This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft File: A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json) Hash identifier: Mt1QaaTWl12l38TE5RIg9PuZz0mnj9oE1ZfX9wqbiHE= Subject key identifier: 13:7D:56:F8:BE:A6:06:D2:F0:0A:4A:DA:8C:C5:B3:90:4B:D2:07:CC Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c Certificate serial: 019B4ADEDE336CE8ED5B84ECCB7E9392E376 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft Manifest number: 1794 Signing time: Tue 23 Dec 2025 11:01:18 +0000 Manifest this update: Tue 23 Dec 2025 11:01:18 +0000 Manifest next update: Wed 24 Dec 2025 11:01:18 +0000 Files and hashes: 1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: U49FMdp3VSiYETBdbZqbGERKu99RdmUFkmxjCKpPbs8=) 2: NbSHLJ18LUFyB0iCR0rBch7bc-U.roa (hash: m4WtwA746c9+1dEjftL5KY1wr7YjjqzoZ0GnddIoHLc=) 3: OblX778QtOOevvVmLppB6okYChg.roa (hash: RcRv1xji1xsemWDqjTtvWFuENOLwcxiNbuhjUnUsVAs=) 4: nrPgzgHDDtDxynx0QD9e2VIxNS4.roa (hash: zbB58fN/lRPGxPAWWtZWRRqfZ8FZqb3qnG/xrDyogwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:de:33:6c:e8:ed:5b:84:ec:cb:7e:93:92:e3:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c Validity Not Before: Dec 23 11:01:18 2025 GMT Not After : Dec 24 11:01:18 2025 GMT Subject: CN=137d56f8bea606d2f00a4ada8cc5b3904bd207cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:94:c2:70:c9:10:a9:56:e1:50:ec:39:fa:39: 93:7d:d7:7b:f2:ae:3c:48:d8:95:16:bf:f1:18:45: 35:94:e9:11:98:70:73:1e:17:30:c3:6d:0b:7f:77: f3:ac:fb:67:e2:5c:ef:63:e6:75:74:4d:5b:4e:8b: 3b:08:13:16:09:5c:dd:b2:62:4f:50:d2:4c:52:19: 00:ef:a4:e2:ad:6f:b0:af:bd:cb:bc:c9:b3:4d:96: 69:93:10:f9:f7:af:4c:43:cf:74:e6:48:f4:b1:77: 14:87:ef:3b:7d:33:5b:43:5f:1d:40:25:de:ff:b6: 89:83:10:55:1a:71:aa:ed:9d:70:98:e6:98:d3:bf: a7:cb:42:75:e2:ee:e7:85:e8:bd:14:cc:41:8e:1e: 85:62:5a:44:4c:23:d2:cf:20:6f:66:5a:9f:80:88: 2e:cf:7e:3b:21:8a:c2:25:bd:7d:45:7b:5a:11:5d: 5f:ad:8d:84:d7:c8:0c:f1:7b:a5:ed:33:48:fd:27: 85:b3:bf:36:f5:d1:8b:76:86:df:3f:23:55:d5:1a: 77:55:15:3c:62:09:30:51:4a:cd:aa:17:f8:ae:e9: ba:d7:61:19:7e:88:ca:da:e5:ee:0b:65:c6:60:37: b4:34:85:40:14:17:ed:11:53:52:91:85:b1:60:b3: 62:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7D:56:F8:BE:A6:06:D2:F0:0A:4A:DA:8C:C5:B3:90:4B:D2:07:CC X509v3 Authority Key Identifier: keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:45:21:83:8a:34:e6:33:ba:7e:08:80:02:d3:f4:a0:96:3a: de:53:8d:20:6a:0e:ac:e1:6c:4c:7a:1f:b3:dd:f9:b7:6d:f4: 30:a2:dd:96:e3:ab:91:4b:e4:b6:26:e8:59:40:ad:e2:3e:c5: b9:96:9b:63:ab:f9:a7:25:75:30:63:4b:e3:23:87:81:60:1e: 6d:c9:79:d9:f4:5a:c8:41:c8:7d:e4:08:e2:7d:a3:9b:67:cf: 6f:b2:c8:9d:b0:99:42:c5:bc:b1:d8:f2:f2:d2:c8:17:70:6e: ba:b6:6e:ee:ce:b0:a8:a4:00:2e:62:92:ce:b6:7e:80:dd:61: e5:ca:4f:4b:e5:e3:b0:d7:26:5f:98:8b:28:1b:57:0e:53:07: 44:8f:e0:1b:96:33:b1:08:bb:ff:55:69:6e:d6:e5:f7:7f:50: 7e:fc:30:92:9e:98:44:1a:34:a5:30:55:a1:17:07:fc:4a:59: f3:ef:67:22:79:9e:17:24:da:41:ec:41:34:ee:f0:9f:f5:ee: 03:e5:ac:ff:e3:7e:af:84:37:47:bd:7d:e6:a8:55:9a:d3:af: 67:e3:a1:48:81:57:db:eb:20:81:03:59:8d:98:e1:02:58:7f: 71:58:ef:01:1d:8d:ad:16:3f:3d:c9:a8:c4:98:48:07:fc:d4: 82:19:e1:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3t4zbOjtW4Tsy36TkuN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNGIwZWVkMmM1YTc4N2FkODdmYjQ5ZjA0ZDNmZGYzZDBm NDlkNGMwHhcNMjUxMjIzMTEwMTE4WhcNMjUxMjI0MTEwMTE4WjAzMTEwLwYDVQQD EygxMzdkNTZmOGJlYTYwNmQyZjAwYTRhZGE4Y2M1YjM5MDRiZDIwN2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZTCcMkQqVbhUOw5+jmTfdd78q48 SNiVFr/xGEU1lOkRmHBzHhcww20Lf3fzrPtn4lzvY+Z1dE1bTos7CBMWCVzdsmJP UNJMUhkA76TirW+wr73LvMmzTZZpkxD5969MQ8905kj0sXcUh+87fTNbQ18dQCXe /7aJgxBVGnGq7Z1wmOaY07+ny0J14u7nhei9FMxBjh6FYlpETCPSzyBvZlqfgIgu z347IYrCJb19RXtaEV1frY2E18gM8Xul7TNI/SeFs7829dGLdobfPyNV1Rp3VRU8 YgkwUUrNqhf4rum612EZfojK2uXuC2XGYDe0NIVAFBftEVNSkYWxYLNiCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBN9Vvi+pgbS8ApK2ozFs5BL0gfMMB8GA1UdIwQY MBaAFANLDu0sWnh62H+0nwTT/fPQ9J1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZDc4M2EtMWNiYy00MGQ0LWIwMTEt ZTA4NTI3NWFhMzY0LzEvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yZDc4M2EtMWNiYy00MGQ0LWIwMTEtZTA4NTI3NWFhMzY0 LzEvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUUhg4o0 5jO6fgiAAtP0oJY63lONIGoOrOFsTHofs935t230MKLdluOrkUvktiboWUCt4j7F uZabY6v5pyV1MGNL4yOHgWAebcl52fRayEHIfeQI4n2jm2fPb7LInbCZQsW8sdjy 8tLIF3BuurZu7s6wqKQALmKSzrZ+gN1h5cpPS+XjsNcmX5iLKBtXDlMHRI/gG5Yz sQi7/1Vpbtbl939Qfvwwkp6YRBo0pTBVoRcH/EpZ8+9nInmeFyTaQexBNO7wn/Xu A+Ws/+N+r4Q3R7195qhVmtOvZ+OhSIFX2+sggQNZjZjhAlh/cVjvAR2NrRY/Pcmo xJhIB/zUghnhhQ== -----END CERTIFICATE-----Generated at Tue Dec 23 12:44:50 2025 by rpki-client