This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft File: A3hitGCMefRQKV7FyAx8etbf4qI.mft (raw, json) Hash identifier: PQidDU4q8f0+GwJ+t/iKt1rp+tp8aVX++6Begdh7P00= Subject key identifier: DD:89:A4:FB:51:CC:9F:59:92:46:C3:F4:67:14:1B:58:2E:58:CC:94 Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2 Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2 Certificate serial: 019AF0BEDB82B8B8DD48F4CE6E3E940C7B82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft Manifest number: 1271 Signing time: Fri 05 Dec 2025 23:00:31 +0000 Manifest this update: Fri 05 Dec 2025 23:00:31 +0000 Manifest next update: Sat 06 Dec 2025 23:00:31 +0000 Files and hashes: 1: A3hitGCMefRQKV7FyAx8etbf4qI.crl (hash: MXoKc21xgniVAmsniy83F1qegkM/F86enYCeEwxO6d8=) 2: H1OMOC2BAR_5642Cu7ZwMViudi8.roa (hash: XWP0BQbCva9Xp/f//R3LpuOJ9bWFeCg7RqrDman+FAE=) 3: _KO8Oi7vtPgAowOISHE5epxFK5Q.roa (hash: 8164lOA7eSdWjoo8q/K2tQc7tm9W3hWFjEkyCggGOH4=) 4: pg2Uo1mGaRZ4g8oAbIXuXT68ouw.roa (hash: dY7d7wlBY9scutfRZI+Jc0/ht66poZjZN1QodpAABEg=) 5: rS4RgydKxGdwOWf1j4StfouO-tE.roa (hash: sFUBBhbDyvVoCqaYLXicDjVpE7stEZC/MmSdQhndwec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:db:82:b8:b8:dd:48:f4:ce:6e:3e:94:0c:7b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2 Validity Not Before: Dec 5 23:00:31 2025 GMT Not After : Dec 6 23:00:31 2025 GMT Subject: CN=dd89a4fb51cc9f599246c3f467141b582e58cc94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:94:51:c5:ca:f9:48:b4:35:73:80:95:d2: de:6f:84:39:5a:a7:b1:d0:8a:8a:0a:3c:2c:03:89: 27:3e:ea:4c:b7:5a:fb:0f:41:8d:7e:5f:8e:9d:3a: 6a:b6:6a:74:c0:04:3a:78:59:e7:4b:06:56:56:22: eb:e4:11:cf:03:78:7a:0f:95:fc:48:03:23:8b:00: e3:9f:ce:66:1a:91:47:90:63:98:df:86:0a:2e:03: de:de:1a:fd:96:cb:d4:a8:b1:e8:ac:e5:2a:f9:c6: c9:af:eb:cb:cd:dc:80:69:bf:e9:51:7b:70:db:41: 74:89:fe:af:ce:39:3b:6d:bf:98:53:8a:91:a3:6d: a8:2b:6e:45:26:9d:e4:a1:c5:c2:87:8c:29:8e:e6: 69:d6:07:ec:cd:a3:0b:55:0e:47:62:94:ae:99:e5: 39:3e:5d:a7:15:65:5d:e1:2e:1f:6f:2a:33:94:88: 49:4b:aa:a1:61:d5:f4:7e:58:28:ba:3a:a7:bf:02: 66:ba:18:38:13:42:dd:22:39:ee:15:a0:20:d2:4f: c0:63:a9:34:6a:cd:2d:63:f1:7d:aa:07:03:55:09: f0:f3:1a:2e:f7:c8:da:62:f8:60:a7:3e:c1:ac:fa: 58:6f:37:f0:44:22:06:b7:29:e5:74:0b:bd:73:19: 7d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:89:A4:FB:51:CC:9F:59:92:46:C3:F4:67:14:1B:58:2E:58:CC:94 