This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft File: a1a9UK-T9GN-LAfi7EAya8ZABSc.mft (raw, json) Hash identifier: EzE9gN7rkgsOfZUg6ha3EsQrOTyrAmsksQRqtLEqwM0= Subject key identifier: A3:79:29:DB:D7:8E:49:87:57:F1:79:07:75:1C:AA:93:AD:D8:13:11 Authority key identifier: 6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27 Certificate issuer: /CN=6b56bd50af93f4637e2c07e2ec40326bc6400527 Certificate serial: 019AF465851328ADECEE4595E5DDA8961149 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft Manifest number: 03BF Signing time: Sat 06 Dec 2025 16:01:25 +0000 Manifest this update: Sat 06 Dec 2025 16:01:25 +0000 Manifest next update: Sun 07 Dec 2025 16:01:25 +0000 Files and hashes: 1: a1a9UK-T9GN-LAfi7EAya8ZABSc.crl (hash: VFK1iMPVfilmky5AVmgZ7Jw8akn+np97lVWsA+XY6Ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:85:13:28:ad:ec:ee:45:95:e5:dd:a8:96:11:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b56bd50af93f4637e2c07e2ec40326bc6400527 Validity Not Before: Dec 6 16:01:25 2025 GMT Not After : Dec 7 16:01:25 2025 GMT Subject: CN=a37929dbd78e498757f17907751caa93add81311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:73:07:f9:c1:c0:0e:28:64:d9:e0:58:b0:72: 71:16:60:d6:79:73:a8:d8:4b:97:ea:2b:90:78:1f: 6b:91:a0:01:ce:26:45:cd:6f:b4:8b:16:44:a7:30: 5f:a3:72:7a:f3:88:be:e9:23:7d:a6:6d:61:41:49: 47:8e:16:b9:c3:c1:b2:a5:2b:6d:de:7c:94:c3:5e: 4c:ad:f6:24:95:9f:f9:87:d2:50:27:5b:92:12:9a: 37:7d:68:70:bc:ab:ec:e6:d3:bb:36:72:fe:cd:ba: bb:4a:d7:83:0c:e5:89:47:90:53:1a:37:39:e3:be: b9:c6:97:6d:07:1d:51:af:44:c7:e7:d9:75:1f:6a: e2:92:c0:92:9c:a2:e8:a0:2a:3c:ab:92:a2:f5:46: 68:5e:54:11:3a:48:1c:fc:8e:c9:f6:75:e2:5a:ff: fa:f2:a9:c0:f9:7b:21:ef:66:3f:a4:c5:f8:6c:e5: 0f:fa:cc:0b:8b:8b:64:ba:d8:e2:b8:0a:2f:b3:0f: 69:97:ba:8f:0d:8f:43:59:d4:a2:cc:f4:16:ea:90: f7:44:25:cb:42:b5:33:d5:db:70:d2:ef:0c:71:8d: ef:6a:a8:39:2d:97:82:51:e7:9b:8a:97:6c:c3:5e: 14:90:26:47:cf:42:11:45:fc:9f:04:f6:c3:04:be: 2a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:79:29:DB:D7:8E:49:87:57:F1:79:07:75:1C:AA:93:AD:D8:13:11 X509v3 Authority Key Identifier: keyid:6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a3:ad:0f:d8:48:22:de:b2:82:3e:b0:9c:e0:96:77:cf:66: 8f:1f:62:3d:11:59:69:b5:c1:5c:48:c9:5f:c1:83:92:74:41: 4c:e1:cd:6b:c1:56:39:3e:60:d0:14:5b:1b:56:c1:44:e3:f8: 