This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json) Hash identifier: eIAwyJ9/16bSXrb3RWvcgFDaZHLks3LvZRdkfbOt190= Subject key identifier: 6A:9B:9B:05:0F:63:C3:CE:AC:84:88:F5:2A:06:6C:BC:E0:BD:AE:F7 Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Certificate serial: 019B416DC3E197F96BC0D8FE56DE55CA9A71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft Manifest number: 0C77 Signing time: Sun 21 Dec 2025 15:01:11 +0000 Manifest this update: Sun 21 Dec 2025 15:01:11 +0000 Manifest next update: Mon 22 Dec 2025 15:01:11 +0000 Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: ibeGqqVn91QkGDE32Y9Qb2PLsdJ/Ss4qSsaxAz+N6QA=) 2: UU-ZPgHLSl7n9-aFlFBn6cpPmcU.roa (hash: Q6YDAvzuzbvQcAN8CcizevWV2gHJhbtqI7OUoG4zkxk=) 3: eK7sZ1D_OT19uO-hHprpcrVXcWU.roa (hash: bVKg53TVS+OiFbk3Bkeg0BfOZQFTwlQ5IxwlXslILAc=) 4: hxpDIvDSUNYIW-RymDBwexWB-8g.roa (hash: Jv5BRt+QxxWpqyESuYnWjL1CPNaN/TrtWzKi1FkPja0=) 5: xLGL3BfWxMtcUVRxtiUbq631owE.roa (hash: +UNhAurOfSKP8/97u/DACbGsjraqdASOxaVTIj4mWJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:c3:e1:97:f9:6b:c0:d8:fe:56:de:55:ca:9a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Validity Not Before: Dec 21 15:01:11 2025 GMT Not After : Dec 22 15:01:11 2025 GMT Subject: CN=6a9b9b050f63c3ceac8488f52a066cbce0bdaef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f8:6a:42:6e:34:f4:5e:ab:18:3f:99:a9:29: 9c:2b:1d:5e:63:63:93:8f:2b:42:c5:3a:1a:8e:14: 96:b7:bc:ba:df:ae:61:71:3d:f1:ff:85:52:47:b3: 86:7c:58:9b:e5:54:f6:88:3b:d4:94:82:5f:ee:7c: 45:c1:19:6e:b2:31:ba:24:69:56:d1:cf:b3:1b:40: 56:ac:0e:32:dd:e8:ca:a4:64:42:99:89:83:f4:4c: ae:fb:82:45:02:39:09:1a:91:4d:a7:93:d6:56:bd: 65:64:3a:18:0c:89:d3:0a:c3:12:16:bf:31:26:86: f3:32:47:28:dc:9a:19:a0:88:06:b9:c4:d9:84:a5: 2f:78:83:71:9b:f9:b3:d2:85:48:77:96:a5:11:0d: ae:18:6f:e8:5c:19:b4:45:0f:10:41:38:bf:c7:77: 76:9b:bd:d7:98:8c:0a:44:ed:91:b5:88:fb:c2:e7: bd:b1:e7:32:cd:62:60:11:15:e3:0c:44:44:7f:98: 55:81:ab:65:38:e9:ff:95:76:02:fb:86:9a:66:ab: 5d:50:70:3d:b7:1c:3b:5c:78:4a:89:dd:30:44:eb: d5:72:95:c7:e1:ee:a7:3b:2d:0d:07:b4:0d:0b:03: df:17:34:e5:b4:02:cb:4e:35:54:ea:e6:90:41:ff: c1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9B:9B:05:0F:63:C3:CE:AC:84:88:F5:2A:06:6C:BC:E0:BD:AE:F7 X509v3 Authority Key Identifier: keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:53:4d:9b:4c:c5:8c:ae:37:ed:64:5c:1e:24:d5:aa:fe:53: f2:3c:d3:24:fe:60:f1:20:7e:25:05:ea:90:07:44:e7:5b:db: 29:12:a9:ea:9f:50:bc:7a:28:40:c0:13:eb:ac:66:d8:06:2e: 45:af:6f:ec:47:c1:c2:c0:cb:8d:b2:ae:a3:39:f8:12:3d:37: 83:76:57:31:03:2e:8d:2b:8a:e4:56:f9:d9:68:3c:91:32:c9: 6c:d1:13:8e:2a:b8:cc:6a:26:eb:26:2a:10:ba:d8:89:b2:ae: e1:da:c9:05:b6:a9:46:8a:9a:f2:97:ad:61:66:93:a5:b5:54: 68:7d:d1:fc:3c:53:d9:5a:dd:35:a7:5a:38:5d:1b:fb:51:df: db:e0:a3:68:06:ed:7b:6c:c2:eb:48:1f:f4:ea:24:b7:21:64: 1b:98:e9:7e:a5:3e:b3:f0:4f:d3:de:8f:49:55:71:7f:05:93: f5:c6:74:f8:6a:2c:ef:c0:fe:71:35:b4:eb:7d:e0:43:95:ea: 22:7a:4b:b8:8c:d9:a7:07:7a:05:7a:e4:4f:59:d3:f6:bc:02: 03:af:10:4a:18:c9:08:9f:cc:e4:b6:15:7c:ff:0c:a1:3a:6e: ae:13:00:9d:0f:61:bd:7c:e9:14:22:c1:25:8d:60:b2:b9:c4: e4:03:1a:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbcPhl/lrwNj+Vt5VyppxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzY2JkYjA1OTVmYzQ4OTAyOTM4YTc4ZjQyYzFlYWYwYTE1 OWJmNDYwHhcNMjUxMjIxMTUwMTExWhcNMjUxMjIyMTUwMTExWjAzMTEwLwYDVQQD Eyg2YTliOWIwNTBmNjNjM2NlYWM4NDg4ZjUyYTA2NmNiY2UwYmRhZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/hqQm409F6rGD+ZqSmcKx1eY2OT jytCxToajhSWt7y6365hcT3x/4VSR7OGfFib5VT2iDvUlIJf7nxFwRlusjG6JGlW 0c+zG0BWrA4y3ejKpGRCmYmD9Eyu+4JFAjkJGpFNp5PWVr1lZDoYDInTCsMSFr8x JobzMkco3JoZoIgGucTZhKUveINxm/mz0oVId5alEQ2uGG/oXBm0RQ8QQTi/x3d2 m73XmIwKRO2RtYj7wue9secyzWJgERXjDEREf5hVgatlOOn/lXYC+4aaZqtdUHA9 txw7XHhKid0wROvVcpXH4e6nOy0NB7QNCwPfFzTltALLTjVU6uaQQf/BcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqbmwUPY8POrISI9SoGbLzgva73MB8GA1UdIwQY MBaAFAPL2wWV/EiQKTinj0LB6vChWb9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYt ZjY2MTM4MDY2MzU4LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYtZjY2MTM4MDY2MzU4 LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVNNm0zF jK437WRcHiTVqv5T8jzTJP5g8SB+JQXqkAdE51vbKRKp6p9QvHooQMAT66xm2AYu Ra9v7EfBwsDLjbKuozn4Ej03g3ZXMQMujSuK5Fb52Wg8kTLJbNETjiq4zGom6yYq ELrYibKu4drJBbapRoqa8petYWaTpbVUaH3R/DxT2VrdNadaOF0b+1Hf2+CjaAbt e2zC60gf9OoktyFkG5jpfqU+s/BP096PSVVxfwWT9cZ0+Gos78D+cTW0633gQ5Xq InpLuIzZpwd6BXrkT1nT9rwCA68QShjJCJ/M5LYVfP8MoTpurhMAnQ9hvXzpFCLB JY1gsrnE5AMaGw== -----END CERTIFICATE-----Generated at Sun Dec 21 22:28:22 2025 by rpki-client