This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft File: A-ynkyRXUrZ6iB9441q4_0ndPsE.mft (raw, json) Hash identifier: huTwVZZ8UO4+aXMjeDZea+n5TSBRj+/OwB6U81PHT4w= Subject key identifier: CD:67:83:E4:3F:10:7E:2F:F7:92:0D:8F:7B:A0:81:C2:87:30:71:25 Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1 Certificate issuer: /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1 Certificate serial: 019B33B244CDB93438332C8E8FEF041B7B9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 23:01:19 +0000 Manifest this update: Thu 18 Dec 2025 23:01:19 +0000 Manifest next update: Fri 19 Dec 2025 23:01:19 +0000 Files and hashes: 1: A-ynkyRXUrZ6iB9441q4_0ndPsE.crl (hash: mwYS+hZp6Z7gvi7XQ64KcdtZiwMgEGecNU7EYJ3PM58=) 2: KCo_EXF_kwXFBoy_-8g1vn9X4IU.roa (hash: 3gljbk7M1fRChLX3eXWg8UNcaSKjRzvlcThXCcbYJEs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:44:cd:b9:34:38:33:2c:8e:8f:ef:04:1b:7b:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1 Validity Not Before: Dec 18 23:01:19 2025 GMT Not After : Dec 19 23:01:19 2025 GMT Subject: CN=cd6783e43f107e2ff7920d8f7ba081c287307125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:6d:4a:56:d8:27:0b:77:fc:bc:88:45:97: 04:4b:ea:6a:68:99:5e:ca:a9:dc:b2:be:2a:01:e1: c2:80:ec:f2:6d:ae:4b:d3:43:32:6f:7a:a6:46:fc: 2c:28:6a:46:99:3b:80:85:f7:c1:02:42:38:d0:96: 1e:7a:73:b8:dd:8b:f3:eb:c6:88:ef:80:7d:b5:10: 23:46:d3:fe:fc:de:c1:9b:14:9b:96:77:57:31:ca: 52:18:22:40:7c:9d:db:c5:0a:4a:09:33:ea:9c:92: f8:5c:d2:f5:78:17:f4:ba:62:59:0f:e3:34:e8:ae: 2b:bb:06:5f:2a:76:60:25:22:65:8c:06:0b:7a:59: fe:a3:18:af:14:64:11:90:e0:3a:00:b1:88:e1:3b: e6:2b:13:98:ca:6f:5e:79:18:32:3b:8b:a9:a4:6c: 9c:f8:e4:1c:f3:16:0a:81:2f:44:17:77:41:f9:03: 81:22:ad:b0:a9:cd:96:f8:f2:ce:b9:b6:c4:80:59: 4d:f8:53:95:e5:aa:ba:e8:0a:70:a0:51:1b:e1:4d: b0:e4:83:81:68:78:12:31:be:8f:c6:53:b1:cf:b5: 86:7c:a3:da:76:da:c8:5a:0c:3f:74:8f:6e:73:bf: e2:84:d6:2c:52:a8:20:e1:65:80:0c:d6:07:ed:93: 7f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:67:83:E4:3F:10:7E:2F:F7:92:0D:8F:7B:A0:81:C2:87:30:71:25 X509v3 Authority Key Identifier: keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:36:d3:0b:d3:cc:73:67:0e:f8:99:d1:9c:3d:29:14:b1:f4: 45:e7:f4:53:8a:dd:bc:36:98:47:02:6d:47:05:74:f4:55:7d: b8:98:90:55:bc:d5:32:3e:eb:42:b4:e1:7a:b1:b9:37:35:39: 