56:16:89:c1:06:2b:30:dd:01:64:4a:7f:5e:83:28:22:cf:43: c3:d6:26:f6:a4:f1:b3:1b:64:51:c7:68:24:7a:13:59:95:32: f6:3b:dd:cc:2f:cd:f6:b3:20:78:39:38:0d:33:e9:ef:f3:00: 44:67:41:e2:ab:b9:6c:a1:be:b2:ec:3c:8f:b3:f4:f3:e5:18: e6:65:2c:60:fe:f6:51:4d:cd:b8:fe:d6:95:2a:fc:1a:de:8e: 6e:7e:eb:c7:1f:76:24:e4:7c:90:4b:b0:07:f6:1f:88:61:35: 18:61:af:cd:79:a5:2c:70:30:b5:36:eb:09:c2:29:c4:a1:b6: f3:8d:7e:09:f1:d8:55:dd:f0:83:8e:b8:c9:bb:08:89:a8:18: aa:68:c8:71:33:db:d4:63:48:5f:24:30:75:5c:2a:e7:91:10: 43:70:f1:f3:20:34:0f:71:7a:eb:25:eb:af:cd:c1:91:a1:e1: ca:29:25:5e:65:b6:10:7a:08:f4:98:9c:7a:b3:63:60:a0:f6: 91:d4:74:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZYUTKK3s7kWV5d2olhFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNTZiZDUwYWY5M2Y0NjM3ZTJjMDdlMmVjNDAzMjZiYzY0 MDA1MjcwHhcNMjUxMjA2MTYwMTI1WhcNMjUxMjA3MTYwMTI1WjAzMTEwLwYDVQQD EyhhMzc5MjlkYmQ3OGU0OTg3NTdmMTc5MDc3NTFjYWE5M2FkZDgxMzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33MH+cHADihk2eBYsHJxFmDWeXOo 2EuX6iuQeB9rkaABziZFzW+0ixZEpzBfo3J684i+6SN9pm1hQUlHjha5w8GypStt 3nyUw15MrfYklZ/5h9JQJ1uSEpo3fWhwvKvs5tO7NnL+zbq7SteDDOWJR5BTGjc5 4765xpdtBx1Rr0TH59l1H2riksCSnKLooCo8q5Ki9UZoXlQROkgc/I7J9nXiWv/6 8qnA+Xsh72Y/pMX4bOUP+swLi4tkutjiuAovsw9pl7qPDY9DWdSizPQW6pD3RCXL QrUz1dtw0u8McY3vaqg5LZeCUeebipdsw14UkCZHz0IRRfyfBPbDBL4qrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKN5KdvXjkmHV/F5B3UcqpOt2BMRMB8GA1UdIwQY MBaAFGtWvVCvk/RjfiwH4uxAMmvGQAUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFhOVVLLVQ5R04tTEFmaTdFQXlhOFpBQlNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZDM0MjktNDUyNC00ZmNmLTk1OTIt Mjk5NmQ4ZmI2OTdlLzEvYTFhOVVLLVQ5R04tTEFmaTdFQXlhOFpBQlNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mZDM0MjktNDUyNC00ZmNmLTk1OTItMjk5NmQ4ZmI2OTdl LzEvYTFhOVVLLVQ5R04tTEFmaTdFQXlhOFpBQlNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKOtD9hI It6ygj6wnOCWd89mjx9iPRFZabXBXEjJX8GDknRBTOHNa8FWOT5g0BRbG1bBROP4 VhaJwQYrMN0BZEp/XoMoIs9Dw9Ym9qTxsxtkUcdoJHoTWZUy9jvdzC/N9rMgeDk4 DTPp7/MARGdB4qu5bKG+suw8j7P08+UY5mUsYP72UU3NuP7WlSr8Gt6Obn7rxx92 JOR8kEuwB/YfiGE1GGGvzXmlLHAwtTbrCcIpxKG2841+CfHYVd3wg464ybsIiagY qmjIcTPb1GNIXyQwdVwq55EQQ3Dx8yA0D3F66yXrr83BkaHhyiklXmW2EHoI9Jic erNjYKD2kdR0yg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:42:34 2025 by rpki-client