This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft File: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft (raw, json) Hash identifier: qGTM5s7+4EN3dx0aU0WOpm/7hoX9TemspyadHPavLNo= Subject key identifier: CF:19:CF:64:D9:17:4A:C6:30:26:67:5A:22:76:14:1B:6A:1D:AB:1B Authority key identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96 Certificate issuer: /CN=6b57c5dff70ebfe67a400d55f259db2c37192196 Certificate serial: 019AF12CDDF48F9F00ACCAA93D905902C7D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft Manifest number: 0521 Signing time: Sat 06 Dec 2025 01:00:40 +0000 Manifest this update: Sat 06 Dec 2025 01:00:40 +0000 Manifest next update: Sun 07 Dec 2025 01:00:40 +0000 Files and hashes: 1: DXY1aPZOR4ljjfKNnTzK-ui2GtQ.roa (hash: HmRJXl6KdbWQ5yFSi3ORZiwzeQcQdEBbSpqG5+7FJoc=) 2: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl (hash: jPRPV2bq9XUcNsx+R7QJpOolYCxhgD6ElFqR3k9lhpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:dd:f4:8f:9f:00:ac:ca:a9:3d:90:59:02:c7:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b57c5dff70ebfe67a400d55f259db2c37192196 Validity Not Before: Dec 6 01:00:40 2025 GMT Not After : Dec 7 01:00:40 2025 GMT Subject: CN=cf19cf64d9174ac63026675a2276141b6a1dab1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ec:42:98:d5:53:94:d0:87:97:97:6e:78:74: 2d:9e:cc:59:07:03:ea:61:63:95:fe:8e:99:6a:10: 41:a2:b4:d2:df:54:22:1a:81:b3:9a:a7:35:ce:3f: 3e:d7:19:64:ca:f1:4c:4e:c1:6b:90:a1:2d:d8:0d: 21:74:bd:62:2a:92:7d:a7:10:9d:a4:65:c4:e9:91: c5:c0:71:65:34:82:37:de:98:a0:6f:2f:1b:40:4b: f9:fd:d7:30:e3:3d:73:f7:89:e7:39:45:7f:d4:32: d0:1c:7f:f1:27:e6:ec:a0:b6:7f:5c:24:a7:5c:34: 75:2f:91:1f:1a:50:4d:39:42:33:9c:6c:06:31:b0: b0:15:3d:f6:a6:07:c3:12:c0:65:af:19:fe:12:28: 32:af:11:20:4a:c1:4c:09:e5:ec:9a:a4:78:cd:00: 62:9d:a7:02:ab:8d:52:ca:3b:1e:29:a9:a6:fe:16: 3d:7b:93:7d:2d:6a:f8:17:d6:cd:54:42:db:94:6c: dc:d0:8b:2b:6a:ac:aa:5e:76:f4:91:31:c8:f5:9c: 24:d7:33:95:21:9a:df:6b:fb:27:49:79:d1:26:af: 46:9c:bd:d5:f6:98:03:24:8e:01:47:0c:95:6b:02: e0:1f:e7:17:b2:63:df:05:75:49:ff:9f:29:e4:97: 12:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:19:CF:64:D9:17:4A:C6:30:26:67:5A:22:76:14:1B:6A:1D:AB:1B X509v3 Authority Key Identifier: keyid:6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:8b:98:4c:64:1d:b1:90:e8:00:dc:88:d6:5b:3b:18:42:82: 