80:e9:76:5b:e2:c0:cf:f5:9c:c8:5f:9c:8e:33:a2:ec:d6:c2: 87:a2:d2:67:36:7d:c2:54:d0:7f:4c:96:6f:bc:32:c6:25:e2: e3:53:f8:1f:4f:e1:d3:cd:6d:90:03:bc:a8:f4:a6:e6:2f:36: 41:ca:7e:9d:01:aa:e8:ec:da:21:6c:a4:48:c1:ae:07:4a:de: 4a:38:00:5a:19:53:c0:6f:17:f1:6f:c0:b5:88:ce:26:4f:9d: 2a:3e:1f:60:4e:02:eb:8b:50:6a:c1:d0:25:f9:5b:f3:53:59: 80:26:90:b3:da:56:50:3b:d3:48:c4:70:49:64:c4:77:45:60: e4:c0:ca:84:6b:ad:e7:ee:3e:42:25:79:d1:a7:c9:9e:7f:b6: 64:f2:25:a6:35:e6:a5:92:62:75:49:ea:bb:5f:24:a2:dc:8c: a7:f8:40:d8:ce:2d:c5:36:71:9b:72:a1:e6:da:67:1f:3b:35: a6:84:93:30:8b:eb:1f:13:c0:a9:cd:b9:3a:72:de:65:60:5d: 2b:5a:ab:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszskTNuTQ4MyyOj+8EG3ufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZWNhNzkzMjQ1NzUyYjY3YTg4MWY3OGUzNWFiOGZmNDlk ZDNlYzEwHhcNMjUxMjE4MjMwMTE5WhcNMjUxMjE5MjMwMTE5WjAzMTEwLwYDVQQD EyhjZDY3ODNlNDNmMTA3ZTJmZjc5MjBkOGY3YmEwODFjMjg3MzA3MTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcFtSlbYJwt3/LyIRZcES+pqaJle yqncsr4qAeHCgOzyba5L00Myb3qmRvwsKGpGmTuAhffBAkI40JYeenO43Yvz68aI 74B9tRAjRtP+/N7BmxSblndXMcpSGCJAfJ3bxQpKCTPqnJL4XNL1eBf0umJZD+M0 6K4ruwZfKnZgJSJljAYLeln+oxivFGQRkOA6ALGI4TvmKxOYym9eeRgyO4uppGyc +OQc8xYKgS9EF3dB+QOBIq2wqc2W+PLOubbEgFlN+FOV5aq66ApwoFEb4U2w5IOB aHgSMb6PxlOxz7WGfKPadtrIWgw/dI9uc7/ihNYsUqgg4WWADNYH7ZN/NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1ng+Q/EH4v95INj3uggcKHMHElMB8GA1UdIwQY MBaAFAPsp5MkV1K2eogfeONauP9J3T7BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS15bmt5UlhVclo2aUI5NDQxcTRfMG5kUHNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wM2JlYjQtMjQwYi00Y2JmLWFhM2Yt OWZkYzEwNmM4MTUzLzEvQS15bmt5UlhVclo2aUI5NDQxcTRfMG5kUHNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wM2JlYjQtMjQwYi00Y2JmLWFhM2YtOWZkYzEwNmM4MTUz LzEvQS15bmt5UlhVclo2aUI5NDQxcTRfMG5kUHNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuzbTC9PM c2cO+JnRnD0pFLH0Ref0U4rdvDaYRwJtRwV09FV9uJiQVbzVMj7rQrTherG5NzU5 gOl2W+LAz/WcyF+cjjOi7NbCh6LSZzZ9wlTQf0yWb7wyxiXi41P4H0/h081tkAO8 qPSm5i82Qcp+nQGq6OzaIWykSMGuB0reSjgAWhlTwG8X8W/AtYjOJk+dKj4fYE4C 64tQasHQJflb81NZgCaQs9pWUDvTSMRwSWTEd0Vg5MDKhGut5+4+QiV50afJnn+2 ZPIlpjXmpZJidUnqu18kotyMp/hA2M4txTZxm3Kh5tpnHzs1poSTMIvrHxPAqc25 OnLeZWBdK1qr0w== -----END CERTIFICATE-----Generated at Fri Dec 19 06:07:15 2025 by rpki-client