f0:47:58:17:5b:b5: 62:eb:0b:5a:27:a0:4a:ff:d3:c2:54:5b:46:07:f1:c8:b1:2f: 03:93:d0:50:07:cf:8e:34:6f:af:7b:5e:0b:80:e2:79:d7:51: 3f:fa:5d:e6:b1:93:b9:5d:d4:67:1d:be:06:54:f1:c7:a7:8b: f7:fa:c4:15:b3:f6:9d:21:b8:3c:a9:9e:2f:98:26:5b:d6:8c: 0e:0e:fb:fa:ee:5f:88:17:25:8f:a3:c8:d9:ba:ac:2b:db:b5: 23:b9:e3:e5:48:52:83:91:9a:e2:3e:fd:f5:0e:a1:4e:d2:fb: f3:54:67:fe:bc:af:69:dd:8a:50:fa:9d:28:7f:ac:fb:6a:57: db:32:0d:7b:51:56:3c:1c:7f:f7:65:95:ff:a3:a0:32:f2:cf: 7f:09:9d:84:b7:72:a6:67:52:17:b1:cd:92:a8:5d:6f:97:63: 5f:e2:3c:4a:14:b8:81:66:ae:67:d6:30:6c:0e:30:95:39:3c: b8:6f:f7:69:2a:7c:84:65:14:9e:7e:5d:8f:60:47:d0:e4:40: f4:6c:19:ec:00:83:45:cb:75:a2:92:c7:95:c5:20:5c:fe:d0: d5:86:cc:4b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxmt8hXUC/oTRWfgASgIqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MGUwMTdjZjE3MTE1MTliMGZmOWY2NTg1OGM0OTFiMmZh NWQ0MGIwHhcNMjUxMjA2MDMwMDQ5WhcNMjUxMjA3MDMwMDQ5WjAzMTEwLwYDVQQD EygwYzIzM2ZjNGVjMjQzYjc3YmFlMzg1ZDExZGY5ZDliMWFhNGY5MzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOEqXUAs27671e9pTFxu4hG7vExg sdCgJrh5Y3RWEdkk9Fral70hZ36H5pf3B/5+Tf5J1FLKS8dsqedZK1ZvaTlHZgeB FyjMAnAwdd3D+0lbF2l/ryqr1aeIqKmjT6z0r6NzblPP9FHaC1ISGEBeE/X/DaFx PlXuVLRbx9OZUFuF/dnXG2Uj5X4TrSc8oI5EaV/52dq7qatqwFW8pkdsJ7qDeJJj 0/uWqdynN44L7KSuXI61cLNPFvpoICEvO75SVuhXa/H7siO5eTLBkTFUNPOFhs9L SRPp+pEmIOL4HSQU3Zq7lR0yvtGgwliGvxNlbfW1ASbarbFHM8L2k1VYBwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAwjP8TsJDt3uuOF0R352bGqT5OQMB8GA1UdIwQY MBaAFPgOAXzxcRUZsP+fZYWMSRsvpdQLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1BNEJmUEZ4RlJtd181OWxoWXhKR3ktbDFBcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2 LThjZTYwYTVjOGIxZi8xLzEtQTRCZlBGeEZSbXdfNTlsaFl4Skd5LWwxQXMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzg3LzJkYzEzNi00MDBkLTQwZTctYWQ4Ni04Y2U2MGE1Yzhi MWYvMS8xLUE0QmZQRnhGUm13XzU5bGhZeEpHeS1sMUFzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXi5H lxqkMKo9Rl9H1zY25mcNE0W8Y7dQF9JtN1pQ8EdYF1u1YusLWiegSv/TwlRbRgfx yLEvA5PQUAfPjjRvr3teC4DieddRP/pd5rGTuV3UZx2+BlTxx6eL9/rEFbP2nSG4 PKmeL5gmW9aMDg77+u5fiBclj6PI2bqsK9u1I7nj5UhSg5Ga4j799Q6hTtL781Rn /ryvad2KUPqdKH+s+2pX2zINe1FWPBx/92WV/6OgMvLPfwmdhLdypmdSF7HNkqhd b5djX+I8ShS4gWauZ9YwbA4wlTk8uG/3aSp8hGUUnn5dj2BH0ORA9GwZ7ACDRct1 opLHlcUgXP7Q1YbMSw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:16 2025 by rpki-client