This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft File: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft (raw, json) Hash identifier: dnMuondKbD+2tEYJZKbuflbGCQWD9IRSLtt5fVlB6AA= Subject key identifier: 47:E9:58:5B:12:7B:57:21:71:6B:69:B1:0F:62:3C:9D:75:60:28:E9 Authority key identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96 Certificate issuer: /CN=6b57c5dff70ebfe67a400d55f259db2c37192196 Certificate serial: 019B30E79334DCE1AF85229C09F175405D60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft Manifest number: 0542 Signing time: Thu 18 Dec 2025 10:00:41 +0000 Manifest this update: Thu 18 Dec 2025 10:00:41 +0000 Manifest next update: Fri 19 Dec 2025 10:00:41 +0000 Files and hashes: 1: DXY1aPZOR4ljjfKNnTzK-ui2GtQ.roa (hash: HmRJXl6KdbWQ5yFSi3ORZiwzeQcQdEBbSpqG5+7FJoc=) 2: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl (hash: QDEsmLysD0BFa94X8JHyHY5KW2D1QxYJg6mVZlj+m2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e7:93:34:dc:e1:af:85:22:9c:09:f1:75:40:5d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b57c5dff70ebfe67a400d55f259db2c37192196 Validity Not Before: Dec 18 10:00:41 2025 GMT Not After : Dec 19 10:00:41 2025 GMT Subject: CN=47e9585b127b5721716b69b10f623c9d756028e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:32:e8:f7:7a:ea:ab:fa:4f:bb:f4:8e:1e:67: 26:f0:51:a3:5e:e3:95:ad:33:ed:10:cc:97:46:c2: 1a:07:a1:e3:3c:2b:e2:7c:4d:11:f6:96:18:75:1e: c3:c3:64:b7:42:62:e4:64:a0:c6:55:ef:2e:26:06: 8d:ee:1b:c6:1d:a1:89:db:14:c9:89:fc:69:d7:ef: e8:3d:da:e7:20:9e:db:72:70:c8:6b:3f:4b:e5:5e: 6b:fc:aa:7e:e0:03:a7:9f:2d:43:ab:12:2f:5b:fe: 68:52:cb:c5:5d:05:21:1e:f0:45:ca:36:77:0c:33: da:12:20:fc:59:ac:4f:3a:4c:28:8a:3e:2b:b2:42: ce:e0:26:bc:24:96:12:f5:74:a9:ca:c9:fa:1b:a3: a3:29:8b:51:90:46:0b:5a:dd:76:16:e8:31:ec:c6: 48:58:5e:df:12:fc:1b:17:1f:df:83:4c:42:46:20: 55:97:61:b6:e4:a0:8d:72:fd:eb:d5:89:44:05:57: e5:00:e0:b6:c4:46:f6:74:a4:13:ad:b9:b3:f2:e1: b9:21:85:78:8e:df:f5:ee:05:0f:92:a2:8d:94:d5: 46:12:f0:a7:e1:db:ff:6a:9a:80:b5:c4:8a:60:64: d9:07:de:ca:89:0c:6d:45:a7:b4:b5:2f:82:5c:fd: 3d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E9:58:5B:12:7B:57:21:71:6B:69:B1:0F:62:3C:9D:75:60:28:E9 X509v3 Authority Key Identifier: keyid:6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:fb:17:1d:ce:25:94:76:a8:2e:b7:3c:e8:b0:c6:73:21:b8: 