This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft File: ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json) Hash identifier: dFkPQsUVW9L3UZUUb8bjgPU9lr+sGmgRL9JYZheGpaY= Subject key identifier: 13:0B:06:B6:36:75:39:CB:E9:2E:B6:5A:D6:04:88:B9:61:20:22:02 Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70 Certificate issuer: /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170 Certificate serial: 019AF20966C7686936F70367395981502DF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 05:01:33 +0000 Manifest this update: Sat 06 Dec 2025 05:01:33 +0000 Manifest next update: Sun 07 Dec 2025 05:01:33 +0000 Files and hashes: 1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: ipjULl773y6mAjSwfVqh1wqarbJmefWPamimPElfYCY=) 2: bxyY92T1b4aJfspeGWuPWUl-Kkw.roa (hash: nKzuSfhFZMZ8pqYL4zAcXBecFHY0kOuZwNpuiZWVnMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:66:c7:68:69:36:f7:03:67:39:59:81:50:2d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170 Validity Not Before: Dec 6 05:01:33 2025 GMT Not After : Dec 7 05:01:33 2025 GMT Subject: CN=130b06b6367539cbe92eb65ad60488b961202202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:da:1a:7f:b4:ab:1a:85:df:d2:e8:a3:a7: d5:6f:45:aa:56:2e:11:f0:dc:15:f1:de:fc:97:b1: e7:a3:ab:e1:c5:73:43:ef:c7:e6:2c:68:75:1d:b4: 8a:23:14:98:ab:60:70:a7:c7:bb:c1:c5:99:42:cb: 66:fd:28:74:37:59:a3:ba:ef:50:52:16:78:3d:b9: f3:13:ab:b7:20:47:13:4e:7a:3a:65:ae:a4:c1:97: 32:30:f3:98:db:76:69:3f:cd:f4:ed:60:aa:8b:50: 5f:3b:db:5c:1f:f9:48:30:55:99:da:05:55:16:dd: 9b:6b:72:44:b6:69:01:0a:c6:4e:a4:1a:3b:f1:be: fa:e3:e8:17:49:bb:f8:0a:da:65:f6:98:bf:b9:ad: b9:ec:81:d2:3f:dd:03:0b:01:48:34:0d:6c:d9:2e: 7d:ca:18:3f:4b:37:28:53:9a:49:de:08:8d:e4:46: a6:34:43:28:e2:1b:2f:52:75:22:8e:8e:79:f6:4b: 2e:bf:63:8a:22:e4:a8:30:26:8e:76:68:9b:48:a4: cc:95:0d:2c:ee:44:9e:82:50:74:f7:54:a3:6f:2b: 2e:55:36:94:fd:f9:b5:dd:bd:42:59:86:b9:0c:95: 67:ff:e3:b1:67:c6:dc:94:11:03:6c:9b:72:5e:c9: f2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:0B:06:B6:36:75:39:CB:E9:2E:B6:5A:D6:04:88:B9:61:20:22:02 X509v3 Authority Key Identifier: keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:24:83:77:4c:60:82:90:19:c3:0d:12:e2:cc:61:8e:71:9f: eb:5d:f5:46:37:cc:b9:96:57:bd:91:ca:b0:45:4d:5d:83:7d: 9a:df:c6:60:36:ef:14:6a:01:ed:7a:f4:03:6a:b7:2e:0b:e7: c7:88:39:71:d4:b3:c6:a8:6c:88:97:e8:71:b9:1e:9e:74:13: 0c:9d:38:15:86:e4:06:bb:6b:9e:0a:7c:c4:c6:36:6d:5c:35: 24:4a:0a:f3:68:a4:59:3d:3a:66:78:72:38:fb:e2:6e:22:b3: 3b:61:d1:71:2d:16:ef:09:ac:d7:83:68:66:bb:91:84:37:5e: 59:f3:a8:0a:15:a8:3f:41:9e:89:2f:41:bf:49:26:40:f0:cc: 07:28:32:e3:d1:5c:c7:df:38:19:4e:fa:8c:77:13:39:64:82: 77:c2:86:97:4b:11:2f:f8:48:55:21:77:47:f7:61:fc:1a:13: 56:6f:e2:61:65:82:70:59:22:e0:99:f5:c9:bf:57:31:9f:c7: 2b:8e:14:41:2e:8d:76:52:31:ec:70:46:18:cf:b8:fd:98:34: 26:99:31:25:2e:2a:64:69:e6:75:49:c8:4b:11:d5:0d:dd:f0: 8a:e9:78:fe:d1:d4:11:c5:01:81:d9:e4:3c:82:6c:6c:d8:e0: ba:1f:65:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWbHaGk29wNnOVmBUC3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwM2EwZDE0YjAzZWEzNDJlZGUzYjJmNDlhZDhjYWEyYmY3 NGUxNzAwHhcNMjUxMjA2MDUwMTMzWhcNMjUxMjA3MDUwMTMzWjAzMTEwLwYDVQQD EygxMzBiMDZiNjM2NzUzOWNiZTkyZWI2NWFkNjA0ODhiOTYxMjAyMjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5zaGn+0qxqF39Loo6fVb0WqVi4R 8NwV8d78l7Hno6vhxXND78fmLGh1HbSKIxSYq2Bwp8e7wcWZQstm/Sh0N1mjuu9Q UhZ4PbnzE6u3IEcTTno6Za6kwZcyMPOY23ZpP8307WCqi1BfO9tcH/lIMFWZ2gVV Ft2ba3JEtmkBCsZOpBo78b764+gXSbv4Ctpl9pi/ua257IHSP90DCwFINA1s2S59 yhg/SzcoU5pJ3giN5EamNEMo4hsvUnUijo559ksuv2OKIuSoMCaOdmibSKTMlQ0s 7kSeglB091SjbysuVTaU/fm13b1CWYa5DJVn/+OxZ8bclBEDbJtyXsnyfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMLBrY2dTnL6S62WtYEiLlhICICMB8GA1UdIwQY MBaAFAA6DRSwPqNC7eOy9JrYyqK/dOFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGIt MmZkZDFmZDk5NjU3LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGItMmZkZDFmZDk5NjU3 LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSSDd0xg gpAZww0S4sxhjnGf6131RjfMuZZXvZHKsEVNXYN9mt/GYDbvFGoB7Xr0A2q3Lgvn x4g5cdSzxqhsiJfocbkennQTDJ04FYbkBrtrngp8xMY2bVw1JEoK82ikWT06Znhy OPvibiKzO2HRcS0W7wms14NoZruRhDdeWfOoChWoP0GeiS9Bv0kmQPDMBygy49Fc x984GU76jHcTOWSCd8KGl0sRL/hIVSF3R/dh/BoTVm/iYWWCcFki4Jn1yb9XMZ/H K44UQS6NdlIx7HBGGM+4/Zg0JpkxJS4qZGnmdUnISxHVDd3wiul4/tHUEcUBgdnk PIJsbNjguh9l/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:50 2025 by rpki-client