This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json) Hash identifier: t5Jg5YNPkBrfSLSJfcDkAknaNdLZ6RsyqRCdO1DSAJ8= Subject key identifier: 91:9D:38:7A:9C:30:02:1B:CB:3D:0B:EC:A8:7B:22:D0:AD:0C:78:CE Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7 Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7 Certificate serial: 019B714733A1258C41C0011B592BA778BC67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft Manifest number: 11C3 Signing time: Tue 30 Dec 2025 22:00:50 +0000 Manifest this update: Tue 30 Dec 2025 22:00:50 +0000 Manifest next update: Wed 31 Dec 2025 22:00:50 +0000 Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: Dr7zzq0R6WYjAp3uGkPmDEaogryr+MQuj3x+qh8iBxE=) 2: YWZ9Y-_nf9hJ3PCcQZw9nBpADV0.roa (hash: 8GJk/xJD9TDW949jEwNVPLQ5jxG7+jInYSsAj0hFBHo=) 3: hL7gjsE__TvimmJVNhYnW8HxcTk.roa (hash: fSQmS4KDtYP+UxUBfXGw0aeIOC4KTOr+x3hlF+s6H3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:47:33:a1:25:8c:41:c0:01:1b:59:2b:a7:78:bc:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7 Validity Not Before: Dec 30 22:00:50 2025 GMT Not After : Dec 31 22:00:50 2025 GMT Subject: CN=919d387a9c30021bcb3d0beca87b22d0ad0c78ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:05:1c:a0:78:42:26:6d:d0:0a:24:c6:f0:4a: a4:13:f7:5d:1e:f3:32:6a:69:39:78:55:46:59:0a: 72:cc:69:87:43:ee:47:c0:85:81:7c:10:56:53:36: 71:be:2f:a1:37:8c:65:cc:6e:92:f0:cf:0f:d4:db: 23:6a:e5:01:f1:01:ab:fb:6a:5d:5d:83:41:96:3f: a4:84:d9:98:5a:d3:e4:18:5b:28:b1:9d:cd:7a:dc: 10:b9:1f:98:8a:63:f4:eb:bf:68:9a:e7:86:51:81: d2:b7:67:b3:b8:a5:d7:a6:f6:26:c6:c2:8f:d1:62: 19:fd:9a:00:a0:00:62:85:11:59:70:fb:36:b0:a7: ac:07:d1:d7:a7:76:be:78:aa:9e:a3:bc:fe:35:4d: dc:d9:fc:2c:3f:10:32:f2:17:72:49:4e:63:ca:b9: 4a:15:45:c3:48:b6:70:b6:79:b4:01:f5:f4:17:25: 31:51:44:89:0f:e7:ea:e2:98:c9:93:4c:27:9c:af: 5a:29:06:d9:a6:6f:2a:d4:d5:ab:47:46:10:d1:0a: e4:0d:84:56:d3:c1:d0:4e:4d:2a:14:9b:f2:8c:7a: ae:15:a4:70:36:5b:d9:1c:d2:ea:3a:ed:7f:5d:e5: 95:74:56:bf:72:2d:de:f0:d3:e1:f7:33:6d:92:d4: e1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9D:38:7A:9C:30:02:1B:CB:3D:0B:EC:A8:7B:22:D0:AD:0C:78:CE X509v3 Authority Key Identifier: keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a7:86:9c:2d:f8:ce:65:59:86:86:b4:43:46:80:6b:d9:e2: a3:1d:10:0e:68:db:6e:e2:2a:70:f6:ec:68:ab:02:c9:0e:fe: 4e:45:5b:26:88:d2:64:c0:b6:bd:84:54:73:4d:ec:6a:bb:08: 4c:1d:9d:72:f8:1b:a9:36:07:b6:5f:98:67:37:0e:f0:61:68: eb:7a:96:65:a1:33:96:7f:7f:8e:4c:42:32:ad:5e:84:cb:45: 0b:07:59:02:55:88:7b:6b:f4:76:d5:71:7f:32:11:8d:d2:de: c6:2a:fb:f4:22:8a:c1:35:2d:99:f1:ac:b2:57:98:6f:59:09: cd:c1:7b:9c:2d:28:63:b1:1f:9c:ad:77:f0:c6:a7:9b:af:0f: 2b:07:87:92:03:7d:60:b6:f7:89:20:e1:f4:7b:14:90:c2:8b: 0a:88:07:74:a6:12:7b:cf:d2:6b:c9:c6:19:20:73:87:65:1e: 21:94:f7:1f:15:76:ec:7c:d3:ad:31:bc:ad:c8:b0:ff:4a:8a: c0:d5:49:5d:d9:f8:cd:70:fa:82:ed:3a:e8:4e:7b:c0:23:fc: 1f:2e:2c:de:78:8b:4c:d7:5e:1b:af:e0:ff:1e:a3:fb:1a:8c: 0e:f9:fb:d2:c4:84:59:2f:24:1c:76:ed:9a:97:17:d8:8a:ab: df:dc:a7:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxRzOhJYxBwAEbWSuneLxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTBkZjc4ZmM3ODU4MTM3MjRlYzY2NjQ4ZGY5YjQ5NGY5 YjhkYTcwHhcNMjUxMjMwMjIwMDUwWhcNMjUxMjMxMjIwMDUwWjAzMTEwLwYDVQQD Eyg5MTlkMzg3YTljMzAwMjFiY2IzZDBiZWNhODdiMjJkMGFkMGM3OGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgUcoHhCJm3QCiTG8EqkE/ddHvMy amk5eFVGWQpyzGmHQ+5HwIWBfBBWUzZxvi+hN4xlzG6S8M8P1NsjauUB8QGr+2pd XYNBlj+khNmYWtPkGFsosZ3NetwQuR+YimP0679omueGUYHSt2ezuKXXpvYmxsKP 0WIZ/ZoAoABihRFZcPs2sKesB9HXp3a+eKqeo7z+NU3c2fwsPxAy8hdySU5jyrlK FUXDSLZwtnm0AfX0FyUxUUSJD+fq4pjJk0wnnK9aKQbZpm8q1NWrR0YQ0QrkDYRW 08HQTk0qFJvyjHquFaRwNlvZHNLqOu1/XeWVdFa/ci3e8NPh9zNtktThPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGdOHqcMAIbyz0L7Kh7ItCtDHjOMB8GA1UdIwQY MBaAFANQ33j8eFgTck7GZkjfm0lPm42nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgt ZDI5MmFiN2NlOWZhLzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgtZDI5MmFiN2NlOWZh LzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKeGnC34 zmVZhoa0Q0aAa9niox0QDmjbbuIqcPbsaKsCyQ7+TkVbJojSZMC2vYRUc03sarsI TB2dcvgbqTYHtl+YZzcO8GFo63qWZaEzln9/jkxCMq1ehMtFCwdZAlWIe2v0dtVx fzIRjdLexir79CKKwTUtmfGssleYb1kJzcF7nC0oY7EfnK138Manm68PKweHkgN9 YLb3iSDh9HsUkMKLCogHdKYSe8/Sa8nGGSBzh2UeIZT3HxV27HzTrTG8rciw/0qK wNVJXdn4zXD6gu066E57wCP8Hy4s3niLTNdeG6/g/x6j+xqMDvn70sSEWS8kHHbt mpcX2Iqr39ynZg== -----END CERTIFICATE-----Generated at Wed Dec 31 01:59:25 2025 by rpki-client