This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft File: ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json) Hash identifier: gHwaBUuwxiF/Va/cXfQsm4lRXhPiBl9zJ6zA78xhShY= Subject key identifier: D2:E7:DD:C9:9E:04:F3:C1:23:B3:74:00:AB:E8:62:6B:BB:F5:B0:A8 Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D Certificate issuer: /CN=01292e03a731796e1d7b148b1dd235d144352f5d Certificate serial: 019B27AD9ABB9D59D392AD8EF1AD6ACB242D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft Manifest number: 1055 Signing time: Tue 16 Dec 2025 15:00:47 +0000 Manifest this update: Tue 16 Dec 2025 15:00:47 +0000 Manifest next update: Wed 17 Dec 2025 15:00:47 +0000 Files and hashes: 1: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: v6+k0FtGjarq96sQiNNMoPXqKZFJrExUJnTRgifUSng=) 2: EQou6BPzQKkpgjTIlX9cVjZvh18.roa (hash: 7YXYr+7MlXL1fllsaO5BCAQjfwm1sEvIt5Fslo91iWM=) 3: Qetcf0dQacmnDzzLj6Br0uoMaiI.roa (hash: kfWLgyOV8y1YMkD0xHciwqgNJz90NpBbtolieL+YMGs=) 4: v6HTtOPpswbVJ_lSlYV-_O_3MwA.roa (hash: TUy20gRu1AXwcpH6OpFA+n1Rp3szdF8pZ4NPkSVx+cY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:9a:bb:9d:59:d3:92:ad:8e:f1:ad:6a:cb:24:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d Validity Not Before: Dec 16 15:00:47 2025 GMT Not After : Dec 17 15:00:47 2025 GMT Subject: CN=d2e7ddc99e04f3c123b37400abe8626bbbf5b0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:19:95:17:0b:78:1e:2c:81:32:51:d3:f2:2f: b5:db:c5:ef:45:35:94:61:6e:7b:3b:92:59:20:7f: bb:79:e4:1a:9d:f8:64:ee:cd:1b:cf:3f:64:89:48: be:c3:6b:8f:df:5c:bc:77:03:35:0b:d8:47:92:48: 0c:32:42:cc:fc:cd:2e:7b:d7:37:b0:c4:c7:72:b4: 28:40:78:7b:3c:80:5f:c8:1c:58:f6:df:28:39:73: 29:a6:f5:25:20:d3:a4:71:03:1d:f7:a6:83:b0:e0: 15:ad:55:04:62:4e:6b:1d:39:d2:c5:df:f9:6c:09: 6b:83:7a:b4:3f:65:1c:1c:57:bc:79:8f:15:5b:b8: 5b:09:1b:1a:45:28:4b:b8:b7:4a:b5:29:d5:95:4c: ed:d9:12:04:3b:d0:39:65:80:e5:8e:94:ad:11:77: ec:36:c3:c8:e7:ae:dc:73:58:3d:b1:72:22:e9:a8: b2:ef:a4:a4:bb:23:21:c4:b4:24:ea:00:3a:77:ce: 0f:18:51:87:13:5e:54:6c:8b:ba:cf:99:41:c8:96: 3f:d8:13:26:19:a9:e7:6b:d5:c8:95:5f:eb:5f:4f: bb:38:39:7a:e6:08:ad:1c:4c:de:d7:b7:f0:b8:c2: b7:e9:52:19:c8:9f:40:3f:f0:f6:43:51:c3:b6:d0: 1c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E7:DD:C9:9E:04:F3:C1:23:B3:74:00:AB:E8:62:6B:BB:F5:B0:A8 X509v3 Authority