This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft File: A5aaE8t8Nxi9NxdxJijnqxszsKU.mft (raw, json) Hash identifier: xZneD5npRWhmPxTDQeryQiCZwER1Q2Kivfh7evBVlOw= Subject key identifier: 32:C5:FB:C9:17:EF:11:E8:6E:02:FD:3B:25:39:AE:7A:F6:D0:B4:9B Authority key identifier: 03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5 Certificate issuer: /CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5 Certificate serial: 019AF209382595659A89EE87E82211E6F1EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft Manifest number: 0B8F Signing time: Sat 06 Dec 2025 05:01:21 +0000 Manifest this update: Sat 06 Dec 2025 05:01:21 +0000 Manifest next update: Sun 07 Dec 2025 05:01:21 +0000 Files and hashes: 1: A5aaE8t8Nxi9NxdxJijnqxszsKU.crl (hash: Plfx3u1fyte5HMbZ97A/nYpuxrGnbPIhRCYIk8fbPr4=) 2: MK6Wt26ubZnx8uPGofYFajPlEuM.roa (hash: pNoc6zxMnN0pQF1kB42eiM3UzngOuAJOl2Ggh4EWIBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:38:25:95:65:9a:89:ee:87:e8:22:11:e6:f1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5 Validity Not Before: Dec 6 05:01:21 2025 GMT Not After : Dec 7 05:01:21 2025 GMT Subject: CN=32c5fbc917ef11e86e02fd3b2539ae7af6d0b49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:97:0d:e4:10:62:bb:86:9a:fa:37:0a:c6: 23:4c:4d:5f:18:e2:29:d5:f5:bf:7c:b0:08:24:69: f2:90:6d:0d:2a:5b:53:a1:b5:ee:dc:13:53:ba:26: 04:53:35:e1:e9:fa:79:a2:49:3f:43:e8:aa:d6:5f: 17:03:05:ec:70:3d:24:84:92:8c:fd:12:15:c7:2e: db:63:df:e8:6d:a6:c5:57:56:fe:37:f6:0c:3c:52: 11:0e:5f:f4:ba:38:6c:86:ed:c2:e5:c9:5b:84:5d: ef:db:b0:75:70:dc:f6:e0:82:63:3b:a7:28:48:a6: 6f:ff:59:da:46:1d:ca:e4:4a:b1:fd:20:c8:0c:b7: 2f:4c:51:bc:18:00:a1:f0:c8:17:09:09:65:cc:60: 6b:30:07:a7:78:0f:84:de:11:3d:18:bf:30:b2:e6: fb:b6:09:d2:a7:48:50:1a:c5:7f:32:df:83:9d:29: ee:99:b7:09:97:a6:70:51:a4:a6:44:56:45:c4:03: 41:20:d7:d8:64:7e:fc:39:67:97:6e:83:4a:3b:48: 4d:4e:6c:38:3a:c2:1d:7a:1e:bb:c3:df:de:fe:ee: 66:5d:22:da:7e:c8:5f:e1:e4:aa:a2:6a:6d:86:89: 47:7b:40:48:16:eb:a3:ec:16:e9:b4:84:6d:86:54: 0e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C5:FB:C9:17:EF:11:E8:6E:02:FD:3B:25:39:AE:7A:F6:D0:B4:9B X509v3 Authority Key Identifier: keyid:03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:37:a1:1d:f2:78:48:80:6a:aa:92:d0:b8:6f:80:6c:7f:32: 84:cf:35:f0:b2:98:32:ac:99:34:8a:a9:b8:58:24:fb:af:03: 20:d9:fa:fd:d7:8c:1e:4b:3f:2d:51:de:82:6b:6b:04:a6:7b: 41:49:17:be:0d:f3:58:02:16:7e:aa:04:f7:cb:3c:0b:7a:40: 6b:a2:c7:e5:53:06:0c:96:85:df:d7:cb:73:41:b0:f3:af:08: d3:86:02:a4:37:05:d3:f4:58:7f:ae:8a:ac:22:ef:34:5e:a7: 76:cf:e4:16:77:39:e1:bc:92:1d:6a:57:04:22:64:04:ed:06: cc:b9:4d:62:45:b4:99:95:c9:45:db:91:d3:69:cc:31:fe:2c: 0f:a1:88:31:af:cd:82:98:dc:b0:90:f2:46:e3:2f:06:fc:14: d5:51:5b:fe:e5:fd:aa:a7:e9:52:68:da:bd:9b:b6:95:5c:52: a8:2b:64:a5:e3:b8:8d:52:b7:83:6a:ad:e2:d3:6d:6d:9a:39: 07:29:34:50:b8:d7:94:6c:1a:d8:ae:07:c7:93:94:72:14:4f: 86:f5:fe:15:9f:cf:08:20:02:a2:8c:64:66:cd:e4:fe:9f:00: e1:47:b9:71:b6:76:ff:2f:f0:22:b6:8a:06:b9:fc:ac:12:8e: 65:74:67:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTgllWWaie6H6CIR5vHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOTY5YTEzY2I3YzM3MThiZDM3MTc3MTI2MjhlN2FiMWIz M2IwYTUwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD EygzMmM1ZmJjOTE3ZWYxMWU4NmUwMmZkM2IyNTM5YWU3YWY2ZDBiNDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWiXDeQQYruGmvo3CsYjTE1fGOIp 1fW/fLAIJGnykG0NKltTobXu3BNTuiYEUzXh6fp5okk/Q+iq1l8XAwXscD0khJKM /RIVxy7bY9/obabFV1b+N/YMPFIRDl/0ujhshu3C5clbhF3v27B1cNz24IJjO6co SKZv/1naRh3K5Eqx/SDIDLcvTFG8GACh8MgXCQllzGBrMAeneA+E3hE9GL8wsub7 tgnSp0hQGsV/Mt+DnSnumbcJl6ZwUaSmRFZFxANBINfYZH78OWeXboNKO0hNTmw4 OsIdeh67w9/e/u5mXSLafshf4eSqomptholHe0BIFuuj7BbptIRthlQO0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLF+8kX7xHobgL9OyU5rnr20LSbMB8GA1UdIwQY MBaAFAOWmhPLfDcYvTcXcSYo56sbM7ClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTVhYUU4dDhOeGk5TnhkeEppam5xeHN6c0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jMTI5YWItNzlhNy00YmMwLTlhM2It NDFlZmVhY2U3YTcxLzEvQTVhYUU4dDhOeGk5TnhkeEppam5xeHN6c0tVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9jMTI5YWItNzlhNy00YmMwLTlhM2ItNDFlZmVhY2U3YTcx LzEvQTVhYUU4dDhOeGk5TnhkeEppam5xeHN6c0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDehHfJ4 SIBqqpLQuG+AbH8yhM818LKYMqyZNIqpuFgk+68DINn6/deMHks/LVHegmtrBKZ7 QUkXvg3zWAIWfqoE98s8C3pAa6LH5VMGDJaF39fLc0Gw868I04YCpDcF0/RYf66K rCLvNF6nds/kFnc54bySHWpXBCJkBO0GzLlNYkW0mZXJRduR02nMMf4sD6GIMa/N gpjcsJDyRuMvBvwU1VFb/uX9qqfpUmjavZu2lVxSqCtkpeO4jVK3g2qt4tNtbZo5 Byk0ULjXlGwa2K4Hx5OUchRPhvX+FZ/PCCACooxkZs3k/p8A4Ue5cbZ2/y/wIraK Brn8rBKOZXRn6A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:06 2025 by rpki-client