This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json) Hash identifier: zop9TDGKYbN8pGRxdghJUDQsbjr1AmmbyJsjoXNIiWA= Subject key identifier: 83:F6:AD:92:27:82:4C:A6:04:39:85:20:07:9C:BA:7E:C6:0D:2D:7D Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Certificate serial: 019B39B434EB05CDC374E53B2DEC27F928C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft Manifest number: 0C73 Signing time: Sat 20 Dec 2025 03:01:09 +0000 Manifest this update: Sat 20 Dec 2025 03:01:09 +0000 Manifest next update: Sun 21 Dec 2025 03:01:09 +0000 Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: Urfk3U5I43MxE8wxTCM5FpB6HvpYeGmoiYZwgXZepRc=) 2: UU-ZPgHLSl7n9-aFlFBn6cpPmcU.roa (hash: Q6YDAvzuzbvQcAN8CcizevWV2gHJhbtqI7OUoG4zkxk=) 3: eK7sZ1D_OT19uO-hHprpcrVXcWU.roa (hash: bVKg53TVS+OiFbk3Bkeg0BfOZQFTwlQ5IxwlXslILAc=) 4: hxpDIvDSUNYIW-RymDBwexWB-8g.roa (hash: Jv5BRt+QxxWpqyESuYnWjL1CPNaN/TrtWzKi1FkPja0=) 5: xLGL3BfWxMtcUVRxtiUbq631owE.roa (hash: +UNhAurOfSKP8/97u/DACbGsjraqdASOxaVTIj4mWJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:34:eb:05:cd:c3:74:e5:3b:2d:ec:27:f9:28:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Validity Not Before: Dec 20 03:01:09 2025 GMT Not After : Dec 21 03:01:09 2025 GMT Subject: CN=83f6ad9227824ca604398520079cba7ec60d2d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:8e:94:f7:8e:69:b1:9c:16:b2:c3:26:7e: d2:b2:8a:ec:2a:ad:92:94:a2:a9:94:fd:71:e5:b7: f8:ad:5f:6a:78:26:35:01:0a:73:52:9e:78:28:a1: 5e:cd:6f:7a:ca:92:3b:c2:ce:e2:66:89:33:d1:59: c5:49:02:ee:6c:ac:a3:b1:5f:09:87:42:c9:aa:a5: cb:03:1f:68:89:d7:5e:ab:85:a5:e4:d5:38:56:aa: 81:e4:ca:f7:1d:ef:a0:32:60:46:4b:26:85:d3:5d: e8:6d:dd:f8:96:3e:53:85:0e:d9:72:71:9f:c1:bf: 5d:cc:33:56:a0:32:9b:7c:d9:98:f2:93:df:36:b4: 5a:39:b6:9a:94:05:ef:53:3b:ee:e9:9b:7c:4e:c6: 71:e3:ff:c2:80:21:a4:1a:d8:32:c0:a8:86:bd:74: 1e:9a:23:50:c1:28:4b:22:1c:1c:16:e5:3c:5f:51: ef:4f:23:7a:03:3c:b8:77:da:20:d3:14:7a:69:be: d8:b9:4f:1e:32:0a:e7:b9:59:81:aa:14:53:56:b3: f7:01:17:f2:c1:65:e0:75:a0:77:2d:77:ce:8d:21: 8c:5b:c8:46:9f:62:45:aa:a7:41:bc:ee:ac:a5:51: ea:d9:d2:f0:3c:a7:22:cb:32:c2:ae:98:09:e3:b2: 51:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F6:AD:92:27:82:4C:A6:04:39:85:20:07:9C:BA:7E:C6:0D:2D:7D X509v3 Authority Key Identifier: keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2f:91:77:e8:cb:43:76:12:06:64:c4:88:09:90:b2:f9:a4: 7e:4d:00:d5:33:19:ca:24:6c:69:c1:a0:ee:a3:82:d3:ff:60: fa:3e:35:57:98:72:7c:bf:29:d8:a2:46:09:35:06:52:23:18: d4:33:cd:c8:26:f7:a2:ff:fd:1a:22:7d:34:5e:81:17:75:9d: 97:69:d7:40:43:9c:dd:a0:84:7b:1d:0f:5f:55:d8:95:5b:26: b2:9d:46:1a:0d:52:d9:b6:91:1e:07:a9:c0:f6:8d:66:04:93: f7:e2:5d:fc:97:ae:09:bd:74:b9:0c:26:02:9e:31:95:61:f1: 2a:2d:bb:dd:cb:7b:e2:62:f3:58:5b:11:9f:89:cd:42:f6:fd: b2:53:41:cb:95:04:52:27:9b:5f:9a:4e:22:4d:cc:4c:79:27: 0c:c9:45:29:06:74:01:2d:d6:07:46:24:26:cf:40:cc:9c:6a: 29:32:15:66:2e:d0:fd:d6:95:cc:72:98:07:e5:60:d2:3d:8a: d3:21:21:97:f7:50:d4:42:c5:fb:8a:8b:11:b4:e1:a5:b0:42: f1:d2:38:64:5f:12:ee:80:94:c5:d0:68:ec:a3:20:b7:a7:20: 4d:f1:d4:2d:dd:96:b0:d7:30:5a:a0:dd:a4:6a:e2:6d:68:53: 46:9c:47:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tDTrBc3DdOU7Lewn+SjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzY2JkYjA1OTVmYzQ4OTAyOTM4YTc4ZjQyYzFlYWYwYTE1 OWJmNDYwHhcNMjUxMjIwMDMwMTA5WhcNMjUxMjIxMDMwMTA5WjAzMTEwLwYDVQQD Eyg4M2Y2YWQ5MjI3ODI0Y2E2MDQzOTg1MjAwNzljYmE3ZWM2MGQyZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5mOlPeOabGcFrLDJn7SsorsKq2S lKKplP1x5bf4rV9qeCY1AQpzUp54KKFezW96ypI7ws7iZokz0VnFSQLubKyjsV8J h0LJqqXLAx9oiddeq4Wl5NU4VqqB5Mr3He+gMmBGSyaF013obd34lj5ThQ7ZcnGf wb9dzDNWoDKbfNmY8pPfNrRaObaalAXvUzvu6Zt8TsZx4//CgCGkGtgywKiGvXQe miNQwShLIhwcFuU8X1HvTyN6Azy4d9og0xR6ab7YuU8eMgrnuVmBqhRTVrP3ARfy wWXgdaB3LXfOjSGMW8hGn2JFqqdBvO6spVHq2dLwPKciyzLCrpgJ47JRtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIP2rZIngkymBDmFIAecun7GDS19MB8GA1UdIwQY MBaAFAPL2wWV/EiQKTinj0LB6vChWb9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYt ZjY2MTM4MDY2MzU4LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYtZjY2MTM4MDY2MzU4 LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALC+Rd+jL Q3YSBmTEiAmQsvmkfk0A1TMZyiRsacGg7qOC0/9g+j41V5hyfL8p2KJGCTUGUiMY 1DPNyCb3ov/9GiJ9NF6BF3Wdl2nXQEOc3aCEex0PX1XYlVsmsp1GGg1S2baRHgep wPaNZgST9+Jd/JeuCb10uQwmAp4xlWHxKi273ct74mLzWFsRn4nNQvb9slNBy5UE UiebX5pOIk3MTHknDMlFKQZ0AS3WB0YkJs9AzJxqKTIVZi7Q/daVzHKYB+Vg0j2K 0yEhl/dQ1ELF+4qLEbThpbBC8dI4ZF8S7oCUxdBo7KMgt6cgTfHULd2WsNcwWqDd pGribWhTRpxHTA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:15:50 2025 by rpki-client