This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft File: A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json) Hash identifier: IH8Cl6LQYszeb4yYx2wsFHqeNiTvGPWBmx5yGd3RXog= Subject key identifier: 8C:79:16:43:0B:81:5E:F7:D0:81:ED:A4:FA:8E:F9:71:6C:D2:96:29 Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb Certificate serial: 019AF5AEABE419362EFFFD863347AD443F48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft Manifest number: 09AB Signing time: Sat 06 Dec 2025 22:00:56 +0000 Manifest this update: Sat 06 Dec 2025 22:00:56 +0000 Manifest next update: Sun 07 Dec 2025 22:00:56 +0000 Files and hashes: 1: 4ZVhrpuB1IHBXfe6fTnFzmbNef0.roa (hash: FuraICrae+dlC4EwK8Mlwdgne0MzMhtiCSQ/Z77/tTA=) 2: 5cQ1B8qaCGZjX6eh03Gxbe2gyAs.roa (hash: UnXYlFiyJBM2cbEBf2cCAcTXlYLcyD51tGVhPbgsuJM=) 3: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: dcOurOZAEUswXHY0Cw0fePDkHe14EG/YaqljNM9Vt7s=) 4: lVXMGaXCeYAS9UTzuCTj9xPIgOs.roa (hash: ACZLuIV4fCglmS12ajGiBEyZ0FBoWBDoJRm4zWyNSbY=) 5: x-3D4SyWxTWtE8fU6h7K761mso0.roa (hash: KVo2GWCkNTOgM8bW+F4avHQXlq7DnsAvg8lQU9Oqt1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:ab:e4:19:36:2e:ff:fd:86:33:47:ad:44:3f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb Validity Not Before: Dec 6 22:00:56 2025 GMT Not After : Dec 7 22:00:56 2025 GMT Subject: CN=8c7916430b815ef7d081eda4fa8ef9716cd29629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0c:5c:38:35:48:3e:41:8d:22:9c:14:3b:ef: 49:56:8d:6d:a8:43:44:98:d6:24:1d:de:e9:54:a9: a1:1b:b0:0a:0e:f7:08:24:44:0c:ed:bf:00:95:7a: 4e:48:ee:31:1f:da:20:6d:ef:7b:09:da:e4:df:84: c6:c0:45:c1:4b:c5:1f:14:47:10:cd:b9:61:e4:3c: f9:67:8a:32:3b:80:9e:88:52:fc:7b:00:db:74:a5: 65:29:e4:b2:4b:b3:b2:73:bc:28:b1:a0:8a:07:32: 11:7b:0e:94:46:38:80:e4:0b:3e:68:bd:06:b3:e3: d9:ef:80:d2:de:3a:69:dd:94:68:13:7f:7b:6a:fe: af:7a:38:01:92:2a:9c:97:5f:82:a6:e4:e6:10:3a: 93:51:f2:76:c5:c0:de:ae:0f:7d:4e:de:cb:a4:cc: 6d:5a:2a:95:fd:a9:27:51:b7:51:f5:1a:6b:54:7d: 5d:d8:b6:bd:25:43:3b:fd:e5:eb:2d:38:a0:7c:d4: bd:e6:32:42:e9:5c:77:3f:23:cb:93:a2:26:74:e8: d4:e1:11:b6:21:74:5e:5b:bb:d8:c7:3a:e5:c1:6a: 7c:f9:4b:14:4c:92:6c:a7:50:02:4b:a8:1f:fa:8d: c1:7c:d9:6b:3a:2e:9a:f5:0a:d7:df:61:ae:70:61: 6b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:79:16:43:0B:81:5E:F7:D0:81:ED:A4:FA:8E:F9:71:6C:D2:96:29 