This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft File: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft (raw, json) Hash identifier: HLmoqXGDU0/PRZrtX/g2jHqjWC84QLn93SI4OJGIv+8= Subject key identifier: C3:D5:9F:3B:4E:43:21:49:B8:93:3A:94:E1:E4:66:7A:1F:78:49:D2 Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83 Certificate issuer: /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683 Certificate serial: 019B39465083C49D5AC4853A8BD2131BCED2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft Manifest number: 11CF Signing time: Sat 20 Dec 2025 01:01:07 +0000 Manifest this update: Sat 20 Dec 2025 01:01:07 +0000 Manifest next update: Sun 21 Dec 2025 01:01:07 +0000 Files and hashes: 1: 8ea9JzqwyGDT2dMFgAmUz7EOwao.roa (hash: VSNDXOm1+cAC798c36135Xw4x7+9RwirArr3iwfbiGQ=) 2: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl (hash: Wl3HYn89iFEsBBnUC/jwlUkNceOAIDABt+QlMQ/P9aw=) 3: CGoYKUbztdIKKtCC46FwnLxxAJQ.roa (hash: x68KjIodNUgVtCpjw6Q/mHOmDSpKRwUfcYK1IisVAiw=) 4: TtMpw78SmRxgZIGYNEHEXtMRk7M.roa (hash: A34HD6vBs6SuS2D6qkJmN0sK8pKEio3YxA+zTTW9xgA=) 5: lIr5yIALJv3-BOg4uAYoEY_kNlo.roa (hash: f+GijD6e1+UQuvYwAF3v/POqX5KPaUvIB4vfF6bFgTQ=) 6: wp6rgT_ySJ7oIdAAI_SCvm21yFU.roa (hash: z87ZPo/PyE4etTlqKK3OFQbBD0NBmeieu4d4u91gewk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:50:83:c4:9d:5a:c4:85:3a:8b:d2:13:1b:ce:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683 Validity Not Before: Dec 20 01:01:07 2025 GMT Not After : Dec 21 01:01:07 2025 GMT Subject: CN=c3d59f3b4e432149b8933a94e1e4667a1f7849d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f3:14:6b:ee:de:04:e8:ff:02:9b:b2:5b:ba: 18:67:1f:29:c9:ec:d6:1e:3a:b0:61:14:22:5f:9f: 41:2c:6e:3a:7f:92:03:bd:10:80:69:2f:a9:f2:bd: 33:e2:d9:71:8b:26:aa:76:29:66:14:a7:0e:15:94: 26:88:a5:16:3f:98:f9:99:2f:63:2c:0e:00:70:50: 48:38:5d:fa:9a:4b:55:76:f6:ac:04:72:85:e0:ab: d4:5b:be:60:e6:18:5e:89:d8:19:5d:ea:09:e7:48: 7e:ce:fc:85:3b:0b:14:41:ae:78:05:07:77:8c:87: 9c:d7:b1:23:e9:78:20:d4:cb:b8:18:3d:c2:52:4c: 4c:83:46:ee:48:9a:fa:03:92:a9:1f:7c:73:52:59: af:e5:a4:55:d9:55:a0:c9:fa:89:26:c1:7f:5f:b4: de:b5:3d:82:cd:f3:e4:ac:1d:b1:aa:ac:bf:b2:54: 04:65:03:cf:88:6b:ee:00:11:40:4d:82:cd:4a:34: 68:f4:4d:e7:c0:d9:d9:70:fd:4f:fc:37:fb:ae:18: f9:60:5c:9e:a5:44:59:a3:54:46:1e:1f:cf:e2:fc: bb:1c:1e:df:8d:20:22:d9:92:bc:8f:72:0a:72:99: 