Key Identifier: keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:64:f7:f8:ac:dd:2f:13:a5:e8:b5:8c:dc:e5:7b:ee:e8:17: fa:ad:26:20:4a:48:11:7b:06:0a:9d:8e:32:ce:1e:e0:53:4c: d0:d8:7e:d8:54:71:34:fd:f4:dd:d9:af:ae:17:ac:27:9c:67: 0a:21:98:88:d6:ca:27:7c:3a:7a:76:62:8f:f2:b6:a1:f4:0f: 1b:e6:d2:5d:2f:ae:8e:53:20:94:9f:41:33:64:5d:57:64:6e: e8:88:dd:a8:fa:1b:51:cf:c1:13:c9:89:99:08:bc:b8:c6:09: b9:82:d4:b2:a8:5b:56:82:e2:0d:d6:01:ec:f2:35:01:e6:1d: 99:82:5d:a2:06:e1:0b:55:97:3b:03:4c:18:d1:36:9d:c0:bd: 48:45:09:ab:03:d1:f3:59:41:0c:02:60:d8:0a:ee:b9:06:e9: 16:6e:30:85:b4:94:09:44:14:ae:b0:d9:74:92:2b:94:85:ed: 5e:ca:43:dd:3a:e4:f1:b7:bd:91:32:3e:20:68:f2:91:1b:34: d3:b8:5c:8f:69:8b:32:a1:2e:26:b6:ab:2e:d9:90:1a:70:46: 98:ea:81:00:53:2d:f9:c5:21:a2:6b:c9:c3:b2:9a:10:4e:a4: 75:d2:38:60:08:f0:f5:78:3e:4f:d2:4a:04:63:30:fb:ee:c4: 11:0d:d5:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrZq7nVnTkq2O8a1qyyQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMjkyZTAzYTczMTc5NmUxZDdiMTQ4YjFkZDIzNWQxNDQz NTJmNWQwHhcNMjUxMjE2MTUwMDQ3WhcNMjUxMjE3MTUwMDQ3WjAzMTEwLwYDVQQD EyhkMmU3ZGRjOTllMDRmM2MxMjNiMzc0MDBhYmU4NjI2YmJiZjViMGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xmVFwt4HiyBMlHT8i+128XvRTWU YW57O5JZIH+7eeQanfhk7s0bzz9kiUi+w2uP31y8dwM1C9hHkkgMMkLM/M0ue9c3 sMTHcrQoQHh7PIBfyBxY9t8oOXMppvUlINOkcQMd96aDsOAVrVUEYk5rHTnSxd/5 bAlrg3q0P2UcHFe8eY8VW7hbCRsaRShLuLdKtSnVlUzt2RIEO9A5ZYDljpStEXfs NsPI567cc1g9sXIi6aiy76SkuyMhxLQk6gA6d84PGFGHE15UbIu6z5lByJY/2BMm Ganna9XIlV/rX0+7ODl65gitHEze17fwuMK36VIZyJ9AP/D2Q1HDttAchwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLn3cmeBPPBI7N0AKvoYmu79bCoMB8GA1UdIwQY MBaAFAEpLgOnMXluHXsUix3SNdFENS9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTkt MGRmN2RmNGQ1YjAxLzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTktMGRmN2RmNGQ1YjAx LzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmT3+Kzd LxOl6LWM3OV77ugX+q0mIEpIEXsGCp2OMs4e4FNM0Nh+2FRxNP303dmvrhesJ5xn CiGYiNbKJ3w6enZij/K2ofQPG+bSXS+ujlMglJ9BM2RdV2Ru6IjdqPobUc/BE8mJ mQi8uMYJuYLUsqhbVoLiDdYB7PI1AeYdmYJdogbhC1WXOwNMGNE2ncC9SEUJqwPR 81lBDAJg2AruuQbpFm4whbSUCUQUrrDZdJIrlIXtXspD3Trk8be9kTI+IGjykRs0 07hcj2mLMqEuJrarLtmQGnBGmOqBAFMt+cUhomvJw7KaEE6kddI4YAjw9Xg+T9JK BGMw++7EEQ3Vug== -----END CERTIFICATE-----Generated at Tue Dec 16 19:16:26 2025 by rpki-client