This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft File: 9a2pAdQIv39blDWSHkgAqPgtvas.mft (raw, json) Hash identifier: c/4gAVjnYdRJPnUo+/qdnBvUbxN5eBkRwAnRLibnRfE= Subject key identifier: 53:54:21:A3:FD:C0:60:53:95:F4:D4:06:AD:46:1D:3E:1E:AD:A4:EF Authority key identifier: F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB Certificate issuer: /CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab Certificate serial: 019B2B1E3D9598F457B25F31F60AAE5BA268 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 07:02:40 +0000 Manifest this update: Wed 17 Dec 2025 07:02:40 +0000 Manifest next update: Thu 18 Dec 2025 07:02:40 +0000 Files and hashes: 1: 9a2pAdQIv39blDWSHkgAqPgtvas.crl (hash: Sw4ZIitz/nCjRtxBTNh7JMFJEZNHMqCoTSGtXeJOEa8=) 2: ExJyPjo5EWZQUpwxSS0T7A3Tclg.roa (hash: n7Rzh1zK0MckYzOS9a8lwv/AGXV+Jr0CvxhzGO4UHW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1e:3d:95:98:f4:57:b2:5f:31:f6:0a:ae:5b:a2:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab Validity Not Before: Dec 17 07:02:40 2025 GMT Not After : Dec 18 07:02:40 2025 GMT Subject: CN=535421a3fdc0605395f4d406ad461d3e1eada4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:09:b5:ef:c6:9e:2f:bf:21:85:fd:8b:cf:20: 48:6a:6e:1e:2a:03:42:4d:e1:7c:1c:51:81:3d:ec: 65:b6:3a:29:ab:ea:e4:e1:63:7d:e5:15:0b:dd:5d: b1:30:08:b5:29:1d:ce:2e:17:e0:da:ee:17:26:c4: de:5e:07:92:6b:b5:3a:36:fa:ba:34:43:b1:22:7a: f1:40:a0:e0:9b:85:fa:4d:f6:49:b9:77:21:18:18: 9e:09:9f:d2:2b:4b:23:0d:ed:07:50:99:47:36:b1: e6:b4:79:85:dd:f5:a9:9e:90:c8:c7:73:32:60:69: be:d7:f6:4b:c4:a8:2d:be:3e:c6:37:f1:52:58:7d: d0:56:ac:70:70:81:87:cb:6a:72:81:df:7e:df:a6: 52:be:f2:c8:c8:17:55:a6:8c:56:95:4c:73:6d:17: 29:b9:d0:43:44:a9:29:4c:bb:ac:bd:c3:bf:8b:67: 61:78:98:fc:66:8b:a5:2b:3f:1b:c1:74:96:fc:b2: c4:a3:6a:1e:ff:23:07:f4:31:7f:dd:26:e3:47:a0: f6:5b:1e:9c:4d:2f:0f:75:b6:be:eb:3b:aa:fd:ae: 55:18:c2:63:c8:d6:79:39:d9:e7:3d:41:1c:1b:dd: c3:24:77:7d:0f:f1:4a:af:2e:5e:f2:8a:01:19:b1: 02:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:54:21:A3:FD:C0:60:53:95:F4:D4:06:AD:46:1D:3E:1E:AD:A4:EF X509v3 Authority Key Identifier: keyid:F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:03:74:9a:4a:a0:00:67:78:15:76:49:c7:32:80:1d:91:e0: 05:3d:ac:df:05:68:b8:a1:64:69:d6:82:e5:50:56:8d:cc:32: 85:85:16:09:2f:57:de:af:2e:65:ff:f4:b1:88:91:58:01:23: c9:47:80:91:7f:c4:b7:36:15:9f:9e:9b:4f:29:00:54:34:3d: 4b:b9:1c:ec:02:27:3a:da:8b:2a:3d:67:45:2c:80:9a:82:54: 7f:40:a3:da:13:cd:0b:5b:d9:22:72:77:88:6f:98:23:8c:9e: 81:d1:b8:8e:f8:a5:0e:4b:85:c1:6a:64:a5:75:fb:2a:62:a2: a2:b8:64:9e:c1:7b:0d:70:48:85:f5:9a:cf:43:89:3a:44:de: 6d:95:78:b6:3e:fb:61:c9:24:cc:f6:d5:63:1b:b7:18:34:30: e8:6c:e6:07:7a:a7:79:ac:13:92:b6:c6:52:a8:8c:58:8b:0b: f9:a1:71:4b:85:f8:45:a6:50:d5:c3:8c:10:c1:9d:d2:b8:b9: 07:11:53:a2:ec:47:4b:92:0c:1b:22:92:40:b6:29:e6:04:c6: 5a:62:3a:ac:c3:89:e3:b8:e5:b7:b5:08:64:21:3a:70:08:48: ae:7b:2a:5e:05:94:47:ea:4b:87:70:08:dd:26:4d:51:10:b9: bd:9e:8c:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHj2VmPRXsl8x9gquW6JoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YWRhOTAxZDQwOGJmN2Y1Yjk0MzU5MjFlNDgwMGE4Zjgy ZGJkYWIwHhcNMjUxMjE3MDcwMjQwWhcNMjUxMjE4MDcwMjQwWjAzMTEwLwYDVQQD Eyg1MzU0MjFhM2ZkYzA2MDUzOTVmNGQ0MDZhZDQ2MWQzZTFlYWRhNGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwm178aeL78hhf2LzyBIam4eKgNC TeF8HFGBPexltjopq+rk4WN95RUL3V2xMAi1KR3OLhfg2u4XJsTeXgeSa7U6Nvq6 NEOxInrxQKDgm4X6TfZJuXchGBieCZ/SK0sjDe0HUJlHNrHmtHmF3fWpnpDIx3My YGm+1/ZLxKgtvj7GN/FSWH3QVqxwcIGHy2pygd9+36ZSvvLIyBdVpoxWlUxzbRcp udBDRKkpTLusvcO/i2dheJj8ZoulKz8bwXSW/LLEo2oe/yMH9DF/3SbjR6D2Wx6c TS8Pdba+6zuq/a5VGMJjyNZ5OdnnPUEcG93DJHd9D/FKry5e8ooBGbECFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNUIaP9wGBTlfTUBq1GHT4eraTvMB8GA1UdIwQY MBaAFPWtqQHUCL9/W5Q1kh5IAKj4Lb2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWEycEFkUUl2MzlibERXU0hrZ0FxUGd0dmFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9hZmE2ZDYtNTBmOS00MWQ0LWI3Y2Yt YTMzNjQ5ZTNlMmM1LzEvOWEycEFkUUl2MzlibERXU0hrZ0FxUGd0dmFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9hZmE2ZDYtNTBmOS00MWQ0LWI3Y2YtYTMzNjQ5ZTNlMmM1 LzEvOWEycEFkUUl2MzlibERXU0hrZ0FxUGd0dmFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgN0mkqg AGd4FXZJxzKAHZHgBT2s3wVouKFkadaC5VBWjcwyhYUWCS9X3q8uZf/0sYiRWAEj yUeAkX/EtzYVn56bTykAVDQ9S7kc7AInOtqLKj1nRSyAmoJUf0Cj2hPNC1vZInJ3 iG+YI4yegdG4jvilDkuFwWpkpXX7KmKiorhknsF7DXBIhfWaz0OJOkTebZV4tj77 YckkzPbVYxu3GDQw6GzmB3qneawTkrbGUqiMWIsL+aFxS4X4RaZQ1cOMEMGd0ri5 BxFTouxHS5IMGyKSQLYp5gTGWmI6rMOJ47jlt7UIZCE6cAhIrnsqXgWUR+pLh3AI 3SZNURC5vZ6MMg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:26:11 2025 by rpki-client