This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft File: A3hitGCMefRQKV7FyAx8etbf4qI.mft (raw, json) Hash identifier: +r3z4GHIGpvrh2Z7gjSA1NUsAd6ra1KFBGBm4H78GZU= Subject key identifier: E7:9D:DE:18:9C:B0:DA:6B:AC:1E:7C:FB:C4:EF:57:64:6F:31:DB:49 Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2 Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2 Certificate serial: 019B22F4ECDF0BA5768030349E55B1B793CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft Manifest number: 128B Signing time: Mon 15 Dec 2025 17:00:35 +0000 Manifest this update: Mon 15 Dec 2025 17:00:35 +0000 Manifest next update: Tue 16 Dec 2025 17:00:35 +0000 Files and hashes: 1: A3hitGCMefRQKV7FyAx8etbf4qI.crl (hash: o/3fV5UetgyVa6UPXW6pDtv/ocg8oAQjK9dhKFPp8bE=) 2: H1OMOC2BAR_5642Cu7ZwMViudi8.roa (hash: XWP0BQbCva9Xp/f//R3LpuOJ9bWFeCg7RqrDman+FAE=) 3: _KO8Oi7vtPgAowOISHE5epxFK5Q.roa (hash: 8164lOA7eSdWjoo8q/K2tQc7tm9W3hWFjEkyCggGOH4=) 4: pg2Uo1mGaRZ4g8oAbIXuXT68ouw.roa (hash: dY7d7wlBY9scutfRZI+Jc0/ht66poZjZN1QodpAABEg=) 5: rS4RgydKxGdwOWf1j4StfouO-tE.roa (hash: sFUBBhbDyvVoCqaYLXicDjVpE7stEZC/MmSdQhndwec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f4:ec:df:0b:a5:76:80:30:34:9e:55:b1:b7:93:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2 Validity Not Before: Dec 15 17:00:35 2025 GMT Not After : Dec 16 17:00:35 2025 GMT Subject: CN=e79dde189cb0da6bac1e7cfbc4ef57646f31db49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:90:62:00:81:43:e1:85:c9:15:c5:35:99:97: 95:c6:eb:ef:10:93:cd:4a:46:4e:78:8c:af:22:5f: ba:66:43:5c:4f:9e:f0:fd:9b:40:e1:64:4c:38:c5: 54:70:cb:18:a5:f5:1b:ee:62:11:8f:e7:e0:d7:2b: b6:a5:ad:21:73:73:38:53:db:f6:2c:ab:36:a0:b5: bf:9b:9f:95:8a:74:d8:5a:3a:fd:09:3a:f9:77:72: 1d:0e:f2:ed:35:40:33:99:66:98:7f:ca:a4:ac:33: 95:8c:c4:7f:f3:6a:83:fd:62:df:45:9b:c8:44:7a: 52:07:72:29:83:08:3a:ba:11:39:91:e8:3d:9a:73: 34:42:72:07:45:c0:13:05:f0:33:50:0a:8c:51:5b: 55:56:c1:3f:25:59:ee:63:d6:bc:ae:b0:11:2a:cb: bb:18:76:e2:50:12:2b:24:6f:4e:88:40:89:f6:6c: fb:8a:9d:25:7a:e6:8d:3d:75:39:b5:80:e8:93:91: 6f:3f:75:18:66:22:dd:f3:b7:08:3e:68:b4:a7:b7: 7b:25:e9:75:a5:27:d6:94:e3:b2:30:3b:a0:d3:6b: e2:6f:18:29:e1:11:ba:7f:b0:e7:16:15:3d:c8:71: 3a:87:3e:2f:d1:64:65:a4:6b:18:d4:f5:22:91:92: 35:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9D:DE:18:9C:B0:DA:6B:AC:1E:7C:FB:C4:EF:57:64:6F:31:DB:49 