This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft File: A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft (raw, json) Hash identifier: wpOD0jvjlZ+fGcxAVL02UAbMapaBy5HXOO5TN4yoUHM= Subject key identifier: F0:8D:8E:D7:17:D2:55:B1:0B:6F:8D:8C:E5:97:95:A2:17:4B:23:75 Authority key identifier: 03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61 Certificate issuer: /CN=039916dc890f08fe55c75bb4439d6016704b7a61 Certificate serial: 019AF49C0817E1BCCA64EF03D2FF862952D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft Manifest number: 0CD7 Signing time: Sat 06 Dec 2025 17:00:57 +0000 Manifest this update: Sat 06 Dec 2025 17:00:57 +0000 Manifest next update: Sun 07 Dec 2025 17:00:57 +0000 Files and hashes: 1: A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl (hash: Lt0nRRnz+Nji9V36RKRbCbMHk6oFOMSQbVPNRUYvwCU=) 2: PMNnc8UiTx_1PdJEiYIJsVqvM18.roa (hash: glo0oQZnzXQ/WEXl4o++QXVkyGkwmaHI6OvTjJhSMHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:08:17:e1:bc:ca:64:ef:03:d2:ff:86:29:52:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039916dc890f08fe55c75bb4439d6016704b7a61 Validity Not Before: Dec 6 17:00:57 2025 GMT Not After : Dec 7 17:00:57 2025 GMT Subject: CN=f08d8ed717d255b10b6f8d8ce59795a2174b2375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:33:48:f5:7b:20:a8:c9:b4:ff:e8:95:69:79: 8d:f3:d3:f7:76:9e:cb:7d:3d:b2:3a:7a:48:cc:19: e1:76:ad:44:33:8c:f4:ab:9a:12:8d:4a:fa:8a:2a: 5b:f0:f3:1f:02:30:4f:51:84:f6:ac:05:59:37:e5: 9c:8c:01:58:82:69:50:51:20:01:bc:48:f0:8a:06: c4:53:b1:ca:40:32:90:80:62:b1:d9:d0:6b:69:1a: bd:12:e5:8c:cf:a1:8c:90:1b:6d:ad:c8:92:13:9b: 3d:c4:fd:fc:68:c9:3e:82:63:9a:71:2f:d5:a2:83: 4c:76:f8:89:e8:75:21:fc:f3:e7:e2:2c:6f:e3:f9: 7f:99:2f:68:f8:4e:eb:36:21:a8:77:51:5e:f5:ed: 12:6f:1a:30:1a:30:da:f3:0d:42:4b:96:55:53:09: 63:a2:f7:c5:0c:f5:5a:ef:9e:4c:bd:77:56:c4:b1: 42:8e:69:1d:1e:95:3a:18:e8:92:71:d1:ae:34:1f: 5e:15:17:9f:08:95:65:d8:bf:f5:e7:10:23:bc:17: ae:01:4e:06:dd:40:63:82:e0:f7:f5:37:32:ef:dc: de:94:b7:c6:b4:24:2b:0f:40:73:86:64:e8:f9:98: d0:a7:12:35:5b:c0:84:8b:6a:90:a3:9c:c2:72:0b: 6a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8D:8E:D7:17:D2:55:B1:0B:6F:8D:8C:E5:97:95:A2:17:4B:23:75 X509v3 Authority Key Identifier: keyid:03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:dc:61:37:fc:9e:ae:5e:69:44:c0:21:ba:5c:c1:1d:c4:f4: 