This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft File: A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json) Hash identifier: p3spBpQ6wJ22QXi+VyEpVmW2RZhYCql8tYyaJ//nBCs= Subject key identifier: 70:6D:E6:07:9F:E3:96:5C:DE:8A:56:33:86:D3:56:20:CF:4B:C9:FA Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61 Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861 Certificate serial: 019AF16438039FCC66D87148B45997E9A204 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:08 +0000 Manifest this update: Sat 06 Dec 2025 02:01:08 +0000 Manifest next update: Sun 07 Dec 2025 02:01:08 +0000 Files and hashes: 1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: zJQEFy6N+C8fXDV35z8hEC1E2RoiuHLH7cqASgA6TRo=) 2: Xw_JxFKBt0xay86EnT10Cffhb2o.roa (hash: CcdZeMl6Gy8SVuqOk3A/APDzafeJm+A13qmOxZHMPq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:38:03:9f:cc:66:d8:71:48:b4:59:97:e9:a2:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861 Validity Not Before: Dec 6 02:01:08 2025 GMT Not After : Dec 7 02:01:08 2025 GMT Subject: CN=706de6079fe3965cde8a563386d35620cf4bc9fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:09:60:e1:5b:b8:d9:85:91:0b:e7:22:eb:a3: d1:91:3b:e5:92:aa:17:76:77:8b:a8:42:0a:0a:c1: 85:83:58:ae:52:3a:27:39:a9:8e:60:b4:fe:10:02: c3:7d:80:a2:6a:00:56:9b:9e:01:05:95:86:ea:77: bf:50:bd:7d:a8:59:a2:7e:d0:73:ce:b1:5f:54:06: 01:23:e8:d8:35:8b:04:a5:a6:fe:69:f1:8f:54:69: ed:24:e0:b3:3a:83:51:83:13:f4:77:b5:92:8c:06: 7b:1c:6c:42:81:ef:81:4e:92:34:54:73:10:02:58: d4:bc:85:d5:11:7f:ad:e7:5a:79:0e:05:b1:0a:97: 08:86:e5:85:b4:a8:a5:73:bb:99:b2:b8:58:0e:29: ea:97:90:d0:3b:69:72:70:99:fd:2c:91:55:1c:ed: e3:54:1f:7d:cb:6d:7b:77:35:03:e7:68:ee:b0:f6: 3d:55:05:d0:e4:5d:ec:b1:cc:8a:be:ea:78:13:81: 4e:a4:98:d3:6e:f4:57:aa:95:4c:ca:9c:2a:cb:c4: 58:1a:de:9e:e7:fd:ca:2d:7a:8d:ae:58:e4:c4:67: 05:13:5b:dc:91:a5:6f:4f:66:01:0f:28:c8:32:2d: 2c:7a:b1:7b:9f:4f:24:ca:d3:12:b6:a5:f4:eb:87: f1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6D:E6:07:9F:E3:96:5C:DE:8A:56:33:86:D3:56:20:CF:4B:C9:FA X509v3 Authority Key Identifier: keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:61:38:bc:89:80:ec:76:a7:ae:19:32:0b:fc:a6:cb:2f:9d: f7:ed:c7:17:a6:07:46:f1:a5:98:88:05:aa:af:64:6f:76:86: 72:fb:42:0f:bf:34:15:48:b8:30:d4:65:01:e7:cc:28:e2:46: 17:9d:6c:13:19:3d:5a:51:a7:0e:d6:f6:94:37:83:af:75:91: 2b:51:60:2d:4d:e5:10:bb:86:bd:3b:62:b8:55:b1:e6:ca:ce: 96:ab:b7:cf:be:14:f3:70:bc:12:20:03:b2:c0:8a:42:8d:c1: 14:a8:96:cc:17:dc:d1:1a:ed:10:15:7d:60:d4:eb:d1:0c:3f: fa:d9:b7:ae:c9:88:ab:40:20:79:da:32:1b:a3:b1:24:bf:93: 4a:7a:ac:da:45:1a:49:6f:9e:b7:a9:a0:94:da:dd:1b:c7:4f: 3b:58:40:df:bb:2e:80:de:b3:1c:b5:fb:34:51:a8:6a:40:ec: ab:2a:17:5e:13:e9:f5:5a:b8:06:4a:ef:0f:50:73:0b:9b:5e: 1f:bd:12:80:95:76:25:d2:d6:94:8d:70:cf:a7:8c:f1:f6:f1: 2a:80:e8:1c:a7:61:b7:cf:30:4f:90:56:99:ae:ef:de:80:c0: f7:67:f9:71:95:38:18:fc:85:a4:c2:5e:58:89:b0:1e:28:b5: da:a1:c4:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDgDn8xm2HFItFmX6aIEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNmFhYzM0YzY2ZmRhNjRiNjdlYjk2YjAyZDgxOTc4OWZl YmU4NjEwHhcNMjUxMjA2MDIwMTA4WhcNMjUxMjA3MDIwMTA4WjAzMTEwLwYDVQQD Eyg3MDZkZTYwNzlmZTM5NjVjZGU4YTU2MzM4NmQzNTYyMGNmNGJjOWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmglg4Vu42YWRC+ci66PRkTvlkqoX dneLqEIKCsGFg1iuUjonOamOYLT+EALDfYCiagBWm54BBZWG6ne/UL19qFmiftBz zrFfVAYBI+jYNYsEpab+afGPVGntJOCzOoNRgxP0d7WSjAZ7HGxCge+BTpI0VHMQ AljUvIXVEX+t51p5DgWxCpcIhuWFtKilc7uZsrhYDinql5DQO2lycJn9LJFVHO3j VB99y217dzUD52jusPY9VQXQ5F3sscyKvup4E4FOpJjTbvRXqpVMypwqy8RYGt6e 5/3KLXqNrljkxGcFE1vckaVvT2YBDyjIMi0serF7n08kytMStqX064fxuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBt5gef45Zc3opWM4bTViDPS8n6MB8GA1UdIwQY MBaAFANqrDTGb9pktn65awLYGXif6+hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYt OTYzOTkzY2U1MTgxLzEvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYtOTYzOTkzY2U1MTgx LzEvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2E4vImA 7HanrhkyC/ymyy+d9+3HF6YHRvGlmIgFqq9kb3aGcvtCD780FUi4MNRlAefMKOJG F51sExk9WlGnDtb2lDeDr3WRK1FgLU3lELuGvTtiuFWx5srOlqu3z74U83C8EiAD ssCKQo3BFKiWzBfc0RrtEBV9YNTr0Qw/+tm3rsmIq0AgedoyG6OxJL+TSnqs2kUa SW+et6mglNrdG8dPO1hA37sugN6zHLX7NFGoakDsqyoXXhPp9Vq4BkrvD1BzC5te H70SgJV2JdLWlI1wz6eM8fbxKoDoHKdht88wT5BWma7v3oDA92f5cZU4GPyFpMJe WImwHii12qHEAw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:54:24 2025 by rpki-client