3c:d9:d7:ff:49:38:24:16:e1:0a:92:c7:ac:21:13: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D5:9F:3B:4E:43:21:49:B8:93:3A:94:E1:E4:66:7A:1F:78:49:D2 X509v3 Authority Key Identifier: keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d9:36:6c:a4:58:4a:1b:68:b4:24:2c:20:2a:e0:b3:44:20: 4a:ab:ea:ff:e3:a9:24:24:78:b9:fe:72:a3:ad:76:1d:a6:6a: c6:e1:be:50:fb:51:46:03:fb:9e:a6:1f:47:02:3f:41:17:18: 92:89:75:6d:a3:e8:ed:51:08:ed:73:73:6d:e5:de:0f:2f:1e: 41:a8:8c:a9:fc:2a:05:fd:f6:d3:ea:79:43:98:6e:a9:39:b6: 7d:d6:64:d1:e1:e3:ec:e9:b2:e6:6e:51:a0:02:e1:ac:01:f0: eb:c9:02:19:38:f2:1e:e6:bf:0c:c2:75:52:35:39:7e:1a:d2: e8:16:41:c2:0d:f2:cf:7f:98:27:ef:39:f8:61:5e:f8:8d:9c: e5:48:2b:94:84:6e:50:21:2b:d0:e6:73:68:84:38:b5:d5:1a: 80:dd:a4:b1:1c:cb:11:24:18:61:be:ef:ef:dd:e6:45:e1:96: ab:05:ad:bc:39:91:e4:9a:36:58:c4:29:9e:1d:1d:2a:b0:c0: fc:8c:e3:31:dc:86:f0:f7:f7:7b:13:d4:38:08:f7:ac:d9:70: 7f:3b:f9:32:3f:a9:b2:14:6a:81:c4:9b:9d:b3:d4:f3:32:e8: 18:15:59:e5:68:99:74:4d:2a:5f:7f:10:00:90:2d:bb:fd:aa: 37:2b:23:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RlCDxJ1axIU6i9ITG87SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZjdlN2NmODE3NmUzMDI3NjRkNDgyOTlmYzIyYTliZGM2 YmE2ODMwHhcNMjUxMjIwMDEwMTA3WhcNMjUxMjIxMDEwMTA3WjAzMTEwLwYDVQQD EyhjM2Q1OWYzYjRlNDMyMTQ5Yjg5MzNhOTRlMWU0NjY3YTFmNzg0OWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PMUa+7eBOj/ApuyW7oYZx8pyezW HjqwYRQiX59BLG46f5IDvRCAaS+p8r0z4tlxiyaqdilmFKcOFZQmiKUWP5j5mS9j LA4AcFBIOF36mktVdvasBHKF4KvUW75g5hheidgZXeoJ50h+zvyFOwsUQa54BQd3 jIec17Ej6Xgg1Mu4GD3CUkxMg0buSJr6A5KpH3xzUlmv5aRV2VWgyfqJJsF/X7Te tT2CzfPkrB2xqqy/slQEZQPPiGvuABFATYLNSjRo9E3nwNnZcP1P/Df7rhj5YFye pURZo1RGHh/P4vy7HB7fjSAi2ZK8j3IKcpk82df/STgkFuEKksesIROO7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPVnztOQyFJuJM6lOHkZnofeEnSMB8GA1UdIwQY MBaAFAP358+BduMCdk1IKZ/CKpvca6aDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUt M2NmM2I0NjNhODZhLzEvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUtM2NmM2I0NjNhODZh LzEvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdk2bKRY ShtotCQsICrgs0QgSqvq/+OpJCR4uf5yo612HaZqxuG+UPtRRgP7nqYfRwI/QRcY kol1baPo7VEI7XNzbeXeDy8eQaiMqfwqBf320+p5Q5huqTm2fdZk0eHj7Omy5m5R oALhrAHw68kCGTjyHua/DMJ1UjU5fhrS6BZBwg3yz3+YJ+85+GFe+I2c5UgrlIRu UCEr0OZzaIQ4tdUagN2ksRzLESQYYb7v793mReGWqwWtvDmR5Jo2WMQpnh0dKrDA /IzjMdyG8Pf3exPUOAj3rNlwfzv5Mj+pshRqgcSbnbPU8zLoGBVZ5WiZdE0qX38Q AJAtu/2qNysjcQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:53:11 2025 by rpki-client