This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft File: A7zvl2ZC1UtLShmY8LP_SIRakm0.mft (raw, json) Hash identifier: TmA3XcPDrVqb93P1ZpBHPcEpN+AfK1JTuIMxozrW64w= Subject key identifier: 80:89:63:2F:03:D4:1F:1F:D3:2A:D7:5F:EA:26:25:7E:F3:92:54:14 Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D Certificate issuer: /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d Certificate serial: 019B2D41F158FB8B24FBD6B759E32E6973CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft Manifest number: 117A Signing time: Wed 17 Dec 2025 17:00:54 +0000 Manifest this update: Wed 17 Dec 2025 17:00:54 +0000 Manifest next update: Thu 18 Dec 2025 17:00:54 +0000 Files and hashes: 1: A7zvl2ZC1UtLShmY8LP_SIRakm0.crl (hash: pg9ScVoC/bohGeCjcas0qudNe4/4npMHvn0b3vcRn2A=) 2: zrwokDU3FhdB7_q1CXdcMR9bnVs.roa (hash: GD4RouuFMqAMeF041Js/nVB0Sr40yt7mYWnED87KOPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:41:f1:58:fb:8b:24:fb:d6:b7:59:e3:2e:69:73:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d Validity Not Before: Dec 17 17:00:54 2025 GMT Not After : Dec 18 17:00:54 2025 GMT Subject: CN=8089632f03d41f1fd32ad75fea26257ef3925414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:fa:b3:ff:11:33:41:8e:79:50:a9:8f:85: 9e:4f:08:a8:f1:01:85:b6:e1:04:32:b2:89:06:58: 50:97:69:78:7b:1a:43:f9:39:5b:46:a1:99:8e:41: 14:db:29:dd:de:ff:f3:d2:5d:cb:42:fe:1e:cb:46: ff:ef:03:06:49:1a:d6:26:6d:e1:c6:c2:e0:8f:19: b2:85:68:14:71:73:58:85:bc:a0:b7:72:c1:5d:3b: 3c:d8:0c:4c:d1:b0:1b:08:a6:63:37:5e:8b:e7:4f: 2f:87:99:c1:c6:c0:cc:cf:ec:3c:fc:db:39:cd:55: e3:4b:89:26:8d:f8:c0:4a:56:8c:69:e6:2e:a9:13: d0:30:a0:74:07:4f:1a:b1:dd:d7:e1:42:2f:fc:0a: 7c:2f:2d:5c:38:36:e7:82:05:1f:b4:88:a2:b1:88: 0b:63:c3:a6:cf:5e:62:9c:2f:0d:78:34:c7:8f:a1: 3f:cf:a3:c3:e4:2a:0a:a4:66:c3:2a:71:e2:4a:81: b6:7c:f4:fe:f4:3a:2f:44:59:be:23:da:19:c3:72: be:38:e6:54:e4:4a:4a:3d:64:9c:e1:6f:34:f4:1a: aa:7e:43:76:bd:04:4a:cb:d5:1e:30:d9:ab:6d:c0: 89:81:00:af:f1:07:d2:bf:55:87:05:cd:93:0c:68: 40:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:89:63:2F:03:D4:1F:1F:D3:2A:D7:5F:EA:26:25:7E:F3:92:54:14 X509v3 Authority Key Identifier: keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b2:02:5e:33:cf:25:0e:b2:96:4d:72:c4:53:5d:aa:37:d0: e6:e0:90:36:58:c2:2f:77:26:0e:a2:3a:d3:f9:9b:86:5b:60: 