This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft File: ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json) Hash identifier: AndZlIE6EkFP0gPMGEQgH4pWi0JdSvwhDzCNB9uCSsc= Subject key identifier: 28:D3:6F:C9:7F:5C:DD:C5:E8:48:17:73:64:A3:F3:A0:A1:AC:03:C2 Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D Certificate issuer: /CN=01292e03a731796e1d7b148b1dd235d144352f5d Certificate serial: 019AF19AC39029247DAB2F28088FAB828D6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft Manifest number: 1039 Signing time: Sat 06 Dec 2025 03:00:42 +0000 Manifest this update: Sat 06 Dec 2025 03:00:42 +0000 Manifest next update: Sun 07 Dec 2025 03:00:42 +0000 Files and hashes: 1: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: hPFoCqqevrmO1VZ/1w8Pow9t59tfdmIeUK2StL0h6ik=) 2: EQou6BPzQKkpgjTIlX9cVjZvh18.roa (hash: 7YXYr+7MlXL1fllsaO5BCAQjfwm1sEvIt5Fslo91iWM=) 3: Qetcf0dQacmnDzzLj6Br0uoMaiI.roa (hash: kfWLgyOV8y1YMkD0xHciwqgNJz90NpBbtolieL+YMGs=) 4: v6HTtOPpswbVJ_lSlYV-_O_3MwA.roa (hash: TUy20gRu1AXwcpH6OpFA+n1Rp3szdF8pZ4NPkSVx+cY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c3:90:29:24:7d:ab:2f:28:08:8f:ab:82:8d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d Validity Not Before: Dec 6 03:00:42 2025 GMT Not After : Dec 7 03:00:42 2025 GMT Subject: CN=28d36fc97f5cddc5e848177364a3f3a0a1ac03c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:65:66:cc:e3:d3:58:8b:15:d3:55:8d:df:4d: f8:c9:37:a3:90:0e:b7:f6:91:2f:7f:e1:7b:77:8b: e0:10:a9:aa:9b:82:10:c0:e2:2a:70:e8:0a:b4:8c: 11:a3:0c:23:26:72:a1:ed:c4:a1:09:f5:68:d9:27: 9a:90:9b:e5:c8:29:18:bc:b2:f2:eb:07:7d:95:3a: a2:6a:27:1e:a5:7a:4a:3e:8b:32:be:66:d6:16:86: a1:a3:81:0e:cd:11:cb:92:b2:e2:89:17:1b:f1:44: 1d:24:7b:7e:e9:d2:d0:b9:43:a0:b1:4c:4f:db:41: 99:e7:57:b5:98:ab:fc:5e:f4:07:7c:be:dc:1e:5f: f2:7b:77:9d:f9:99:af:fa:0c:c2:28:95:f5:bb:f1: 08:04:1b:84:a3:02:69:97:4a:dd:09:91:f1:e4:93: 1c:0c:9f:c1:83:84:a2:1a:60:8f:03:3f:e3:af:88: d5:c6:3c:a1:72:6c:b1:f3:49:a9:d9:80:5e:c8:39: 4f:12:68:e3:b8:82:c6:f1:76:46:98:fc:a6:aa:27: 6e:2e:19:97:24:22:a9:22:1d:6b:f4:7f:63:1a:66: b2:ae:e4:40:99:19:e5:4a:69:2b:5b:1b:eb:31:eb: 97:ea:ec:1f:12:86:92:e9:5e:87:59:11:59:03:aa: 7f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D3:6F:C9:7F:5C:DD:C5:E8:48:17:73:64:A3:F3:A0:A1:AC:03:C2 X509v3 Authority