This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json) Hash identifier: Kd9hLNM2jq4IbkkViUgO7JscoU80aADOB3C2eNnTEoM= Subject key identifier: 40:70:EF:51:11:A9:94:0A:C3:63:7D:7C:D8:34:E9:C7:CD:BE:A5:FD Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c Certificate serial: 019B42491E31460C7F60C43DFE2101CF829C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft Manifest number: 0651 Signing time: Sun 21 Dec 2025 19:00:46 +0000 Manifest this update: Sun 21 Dec 2025 19:00:46 +0000 Manifest next update: Mon 22 Dec 2025 19:00:46 +0000 Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: Ph3tZvbWEkOkjocD3qmDMGK7kOcEVFTIXopHZq5p34c=) 2: ihNwlKbuNiGlnJM8yFd2Nxrvaqo.roa (hash: auV56nH817P5x20E5reCmB5GZHUds7d7BudXxN/HlG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:1e:31:46:0c:7f:60:c4:3d:fe:21:01:cf:82:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c Validity Not Before: Dec 21 19:00:46 2025 GMT Not After : Dec 22 19:00:46 2025 GMT Subject: CN=4070ef5111a9940ac3637d7cd834e9c7cdbea5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6d:36:d3:1c:49:09:90:b4:34:01:d3:c8:be: 0e:3d:96:13:16:f0:ec:50:73:63:45:5b:7c:7b:71: 3d:22:cb:3e:c8:53:b0:59:1d:ea:81:93:b4:18:96: 6c:12:fd:12:a5:32:b9:d2:f8:8c:96:71:02:1f:c1: 95:55:b5:71:d7:46:46:a4:28:f8:c7:fc:8c:bd:dd: 76:8c:02:62:98:f0:70:ca:ea:ea:90:d0:fa:d1:3b: fa:fd:cb:86:76:41:1e:9c:7e:3a:9f:0e:a0:22:9e: 81:8f:42:b5:f4:8b:f7:5b:21:da:71:18:d1:2a:97: 79:36:14:97:a9:fa:a7:1b:25:64:32:b6:b6:2b:65: 18:0e:58:7f:59:c4:1f:c5:5e:67:ca:60:ff:4f:d0: 07:59:7a:64:ae:fa:1d:2d:c8:18:69:56:36:aa:e3: 5a:af:1d:40:cf:5f:a8:c0:7f:47:ae:c5:71:f1:d1: 03:98:97:06:ac:fa:f7:ae:a4:f5:08:97:a6:4d:bd: 94:2f:fc:e5:e2:2d:c9:99:8c:1a:f0:5b:8c:b9:5a: 06:91:8b:bf:23:77:bc:b9:17:eb:f0:16:ad:31:9e: 16:4b:56:f9:ef:94:57:f6:17:fc:cb:8b:70:14:2f: b5:a0:c2:71:00:ea:e1:67:9b:18:7b:cb:21:91:47: 3e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:70:EF:51:11:A9:94:0A:C3:63:7D:7C:D8:34:E9:C7:CD:BE:A5:FD X509v3 Authority Key Identifier: keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:cb:18:ea:61:2b:e2:a9:a4:a7:27:ef:31:e5:2a:67:0b:ac: c7:68:5d:e6:32:5f:e1:73:ab:e0:7f:6e:4e:a9:5b:4c:62:90: cc:9c:e2:b1:e0:cd:6c:c9:18:a9:af:de:7d:55:26:47:10:bc: 3a:77:ef:da:7f:ed:3f:06:a8:39:49:a9:75:08:8a:92:b4:78: a4:b1:0a:89:89:91:66:00:82:65:dd:1e:87:6e:5c:f5:3d:f2: b2:10:2b:06:ee:4b:b2:c9:f2:42:24:97:c4:06:59:24:26:5c: c4:df:e9:9c:fb:f5:39:af:57:7a:3d:3f:8c:1b:47:79:cc:b9: 9d:0b:d7:38:9b:aa:33:5b:35:a7:a5:f1:4e:8a:07:77:ef:2b: 32:f0:e9:33:eb:c8:63:10:e2:dc:88:f8:93:d5:96:cd:bd:fb: 54:96:b5:ef:33:87:ff:3b:8a:25:fc:ee:c0:c0:4c:3a:4e:c2: 06:3e:3e:79:02:8e:9d:52:44:cc:a8:d1:d0:6e:bc:2d:1b:bf: 69:a2:bc:c3:94:78:86:5f:f1:aa:d3:93:7e:00:39:fb:ff:df: be:6b:60:04:c1:d9:f8:af:26:6d:ac:67:e2:ee:8d:19:30:f8: 4a:f3:ff:4c:93:48:39:18:4d:30:f4:c7:c0:c4:bb:a3:c0:b7: a6:c2:a7:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSR4xRgx/YMQ9/iEBz4KcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzY2ViMDlkNWVlYTZhMThlNThkZmRlZmViZjI5YjQxMDVl MDI2N2MwHhcNMjUxMjIxMTkwMDQ2WhcNMjUxMjIyMTkwMDQ2WjAzMTEwLwYDVQQD Eyg0MDcwZWY1MTExYTk5NDBhYzM2MzdkN2NkODM0ZTljN2NkYmVhNWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW020xxJCZC0NAHTyL4OPZYTFvDs UHNjRVt8e3E9Iss+yFOwWR3qgZO0GJZsEv0SpTK50viMlnECH8GVVbVx10ZGpCj4 x/yMvd12jAJimPBwyurqkND60Tv6/cuGdkEenH46nw6gIp6Bj0K19Iv3WyHacRjR Kpd5NhSXqfqnGyVkMra2K2UYDlh/WcQfxV5nymD/T9AHWXpkrvodLcgYaVY2quNa rx1Az1+owH9HrsVx8dEDmJcGrPr3rqT1CJemTb2UL/zl4i3JmYwa8FuMuVoGkYu/ I3e8uRfr8BatMZ4WS1b575RX9hf8y4twFC+1oMJxAOrhZ5sYe8shkUc+/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBw71ERqZQKw2N9fNg06cfNvqX9MB8GA1UdIwQY MBaAFAPOsJ1e6moY5Y397+vym0EF4CZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wYzQ2NTAtNzk2NC00OGFmLTk4NWEt MzQwMThkNWM5ZGY1LzEvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wYzQ2NTAtNzk2NC00OGFmLTk4NWEtMzQwMThkNWM5ZGY1 LzEvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecsY6mEr 4qmkpyfvMeUqZwusx2hd5jJf4XOr4H9uTqlbTGKQzJziseDNbMkYqa/efVUmRxC8 Onfv2n/tPwaoOUmpdQiKkrR4pLEKiYmRZgCCZd0eh25c9T3yshArBu5LssnyQiSX xAZZJCZcxN/pnPv1Oa9Xej0/jBtHecy5nQvXOJuqM1s1p6XxTooHd+8rMvDpM+vI YxDi3Ij4k9WWzb37VJa17zOH/zuKJfzuwMBMOk7CBj4+eQKOnVJEzKjR0G68LRu/ aaK8w5R4hl/xqtOTfgA5+//fvmtgBMHZ+K8mbaxn4u6NGTD4SvP/TJNIORhNMPTH wMS7o8C3psKnWg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:41:06 2025 by rpki-client