This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json) Hash identifier: wedyrWvs/OMVL0NFDj1ZfYo8N30yhPWQp3BcrFNRjjc= Subject key identifier: E6:47:76:A0:8B:E8:14:26:CC:6B:84:18:07:12:BF:36:65:B2:07:31 Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc Certificate serial: 019B424AA2DFD90AE21C0F95E18B7818E8C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft Manifest number: 046E Signing time: Sun 21 Dec 2025 19:02:26 +0000 Manifest this update: Sun 21 Dec 2025 19:02:26 +0000 Manifest next update: Mon 22 Dec 2025 19:02:26 +0000 Files and hashes: 1: 9EiTee9k8nFjET11hPatStF9nkM.roa (hash: rKaveA0rfCcy5/zhxw6q4cAzgO9tcO/IcjE7cyeyoGI=) 2: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: VxOBwzKIEx2C3mtNMiVljRCDRtsQqRKUx4rSY9gFrPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:a2:df:d9:0a:e2:1c:0f:95:e1:8b:78:18:e8:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc Validity Not Before: Dec 21 19:02:26 2025 GMT Not After : Dec 22 19:02:26 2025 GMT Subject: CN=e64776a08be81426cc6b84180712bf3665b20731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:1a:dc:20:83:7e:08:af:17:1d:15:ab:1c: 6a:02:1a:13:48:28:73:2e:f0:4b:1b:87:76:71:39: 6f:54:be:b5:9d:3e:86:f9:76:b6:cb:08:93:9e:b2: 59:95:e3:18:73:6b:d5:c2:6a:0d:d4:59:3f:ef:78: 1d:72:93:67:9f:66:b6:0c:62:d9:a0:2b:17:70:58: 39:83:b1:84:ac:70:ef:35:21:9b:2e:4f:c8:f8:e3: d9:c3:d9:85:f4:3e:1e:aa:b8:f3:32:3c:3e:75:bc: df:90:00:19:21:d7:79:99:f2:f0:5b:9e:3c:92:3b: 68:b6:06:86:6e:d0:24:82:1b:12:79:a6:4f:75:af: 92:c6:dc:76:0a:20:6e:80:ac:7e:80:bb:68:f4:82: 9e:52:45:aa:6a:93:25:54:92:41:46:65:61:33:0f: 27:05:0d:10:81:11:23:58:8c:b8:ae:ca:05:3a:26: dc:7f:3e:11:00:1c:6e:25:c1:38:be:33:e5:ff:6a: e1:79:0b:a5:52:9c:71:8e:5b:4b:ae:f6:ff:9e:c4: 9b:6d:3c:ac:fa:b4:b9:c8:c0:5e:c0:63:6f:30:a3: f4:bc:a8:52:ad:8d:07:3b:94:ad:5d:09:eb:57:1c: d9:4e:bf:ff:5c:3d:88:ac:21:d0:42:04:66:59:86: 3b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:47:76:A0:8B:E8:14:26:CC:6B:84:18:07:12:BF:36:65:B2:07:31 X509v3 Authority Key Identifier: keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:88:de:d9:ff:c8:58:a4:fc:c2:00:3f:e1:50:73:8d:1d:1c: 03:21:49:2b:c7:2c:34:4c:18:03:13:c4:9e:5e:ce:81:43:a3: 58:e8:4a:2a:14:c8:c1:4e:47:8b:92:7c:f9:34:5e:81:bc:41: 4b:5c:cd:10:36:c7:54:0f:1e:1f:62:6b:69:11:3e:84:09:b2: 1f:8a:15:3e:cd:b0:a8:72:60:92:2a:80:67:58:15:61:57:1c: a6:ef:d3:23:da:74:55:3a:22:33:d9:5c:4d:5b:84:8d:d2:eb: 2f:47:77:b5:54:18:55:ef:af:33:37:93:f9:08:11:e6:8b:bb: 43:38:3e:36:b5:8e:91:db:20:c5:6c:eb:bd:c8:58:7d:cb:56: 3a:e7:15:74:bc:02:05:90:3d:f4:d7:5f:4c:b4:e4:a0:d0:f2: 2c:1e:c8:7f:3a:b1:9b:3c:6c:42:5a:49:c0:4c:a8:3c:17:e8: 8f:b2:1c:60:a3:6e:90:c8:56:db:4d:12:4a:e1:3e:d2:3d:4c: e9:2a:19:f6:f8:36:6f:2d:df:9d:c3:d5:fd:08:1c:10:16:07: 36:59:52:19:49:a2:03:50:80:9e:8f:90:4c:b5:1f:65:5c:8a: 61:2c:c4:24:1a:54:8a:71:9f:fc:79:74:6e:cf:f8:0b:0d:d4: b7:02:66:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSqLf2QriHA+V4Yt4GOjGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZDZhOGE2MzlmODhhYWYxZjQzNmQ2YTIwYjQxNzdiMzhk MzkwZmMwHhcNMjUxMjIxMTkwMjI2WhcNMjUxMjIyMTkwMjI2WjAzMTEwLwYDVQQD EyhlNjQ3NzZhMDhiZTgxNDI2Y2M2Yjg0MTgwNzEyYmYzNjY1YjIwNzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Ea3CCDfgivFx0VqxxqAhoTSChz LvBLG4d2cTlvVL61nT6G+Xa2ywiTnrJZleMYc2vVwmoN1Fk/73gdcpNnn2a2DGLZ oCsXcFg5g7GErHDvNSGbLk/I+OPZw9mF9D4eqrjzMjw+dbzfkAAZIdd5mfLwW548 kjtotgaGbtAkghsSeaZPda+Sxtx2CiBugKx+gLto9IKeUkWqapMlVJJBRmVhMw8n BQ0QgREjWIy4rsoFOibcfz4RABxuJcE4vjPl/2rheQulUpxxjltLrvb/nsSbbTys +rS5yMBewGNvMKP0vKhSrY0HO5StXQnrVxzZTr//XD2IrCHQQgRmWYY7DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZHdqCL6BQmzGuEGAcSvzZlsgcxMB8GA1UdIwQY MBaAFAPWqKY5+IqvH0NtaiC0F3s405D8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQt YzIwZGU1NDNjMGRmLzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQtYzIwZGU1NDNjMGRm LzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYje2f/I WKT8wgA/4VBzjR0cAyFJK8csNEwYAxPEnl7OgUOjWOhKKhTIwU5Hi5J8+TRegbxB S1zNEDbHVA8eH2JraRE+hAmyH4oVPs2wqHJgkiqAZ1gVYVccpu/TI9p0VToiM9lc TVuEjdLrL0d3tVQYVe+vMzeT+QgR5ou7Qzg+NrWOkdsgxWzrvchYfctWOucVdLwC BZA99NdfTLTkoNDyLB7IfzqxmzxsQlpJwEyoPBfoj7IcYKNukMhW200SSuE+0j1M 6SoZ9vg2by3fncPV/QgcEBYHNllSGUmiA1CAno+QTLUfZVyKYSzEJBpUinGf/Hl0 bs/4Cw3UtwJmRA== -----END CERTIFICATE-----Generated at Sun Dec 21 23:13:04 2025 by rpki-client