This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft File: A5Wt2Guvay0G_0H1Um00f3HutBA.mft (raw, json) Hash identifier: cDgXjhETm41pfwznh091FBvflp2kLYoGV0JeQilJs+I= Subject key identifier: 16:D7:0C:7D:28:CC:F5:38:5D:DD:93:57:AC:CF:3F:41:B3:20:83:A0 Authority key identifier: 03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10 Certificate issuer: /CN=0395add86baf6b2d06ff41f5526d347f71eeb410 Certificate serial: 019AF38934D8011AFD377655BD0DEC6EFDDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 12:00:46 +0000 Manifest this update: Sat 06 Dec 2025 12:00:46 +0000 Manifest next update: Sun 07 Dec 2025 12:00:46 +0000 Files and hashes: 1: 1VRLJKU_iS-J5hpp2gSlpHTKJrM.roa (hash: wMqFEiKVsvmfTXQPWnG9RRXDiwBKVCmwH1hZAvPWe5Y=) 2: A5Wt2Guvay0G_0H1Um00f3HutBA.crl (hash: AyKnlqru0WMRIJKB9LLwdgQan7TPkg1sZUjU0nIREBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:34:d8:01:1a:fd:37:76:55:bd:0d:ec:6e:fd:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0395add86baf6b2d06ff41f5526d347f71eeb410 Validity Not Before: Dec 6 12:00:46 2025 GMT Not After : Dec 7 12:00:46 2025 GMT Subject: CN=16d70c7d28ccf5385ddd9357accf3f41b32083a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f9:35:8c:84:5b:1e:e9:58:c5:d2:29:4d:a3: ca:97:c5:5c:2b:eb:e5:d4:66:af:b8:5a:ae:9d:1c: 75:e9:b9:bb:ff:96:96:2f:1c:72:2f:e9:84:0a:5c: bb:75:1c:f4:a0:bc:0a:34:69:0e:ad:b8:f7:8a:9d: d5:f5:74:83:2c:67:87:06:25:5e:4c:c0:10:c8:99: f3:47:26:9d:4d:0d:42:09:d2:82:8c:43:34:0b:c9: 26:0e:9c:f6:40:a0:96:af:b6:37:fc:b3:39:d6:7d: 47:41:04:51:c7:90:f9:07:ec:a3:19:fc:46:79:41: 4a:6b:98:89:a8:12:13:76:32:01:13:c8:ba:f4:6b: 1b:98:8f:9b:8e:84:fa:07:ff:48:da:64:3d:b6:ed: 8d:aa:70:59:80:c4:9b:e8:60:6a:00:81:36:41:37: cc:ed:a4:78:d9:1e:e2:7d:52:41:2c:10:92:c3:a8: 76:a1:87:74:c1:05:70:a5:15:dc:6a:10:13:0e:b1: e0:05:31:4c:1e:15:67:f5:eb:98:d1:ff:3e:dd:42: 06:7a:fd:54:08:9f:50:fe:9a:ba:d5:ff:61:39:ca: d6:0d:5e:fe:8f:f6:1f:d7:ca:f8:62:c4:bc:7e:b0: 50:18:7f:f5:de:91:f2:e1:02:73:01:b8:8f:5a:19: 22:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D7:0C:7D:28:CC:F5:38:5D:DD:93:57:AC:CF:3F:41:B3:20:83:A0 X509v3 Authority Key Identifier: keyid:03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:99:20:0a:c5:8c:d7:4e:7e:50:6a:ad:d2:07:04:fa:17:ec: 61:49:8d:2a:40:34:f0:75:bf:f6:4a:6b:80:42:20:5d:53:c9: fe:f5:0f:11:b4:f7:0e:12:2f:e9:bb:85:b3:2a:54:6e:b6:69: 0f:22:e9:13:ec:9a:8f:22:36:45:80:a3:a8:38:25:b4:5b:3d: 63:ef:b3:49:db:c5:e6:94:32:41:90:89:48:04:9a:01:25:e5: 7a:ad:6c:d0:ea:9d:5e:89:26:40:95:33:b5:84:ca:a5:08:98: a3:d6:7d:01:90:82:f7:6c:30:eb:58:8f:b6:ea:9b:84:47:63: 21:90:6a:18:6f:5e:7f:f8:88:cc:89:f4:91:dd:02:7f:ba:77: 6f:f1:d5:c6:44:f8:98:9f:29:57:64:a3:35:1e:09:9b:5f:9e: 85:22:78:12:d2:aa:b3:87:a8:39:c0:ac:be:16:47:b9:15:94: b6:75:7b:37:c2:ed:ce:78:3f:66:5a:71:0e:18:53:3c:d5:2d: f9:8a:65:82:59:e7:fe:85:85:02:c3:c3:d1:a1:04:f6:1e:6c: d3:9e:8f:e4:7e:b7:04:a9:55:15:70:b4:1a:79:32:15:ce:48: 54:71:28:40:be:bd:e3:db:16:47:53:66:36:f0:00:53:1b:12: 47:a1:00:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziTTYARr9N3ZVvQ3sbv3eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOTVhZGQ4NmJhZjZiMmQwNmZmNDFmNTUyNmQzNDdmNzFl ZWI0MTAwHhcNMjUxMjA2MTIwMDQ2WhcNMjUxMjA3MTIwMDQ2WjAzMTEwLwYDVQQD EygxNmQ3MGM3ZDI4Y2NmNTM4NWRkZDkzNTdhY2NmM2Y0MWIzMjA4M2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPk1jIRbHulYxdIpTaPKl8VcK+vl 1GavuFqunRx16bm7/5aWLxxyL+mECly7dRz0oLwKNGkOrbj3ip3V9XSDLGeHBiVe TMAQyJnzRyadTQ1CCdKCjEM0C8kmDpz2QKCWr7Y3/LM51n1HQQRRx5D5B+yjGfxG eUFKa5iJqBITdjIBE8i69GsbmI+bjoT6B/9I2mQ9tu2NqnBZgMSb6GBqAIE2QTfM 7aR42R7ifVJBLBCSw6h2oYd0wQVwpRXcahATDrHgBTFMHhVn9euY0f8+3UIGev1U CJ9Q/pq61f9hOcrWDV7+j/Yf18r4YsS8frBQGH/13pHy4QJzAbiPWhkiwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbXDH0ozPU4Xd2TV6zPP0GzIIOgMB8GA1UdIwQY MBaAFAOVrdhrr2stBv9B9VJtNH9x7rQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mZGIzOTgtM2ZiNS00YjZhLWEwMDMt Y2ZjNGE2NzZkNmUwLzEvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mZGIzOTgtM2ZiNS00YjZhLWEwMDMtY2ZjNGE2NzZkNmUw LzEvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZkgCsWM 105+UGqt0gcE+hfsYUmNKkA08HW/9kprgEIgXVPJ/vUPEbT3DhIv6buFsypUbrZp DyLpE+yajyI2RYCjqDgltFs9Y++zSdvF5pQyQZCJSASaASXleq1s0OqdXokmQJUz tYTKpQiYo9Z9AZCC92ww61iPtuqbhEdjIZBqGG9ef/iIzIn0kd0Cf7p3b/HVxkT4 mJ8pV2SjNR4Jm1+ehSJ4EtKqs4eoOcCsvhZHuRWUtnV7N8Ltzng/ZlpxDhhTPNUt +Yplglnn/oWFAsPD0aEE9h5s056P5H63BKlVFXC0GnkyFc5IVHEoQL6949sWR1Nm NvAAUxsSR6EAxw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:25 2025 by rpki-client