0b:b6:94:88:d3:b6:14:72:9c:93:ff:09:21:b5:3c:cc:75:5e: 87:05:5d:ae:43:f5:83:84:f2:de:d9:42:51:08:d6:22:f8:f9: 3f:ec:90:eb:c3:81:e0:22:3e:ff:2e:7b:a6:31:0f:1f:ec:c1: 2e:42:6c:8e:7e:b8:44:44:6f:90:63:6f:12:8c:02:2a:dc:09: dc:e0:14:70:72:39:57:02:09:e9:20:8b:3b:73:61:27:e8:02: a5:b0:ee:1b:3e:1f:ce:c8:e9:8b:01:1b:49:7f:77:58:5b:b6: 34:18:e8:ea:a3:93:ed:e5:b8:7b:8c:51:f7:08:a8:63:0f:28: ef:d8:c5:8d:b0:55:f1:84:71:7d:15:d3:bb:2e:37:08:e4:0a: 8c:52:30:64:8c:42:59:98:97:d9:0b:e5:2c:f0:db:28:e0:cb: ba:ca:05:76:81:03:09:cc:9f:37:ce:a6:7b:06:2c:ca:05:17: 19:bb:d3:50:58:51:f3:28:5c:56:e7:f6:49:4c:fb:09:1d:01: 28:0d:61:d1:eb:2c:5f:4e:83:34:9e:e0:6f:07:d5:ed:7a:be: 86:2a:a6:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQfFY+4sk+9a3WeMuaXPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYmNlZjk3NjY0MmQ1NGI0YjRhMTk5OGYwYjNmZjQ4ODQ1 YTkyNmQwHhcNMjUxMjE3MTcwMDU0WhcNMjUxMjE4MTcwMDU0WjAzMTEwLwYDVQQD Eyg4MDg5NjMyZjAzZDQxZjFmZDMyYWQ3NWZlYTI2MjU3ZWYzOTI1NDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Hz6s/8RM0GOeVCpj4WeTwio8QGF tuEEMrKJBlhQl2l4expD+TlbRqGZjkEU2ynd3v/z0l3LQv4ey0b/7wMGSRrWJm3h xsLgjxmyhWgUcXNYhbygt3LBXTs82AxM0bAbCKZjN16L508vh5nBxsDMz+w8/Ns5 zVXjS4kmjfjASlaMaeYuqRPQMKB0B08asd3X4UIv/Ap8Ly1cODbnggUftIiisYgL Y8Omz15inC8NeDTHj6E/z6PD5CoKpGbDKnHiSoG2fPT+9DovRFm+I9oZw3K+OOZU 5EpKPWSc4W809BqqfkN2vQRKy9UeMNmrbcCJgQCv8QfSv1WHBc2TDGhAAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICJYy8D1B8f0yrXX+omJX7zklQUMB8GA1UdIwQY MBaAFAO875dmQtVLS0oZmPCz/0iEWpJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTd6dmwyWkMxVXRMU2htWThMUF9TSVJha20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9jZjZiMDctMDNiMi00ZWJlLWI5NjYt ZjFlOWJmMmJmZjIxLzEvQTd6dmwyWkMxVXRMU2htWThMUF9TSVJha20wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9jZjZiMDctMDNiMi00ZWJlLWI5NjYtZjFlOWJmMmJmZjIx LzEvQTd6dmwyWkMxVXRMU2htWThMUF9TSVJha20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILICXjPP JQ6ylk1yxFNdqjfQ5uCQNljCL3cmDqI60/mbhltgC7aUiNO2FHKck/8JIbU8zHVe hwVdrkP1g4Ty3tlCUQjWIvj5P+yQ68OB4CI+/y57pjEPH+zBLkJsjn64RERvkGNv EowCKtwJ3OAUcHI5VwIJ6SCLO3NhJ+gCpbDuGz4fzsjpiwEbSX93WFu2NBjo6qOT 7eW4e4xR9wioYw8o79jFjbBV8YRxfRXTuy43COQKjFIwZIxCWZiX2QvlLPDbKODL usoFdoEDCcyfN86mewYsygUXGbvTUFhR8yhcVuf2SUz7CR0BKA1h0essX06DNJ7g bwfV7Xq+hiqmoA== -----END CERTIFICATE-----Generated at Wed Dec 17 20:48:25 2025 by rpki-client