This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft File: A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json) Hash identifier: E+9SlCGsmzTH8Eh1Pt64Cvha2Rh9NDTeQ2rcTbyWeus= Subject key identifier: CB:D4:90:58:61:E9:14:62:7C:62:AA:32:47:6F:B0:A4:CC:C7:67:DA Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d Certificate serial: 019AF19AF25C6024D12DE8E0D18CE4804901 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft Manifest number: 148B Signing time: Sat 06 Dec 2025 03:00:54 +0000 Manifest this update: Sat 06 Dec 2025 03:00:54 +0000 Manifest next update: Sun 07 Dec 2025 03:00:54 +0000 Files and hashes: 1: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: rjAU4tmvNVRbweYvB46cSzMZELDKcE0EQ6j9h5w+h4g=) 2: AB4qyh-GFm_4fCIscWpIBFj0Kek.roa (hash: eMCLNriDfdANy3mBQaEbKePj36AsyrGRMWbPR231aA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f2:5c:60:24:d1:2d:e8:e0:d1:8c:e4:80:49:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d Validity Not Before: Dec 6 03:00:54 2025 GMT Not After : Dec 7 03:00:54 2025 GMT Subject: CN=cbd4905861e914627c62aa32476fb0a4ccc767da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:49:b5:bd:40:a8:38:ee:e3:74:7e:98:38:74: d8:6e:28:dd:d5:da:ac:34:66:2c:14:e7:03:0e:73: 6b:b7:28:e6:8b:8e:5d:2b:62:84:97:28:51:e6:f1: 24:b4:8d:76:f2:70:70:f3:46:4b:4c:4c:3a:44:b9: ba:99:a3:85:a2:5d:83:c1:2d:0e:60:c0:b2:b1:d7: c5:ae:c9:76:2e:4a:af:a1:b5:4a:ff:a6:b7:25:6e: e8:bf:1d:4a:e8:d2:46:8c:44:26:81:d7:50:9e:cd: 20:90:aa:ad:64:ee:e3:1e:e1:d9:c1:fa:dd:dc:13: 58:e1:7f:d0:3c:fd:97:fd:8f:f1:94:b2:4b:4e:f8: 3f:3e:64:d8:20:37:36:75:25:ee:55:d5:52:2e:76: 9d:b0:93:2a:e4:41:34:bd:3a:4b:f1:e2:be:a4:9d: f8:ef:e8:85:cb:97:4b:da:6d:82:fc:7a:25:6e:e7: 82:06:f0:8b:c8:95:2f:94:78:85:e5:80:7f:b3:85: f4:82:76:17:b4:45:f9:ee:67:c2:12:d5:fc:37:5a: 6a:f2:db:1c:05:86:b3:f6:50:5f:f3:85:af:71:2d: e3:9d:0f:69:fd:d9:84:d6:86:29:1e:fc:47:d4:6b: 66:23:d3:19:14:71:6c:aa:0a:3b:11:67:fb:6c:ad: 7f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D4:90:58:61:E9:14:62:7C:62:AA:32:47:6F:B0:A4:CC:C7:67:DA X509v3 Authority Key Identifier: keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:ce:d7:62:b1:d3:6f:2e:4a:8b:45:6f:78:af:1e:94:2d:a8: 6a:79:34:84:b8:c9:3d:c2:fa:d9:5c:7c:19:50:79:ae:14:58: a5:a2:61:09:33:4c:30:75:b3:18:d0:6f:be:c3:40:2b:38:95: f9:81:ea:aa:d1:1b:09:9a:ad:2e:97:5f:db:33:b9:07:3a:dc: c8:29:e0:2f:1f:ec:9e:30:44:97:0c:3c:99:0d:89:c5:78:73: 14:47:be:e8:fc:cc:05:51:e0:4f:24:75:90:fc:f6:a8:65:3c: c9:9a:04:2c:f8:97:29:94:b1:d8:e5:8b:d7:45:3c:48:91:45: 7c:81:10:f7:a6:2c:4f:2a:26:d2:09:03:26:5a:26:b0:96:65: 42:e6:e5:40:f0:c2:6f:f3:cf:e0:4f:e3:6b:ee:c5:a2:80:41: 8f:40:f7:ff:40:3d:a5:3e:02:ad:8f:4a:b0:ca:f8:15:a0:67: 91:81:f7:42:6b:a9:eb:ae:e5:b3:65:99:84:1b:63:13:ab:9c: 32:da:2a:55:7c:e8:4c:ef:2c:3b:b1:5f:ba:6c:8a:34:46:2e: db:d7:97:2a:6d:26:d1:6f:d0:5b:62:49:7f:8d:ad:10:c3:b1: 5a:0e:73:24:7a:8d:0c:a2:f3:fb:b6:3e:a8:f7:a1:a3:93:49: 6c:94:a6:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvJcYCTRLejg0YzkgEkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzN2IzZGY2ZDc4Mzk5ZjAzMTgyODU1NmZjZDkwZWJmZGY0 ZDBkMmQwHhcNMjUxMjA2MDMwMDU0WhcNMjUxMjA3MDMwMDU0WjAzMTEwLwYDVQQD EyhjYmQ0OTA1ODYxZTkxNDYyN2M2MmFhMzI0NzZmYjBhNGNjYzc2N2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUm1vUCoOO7jdH6YOHTYbijd1dqs NGYsFOcDDnNrtyjmi45dK2KElyhR5vEktI128nBw80ZLTEw6RLm6maOFol2DwS0O YMCysdfFrsl2LkqvobVK/6a3JW7ovx1K6NJGjEQmgddQns0gkKqtZO7jHuHZwfrd 3BNY4X/QPP2X/Y/xlLJLTvg/PmTYIDc2dSXuVdVSLnadsJMq5EE0vTpL8eK+pJ34 7+iFy5dL2m2C/HolbueCBvCLyJUvlHiF5YB/s4X0gnYXtEX57mfCEtX8N1pq8tsc BYaz9lBf84WvcS3jnQ9p/dmE1oYpHvxH1GtmI9MZFHFsqgo7EWf7bK1/2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvUkFhh6RRifGKqMkdvsKTMx2faMB8GA1UdIwQY MBaAFAN7PfbXg5nwMYKFVvzZDr/fTQ0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lMjJlZjgtNTBiNy00MDQ2LTkyMDgt YTQ3NWFlYmIwOGQ1LzEvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9lMjJlZjgtNTBiNy00MDQ2LTkyMDgtYTQ3NWFlYmIwOGQ1 LzEvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApM7XYrHT by5Ki0VveK8elC2oank0hLjJPcL62Vx8GVB5rhRYpaJhCTNMMHWzGNBvvsNAKziV +YHqqtEbCZqtLpdf2zO5BzrcyCngLx/snjBElww8mQ2JxXhzFEe+6PzMBVHgTyR1 kPz2qGU8yZoELPiXKZSx2OWL10U8SJFFfIEQ96YsTyom0gkDJlomsJZlQublQPDC b/PP4E/ja+7FooBBj0D3/0A9pT4CrY9KsMr4FaBnkYH3Qmup667ls2WZhBtjE6uc MtoqVXzoTO8sO7FfumyKNEYu29eXKm0m0W/QW2JJf42tEMOxWg5zJHqNDKLz+7Y+ qPeho5NJbJSmCA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:50 2025 by rpki-client