This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft File: a3tKBUpyGg_aYBKQfMW1boEgpz4.mft (raw, json) Hash identifier: 1IuNQfBDOtMZyK46eI6gn8Q5G0lgzBW//VoMm985nI8= Subject key identifier: A0:A3:43:B4:13:CB:28:27:70:02:D4:F3:C0:78:4F:F8:E6:83:51:69 Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e Certificate serial: 019B52CEB844155001F2F6448BB706F5E808 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft Manifest number: 1790 Signing time: Thu 25 Dec 2025 00:00:37 +0000 Manifest this update: Thu 25 Dec 2025 00:00:37 +0000 Manifest next update: Fri 26 Dec 2025 00:00:37 +0000 Files and hashes: 1: 1TUcoIEXF4J_9vqfLzDcXvX8LV0.roa (hash: eIRoaJMdc/l4AU70hG0PC/LPtYaLw4xgou2xPhRFPhE=) 2: a3tKBUpyGg_aYBKQfMW1boEgpz4.crl (hash: gg5QlxBLPwH03uC6ACH94r/39cR/u9Gp+WgJni6y164=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:b8:44:15:50:01:f2:f6:44:8b:b7:06:f5:e8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e Validity Not Before: Dec 25 00:00:37 2025 GMT Not After : Dec 26 00:00:37 2025 GMT Subject: CN=a0a343b413cb28277002d4f3c0784ff8e6835169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e8:c8:64:89:49:a1:fe:79:cc:49:e7:f6:75: 0a:ec:ba:08:c7:78:58:45:5d:b6:8a:51:80:de:68: a4:3b:91:b1:10:e3:6d:b6:62:cf:cd:f0:84:59:82: 83:ca:2e:3e:7d:22:ff:23:31:0e:80:ce:e1:c8:44: b9:4a:95:90:d5:79:5e:90:20:43:bf:51:3e:bd:83: 4f:ec:09:6f:1c:39:17:e0:70:fc:cd:90:d2:6e:e4: 55:33:4c:14:aa:04:1d:97:92:5f:21:78:a0:14:48: ba:0d:f2:d6:57:50:9e:b2:4b:9f:b8:ae:9d:f0:6d: 1b:d7:9d:60:8e:d4:eb:ae:bb:4a:c7:8d:3b:e6:53: e6:b0:34:30:a8:31:86:12:a3:92:d5:69:aa:eb:ab: 39:14:23:e7:ae:9b:14:2a:da:42:fa:03:d6:4f:1f: fa:63:c2:b7:f2:7a:1e:82:60:f6:01:6a:69:2e:f5: 03:11:85:42:78:0d:00:74:8e:cd:72:97:bd:9e:dd: 79:c9:f1:1d:89:ca:eb:36:33:cf:10:7d:d7:10:4a: 86:31:d8:f1:21:70:8b:6f:36:d1:74:cf:47:b0:a5: 68:9b:49:3a:df:02:3a:fb:1f:4c:ba:1e:b8:9e:3d: 90:9c:7b:67:56:11:03:2e:3a:c3:13:a6:3e:5b:eb: 00:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A3:43:B4:13:CB:28:27:70:02:D4:F3:C0:78:4F:F8:E6:83:51:69 X509v3 Authority Key Identifier: keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:32:82:0c:83:c6:31:a5:3a:46:1c:36:ab:2c:49:cd:51:ab: 07:bd:1b:9b:cb:b3:d1:75:39:bd:0d:e5:3f:b6:26:42:bd:8b: f1:ba:d6:8b:ec:91:bb:ed:65:02:de:65:5e:82:80:06:6c:cf: 