Key Identifier: keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:19:ef:a8:33:c2:5a:71:40:79:53:9c:0a:f5:e3:93:96:58: 15:ec:17:7f:4a:ff:b1:c7:78:7c:17:3f:7d:d8:86:f8:f3:9e: 3e:0e:04:4c:59:b9:a7:96:c5:1a:2e:23:ee:38:f7:19:04:5b: 9d:40:df:d8:4d:72:46:a0:b5:ef:0a:3f:be:92:fa:e7:be:0b: a8:79:a8:ad:a5:c7:3a:f4:4a:9a:cd:f1:c8:02:56:b6:d2:44: 52:40:d3:0b:d5:c7:0c:88:56:01:d6:e6:e4:e2:e1:42:7f:95: 00:9f:9c:7e:d5:cc:b5:6c:84:1f:06:2c:88:64:c2:df:03:cc: cf:2b:7f:83:86:2c:c9:32:7f:31:55:28:02:e4:01:f4:7c:3f: b0:45:eb:f8:d6:c0:ef:d5:2c:2d:9a:e2:d7:55:4c:21:ce:4c: 2f:48:3c:ee:67:9b:ef:c0:4e:70:44:55:ef:ab:6e:62:fc:83: ae:28:f0:da:6f:77:f1:2f:37:b4:f7:9a:9a:66:b9:3a:43:c9: 1e:f8:9c:c5:1a:df:0b:41:9d:a3:fd:6c:a0:9a:96:9a:3b:eb: ff:0d:6d:7c:2e:46:79:33:61:6c:28:ec:79:41:9c:f2:af:f7: 41:7d:c7:e9:18:44:3b:35:61:3b:bf:4d:d4:70:28:e7:95:9d: 76:6b:3b:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsOQKSR9qy8oCI+rgo1sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMjkyZTAzYTczMTc5NmUxZDdiMTQ4YjFkZDIzNWQxNDQz NTJmNWQwHhcNMjUxMjA2MDMwMDQyWhcNMjUxMjA3MDMwMDQyWjAzMTEwLwYDVQQD EygyOGQzNmZjOTdmNWNkZGM1ZTg0ODE3NzM2NGEzZjNhMGExYWMwM2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02VmzOPTWIsV01WN3034yTejkA63 9pEvf+F7d4vgEKmqm4IQwOIqcOgKtIwRowwjJnKh7cShCfVo2SeakJvlyCkYvLLy 6wd9lTqiaicepXpKPosyvmbWFoaho4EOzRHLkrLiiRcb8UQdJHt+6dLQuUOgsUxP 20GZ51e1mKv8XvQHfL7cHl/ye3ed+Zmv+gzCKJX1u/EIBBuEowJpl0rdCZHx5JMc DJ/Bg4SiGmCPAz/jr4jVxjyhcmyx80mp2YBeyDlPEmjjuILG8XZGmPymqiduLhmX JCKpIh1r9H9jGmayruRAmRnlSmkrWxvrMeuX6uwfEoaS6V6HWRFZA6p/IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjTb8l/XN3F6EgXc2Sj86ChrAPCMB8GA1UdIwQY MBaAFAEpLgOnMXluHXsUix3SNdFENS9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTkt MGRmN2RmNGQ1YjAxLzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTktMGRmN2RmNGQ1YjAx LzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBnvqDPC WnFAeVOcCvXjk5ZYFewXf0r/scd4fBc/fdiG+POePg4ETFm5p5bFGi4j7jj3GQRb nUDf2E1yRqC17wo/vpL6574LqHmoraXHOvRKms3xyAJWttJEUkDTC9XHDIhWAdbm 5OLhQn+VAJ+cftXMtWyEHwYsiGTC3wPMzyt/g4YsyTJ/MVUoAuQB9Hw/sEXr+NbA 79UsLZri11VMIc5ML0g87meb78BOcERV76tuYvyDrijw2m938S83tPeamma5OkPJ HvicxRrfC0Gdo/1soJqWmjvr/w1tfC5GeTNhbCjseUGc8q/3QX3H6RhEOzVhO79N 1HAo55Wddms7wQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:31 2025 by rpki-client