This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft File: A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json) Hash identifier: dCD3ufiemG1JoJHq1oBibCnlWsb6vYD8CiXg/+VaKYM= Subject key identifier: 8A:B4:02:91:47:B7:7A:E0:B9:59:CE:B5:31:1A:A8:A2:83:84:91:5C Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3 Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3 Certificate serial: 019B42493DCAF990949566B23CFCBE2C2BF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft Manifest number: 07F5 Signing time: Sun 21 Dec 2025 19:00:54 +0000 Manifest this update: Sun 21 Dec 2025 19:00:54 +0000 Manifest next update: Mon 22 Dec 2025 19:00:54 +0000 Files and hashes: 1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: Mn8relA3dHZFVTZE49T4lkrr07uaVppDSNU5Llh9Swo=) 2: p0cL-vdhY3KSfcwz6s4koNapmbw.roa (hash: 9RImGj5UfNKUq/CzlTB6jfp8TR4Xc1sqYedIB3MDaIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:3d:ca:f9:90:94:95:66:b2:3c:fc:be:2c:2b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3 Validity Not Before: Dec 21 19:00:54 2025 GMT Not After : Dec 22 19:00:54 2025 GMT Subject: CN=8ab4029147b77ae0b959ceb5311aa8a28384915c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ef:ea:39:5d:8d:a7:ca:04:ff:b9:e9:d0:2c: 69:de:15:02:96:aa:d0:85:20:f5:4a:42:7b:0d:6d: 16:cf:d6:b4:5f:f6:a8:dd:58:41:54:3a:e5:26:6c: f2:1f:e0:10:e8:c8:1f:51:e7:8f:75:ce:5d:ae:47: 81:ba:e4:b5:f1:e3:4c:39:03:91:3c:17:47:ba:e6: 35:34:fd:29:74:b9:35:c4:e6:d3:c6:23:b1:91:f0: 08:3f:42:1c:36:c6:fc:fb:9d:cd:e9:c2:97:87:31: c7:45:81:e2:da:ad:c4:c7:e7:db:a6:7f:be:79:b6: 60:33:07:b3:d9:ef:a3:c1:9f:89:5d:9d:33:63:f8: 1b:85:f0:14:a3:77:8b:de:f6:b4:30:54:bb:6d:42: 50:4e:43:de:fe:74:78:f1:8b:af:51:4c:03:06:2d: 6c:09:4f:b7:aa:13:f7:92:16:c6:44:a5:26:00:2f: 7e:c6:9c:0e:c0:3c:f6:f4:3a:17:be:40:5a:b2:71: e2:64:45:fd:71:81:66:a8:44:94:c7:da:2a:42:ea: 24:8b:95:19:f3:ca:96:7e:c8:71:c3:8a:2b:e0:48: aa:ec:1d:d9:df:fe:e3:c2:f1:c7:73:35:35:bd:e7: b0:ea:af:27:e8:93:0f:6b:a6:0c:42:0c:25:0a:d8: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B4:02:91:47:B7:7A:E0:B9:59:CE:B5:31:1A:A8:A2:83:84:91:5C X509v3 Authority Key Identifier: keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:49:56:17:d4:d5:a6:6c:44:2a:dd:16:03:b5:fc:93:e5:82: a3:50:8f:c1:ae:48:8b:ee:d1:e6:3a:5f:4f:24:04:78:9d:fb: 83:b8:ee:1a:d9:9d:fd:a9:d5:42:01:ae:21:89:37:a4:7d:7f: ad:13:dd:7f:52:aa:6b:17:b3:ad:95:29:16:0d:1d:e4:74:47: 7f:8b:98:79:20:75:dc:ea:0d:a4:21:b0:04:7a:ea:bf:22:ec: 11:8b:4e:37:e6:e5:22:7a:9d:c2:92:5c:64:78:99:c6:3a:a8: 80:a4:db:d1:b0:ab:c6:28:9f:23:a1:2f:f5:e3:4d:3b:a7:77: 8e:91:72:b8:ad:c6:d6:22:dc:60:6e:5d:b0:ca:e6:90:02:3c: 46:d3:b0:88:55:4f:29:47:0e:3a:07:35:82:95:ff:6d:fa:be: 4e:f8:c1:73:64:e2:40:4c:a6:04:95:7f:9a:0c:d4:53:f5:7a: a9:a6:00:1a:56:02:37:7c:a1:69:48:23:63:43:34:d6:2b:53: 0d:4f:a6:1b:2a:cc:4c:16:66:d6:6f:6e:9f:bd:97:70:fe:6d: e7:5f:aa:98:83:06:1a:87:f7:3c:37:9a:25:12:40:d5:79:44: a3:c0:a4:0c:af:a2:47:19:2a:80:de:5a:7a:bb:24:9e:cb:1c: ab:d3:13:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCST3K+ZCUlWayPPy+LCvwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOTgzMWY3YmEzZGUyZmJlZjE2ZDQ2NDlmZDQ4NjBjMTVl OWQ2YzMwHhcNMjUxMjIxMTkwMDU0WhcNMjUxMjIyMTkwMDU0WjAzMTEwLwYDVQQD Eyg4YWI0MDI5MTQ3Yjc3YWUwYjk1OWNlYjUzMTFhYThhMjgzODQ5MTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u/qOV2Np8oE/7np0Cxp3hUClqrQ hSD1SkJ7DW0Wz9a0X/ao3VhBVDrlJmzyH+AQ6MgfUeePdc5drkeBuuS18eNMOQOR PBdHuuY1NP0pdLk1xObTxiOxkfAIP0IcNsb8+53N6cKXhzHHRYHi2q3Ex+fbpn++ ebZgMwez2e+jwZ+JXZ0zY/gbhfAUo3eL3va0MFS7bUJQTkPe/nR48YuvUUwDBi1s CU+3qhP3khbGRKUmAC9+xpwOwDz29DoXvkBasnHiZEX9cYFmqESUx9oqQuoki5UZ 88qWfshxw4or4Eiq7B3Z3/7jwvHHczU1veew6q8n6JMPa6YMQgwlCtg+NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIq0ApFHt3rguVnOtTEaqKKDhJFcMB8GA1UdIwQY MBaAFAOYMfe6PeL77xbUZJ/UhgwV6dbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lNDQ5NGUtMWUzMy00NDM3LTg0MzMt MDM3YjVhN2I5NTQ0LzEvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lNDQ5NGUtMWUzMy00NDM3LTg0MzMtMDM3YjVhN2I5NTQ0 LzEvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvklWF9TV pmxEKt0WA7X8k+WCo1CPwa5Ii+7R5jpfTyQEeJ37g7juGtmd/anVQgGuIYk3pH1/ rRPdf1KqaxezrZUpFg0d5HRHf4uYeSB13OoNpCGwBHrqvyLsEYtON+blInqdwpJc ZHiZxjqogKTb0bCrxiifI6Ev9eNNO6d3jpFyuK3G1iLcYG5dsMrmkAI8RtOwiFVP KUcOOgc1gpX/bfq+TvjBc2TiQEymBJV/mgzUU/V6qaYAGlYCN3yhaUgjY0M01itT DU+mGyrMTBZm1m9un72XcP5t51+qmIMGGof3PDeaJRJA1XlEo8CkDK+iRxkqgN5a ersknsscq9MT4A== -----END CERTIFICATE-----Generated at Mon Dec 22 01:27:25 2025 by rpki-client