This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft File: A5D0YbjFGyArIQDfLMQzD2kiGME.mft (raw, json) Hash identifier: EyFa13OHJJmB3flIiOy563u1rH2P1o7Vo8SrQI1geiM= Subject key identifier: 75:6B:AC:51:E9:FF:E7:D4:D3:C7:18:30:D2:A3:B9:DD:D7:46:08:8D Authority key identifier: 03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1 Certificate issuer: /CN=0390f461b8c51b202b2100df2cc4330f692218c1 Certificate serial: 019AF276B00B9C8033B0EF398670A7F82AB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft Manifest number: 16EF Signing time: Sat 06 Dec 2025 07:00:55 +0000 Manifest this update: Sat 06 Dec 2025 07:00:55 +0000 Manifest next update: Sun 07 Dec 2025 07:00:55 +0000 Files and hashes: 1: A5D0YbjFGyArIQDfLMQzD2kiGME.crl (hash: PuTik1FtvZylgZ+pIuxKDO8op2xXM8dPFWcHUG3YkEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b0:0b:9c:80:33:b0:ef:39:86:70:a7:f8:2a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0390f461b8c51b202b2100df2cc4330f692218c1 Validity Not Before: Dec 6 07:00:55 2025 GMT Not After : Dec 7 07:00:55 2025 GMT Subject: CN=756bac51e9ffe7d4d3c71830d2a3b9ddd746088d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3b:f9:00:a8:4e:fa:88:07:eb:5f:48:f7:af: c9:f1:9b:6c:66:ce:cb:22:46:ae:2a:bc:3e:26:38: 14:ed:45:8c:78:30:1d:66:df:38:55:15:68:bc:83: aa:21:72:0b:d5:1f:ce:04:9e:1a:58:11:98:39:8a: 9a:5c:3d:b4:c9:e0:34:30:88:87:50:89:28:06:31: e9:96:2c:e7:6f:b5:3a:57:21:d2:8f:0d:5f:11:d9: 2e:b8:d3:0e:ad:df:6d:84:43:09:2c:0e:fa:f2:d0: 37:8f:c4:b1:39:a8:e7:1f:d1:8b:88:b5:c8:eb:98: 44:99:4d:de:31:4c:44:db:82:57:ca:08:ce:67:29: 61:ed:12:1a:68:3f:7b:70:4d:f5:c5:0e:10:2c:71: c2:59:1b:6e:8d:2f:e4:a1:e6:b2:f1:f7:54:96:ec: 55:ad:44:2e:b2:65:ed:ad:8d:53:6a:ae:80:bc:25: 7d:6e:c4:8d:c5:4d:49:f7:cd:0c:93:8f:1b:51:5c: 2c:f0:30:2c:b2:ff:2a:08:f5:99:9e:30:19:4e:aa: 04:5d:d9:e8:f8:e5:9c:83:56:87:64:5a:39:c0:46: ed:e2:61:2e:13:9e:8f:7f:0f:dc:ad:3a:bc:d3:e4: 1a:57:fa:80:b7:7b:7f:c9:d9:7c:fb:f4:7d:d2:84: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6B:AC:51:E9:FF:E7:D4:D3:C7:18:30:D2:A3:B9:DD:D7:46:08:8D X509v3 Authority Key Identifier: keyid:03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:8c:1a:e3:fd:e3:1f:92:9c:49:e5:31:82:f7:54:6a:ad:60: d9:24:2b:1d:99:59:05:13:f1:6d:82:5b:3b:1e:06:98:96:e0: 05:8d:2f:a2:62:36:e5:31:bc:5b:3a:3c:54:c7:4f:a4:ff:5d: 36:37:46:d1:50:4a:4b:a8:74:df:82:0d:7d:d3:04:54:41:9c: 80:63:7b:80:54:fa:85:0b:1e:5e:7e:c9:8a:f4:97:2e:72:d3: 3f:66:88:f2:98:a0:5a:34:8c:7a:ea:fd:cc:fe:19:be:cf:1f: 5b:42:ad:8a:94:72:21:21:42:5e:4d:f3:9b:74:9f:cc:e1:23: 87:ce:ce:1b:cd:0d:e5:40:e6:69:e4:1e:49:bd:4e:48:98:18: 97:12:69:55:9f:d2:8d:a2:76:76:20:7e:08:ef:8b:b3:79:f7: 57:78:f1:78:e6:cd:a6:da:4b:a4:2e:8d:69:64:da:bd:34:3f: 5f:78:af:70:16:37:0d:bb:a6:38:d2:0a:85:e9:04:c9:ec:33: 09:1a:1a:52:46:d7:8d:d4:9f:eb:de:11:7b:6f:d2:f7:53:8a: a8:94:15:5f:07:60:27:0c:0b:de:5e:35:9d:68:45:71:3a:52: 0a:47:83:99:96:63:2b:85:e7:e9:d0:f5:a1:97:53:ae:0a:00: d1:9c:25:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrALnIAzsO85hnCn+Cq5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOTBmNDYxYjhjNTFiMjAyYjIxMDBkZjJjYzQzMzBmNjky MjE4YzEwHhcNMjUxMjA2MDcwMDU1WhcNMjUxMjA3MDcwMDU1WjAzMTEwLwYDVQQD Eyg3NTZiYWM1MWU5ZmZlN2Q0ZDNjNzE4MzBkMmEzYjlkZGQ3NDYwODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Dv5AKhO+ogH619I96/J8ZtsZs7L IkauKrw+JjgU7UWMeDAdZt84VRVovIOqIXIL1R/OBJ4aWBGYOYqaXD20yeA0MIiH UIkoBjHpliznb7U6VyHSjw1fEdkuuNMOrd9thEMJLA768tA3j8SxOajnH9GLiLXI 65hEmU3eMUxE24JXygjOZylh7RIaaD97cE31xQ4QLHHCWRtujS/koeay8fdUluxV rUQusmXtrY1Taq6AvCV9bsSNxU1J980Mk48bUVws8DAssv8qCPWZnjAZTqoEXdno +OWcg1aHZFo5wEbt4mEuE56Pfw/crTq80+QaV/qAt3t/ydl8+/R90oTPgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVrrFHp/+fU08cYMNKjud3XRgiNMB8GA1UdIwQY MBaAFAOQ9GG4xRsgKyEA3yzEMw9pIhjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mNzJhNmMtZGEyNy00MmM3LTk0ODMt ZDAwMTdmY2Q0MmYxLzEvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9mNzJhNmMtZGEyNy00MmM3LTk0ODMtZDAwMTdmY2Q0MmYx LzEvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYwa4/3j H5KcSeUxgvdUaq1g2SQrHZlZBRPxbYJbOx4GmJbgBY0vomI25TG8Wzo8VMdPpP9d NjdG0VBKS6h034INfdMEVEGcgGN7gFT6hQseXn7JivSXLnLTP2aI8pigWjSMeur9 zP4Zvs8fW0KtipRyISFCXk3zm3SfzOEjh87OG80N5UDmaeQeSb1OSJgYlxJpVZ/S jaJ2diB+CO+Ls3n3V3jxeObNptpLpC6NaWTavTQ/X3ivcBY3DbumONIKhekEyewz CRoaUkbXjdSf694Re2/S91OKqJQVXwdgJwwL3l41nWhFcTpSCkeDmZZjK4Xn6dD1 oZdTrgoA0ZwljQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:37 2025 by rpki-client