2b:c7:5f:2e:20:fa:73:ba:01:b0:86:1c:0d:c2:14:a9:46:24: 3f:f3:20:a8:7e:dd:73:fd:50:a4:33:08:44:b3:4a:2e:6d:53: d9:90:0a:94:84:c7:c3:ba:31:29:b7:18:bf:7d:1a:ac:75:b9: 8f:38:2f:68:3c:cd:37:12:2c:bb:06:72:dd:fc:c1:a6:2f:fa: 9f:4b:dc:69:71:3d:c9:cc:de:8b:5f:df:ea:9b:e5:ea:ce:3b: ac:77:e4:19:d4:9f:66:2d:71:3a:79:c3:10:e1:e3:90:51:8a: 98:ab:cd:9b:30:2a:51:bd:28:4b:2a:2b:cf:a4:df:7b:f2:c0: b6:f2:b1:bb:5c:47:0f:af:ed:74:85:4e:d1:1a:bf:41:2f:27: af:a6:da:27:0d:d1:1d:37:ec:ce:d7:8b:1a:8c:fa:75:0a:2d: 80:be:ce:27:e9:28:3f:f1:7f:8c:d2:e6:28:33:5c:a5:a8:67: ea:08:2d:a0:45:6b:20:49:d6:57:49:ca:c1:56:91:70:5b:83: ff:5c:c3:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzrhEFVAB8vZEi7cG9egIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2I0YTA1NGE3MjFhMGZkYTYwMTI5MDdjYzViNTZlODEy MGE3M2UwHhcNMjUxMjI1MDAwMDM3WhcNMjUxMjI2MDAwMDM3WjAzMTEwLwYDVQQD EyhhMGEzNDNiNDEzY2IyODI3NzAwMmQ0ZjNjMDc4NGZmOGU2ODM1MTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOjIZIlJof55zEnn9nUK7LoIx3hY RV22ilGA3mikO5GxEONttmLPzfCEWYKDyi4+fSL/IzEOgM7hyES5SpWQ1XlekCBD v1E+vYNP7AlvHDkX4HD8zZDSbuRVM0wUqgQdl5JfIXigFEi6DfLWV1CeskufuK6d 8G0b151gjtTrrrtKx4075lPmsDQwqDGGEqOS1Wmq66s5FCPnrpsUKtpC+gPWTx/6 Y8K38noegmD2AWppLvUDEYVCeA0AdI7Ncpe9nt15yfEdicrrNjPPEH3XEEqGMdjx IXCLbzbRdM9HsKVom0k63wI6+x9Muh64nj2QnHtnVhEDLjrDE6Y+W+sAnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCjQ7QTyygncALU88B4T/jmg1FpMB8GA1UdIwQY MBaAFGt7SgVKchoP2mASkHzFtW6BIKc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTN0S0JVcHlHZ19hWUJLUWZNVzFib0VncHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YWJlMWQtMzAzNi00MmI4LWJlMzYt ZTc5OWVmNTRmMGM0LzEvYTN0S0JVcHlHZ19hWUJLUWZNVzFib0VncHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80YWJlMWQtMzAzNi00MmI4LWJlMzYtZTc5OWVmNTRmMGM0 LzEvYTN0S0JVcHlHZ19hWUJLUWZNVzFib0VncHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDKCDIPG MaU6Rhw2qyxJzVGrB70bm8uz0XU5vQ3lP7YmQr2L8brWi+yRu+1lAt5lXoKABmzP K8dfLiD6c7oBsIYcDcIUqUYkP/MgqH7dc/1QpDMIRLNKLm1T2ZAKlITHw7oxKbcY v30arHW5jzgvaDzNNxIsuwZy3fzBpi/6n0vcaXE9yczei1/f6pvl6s47rHfkGdSf Zi1xOnnDEOHjkFGKmKvNmzAqUb0oSyorz6Tfe/LAtvKxu1xHD6/tdIVO0Rq/QS8n r6baJw3RHTfszteLGoz6dQotgL7OJ+koP/F/jNLmKDNcpahn6ggtoEVrIEnWV0nK wVaRcFuD/1zDwg== -----END CERTIFICATE-----Generated at Thu Dec 25 06:56:07 2025 by rpki-client