This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft File: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft (raw, json) Hash identifier: LXTJk5ckWp+BTjptijoUmu7wDFoHj3iUbXB3ZKyN7DE= Subject key identifier: 27:99:20:6C:EE:A5:2E:4D:68:E3:7F:C8:A8:7A:F0:93:D1:30:8C:BF Authority key identifier: 03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E Certificate issuer: /CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e Certificate serial: 019B2C2F91BF2463923E3F9ED9D2EBC5FFEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft Manifest number: 0710 Signing time: Wed 17 Dec 2025 12:01:13 +0000 Manifest this update: Wed 17 Dec 2025 12:01:13 +0000 Manifest next update: Thu 18 Dec 2025 12:01:13 +0000 Files and hashes: 1: 1ofY17NAwbyhAHFj_yBzaevRgc4.roa (hash: FPWNmGXZmy3JcSLxjIHQ6BJRP2baM9xmkXSCswGMYik=) 2: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl (hash: zsnZgw4DJXAtVTdI4iipfCkyfPTTn50b15cJeY/g908=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:91:bf:24:63:92:3e:3f:9e:d9:d2:eb:c5:ff:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e Validity Not Before: Dec 17 12:01:13 2025 GMT Not After : Dec 18 12:01:13 2025 GMT Subject: CN=2799206ceea52e4d68e37fc8a87af093d1308cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:6a:85:45:9f:f6:e4:2c:42:80:eb:32:a0: 0d:df:a9:28:ed:1f:5e:ac:3a:d3:6c:3b:de:1c:2b: 39:10:57:c4:c1:f6:e0:09:5a:4c:09:f8:c3:1d:83: 94:b5:ab:9e:61:ba:bf:80:91:a3:67:32:03:02:c2: f8:43:6f:64:1a:28:a5:2a:d0:ba:32:70:a9:99:46: e7:25:e9:e0:7a:56:92:b6:9b:32:78:a9:f9:9f:be: 80:86:88:7f:4d:95:51:1e:5a:40:97:43:68:3f:c5: 6f:55:ee:09:3e:43:06:4f:9d:aa:1f:c4:f6:e3:6b: c3:d3:0f:80:c8:d3:3c:b7:64:8b:90:39:38:d3:c9: cd:24:8a:df:b6:24:6e:44:69:cc:76:db:4f:cd:cc: 83:64:22:e9:aa:bf:4e:4d:5e:74:2b:51:86:65:cc: b2:79:9b:0a:b5:9a:62:bc:ed:a3:b5:ed:f0:38:d0: dd:da:6d:4e:fd:58:c8:3a:99:e0:b6:b7:02:d1:64: 5a:ba:b6:c6:e2:61:7b:0f:c3:15:01:9e:15:59:76: 4d:92:25:a5:a7:c1:e9:63:16:db:78:c1:f2:87:1d: 98:44:5e:3e:50:24:79:be:fe:cc:b5:e8:8e:2e:66: b2:5e:66:93:01:09:da:be:fe:81:df:3a:85:74:f7: 8e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:99:20:6C:EE:A5:2E:4D:68:E3:7F:C8:A8:7A:F0:93:D1:30:8C:BF X509v3 Authority Key Identifier: keyid:03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:4a:6b:82:50:62:f3:d7:fb:cc:26:ee:17:d4:1c:6a:3a:64: 58:75:90:05:af:9f:1e:63:d5:80:62:96:44:c3:a5:cb:1d:56: e0:f1:ef:79:fb:7a:fd:ea:09:99:a6:d6:03:38:18:df:0c:a5: c1:b2:58:cc:1d:33:07:35:37:4f:3d:70:de:66:04:cb:28:23: a1:2e:a7:75:e7:8c:d0:84:b3:2c:a4:eb:91:ca:c5:2e:1d:e7: 75:c1:22:14:eb:1e:02:2c:cf:60:8c:bb:83:75:1d:a8:9f:cb: ca:2e:e6:37:ef:1b:ec:81:6a:b7:7a:d4:0a:26:74:95:fe:6d: fa:92:ef:71:0b:86:8a:9a:d1:a0:15:c8:3b:8a:f1:42:34:c6: bb:40:b5:52:d0:ff:57:d1:22:af:75:05:21:cd:98:0e:a6:0d: d6:71:2d:ff:ea:d1:f6:7d:1b:ca:d7:b0:b0:7c:8c:f0:b0:3a: f3:8c:3f:21:7b:0c:7e:5b:c1:d3:50:87:78:df:c9:c0:a9:aa: ac:e3:33:1e:d8:b3:4b:26:e0:98:63:d7:43:af:e2:82:35:84: aa:fa:80:e3:5b:5f:88:e5:e8:47:df:31:1c:cf:e0:4c:39:5a: 0c:26:8a:d5:5b:6f:9d:fb:6a:97:64:15:a2:ce:9e:62:87:ae: 34:d0:47:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL5G/JGOSPj+e2dLrxf/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTg0NWY4NmNiYzNjZmE5ZTBlNzk4N2EwMzgyZDVkMGRk N2NlM2UwHhcNMjUxMjE3MTIwMTEzWhcNMjUxMjE4MTIwMTEzWjAzMTEwLwYDVQQD EygyNzk5MjA2Y2VlYTUyZTRkNjhlMzdmYzhhODdhZjA5M2QxMzA4Y2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGVqhUWf9uQsQoDrMqAN36ko7R9e rDrTbDveHCs5EFfEwfbgCVpMCfjDHYOUtaueYbq/gJGjZzIDAsL4Q29kGiilKtC6 MnCpmUbnJengelaStpsyeKn5n76Ahoh/TZVRHlpAl0NoP8VvVe4JPkMGT52qH8T2 42vD0w+AyNM8t2SLkDk408nNJIrftiRuRGnMdttPzcyDZCLpqr9OTV50K1GGZcyy eZsKtZpivO2jte3wONDd2m1O/VjIOpngtrcC0WRaurbG4mF7D8MVAZ4VWXZNkiWl p8HpYxbbeMHyhx2YRF4+UCR5vv7MteiOLmayXmaTAQnavv6B3zqFdPeOHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeZIGzupS5NaON/yKh68JPRMIy/MB8GA1UdIwQY MBaAFANYRfhsvDz6ng55h6A4LV0N184+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFoRi1HeThQUHFlRG5tSG9EZ3RYUTNYemo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMjc5ZDMtOTQ3ZS00NWM3LWE4OTAt M2I4NGQ3OWFiZGFmLzEvQTFoRi1HeThQUHFlRG5tSG9EZ3RYUTNYemo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kMjc5ZDMtOTQ3ZS00NWM3LWE4OTAtM2I4NGQ3OWFiZGFm LzEvQTFoRi1HeThQUHFlRG5tSG9EZ3RYUTNYemo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEprglBi 89f7zCbuF9QcajpkWHWQBa+fHmPVgGKWRMOlyx1W4PHveft6/eoJmabWAzgY3wyl wbJYzB0zBzU3Tz1w3mYEyygjoS6ndeeM0ISzLKTrkcrFLh3ndcEiFOseAizPYIy7 g3UdqJ/Lyi7mN+8b7IFqt3rUCiZ0lf5t+pLvcQuGiprRoBXIO4rxQjTGu0C1UtD/ V9Eir3UFIc2YDqYN1nEt/+rR9n0bytewsHyM8LA684w/IXsMflvB01CHeN/JwKmq rOMzHtizSybgmGPXQ6/igjWEqvqA41tfiOXoR98xHM/gTDlaDCaK1Vtvnftql2QV os6eYoeuNNBHKA== -----END CERTIFICATE-----Generated at Wed Dec 17 16:47:53 2025 by rpki-client