48:b1:e8:b4:51:f3:7e:cb:a5:55:a0:94:4e:ac:0b:00:28:37: d5:ca:4d:e7:30:7f:18:20:d9:dc:95:fe:9c:ef:03:f4:3f:66: e8:52:6f:50:93:94:d2:bb:b9:46:09:64:de:8c:54:60:d5:4b: d8:0c:1c:97:c0:d7:b8:83:6d:39:51:21:9c:ad:e2:fd:7f:0c: b5:f4:3a:d3:d5:c3:19:70:9a:ce:6e:4b:b2:1b:f8:e2:db:7f: 10:d9:0f:07:77:98:89:0b:d0:a2:72:19:62:b5:f9:1f:89:11: a6:67:f5:48:a8:c3:02:be:3b:c6:0e:b1:f8:2b:50:7b:bf:e7: d0:c0:b4:91:38:cb:e6:1d:02:da:a0:4c:78:05:91:2a:81:0f: 60:70:2e:ed:b2:d4:aa:37:af:30:0f:f1:36:f6:57:21:27:e7: 38:61:8f:62:ce:7f:95:90:51:1f:d4:4f:4d:a1:e5:91:5f:de: 93:bc:22:01:67:3e:76:4a:24:1a:8f:03:e8:d6:6b:a0:e7:76: 37:c7:2c:2b:30:76:c4:d2:f4:0e:0a:71:60:b7:a2:43:a0:6f: 26:d9:7f:4a:16:74:19:03:91:57:b8:52:36:37:a0:39:b1:e5: c8:f2:8b:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nAgX4bzKZO8D0v+GKVLUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOTkxNmRjODkwZjA4ZmU1NWM3NWJiNDQzOWQ2MDE2NzA0 YjdhNjEwHhcNMjUxMjA2MTcwMDU3WhcNMjUxMjA3MTcwMDU3WjAzMTEwLwYDVQQD EyhmMDhkOGVkNzE3ZDI1NWIxMGI2ZjhkOGNlNTk3OTVhMjE3NGIyMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DNI9XsgqMm0/+iVaXmN89P3dp7L fT2yOnpIzBnhdq1EM4z0q5oSjUr6iipb8PMfAjBPUYT2rAVZN+WcjAFYgmlQUSAB vEjwigbEU7HKQDKQgGKx2dBraRq9EuWMz6GMkBttrciSE5s9xP38aMk+gmOacS/V ooNMdviJ6HUh/PPn4ixv4/l/mS9o+E7rNiGod1Fe9e0SbxowGjDa8w1CS5ZVUwlj ovfFDPVa755MvXdWxLFCjmkdHpU6GOiScdGuNB9eFRefCJVl2L/15xAjvBeuAU4G 3UBjguD39Tcy79zelLfGtCQrD0BzhmTo+ZjQpxI1W8CEi2qQo5zCcgtq5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCNjtcX0lWxC2+NjOWXlaIXSyN1MB8GA1UdIwQY MBaAFAOZFtyJDwj+VcdbtEOdYBZwS3phMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTVrVzNJa1BDUDVWeDF1MFE1MWdGbkJMZW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82YmI0NDQtYzBhYy00MDYwLTgwZDUt ZTNkNDI3MjExYTgzLzEvQTVrVzNJa1BDUDVWeDF1MFE1MWdGbkJMZW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82YmI0NDQtYzBhYy00MDYwLTgwZDUtZTNkNDI3MjExYTgz LzEvQTVrVzNJa1BDUDVWeDF1MFE1MWdGbkJMZW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNxhN/ye rl5pRMAhulzBHcT0SLHotFHzfsulVaCUTqwLACg31cpN5zB/GCDZ3JX+nO8D9D9m 6FJvUJOU0ru5Rglk3oxUYNVL2Awcl8DXuINtOVEhnK3i/X8MtfQ609XDGXCazm5L shv44tt/ENkPB3eYiQvQonIZYrX5H4kRpmf1SKjDAr47xg6x+CtQe7/n0MC0kTjL 5h0C2qBMeAWRKoEPYHAu7bLUqjevMA/xNvZXISfnOGGPYs5/lZBRH9RPTaHlkV/e k7wiAWc+dkokGo8D6NZroOd2N8csKzB2xNL0DgpxYLeiQ6BvJtl/ShZ0GQORV7hS NjegObHlyPKLUg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:21:01 2025 by rpki-client