0c:2c:dd:9f:73:88:4d:be:56:f9:05:c2:41:e9:9b:7b:cc:db: 3f:cd:9f:b7:1c:86:a6:9e:86:4d:12:40:d3:f9:c6:68:35:5e: d1:c4:c8:93:51:8a:5e:85:61:8b:47:92:15:35:c0:c9:e7:4e: 4b:98:54:73:b6:f0:b3:d7:3e:e6:f5:18:9a:72:da:47:9c:54: d1:9d:fe:ab:47:69:5a:1c:16:d1:17:fb:f8:90:a8:a2:c0:42: d7:94:d6:5d:32:5d:2f:96:6c:49:16:9e:11:4e:35:ab:db:f6: 18:1f:83:cf:ff:e1:c8:ff:4a:20:b0:bb:7d:d1:9c:6b:22:48: 84:85:82:b9:4b:08:56:2c:ee:75:77:38:20:1d:c1:d3:11:5f: de:b3:10:a9:cf:7e:a9:c3:c7:6c:78:a9:95:9d:ba:be:d2:c6: 62:72:7f:d9:dd:25:69:d6:1b:45:54:21:c7:22:ad:d5:2f:28: e2:68:3d:25:45:a1:f2:e9:e4:7f:6a:35:7f:16:cf:89:86:b9: 8a:1b:d0:d4:3e:64:f0:fe:03:24:9d:2b:a1:53:50:de:db:3f: 54:94:20:5d:d2:df:64:1e:07:ad:2c:25:1b:81:22:85:45:69: fd:d4:30:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLN30j58ArMqpPZBZAsfUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNTdjNWRmZjcwZWJmZTY3YTQwMGQ1NWYyNTlkYjJjMzcx OTIxOTYwHhcNMjUxMjA2MDEwMDQwWhcNMjUxMjA3MDEwMDQwWjAzMTEwLwYDVQQD EyhjZjE5Y2Y2NGQ5MTc0YWM2MzAyNjY3NWEyMjc2MTQxYjZhMWRhYjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyexCmNVTlNCHl5dueHQtnsxZBwPq YWOV/o6ZahBBorTS31QiGoGzmqc1zj8+1xlkyvFMTsFrkKEt2A0hdL1iKpJ9pxCd pGXE6ZHFwHFlNII33pigby8bQEv5/dcw4z1z94nnOUV/1DLQHH/xJ+bsoLZ/XCSn XDR1L5EfGlBNOUIznGwGMbCwFT32pgfDEsBlrxn+EigyrxEgSsFMCeXsmqR4zQBi nacCq41SyjseKamm/hY9e5N9LWr4F9bNVELblGzc0IsraqyqXnb0kTHI9Zwk1zOV IZrfa/snSXnRJq9GnL3V9pgDJI4BRwyVawLgH+cXsmPfBXVJ/58p5JcSZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8Zz2TZF0rGMCZnWiJ2FBtqHasbMB8GA1UdIwQY MBaAFGtXxd/3Dr/mekANVfJZ2yw3GSGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFmRjNfY092LVo2UUExVjhsbmJMRGNaSVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82YWU1OGMtNzYxOC00MWJhLWEzNDMt YzQ2ZDdiYWMwMmZjLzEvYTFmRjNfY092LVo2UUExVjhsbmJMRGNaSVpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82YWU1OGMtNzYxOC00MWJhLWEzNDMtYzQ2ZDdiYWMwMmZj LzEvYTFmRjNfY092LVo2UUExVjhsbmJMRGNaSVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYuYTGQd sZDoANyI1ls7GEKCDCzdn3OITb5W+QXCQembe8zbP82ftxyGpp6GTRJA0/nGaDVe 0cTIk1GKXoVhi0eSFTXAyedOS5hUc7bws9c+5vUYmnLaR5xU0Z3+q0dpWhwW0Rf7 +JCoosBC15TWXTJdL5ZsSRaeEU41q9v2GB+Dz//hyP9KILC7fdGcayJIhIWCuUsI VizudXc4IB3B0xFf3rMQqc9+qcPHbHiplZ26vtLGYnJ/2d0ladYbRVQhxyKt1S8o 4mg9JUWh8unkf2o1fxbPiYa5ihvQ1D5k8P4DJJ0roVNQ3ts/VJQgXdLfZB4HrSwl G4EihUVp/dQwew== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:05 2025 by rpki-client