X509v3 Authority Key Identifier: keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3f:92:88:b9:f0:cf:72:1d:ac:e9:f2:53:95:b7:b4:5e:31: 0e:96:37:92:6c:69:9e:79:b6:82:43:31:d3:77:32:7b:84:9a: 05:a2:bd:89:c9:d9:33:8d:fb:b2:c2:08:ff:24:2c:37:8c:bd: 78:3b:1c:86:c6:85:33:63:bc:6c:3d:8d:e9:9a:94:0d:a0:89: b0:02:43:69:75:e9:9f:1c:12:e8:c9:1b:6c:ec:4e:66:b0:be: 65:27:27:2b:0a:0a:2e:d0:e8:c1:20:79:74:d0:08:f8:04:4b: 8f:90:99:8b:54:49:3a:e4:c4:a1:9c:23:55:da:c3:a7:7a:08: c2:b9:9e:ae:4a:11:f8:ed:41:2b:a2:61:f1:2a:bb:f1:a9:98: 4f:1e:38:42:23:56:ef:21:f2:57:64:ee:65:7b:fa:9f:39:f9: 4c:61:92:27:ee:b5:7c:26:06:65:9b:b8:d9:c9:d4:ab:d8:a3: 6d:f2:3b:b9:62:6a:72:9e:b5:56:3f:be:63:bb:bf:9e:f2:ca: 23:bc:9e:e9:69:f9:18:be:cc:3d:c6:fd:d0:b5:12:84:69:76: 1d:13:18:04:70:b9:c1:39:a4:a5:45:1b:54:ed:00:a8:f3:8a: df:eb:65:6e:70:e9:3b:12:fc:f4:cd:59:19:52:17:93:c8:15: 26:7b:c3:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9OzfC6V2gDA0nlWxt5PNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNzg2MmI0NjA4Yzc5ZjQ1MDI5NWVjNWM4MGM3YzdhZDZk ZmUyYTIwHhcNMjUxMjE1MTcwMDM1WhcNMjUxMjE2MTcwMDM1WjAzMTEwLwYDVQQD EyhlNzlkZGUxODljYjBkYTZiYWMxZTdjZmJjNGVmNTc2NDZmMzFkYjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZBiAIFD4YXJFcU1mZeVxuvvEJPN SkZOeIyvIl+6ZkNcT57w/ZtA4WRMOMVUcMsYpfUb7mIRj+fg1yu2pa0hc3M4U9v2 LKs2oLW/m5+VinTYWjr9CTr5d3IdDvLtNUAzmWaYf8qkrDOVjMR/82qD/WLfRZvI RHpSB3Ipgwg6uhE5keg9mnM0QnIHRcATBfAzUAqMUVtVVsE/JVnuY9a8rrARKsu7 GHbiUBIrJG9OiECJ9mz7ip0leuaNPXU5tYDok5FvP3UYZiLd87cIPmi0p7d7Jel1 pSfWlOOyMDug02vibxgp4RG6f7DnFhU9yHE6hz4v0WRlpGsY1PUikZI1FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOed3hicsNprrB58+8TvV2RvMdtJMB8GA1UdIwQY MBaAFAN4YrRgjHn0UClexcgMfHrW3+KiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMt ZjQ3NGY3YmQzNTMxLzEvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMtZjQ3NGY3YmQzNTMx LzEvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjT+SiLnw z3IdrOnyU5W3tF4xDpY3kmxpnnm2gkMx03cye4SaBaK9icnZM437ssII/yQsN4y9 eDschsaFM2O8bD2N6ZqUDaCJsAJDaXXpnxwS6MkbbOxOZrC+ZScnKwoKLtDowSB5 dNAI+ARLj5CZi1RJOuTEoZwjVdrDp3oIwrmerkoR+O1BK6Jh8Sq78amYTx44QiNW 7yHyV2TuZXv6nzn5TGGSJ+61fCYGZZu42cnUq9ijbfI7uWJqcp61Vj++Y7u/nvLK I7ye6Wn5GL7MPcb90LUShGl2HRMYBHC5wTmkpUUbVO0AqPOK3+tlbnDpOxL89M1Z GVIXk8gVJnvDUQ== -----END CERTIFICATE-----Generated at Tue Dec 16 00:31:31 2025 by rpki-client