04:d8:3f:ea:aa:21:b7:e3:ec:2f:97:90:94:18:95:e9:38:7d: c9:63:37:67:44:a1:31:ce:62:15:8a:5c:a1:3c:76:ad:ab:c9: 6d:bd:2f:cf:3e:0d:ef:1f:8a:ec:bb:35:1c:9b:0c:06:70:dd: 1f:44:d2:17:00:e7:16:4d:3d:86:85:01:21:94:d9:b8:bb:07: 12:35:5b:15:86:d8:61:91:cb:03:a3:42:fb:17:16:61:2b:a0: 82:40:dd:74:4a:25:a6:2f:1d:5c:b0:69:ad:5d:ab:9e:60:33: 2a:9f:ed:49:a7:7c:ee:d2:83:40:c8:1a:27:e2:82:ec:33:17: 3c:3b:95:2a:dd:bb:00:e7:39:fa:df:d0:9a:c1:ca:fc:56:ae: 39:5b:67:1e:5c:a4:d8:d1:31:59:8c:e4:9c:4b:73:7f:c8:4a: f1:f7:8f:c5:98:28:f7:8f:c0:45:46:6e:6b:1b:16:c4:9a:11: 02:43:7c:de:53:a3:61:73:d6:cf:89:9f:95:c0:d9:5c:95:73: 86:9e:c9:67:8a:79:7a:b4:b7:f9:fb:68:de:4c:17:58:e3:a3: 0e:d5:c6:fa:bd:a0:f3:90:52:0d:d0:91:72:de:bb:64:9d:06: 46:45:93:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw55M03OGvhSKcCfF1QF1gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNTdjNWRmZjcwZWJmZTY3YTQwMGQ1NWYyNTlkYjJjMzcx OTIxOTYwHhcNMjUxMjE4MTAwMDQxWhcNMjUxMjE5MTAwMDQxWjAzMTEwLwYDVQQD Eyg0N2U5NTg1YjEyN2I1NzIxNzE2YjY5YjEwZjYyM2M5ZDc1NjAyOGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjLo93rqq/pPu/SOHmcm8FGjXuOV rTPtEMyXRsIaB6HjPCvifE0R9pYYdR7Dw2S3QmLkZKDGVe8uJgaN7hvGHaGJ2xTJ ifxp1+/oPdrnIJ7bcnDIaz9L5V5r/Kp+4AOnny1DqxIvW/5oUsvFXQUhHvBFyjZ3 DDPaEiD8WaxPOkwoij4rskLO4Ca8JJYS9XSpysn6G6OjKYtRkEYLWt12Fugx7MZI WF7fEvwbFx/fg0xCRiBVl2G25KCNcv3r1YlEBVflAOC2xEb2dKQTrbmz8uG5IYV4 jt/17gUPkqKNlNVGEvCn4dv/apqAtcSKYGTZB97KiQxtRae0tS+CXP09YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfpWFsSe1chcWtpsQ9iPJ11YCjpMB8GA1UdIwQY MBaAFGtXxd/3Dr/mekANVfJZ2yw3GSGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFmRjNfY092LVo2UUExVjhsbmJMRGNaSVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82YWU1OGMtNzYxOC00MWJhLWEzNDMt YzQ2ZDdiYWMwMmZjLzEvYTFmRjNfY092LVo2UUExVjhsbmJMRGNaSVpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82YWU1OGMtNzYxOC00MWJhLWEzNDMtYzQ2ZDdiYWMwMmZj LzEvYTFmRjNfY092LVo2UUExVjhsbmJMRGNaSVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0/sXHc4l lHaoLrc86LDGcyG4BNg/6qoht+PsL5eQlBiV6Th9yWM3Z0ShMc5iFYpcoTx2ravJ bb0vzz4N7x+K7Ls1HJsMBnDdH0TSFwDnFk09hoUBIZTZuLsHEjVbFYbYYZHLA6NC +xcWYSuggkDddEolpi8dXLBprV2rnmAzKp/tSad87tKDQMgaJ+KC7DMXPDuVKt27 AOc5+t/QmsHK/FauOVtnHlyk2NExWYzknEtzf8hK8fePxZgo94/ARUZuaxsWxJoR AkN83lOjYXPWz4mflcDZXJVzhp7JZ4p5erS3+fto3kwXWOOjDtXG+r2g85BSDdCR ct67ZJ0GRkWTKw== -----END CERTIFICATE-----Generated at Thu Dec 18 19:11:01 2025 by rpki-client