This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft File: a4us2V8fS9Z1Un0ybSmZVoYsMho.mft (raw, json) Hash identifier: qQvbPjjNfbfbUCov3Zmlt0SGHFoWjwOwgFWVi1Eyj8A= Subject key identifier: F2:40:14:40:6B:58:B1:35:44:47:2A:BE:57:F7:2A:6C:7D:1A:69:24 Authority key identifier: 6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A Certificate issuer: /CN=6b8bacd95f1f4bd675527d326d299956862c321a Certificate serial: 019B548639D38910B28EB3CD09F65C5E49FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft Manifest number: 1235 Signing time: Thu 25 Dec 2025 08:00:41 +0000 Manifest this update: Thu 25 Dec 2025 08:00:41 +0000 Manifest next update: Fri 26 Dec 2025 08:00:41 +0000 Files and hashes: 1: a4us2V8fS9Z1Un0ybSmZVoYsMho.crl (hash: g4D/ej9tuoGLsvYhzpY/PlrujlGCO7TkfWWorcxBTEU=) 2: pWHDIdvugLu8Y51LeZtocP5HOcI.roa (hash: fyvGZubWInNshv6PvFcn8DVCaqecv6kcINe/lSRIemw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:39:d3:89:10:b2:8e:b3:cd:09:f6:5c:5e:49:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b8bacd95f1f4bd675527d326d299956862c321a Validity Not Before: Dec 25 08:00:41 2025 GMT Not After : Dec 26 08:00:41 2025 GMT Subject: CN=f24014406b58b13544472abe57f72a6c7d1a6924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:50:1d:6a:9d:84:1f:a7:17:a0:a7:d9:96:41: 71:6d:22:23:ba:7c:39:4b:43:92:d0:50:0d:59:0f: 6d:b5:e5:c5:d6:f0:ae:5b:af:d0:d3:ba:49:65:31: f8:3a:cb:67:26:f4:a9:98:b6:70:27:1e:79:54:67: a2:92:cb:56:2f:f6:7e:82:61:e4:08:60:88:ff:e2: 16:8a:6b:53:02:b3:07:d1:dd:66:fd:81:ea:fe:2c: ac:01:71:b6:ff:88:9b:d3:2b:e9:59:43:d7:ad:d9: ac:e5:1e:bb:89:33:69:38:60:4c:37:18:ae:b8:b6: 76:4c:eb:e7:ca:80:b5:cf:2e:1a:3e:b7:13:f1:f4: f4:4e:ed:cc:54:03:87:ae:8f:fb:9e:de:c5:8f:f6: 55:c7:06:27:5d:34:79:63:b7:58:1a:08:19:14:a2: 4f:d3:a0:a8:46:6a:26:5d:e9:e7:2c:6b:cf:94:86: f9:95:a3:88:47:3f:bb:f3:a2:c9:85:ec:87:2f:a1: f7:46:11:7a:65:48:c4:a8:09:5c:c1:1f:82:e1:61: 95:9f:2a:da:a4:04:ae:86:9a:01:92:0b:d6:1b:b3: df:55:5a:c2:e9:9a:da:c3:78:11:03:14:37:1d:59: 82:0b:56:9b:26:fb:57:bb:ef:61:bc:c3:e6:fb:2d: 08:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:40:14:40:6B:58:B1:35:44:47:2A:BE:57:F7:2A:6C:7D:1A:69:24 X509v3 Authority Key Identifier: keyid:6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:7d:2a:ae:b4:f8:f3:3f:7d:51:a0:04:20:21:bd:bf:4b:1d: 78:94:97:49:a7:41:97:2b:a5:65:32:e7:84:b2:7c:38:57:b9: