This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json) Hash identifier: lWmaQXMRvlHYtO9y5gVr/EdgmVio6sNy+Z9uTsXGrcY= Subject key identifier: F7:14:6C:8E:DA:21:BC:F5:F8:A1:13:83:92:85:20:DD:65:AE:3B:F8 Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17 Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517 Certificate serial: 019B6957A532E759BC6D691DA58D10E7F2C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft Manifest number: 1227 Signing time: Mon 29 Dec 2025 09:01:50 +0000 Manifest this update: Mon 29 Dec 2025 09:01:50 +0000 Manifest next update: Tue 30 Dec 2025 09:01:50 +0000 Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: l2crgG/01gh0cCcntzM6dBNWvEpOharqByNSvu5kCTo=) 2: cp23u9vhlMaqrHKUYwtPPiioz4s.roa (hash: vMJOgdz9BvyEVCpUUDvmbRYIMf8G3KzzC7uWtP3ziOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 09:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:57:a5:32:e7:59:bc:6d:69:1d:a5:8d:10:e7:f2:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517 Validity Not Before: Dec 29 09:01:50 2025 GMT Not After : Dec 30 09:01:50 2025 GMT Subject: CN=f7146c8eda21bcf5f8a11383928520dd65ae3bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:da:d7:ea:2c:b9:fd:5c:6e:f4:6e:93:80: 70:3f:1d:34:08:f2:9c:9c:72:48:08:94:a2:a4:ac: 95:50:08:21:e3:51:d1:eb:be:d4:46:56:54:41:b1: 13:e8:da:be:f4:09:1a:84:bb:bc:5d:50:63:f9:d9: ef:82:2a:9b:18:9b:ea:c5:6f:54:a0:51:30:d2:1f: dc:06:4c:d2:6f:15:f6:78:35:9f:50:5b:95:cb:5a: 4f:c5:9d:b5:38:c6:f1:00:4e:a6:ad:71:d0:99:9f: 60:08:65:ee:ef:7c:31:14:c1:81:1f:07:2d:86:cb: c7:e7:f5:9e:20:04:90:12:09:2b:85:1f:e9:65:c7: 90:7f:60:6f:f6:06:ee:92:2a:73:b9:92:ef:27:a6: ad:12:b8:65:aa:3b:fb:22:b1:83:1a:a5:8f:5f:e4: 21:ab:31:f9:8c:5f:cb:d9:b9:57:ac:7d:e7:17:f4: 12:7a:cd:02:be:1f:27:ee:60:9e:f8:c9:1f:f5:97: 60:b4:de:57:a1:dd:0b:98:b9:83:f1:17:96:39:33: 33:2d:cc:75:44:3d:5e:36:21:1f:ad:6c:25:b4:a0: 7a:59:38:49:58:ad:bd:de:7b:02:53:bf:fc:b4:33: 6a:7b:00:54:c1:e1:41:3e:5b:ca:ba:08:36:9f:d8: d1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:14:6C:8E:DA:21:BC:F5:F8:A1:13:83:92:85:20:DD:65:AE:3B:F8 X509v3 Authority Key Identifier: keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f5:53:6a:26:95:34:d4:35:2a:b0:f4:61:37:2b:48:1a:78: a1:90:f5:13:9f:92:2f:43:78:3a:79:5a:cc:e3:86:07:c1:72: 7f:60:2f:6b:d0:04:88:05:ab:f3:43:5d:8d:af:85:ba:f6:18: b2:e4:13:26:46:f7:2a:48:cf:a0:f7:92:d0:ab:b3:cf:ff:e4: 9a:86:1c:e4:70:ff:a2:3a:e7:e5:b9:57:f0:8e:1f:39:b5:62: 07:15:8a:0f:f0:87:d4:47:de:d8:10:0a:04:52:4e:a4:b7:78: f8:64:37:08:97:e6:1a:a1:4c:6b:56:a1:f3:82:7f:89:e4:71: 92:8d:e2:f1:8d:54:05:c0:1d:1c:0d:81:c8:c8:7f:5b:21:00: 1c:e8:f1:7b:ae:ab:82:4f:7a:92:5e:ba:d4:f6:af:9b:f3:c7: 00:dd:e0:35:d8:bf:5b:89:d0:73:bf:be:60:b5:ee:4a:90:cc: 23:e7:f8:4d:2e:28:a5:ec:6d:e1:17:03:7a:21:c1:0b:14:08: 10:bb:90:c6:a5:21:7a:4f:e8:1a:ec:45:5e:f7:5d:a4:89:06: 77:5c:b2:cb:56:08:74:93:eb:f6:0a:60:35:d7:d0:ca:9e:9d: 31:92:31:b8:4a:0b:fb:68:ca:3c:e6:34:fd:9a:17:25:c9:db: d1:4c:b5:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpV6Uy51m8bWkdpY0Q5/LJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzZjZWEyYTgwMjIwMzYxMjMxYjZhZmJiYzhjOGNkYWE0 ZmQ1MTcwHhcNMjUxMjI5MDkwMTUwWhcNMjUxMjMwMDkwMTUwWjAzMTEwLwYDVQQD EyhmNzE0NmM4ZWRhMjFiY2Y1ZjhhMTEzODM5Mjg1MjBkZDY1YWUzYmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXPa1+osuf1cbvRuk4BwPx00CPKc nHJICJSipKyVUAgh41HR677URlZUQbET6Nq+9AkahLu8XVBj+dnvgiqbGJvqxW9U oFEw0h/cBkzSbxX2eDWfUFuVy1pPxZ21OMbxAE6mrXHQmZ9gCGXu73wxFMGBHwct hsvH5/WeIASQEgkrhR/pZceQf2Bv9gbukipzuZLvJ6atErhlqjv7IrGDGqWPX+Qh qzH5jF/L2blXrH3nF/QSes0Cvh8n7mCe+Mkf9ZdgtN5Xod0LmLmD8ReWOTMzLcx1 RD1eNiEfrWwltKB6WThJWK293nsCU7/8tDNqewBUweFBPlvKugg2n9jRuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcUbI7aIbz1+KETg5KFIN1lrjv4MB8GA1UdIwQY MBaAFAPGzqKoAiA2EjG2r7vIyM2qT9UXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQt ZjQ2ZDZhYjNkMzI2LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQtZjQ2ZDZhYjNkMzI2 LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/VTaiaV NNQ1KrD0YTcrSBp4oZD1E5+SL0N4OnlazOOGB8Fyf2Ava9AEiAWr80Ndja+FuvYY suQTJkb3KkjPoPeS0Kuzz//kmoYc5HD/ojrn5blX8I4fObViBxWKD/CH1Efe2BAK BFJOpLd4+GQ3CJfmGqFMa1ah84J/ieRxko3i8Y1UBcAdHA2ByMh/WyEAHOjxe66r gk96kl661Pavm/PHAN3gNdi/W4nQc7++YLXuSpDMI+f4TS4opext4RcDeiHBCxQI ELuQxqUhek/oGuxFXvddpIkGd1yyy1YIdJPr9gpgNdfQyp6dMZIxuEoL+2jKPOY0 /ZoXJcnb0Uy1UA== -----END CERTIFICATE-----Generated at Mon Dec 29 13:41:14 2025 by rpki-client