X509v3 Authority Key Identifier: keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f4:60:ac:c2:13:51:c3:03:39:90:f4:4f:0b:fe:c5:1d:98: 65:5c:5f:b5:94:79:e7:ff:87:42:0b:80:e8:38:6d:68:0d:c8: 4a:fa:52:1b:8b:a5:e9:c5:80:38:42:99:94:6f:ae:dc:ab:1c: 48:51:4e:12:8a:7a:af:d6:67:86:61:71:e2:ee:15:90:d3:54: 20:f2:20:75:76:b3:f2:58:b0:21:41:71:2c:bc:48:37:01:a7: c2:e2:e3:81:10:89:37:b7:13:8b:78:81:ac:18:d9:aa:30:33: 28:f1:27:d1:08:27:5b:ab:a0:7a:6f:31:45:e1:d0:48:b9:4b: e4:27:ba:b3:57:4b:4f:52:0e:25:56:7d:57:0e:a1:62:a2:23: 76:43:1b:9d:12:ac:e1:af:59:ff:65:c4:ba:96:df:42:fb:78: e3:a9:14:36:79:8a:6b:a9:fd:96:cb:f3:bb:92:f8:2d:0d:5e: 8d:f0:50:2a:92:0d:61:4f:56:43:e0:44:46:96:ac:39:32:e6: 6b:58:f7:03:25:5a:5c:87:b1:46:29:c2:bf:31:4f:c9:66:7b: 5b:3b:06:86:a4:b9:27:fc:6c:a0:e6:dd:65:0d:db:21:40:c0: 9c:26:1e:4c:f4:dd:1b:66:42:a8:74:0d:63:cb:4a:f1:2d:3f: 14:36:31:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rqvkGTYu//2GM0etRD9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzN2I0ODQ0OWJhMWNhZTE1YmRlMmMyZjA4NmQ5NDIxOGUw NzIwYmIwHhcNMjUxMjA2MjIwMDU2WhcNMjUxMjA3MjIwMDU2WjAzMTEwLwYDVQQD Eyg4Yzc5MTY0MzBiODE1ZWY3ZDA4MWVkYTRmYThlZjk3MTZjZDI5NjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswxcODVIPkGNIpwUO+9JVo1tqENE mNYkHd7pVKmhG7AKDvcIJEQM7b8AlXpOSO4xH9ogbe97Cdrk34TGwEXBS8UfFEcQ zblh5Dz5Z4oyO4CeiFL8ewDbdKVlKeSyS7Oyc7wosaCKBzIRew6URjiA5As+aL0G s+PZ74DS3jpp3ZRoE397av6vejgBkiqcl1+CpuTmEDqTUfJ2xcDerg99Tt7LpMxt WiqV/aknUbdR9RprVH1d2La9JUM7/eXrLTigfNS95jJC6Vx3PyPLk6ImdOjU4RG2 IXReW7vYxzrlwWp8+UsUTJJsp1ACS6gf+o3BfNlrOi6a9QrX32GucGFr1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIx5FkMLgV730IHtpPqO+XFs0pYpMB8GA1UdIwQY MBaAFAN7SESbocrhW94sLwhtlCGOByC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYt NzQwM2UxMzY3NWFiLzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYtNzQwM2UxMzY3NWFi LzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/RgrMIT UcMDOZD0Twv+xR2YZVxftZR55/+HQguA6DhtaA3ISvpSG4ul6cWAOEKZlG+u3Ksc SFFOEop6r9ZnhmFx4u4VkNNUIPIgdXaz8liwIUFxLLxINwGnwuLjgRCJN7cTi3iB rBjZqjAzKPEn0QgnW6ugem8xReHQSLlL5Ce6s1dLT1IOJVZ9Vw6hYqIjdkMbnRKs 4a9Z/2XEupbfQvt446kUNnmKa6n9lsvzu5L4LQ1ejfBQKpINYU9WQ+BERpasOTLm a1j3AyVaXIexRinCvzFPyWZ7WzsGhqS5J/xsoObdZQ3bIUDAnCYeTPTdG2ZCqHQN Y8tK8S0/FDYxFg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:36:49 2025 by rpki-client