This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json) Hash identifier: 2qg3VqGJ3hnn6+duLZNXAUkh9hFJBrPgn3za+HTHyH0= Subject key identifier: B3:A5:9D:8F:B1:79:F6:80:6A:B1:33:F7:C6:43:3B:CD:D2:78:95:4D Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f Certificate serial: 019B68E94E651FCA8F569D3EB41E5C046EA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft Manifest number: 087D Signing time: Mon 29 Dec 2025 07:01:18 +0000 Manifest this update: Mon 29 Dec 2025 07:01:18 +0000 Manifest next update: Tue 30 Dec 2025 07:01:18 +0000 Files and hashes: 1: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: YbENcsj11AFDV46jLYcJG9orvlLGRu2o5qgJgrE6bps=) 2: lKpyDy3PB0VVOKumldUJ5R7DcrY.roa (hash: bAnBEKlnNSPWwWtu1bOB6beqo4iFn6Nt2CccoFRqSNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:4e:65:1f:ca:8f:56:9d:3e:b4:1e:5c:04:6e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f Validity Not Before: Dec 29 07:01:18 2025 GMT Not After : Dec 30 07:01:18 2025 GMT Subject: CN=b3a59d8fb179f6806ab133f7c6433bcdd278954d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:81:63:0c:78:f9:d3:4d:64:70:3d:d2:bc:60: 65:38:78:32:ba:70:a5:74:64:a6:fd:3d:f0:e5:ff: a7:cb:54:da:ae:27:2b:f8:ed:fb:05:6e:de:d3:66: 91:7a:03:7e:da:99:12:1e:92:14:d1:2d:cc:62:2f: bf:b0:6a:6e:22:9e:b7:b2:ae:dd:ec:2e:1c:40:10: 15:fb:1e:66:73:64:d4:bf:3e:23:c2:a3:cf:91:64: e2:ff:7f:30:b7:ac:d4:4a:42:bb:14:72:fa:fd:1e: 03:48:82:25:df:48:53:2d:71:be:5f:ca:5d:d0:04: d6:b8:91:2b:d7:38:62:67:aa:cf:d8:ba:64:94:71: b6:3f:b2:a3:2e:c7:aa:d0:2e:43:9f:db:37:b0:0c: 53:27:f0:8d:99:ad:3c:58:ae:fd:35:da:e5:52:96: 46:1e:dd:d6:8b:bd:bb:f4:81:02:35:8d:84:ae:db: 8d:fa:fc:79:8c:82:75:e1:03:86:81:b8:c6:18:93: c6:d9:c5:c1:49:49:e3:29:40:6b:2b:2b:84:c2:07: b4:75:ea:97:49:0b:1f:19:54:e2:85:c9:ac:3f:4a: 5c:aa:4a:c9:45:22:e5:2b:a1:a1:d1:87:57:18:ac: e9:33:56:9e:7d:2d:2f:67:f6:ef:89:b3:ea:97:f5: f3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A5:9D:8F:B1:79:F6:80:6A:B1:33:F7:C6:43:3B:CD:D2:78:95:4D X509v3 Authority Key Identifier: keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:8a:4e:0b:81:b1:1c:06:4d:b7:30:2b:d2:3a:4f:ba:79:5f: 52:52:36:e1:c1:29:ab:89:e2:f0:4a:38:0d:ab:cc:fc:7c:06: a2:0e:c7:ed:6c:19:f0:41:0c:17:d9:96:ce:48:89:4a:86:ed: 86:4a:fc:95:fd:63:65:94:49:7a:7e:05:5e:9f:6a:67:7f:89: 49:74:ba:cf:2a:8d:94:9e:4c:43:6a:17:be:01:89:16:df:df: 09:70:a0:f8:5f:67:c9:46:e5:e4:7a:1f:f5:73:93:8b:05:33: 58:83:2b:15:03:23:13:0a:5a:b4:ee:91:da:0f:cd:39:49:92: 37:8e:a1:70:2e:de:28:cb:a2:25:a2:77:a7:23:e1:06:a1:f7: ad:5a:9d:3b:46:45:27:1c:68:0c:bd:e2:4a:d9:b3:f7:cb:4d: f2:11:ce:ef:29:7f:d1:52:43:c6:e1:7e:28:8e:35:c8:ea:21: 2c:3c:0e:cd:e8:de:00:3f:9b:00:e5:9a:da:1d:fa:70:c8:a6: bc:98:27:a5:9d:96:b0:96:23:30:ce:f6:e5:c5:51:6c:6c:8f: 8d:2f:a7:89:71:6e:3d:5f:eb:37:50:a4:03:99:a2:cc:b7:f2: 68:9c:a9:aa:0d:f9:91:76:57:49:90:7d:e7:cc:0a:85:0c:36: 64:70:cd:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6U5lH8qPVp0+tB5cBG6nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYWQ2MzY1MjMxZWQ3OTM5Njk0MDkyMDE0OWRmNzFjMGFh MDhlMWYwHhcNMjUxMjI5MDcwMTE4WhcNMjUxMjMwMDcwMTE4WjAzMTEwLwYDVQQD EyhiM2E1OWQ4ZmIxNzlmNjgwNmFiMTMzZjdjNjQzM2JjZGQyNzg5NTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oFjDHj5001kcD3SvGBlOHgyunCl dGSm/T3w5f+ny1Taricr+O37BW7e02aRegN+2pkSHpIU0S3MYi+/sGpuIp63sq7d 7C4cQBAV+x5mc2TUvz4jwqPPkWTi/38wt6zUSkK7FHL6/R4DSIIl30hTLXG+X8pd 0ATWuJEr1zhiZ6rP2LpklHG2P7KjLseq0C5Dn9s3sAxTJ/CNma08WK79NdrlUpZG Ht3Wi7279IECNY2ErtuN+vx5jIJ14QOGgbjGGJPG2cXBSUnjKUBrKyuEwge0deqX SQsfGVTihcmsP0pcqkrJRSLlK6Gh0YdXGKzpM1aefS0vZ/bvibPql/XzbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOlnY+xefaAarEz98ZDO83SeJVNMB8GA1UdIwQY MBaAFAOtY2UjHteTlpQJIBSd9xwKoI4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzM5NDgtZjlhMy00YjQ0LWE0YTkt NDE0OWRlNTI4ODMzLzEvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yMzM5NDgtZjlhMy00YjQ0LWE0YTktNDE0OWRlNTI4ODMz LzEvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIpOC4Gx HAZNtzAr0jpPunlfUlI24cEpq4ni8Eo4DavM/HwGog7H7WwZ8EEMF9mWzkiJSobt hkr8lf1jZZRJen4FXp9qZ3+JSXS6zyqNlJ5MQ2oXvgGJFt/fCXCg+F9nyUbl5Hof 9XOTiwUzWIMrFQMjEwpatO6R2g/NOUmSN46hcC7eKMuiJaJ3pyPhBqH3rVqdO0ZF JxxoDL3iStmz98tN8hHO7yl/0VJDxuF+KI41yOohLDwOzejeAD+bAOWa2h36cMim vJgnpZ2WsJYjMM725cVRbGyPjS+niXFuPV/rN1CkA5mizLfyaJypqg35kXZXSZB9 58wKhQw2ZHDNWw== -----END CERTIFICATE-----Generated at Mon Dec 29 16:46:19 2025 by rpki-client