da:3d:8e:cd:52:60:07:b9:7a:fd:ac:12:99:1b:2f:29:f7:89: 66:90:cf:05:62:c1:50:77:aa:86:6d:b6:83:e8:7e:b2:98:a4: fc:60:56:c9:3f:93:ae:af:bd:2e:dc:5c:81:aa:4b:af:5f:fe: e9:56:b1:93:ac:2e:10:93:11:84:3a:c5:4e:c9:db:a0:2d:25: 4b:ee:f9:28:d5:6d:0e:9f:2c:b8:06:72:da:54:24:61:7a:2b: c7:c3:5d:9c:1a:ed:11:a2:0a:fb:ba:27:03:2d:79:69:a8:49: f2:8d:bd:d9:23:c1:7c:e3:f7:b0:b2:ed:35:1e:b5:3d:9a:85: 47:6b:ff:23:2f:f2:f4:19:21:c7:7a:f5:0b:9c:8a:38:72:34: e3:32:b0:9b:21:a4:23:37:f2:95:b7:91:1c:c9:97:67:88:62: cb:31:b6:79:af:b7:7a:c2:44:3e:e0:05:bb:a5:3b:d5:e9:8b: d7:fd:42:70:1a:1d:46:b7:58:15:38:3b:0c:d9:4e:f6:29:00: 4a:34:ff:69:c3:35:2f:c7:18:51:7a:3d:00:2f:4d:a6:cf:09: 1a:4a:66:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhjnTiRCyjrPNCfZcXkn9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiOGJhY2Q5NWYxZjRiZDY3NTUyN2QzMjZkMjk5OTU2ODYy YzMyMWEwHhcNMjUxMjI1MDgwMDQxWhcNMjUxMjI2MDgwMDQxWjAzMTEwLwYDVQQD EyhmMjQwMTQ0MDZiNThiMTM1NDQ0NzJhYmU1N2Y3MmE2YzdkMWE2OTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlAdap2EH6cXoKfZlkFxbSIjunw5 S0OS0FANWQ9tteXF1vCuW6/Q07pJZTH4OstnJvSpmLZwJx55VGeikstWL/Z+gmHk CGCI/+IWimtTArMH0d1m/YHq/iysAXG2/4ib0yvpWUPXrdms5R67iTNpOGBMNxiu uLZ2TOvnyoC1zy4aPrcT8fT0Tu3MVAOHro/7nt7Fj/ZVxwYnXTR5Y7dYGggZFKJP 06CoRmomXennLGvPlIb5laOIRz+786LJheyHL6H3RhF6ZUjEqAlcwR+C4WGVnyra pASuhpoBkgvWG7PfVVrC6Zraw3gRAxQ3HVmCC1abJvtXu+9hvMPm+y0IPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJAFEBrWLE1REcqvlf3Kmx9GmkkMB8GA1UdIwQY MBaAFGuLrNlfH0vWdVJ9Mm0pmVaGLDIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTR1czJWOGZTOVoxVW4weWJTbVpWb1lzTWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85Y2U1NTAtMmI3ZS00ZjhmLThlZTEt MTJlZDM5OTVlNWRlLzEvYTR1czJWOGZTOVoxVW4weWJTbVpWb1lzTWhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85Y2U1NTAtMmI3ZS00ZjhmLThlZTEtMTJlZDM5OTVlNWRl LzEvYTR1czJWOGZTOVoxVW4weWJTbVpWb1lzTWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALn0qrrT4 8z99UaAEICG9v0sdeJSXSadBlyulZTLnhLJ8OFe52j2OzVJgB7l6/awSmRsvKfeJ ZpDPBWLBUHeqhm22g+h+spik/GBWyT+Trq+9LtxcgapLr1/+6Vaxk6wuEJMRhDrF TsnboC0lS+75KNVtDp8suAZy2lQkYXorx8NdnBrtEaIK+7onAy15aahJ8o292SPB fOP3sLLtNR61PZqFR2v/Iy/y9Bkhx3r1C5yKOHI04zKwmyGkIzfylbeRHMmXZ4hi yzG2ea+3esJEPuAFu6U71emL1/1CcBodRrdYFTg7DNlO9ikASjT/acM1L8cYUXo9 AC9Nps8JGkpmWg== -----END CERTIFICATE-----Generated at Thu Dec 25 12:47:42 2025 by rpki-client