X509v3 Authority Key Identifier: keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:39:fe:8b:23:a5:b8:aa:cf:aa:ce:e9:ea:13:b9:62:15:28: fe:5f:72:25:f6:80:18:cc:03:b6:b3:7b:a5:70:50:5c:04:89: dc:19:c1:36:ce:97:6d:3e:3f:2e:91:59:20:6a:58:50:97:58: 43:0a:35:f4:73:f0:91:ac:08:5f:d4:e7:ae:c5:8f:f1:f4:c8: 03:ed:cb:4c:53:86:d5:42:92:8e:04:6d:74:58:a8:f3:84:44: 86:50:c4:de:d6:b8:d5:18:10:6a:ad:c3:49:6a:17:f4:45:8f: 80:26:a6:7d:83:68:ca:41:0b:9c:c7:cf:a3:5a:02:0c:c7:44: 57:62:b2:99:1c:5f:c1:57:89:b5:60:3a:a8:20:e0:20:8e:f4: 04:04:c4:8d:1d:a9:85:ca:a3:a6:a4:6c:70:21:0b:0b:4d:2d: ad:8c:70:4b:58:5c:70:75:07:f3:fb:86:d0:22:6b:50:16:88: 60:a4:2a:d9:34:c7:f0:ca:75:92:07:e6:f7:1b:fa:da:db:97: 06:7c:32:e8:91:d2:16:f8:e5:d5:08:14:67:e3:97:10:4e:08: ad:43:22:d7:35:42:d4:d0:52:0a:f1:e7:30:a6:05:3b:22:2a: a7:b1:aa:f9:7c:a0:ad:63:4a:5e:43:9b:35:a0:c0:1e:ee:41: 93:01:92:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvtuCuLjdSPTObj6UDHuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNzg2MmI0NjA4Yzc5ZjQ1MDI5NWVjNWM4MGM3YzdhZDZk ZmUyYTIwHhcNMjUxMjA1MjMwMDMxWhcNMjUxMjA2MjMwMDMxWjAzMTEwLwYDVQQD EyhkZDg5YTRmYjUxY2M5ZjU5OTI0NmMzZjQ2NzE0MWI1ODJlNThjYzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiqUUcXK+Ui0NXOAldLeb4Q5Wqex 0IqKCjwsA4knPupMt1r7D0GNfl+OnTpqtmp0wAQ6eFnnSwZWViLr5BHPA3h6D5X8 SAMjiwDjn85mGpFHkGOY34YKLgPe3hr9lsvUqLHorOUq+cbJr+vLzdyAab/pUXtw 20F0if6vzjk7bb+YU4qRo22oK25FJp3kocXCh4wpjuZp1gfszaMLVQ5HYpSumeU5 Pl2nFWVd4S4fbyozlIhJS6qhYdX0flgoujqnvwJmuhg4E0LdIjnuFaAg0k/AY6k0 as0tY/F9qgcDVQnw8xou98jaYvhgpz7BrPpYbzfwRCIGtynldAu9cxl98wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2JpPtRzJ9ZkkbD9GcUG1guWMyUMB8GA1UdIwQY MBaAFAN4YrRgjHn0UClexcgMfHrW3+KiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMt ZjQ3NGY3YmQzNTMxLzEvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMtZjQ3NGY3YmQzNTMx LzEvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjn+iyOl uKrPqs7p6hO5YhUo/l9yJfaAGMwDtrN7pXBQXASJ3BnBNs6XbT4/LpFZIGpYUJdY Qwo19HPwkawIX9TnrsWP8fTIA+3LTFOG1UKSjgRtdFio84REhlDE3ta41RgQaq3D SWoX9EWPgCamfYNoykELnMfPo1oCDMdEV2KymRxfwVeJtWA6qCDgII70BATEjR2p hcqjpqRscCELC00trYxwS1hccHUH8/uG0CJrUBaIYKQq2TTH8Mp1kgfm9xv62tuX Bnwy6JHSFvjl1QgUZ+OXEE4IrUMi1zVC1NBSCvHnMKYFOyIqp7Gq+XygrWNKXkOb NaDAHu5BkwGSqA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:56 2025 by rpki-client