This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json) Hash identifier: 5SPgrLEU8j7PlBn+LxfDJTFokqo7fecpy61WcsvnKjo= Subject key identifier: D4:D4:50:1B:66:89:85:6F:47:A5:74:5C:6D:C0:96:8F:5D:08:D6:89 Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af Certificate serial: 019B4815955F678AE51FACBA2F3146774ED7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft Manifest number: 13DB Signing time: Mon 22 Dec 2025 22:02:12 +0000 Manifest this update: Mon 22 Dec 2025 22:02:12 +0000 Manifest next update: Tue 23 Dec 2025 22:02:12 +0000 Files and hashes: 1: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: nMKGj7NKOPdLbNmiOFgeHsJEi5xV0vSPzN9iFEwuC6o=) 2: PAFl-pG2JHaMz_7ipR6yMf63H8w.roa (hash: byy0wWUqy3xmET5bVuzwYGsa7Zk9Dk0kE6IQV8R/QgY=) 3: jZL5Xhdd_DQTPlseqK0seytctFM.roa (hash: iK3t86giIYaf8WbR2Oyl7XO/RS0ik8f6mwnnTPsecrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:95:5f:67:8a:e5:1f:ac:ba:2f:31:46:77:4e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d8024188491a319c5276721f940efae7fc21af Validity Not Before: Dec 22 22:02:12 2025 GMT Not After : Dec 23 22:02:12 2025 GMT Subject: CN=d4d4501b6689856f47a5745c6dc0968f5d08d689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a5:84:a7:06:2f:a5:a3:b9:4e:f3:b7:97:a6: db:83:16:79:fd:c1:52:29:48:87:6a:35:0a:72:c0: 98:55:2b:ee:0d:1f:ed:75:38:62:d3:e6:c5:52:bb: 6a:fc:5b:cf:e7:e3:30:27:cc:de:84:a3:46:ed:54: 81:84:7b:41:6f:9f:f0:cf:03:ab:3c:bc:06:88:8f: ae:e5:0d:e3:3f:65:97:92:97:76:e2:f0:b2:eb:a3: b7:d4:50:ac:50:e7:dc:6f:9b:84:e0:a6:3c:dc:94: 4b:f6:b1:f5:ab:9b:d7:9a:a8:1d:56:82:21:ab:49: 37:f0:36:bf:f6:7e:e5:3b:46:ec:41:70:b3:ce:05: 9b:64:9a:7e:b7:48:25:f9:14:39:7c:71:df:52:ac: 9b:8e:b5:7e:ca:79:1f:4c:e2:96:48:0d:0c:a4:76: a6:9e:ae:bf:db:a7:eb:cd:13:3b:18:80:3c:cc:74: f9:11:71:b2:84:92:3d:c5:72:e1:8f:63:b4:33:2f: 1f:57:ab:d8:58:4d:b0:c8:59:6a:a0:64:07:bc:55: ac:01:87:23:bf:8e:c2:42:99:a3:2c:ce:e9:0c:6f: be:00:8e:5c:88:63:1b:cf:e2:b2:ae:43:24:cd:2c: 73:c3:9f:33:37:20:9e:3d:98:4d:d9:69:b6:d9:9f: 2a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D4:50:1B:66:89:85:6F:47:A5:74:5C:6D:C0:96:8F:5D:08:D6:89 X509v3 Authority Key Identifier: keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:80:42:a4:f2:aa:3a:f9:52:42:e6:3f:5a:76:32:86:79:2f: 16:de:a2:9e:53:96:08:4e:b2:7a:f9:b8:d9:62:9c:a7:11:39: 10:ff:b5:ec:7f:3a:e3:a1:ca:98:60:6c:38:e9:18:3f:7c:90: 04:7f:0e:42:50:ce:a7:7d:a8:32:7c:cb:f8:1f:b6:95:b4:44: c6:b1:1b:55:54:b5:2a:c3:38:91:aa:d3:5f:c2:37:24:80:c0: c2:ff:51:c2:61:f3:44:dc:ed:4d:33:10:aa:f4:62:b9:cf:dc: c6:3e:c0:17:0d:8a:2e:d9:29:46:32:59:24:27:16:b7:d9:80: 09:e8:28:3b:9b:9b:f1:5d:cd:54:4d:02:3b:d9:77:2b:4f:af: 6f:37:10:69:91:4e:e8:81:3c:42:fd:db:12:99:88:03:0d:54: 31:12:06:7d:ef:c8:8d:b8:09:0e:91:12:cc:d8:e4:b5:1b:c9: 0a:0c:e5:13:ae:22:fe:d7:0f:6c:46:ac:2e:dd:27:78:64:36: da:54:37:e5:8e:b0:75:50:2c:10:78:e0:af:9f:59:e2:fd:6a: ed:2b:7b:c9:a2:06:15:7f:4f:b4:c8:d3:39:f0:57:38:f6:74: af:8a:d0:fd:9a:12:52:f0:9f:43:c7:dc:fb:10:59:40:99:e2: 75:78:a2:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFZVfZ4rlH6y6LzFGd07XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZDgwMjQxODg0OTFhMzE5YzUyNzY3MjFmOTQwZWZhZTdm YzIxYWYwHhcNMjUxMjIyMjIwMjEyWhcNMjUxMjIzMjIwMjEyWjAzMTEwLwYDVQQD EyhkNGQ0NTAxYjY2ODk4NTZmNDdhNTc0NWM2ZGMwOTY4ZjVkMDhkNjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KWEpwYvpaO5TvO3l6bbgxZ5/cFS KUiHajUKcsCYVSvuDR/tdThi0+bFUrtq/FvP5+MwJ8zehKNG7VSBhHtBb5/wzwOr PLwGiI+u5Q3jP2WXkpd24vCy66O31FCsUOfcb5uE4KY83JRL9rH1q5vXmqgdVoIh q0k38Da/9n7lO0bsQXCzzgWbZJp+t0gl+RQ5fHHfUqybjrV+ynkfTOKWSA0MpHam nq6/26frzRM7GIA8zHT5EXGyhJI9xXLhj2O0My8fV6vYWE2wyFlqoGQHvFWsAYcj v47CQpmjLM7pDG++AI5ciGMbz+KyrkMkzSxzw58zNyCePZhN2Wm22Z8qbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTUUBtmiYVvR6V0XG3Alo9dCNaJMB8GA1UdIwQY MBaAFAPYAkGISRoxnFJ2ch+UDvrn/CGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODct N2JiYWM4Y2MyNzgzLzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODctN2JiYWM4Y2MyNzgz LzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIBCpPKq OvlSQuY/WnYyhnkvFt6inlOWCE6yevm42WKcpxE5EP+17H8646HKmGBsOOkYP3yQ BH8OQlDOp32oMnzL+B+2lbRExrEbVVS1KsM4karTX8I3JIDAwv9RwmHzRNztTTMQ qvRiuc/cxj7AFw2KLtkpRjJZJCcWt9mACegoO5ub8V3NVE0CO9l3K0+vbzcQaZFO 6IE8Qv3bEpmIAw1UMRIGfe/IjbgJDpESzNjktRvJCgzlE64i/tcPbEasLt0neGQ2 2lQ35Y6wdVAsEHjgr59Z4v1q7St7yaIGFX9PtMjTOfBXOPZ0r4rQ/ZoSUvCfQ8fc +xBZQJnidXiinQ== -----END CERTIFICATE-----Generated at Tue Dec 23 04:31:27 2025 by rpki-client