This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json) Hash identifier: Ub1xTrPZZHM3vXax8fAUuWzkr0u4s9e4RTGxSn00Wao= Subject key identifier: 3E:E1:6F:85:27:84:74:C9:65:47:1B:93:9A:26:06:E9:DB:8B:C2:9E Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc Certificate serial: 019B3E6DCF514141E28F78C5AD9646FA1DD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft Manifest number: 046C Signing time: Sun 21 Dec 2025 01:02:22 +0000 Manifest this update: Sun 21 Dec 2025 01:02:22 +0000 Manifest next update: Mon 22 Dec 2025 01:02:22 +0000 Files and hashes: 1: 9EiTee9k8nFjET11hPatStF9nkM.roa (hash: rKaveA0rfCcy5/zhxw6q4cAzgO9tcO/IcjE7cyeyoGI=) 2: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: HnqqIHV8bm3sGra+tKqAZey9Sg5xNTXg1skrpXyF8yI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:cf:51:41:41:e2:8f:78:c5:ad:96:46:fa:1d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc Validity Not Before: Dec 21 01:02:22 2025 GMT Not After : Dec 22 01:02:22 2025 GMT Subject: CN=3ee16f85278474c965471b939a2606e9db8bc29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:20:02:7a:5a:47:fd:55:33:80:cb:fe:a9:6f: af:35:6e:93:7d:a1:a5:28:23:7f:8c:50:14:98:f7: 43:09:3d:c4:84:d0:5b:f4:bd:32:bb:1a:b4:2d:f8: 47:29:d4:c3:db:de:f4:df:7c:c2:44:fd:f0:0f:e3: 77:a5:42:fd:a2:32:37:f8:2a:55:96:b5:38:04:98: 22:e3:bd:75:a4:a8:17:a0:32:e3:a6:e8:45:56:8b: dd:98:e9:13:3d:77:62:7e:17:c9:7a:72:48:39:40: 02:1c:1c:cb:d4:09:fd:e8:d6:ce:23:22:b8:7a:d4: 16:a1:a2:75:1d:97:b4:3c:9e:cd:4f:b8:d3:f8:52: f3:de:6f:30:78:38:ba:ca:d8:74:2d:ed:72:12:f3: c1:53:f4:ad:b5:45:09:b3:5f:f6:98:d7:26:fe:c4: 10:cc:47:e3:5c:fb:6b:81:2d:00:76:9c:06:1a:fa: 56:e0:1a:ce:c4:0e:eb:57:67:1d:63:47:3c:df:9e: 7d:76:af:ed:10:8a:09:66:f1:b8:2b:5a:ff:f2:fe: 12:c3:83:89:48:87:01:22:91:29:11:32:2e:85:51: 11:94:51:45:fb:e6:30:66:22:7b:15:1e:ec:fe:e6: d2:93:c8:1b:00:f0:83:d9:cb:b3:f8:66:70:1b:5f: c7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E1:6F:85:27:84:74:C9:65:47:1B:93:9A:26:06:E9:DB:8B:C2:9E X509v3 Authority Key Identifier: keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:1c:7f:09:eb:96:5e:79:ce:ce:53:20:7c:c8:fe:3c:c7:52: fa:22:a9:b2:26:89:13:0e:5c:04:1b:c3:0f:cc:fc:8a:90:46: b2:e2:d8:04:0b:2c:68:6c:9e:97:2c:53:b1:c7:3f:b4:61:92: 4c:f9:9b:e9:1d:ad:77:b3:43:82:54:2e:24:2e:b8:f1:9f:62: ed:4e:33:ca:6c:3f:fb:f0:f8:a4:e4:05:ff:02:1e:20:17:ee: bc:ce:e7:0a:08:94:5e:40:98:93:58:31:5b:ca:44:2e:a9:80: 4c:56:31:c1:9b:ef:b7:5b:a0:a0:f1:d4:9d:a0:ea:2e:60:4a: b9:09:46:65:ae:6f:89:b6:8f:ef:74:9c:5f:ad:ff:27:31:ee: 95:95:51:86:b8:86:9a:d3:4d:e5:5a:bd:5f:98:c5:77:99:88: 74:de:fc:eb:c2:1d:41:ef:59:df:3f:1c:d0:34:21:e5:ec:8f: e7:f0:3e:b0:af:0f:02:88:87:e6:ea:65:93:ec:8e:ad:cf:88: 1a:85:60:60:98:91:0a:cd:b8:d8:4a:fa:8f:31:93:55:de:c5: 4d:24:cb:fb:77:b3:3f:1e:f6:46:1b:ae:02:a7:93:53:24:fa: 76:e5:b5:63:7e:0f:bc:e0:ec:df:16:c7:c4:54:d4:bd:8f:ea: 3c:d8:63:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bc9RQUHij3jFrZZG+h3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZDZhOGE2MzlmODhhYWYxZjQzNmQ2YTIwYjQxNzdiMzhk MzkwZmMwHhcNMjUxMjIxMDEwMjIyWhcNMjUxMjIyMDEwMjIyWjAzMTEwLwYDVQQD EygzZWUxNmY4NTI3ODQ3NGM5NjU0NzFiOTM5YTI2MDZlOWRiOGJjMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CACelpH/VUzgMv+qW+vNW6TfaGl KCN/jFAUmPdDCT3EhNBb9L0yuxq0LfhHKdTD297033zCRP3wD+N3pUL9ojI3+CpV lrU4BJgi4711pKgXoDLjpuhFVovdmOkTPXdifhfJenJIOUACHBzL1An96NbOIyK4 etQWoaJ1HZe0PJ7NT7jT+FLz3m8weDi6yth0Le1yEvPBU/SttUUJs1/2mNcm/sQQ zEfjXPtrgS0AdpwGGvpW4BrOxA7rV2cdY0c83559dq/tEIoJZvG4K1r/8v4Sw4OJ SIcBIpEpETIuhVERlFFF++YwZiJ7FR7s/ubSk8gbAPCD2cuz+GZwG1/HdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7hb4UnhHTJZUcbk5omBunbi8KeMB8GA1UdIwQY MBaAFAPWqKY5+IqvH0NtaiC0F3s405D8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQt YzIwZGU1NDNjMGRmLzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQtYzIwZGU1NDNjMGRm LzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxx/CeuW XnnOzlMgfMj+PMdS+iKpsiaJEw5cBBvDD8z8ipBGsuLYBAssaGyelyxTscc/tGGS TPmb6R2td7NDglQuJC648Z9i7U4zymw/+/D4pOQF/wIeIBfuvM7nCgiUXkCYk1gx W8pELqmATFYxwZvvt1ugoPHUnaDqLmBKuQlGZa5vibaP73ScX63/JzHulZVRhriG mtNN5Vq9X5jFd5mIdN7868IdQe9Z3z8c0DQh5eyP5/A+sK8PAoiH5uplk+yOrc+I GoVgYJiRCs242Er6jzGTVd7FTSTL+3ezPx72RhuuAqeTUyT6duW1Y34PvODs3xbH xFTUvY/qPNhjWQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:24:26 2025 by rpki-client