This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft File: A5D0YbjFGyArIQDfLMQzD2kiGME.mft (raw, json) Hash identifier: 1hJA2JE3dS1JbUwWEeHShsljiTqi4AxvvM/hGfuYZCU= Subject key identifier: 5B:4E:20:FF:D3:6C:D2:8B:7A:A3:A5:A4:6F:9D:DA:F0:07:A2:F1:B1 Authority key identifier: 03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1 Certificate issuer: /CN=0390f461b8c51b202b2100df2cc4330f692218c1 Certificate serial: 019B24ACECFBD0E4A50989EE1466D6070891 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft Manifest number: 1709 Signing time: Tue 16 Dec 2025 01:01:11 +0000 Manifest this update: Tue 16 Dec 2025 01:01:11 +0000 Manifest next update: Wed 17 Dec 2025 01:01:11 +0000 Files and hashes: 1: A5D0YbjFGyArIQDfLMQzD2kiGME.crl (hash: mfRPnIqK2X1bVgwNuMQHCkrvWVGmtlzjuFnW/2TmzFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:ec:fb:d0:e4:a5:09:89:ee:14:66:d6:07:08:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0390f461b8c51b202b2100df2cc4330f692218c1 Validity Not Before: Dec 16 01:01:11 2025 GMT Not After : Dec 17 01:01:11 2025 GMT Subject: CN=5b4e20ffd36cd28b7aa3a5a46f9ddaf007a2f1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:65:27:4b:1c:4e:8b:c6:f0:43:06:ef:51:e1: f6:1b:ed:cc:32:a7:fc:df:09:8e:33:7d:9b:64:a3: 7d:8e:f4:f7:40:99:1d:da:7e:7a:58:31:92:96:1b: 66:1a:ae:f3:67:1d:e1:6b:f4:6e:a9:fd:7f:45:a1: c3:0e:a1:77:90:b5:dd:47:fa:41:f7:65:01:bd:d0: 17:65:b1:44:97:9c:1f:97:0a:82:16:34:d1:9a:95: 92:ed:ed:d2:2a:25:fd:0c:31:04:6a:9f:59:a0:f6: ac:a9:92:9b:4d:66:67:15:24:26:7c:c7:fe:d4:1d: 17:d1:d6:ec:71:3a:3b:9d:7f:30:f5:63:45:99:bb: 19:6a:1e:c7:ca:e3:d8:d1:92:eb:57:ae:87:ee:67: fd:e2:b3:af:fa:21:66:51:d7:de:f6:49:08:57:a7: eb:b7:7a:53:5f:6e:6f:6b:2e:8f:26:65:22:eb:14: df:50:6b:21:d6:b5:ef:76:19:da:29:0a:31:a2:4c: c4:3d:d8:64:0d:fc:1d:72:ed:99:e7:e7:bf:e0:4c: f7:5e:ec:58:7b:3d:14:de:f1:c9:79:da:83:ad:38: a8:9d:92:73:a6:3f:98:c1:93:68:e1:fd:c2:e2:84: 41:76:21:a6:0a:89:82:fe:d7:41:40:31:91:db:50: e0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4E:20:FF:D3:6C:D2:8B:7A:A3:A5:A4:6F:9D:DA:F0:07:A2:F1:B1 X509v3 Authority Key Identifier: keyid:03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:07:5c:06:b6:2d:fb:25:00:64:81:e3:98:31:ab:c0:2e:c5: f9:0c:f1:7b:d6:be:fb:1b:a3:f3:cf:de:61:ed:41:1f:bf:97: a8:6d:25:a0:10:91:d2:ca:0d:4b:83:16:a2:62:22:98:b3:a2: e2:7f:0f:52:82:0a:da:c6:23:9d:a2:27:38:7a:9e:c5:aa:3b: 35:3b:a8:7f:3a:0e:60:f6:f7:21:ff:34:35:ec:3f:38:6b:fc: 46:cd:2f:43:4e:92:cc:a2:7d:7e:02:78:91:a7:f4:a6:e7:c0: 23:4c:92:4a:a7:78:80:09:ca:04:72:29:b0:22:76:15:c6:5c: a5:fe:85:09:ac:be:a0:f7:e7:f6:fe:c3:54:2f:ca:3b:6a:87: d6:11:5e:91:d3:7c:2c:df:91:34:a8:b5:6b:a0:a5:cc:87:36: 54:c9:b5:ab:cd:f6:58:8a:9e:55:ed:20:ae:42:d1:01:fd:be: 97:e3:47:d8:e7:58:2b:3e:c8:bc:c2:fa:33:b5:c3:0e:89:dc: 3a:39:93:c7:e7:26:3b:53:55:8f:98:08:55:5a:a1:77:20:29: d4:bc:25:0f:e2:8d:ef:17:c3:4f:1c:d9:56:be:f5:6e:ad:c5: 0d:3a:72:1e:f8:5b:27:08:6f:7f:83:c1:a4:af:b9:2c:e5:ea: 45:08:fa:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrOz70OSlCYnuFGbWBwiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOTBmNDYxYjhjNTFiMjAyYjIxMDBkZjJjYzQzMzBmNjky MjE4YzEwHhcNMjUxMjE2MDEwMTExWhcNMjUxMjE3MDEwMTExWjAzMTEwLwYDVQQD Eyg1YjRlMjBmZmQzNmNkMjhiN2FhM2E1YTQ2ZjlkZGFmMDA3YTJmMWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGUnSxxOi8bwQwbvUeH2G+3MMqf8 3wmOM32bZKN9jvT3QJkd2n56WDGSlhtmGq7zZx3ha/Ruqf1/RaHDDqF3kLXdR/pB 92UBvdAXZbFEl5wflwqCFjTRmpWS7e3SKiX9DDEEap9ZoPasqZKbTWZnFSQmfMf+ 1B0X0dbscTo7nX8w9WNFmbsZah7HyuPY0ZLrV66H7mf94rOv+iFmUdfe9kkIV6fr t3pTX25vay6PJmUi6xTfUGsh1rXvdhnaKQoxokzEPdhkDfwdcu2Z5+e/4Ez3XuxY ez0U3vHJedqDrTionZJzpj+YwZNo4f3C4oRBdiGmComC/tdBQDGR21DgQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtOIP/TbNKLeqOlpG+d2vAHovGxMB8GA1UdIwQY MBaAFAOQ9GG4xRsgKyEA3yzEMw9pIhjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mNzJhNmMtZGEyNy00MmM3LTk0ODMt ZDAwMTdmY2Q0MmYxLzEvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9mNzJhNmMtZGEyNy00MmM3LTk0ODMtZDAwMTdmY2Q0MmYx LzEvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwdcBrYt +yUAZIHjmDGrwC7F+Qzxe9a++xuj88/eYe1BH7+XqG0loBCR0soNS4MWomIimLOi 4n8PUoIK2sYjnaInOHqexao7NTuofzoOYPb3If80New/OGv8Rs0vQ06SzKJ9fgJ4 kaf0pufAI0ySSqd4gAnKBHIpsCJ2FcZcpf6FCay+oPfn9v7DVC/KO2qH1hFekdN8 LN+RNKi1a6ClzIc2VMm1q832WIqeVe0grkLRAf2+l+NH2OdYKz7IvML6M7XDDonc OjmTx+cmO1NVj5gIVVqhdyAp1LwlD+KN7xfDTxzZVr71bq3FDTpyHvhbJwhvf4PB pK+5LOXqRQj6aw== -----END CERTIFICATE-----Generated at Tue Dec 16 07:00:43 2025 by rpki-client