This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json) Hash identifier: Tlq39gmPwPXYwc2pS/Wno1twiCB+bapM6x+KBYTWMIo= Subject key identifier: 12:09:69:D4:48:D8:4E:EE:BC:F6:8F:DE:9F:59:F2:A2:EE:15:BC:2B Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f Certificate serial: 019B3FECFA4DB0A2A9492F256C384E744774 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft Manifest number: 0BD8 Signing time: Sun 21 Dec 2025 08:00:53 +0000 Manifest this update: Sun 21 Dec 2025 08:00:53 +0000 Manifest next update: Mon 22 Dec 2025 08:00:53 +0000 Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: tHlrETvwr9CwBu0gmtCPsBl6JEl2rVBaMeCfc/ZI/oM=) 2: aAJKdn_u125mac3iiC8QVztvInI.roa (hash: 3b7fusF13hIUnZIhVd8QQY5Oa5mdPkxjIJ0o8cOzBGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:fa:4d:b0:a2:a9:49:2f:25:6c:38:4e:74:47:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f Validity Not Before: Dec 21 08:00:53 2025 GMT Not After : Dec 22 08:00:53 2025 GMT Subject: CN=120969d448d84eeebcf68fde9f59f2a2ee15bc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ae:95:5a:4a:75:31:78:f4:39:76:a7:33:2f: a8:92:4a:fd:61:89:1f:8e:3d:8c:76:9b:2e:14:a4: f0:89:0a:8c:c3:1f:12:e6:75:21:59:00:9c:fc:29: bc:87:dc:12:1e:9b:1b:a5:d6:db:54:6d:4b:b7:37: 9e:82:a1:35:8c:5c:dc:54:82:7c:80:b9:d4:e4:f2: 73:6f:e1:5c:41:70:c7:4c:89:07:ac:9b:dd:75:49: b7:7b:fd:ad:da:00:4f:f1:56:b3:05:ba:84:28:37: 47:d5:a1:a2:04:77:94:78:bd:9c:f0:b9:5a:ba:84: f8:cb:55:39:28:92:bc:24:00:8e:1c:0b:ac:fe:80: 38:8a:26:54:cd:2e:22:fc:fd:16:45:4f:ce:11:dd: 21:f7:1e:9d:97:bb:77:f5:67:52:8a:5d:9f:16:4f: aa:43:7c:53:9f:d5:a9:b5:c9:44:5e:d8:cb:07:33: 46:30:96:84:8a:13:43:9a:77:8d:ae:af:f7:29:4b: 2c:0a:33:4c:50:13:1a:95:c6:e3:97:0f:bb:47:d1: cd:27:1a:a4:0b:4c:21:fc:63:60:3c:dc:05:0e:ac: 91:87:79:77:0b:60:69:3e:93:f7:62:f9:1f:06:e4: be:df:53:94:47:75:04:c3:cc:d3:ff:64:d0:43:4e: d2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:09:69:D4:48:D8:4E:EE:BC:F6:8F:DE:9F:59:F2:A2:EE:15:BC:2B X509v3 Authority Key Identifier: keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:bc:4a:0d:8e:20:4a:3a:6e:a1:d5:95:e1:09:91:67:69:39: c8:87:ac:67:e2:d9:ef:c9:5f:ff:b4:dd:31:4b:e1:56:2c:a5: 99:0b:35:90:49:35:de:d7:dd:38:30:e5:cf:78:c1:02:f6:e9: 7b:77:e9:07:1f:dc:57:d3:32:df:df:aa:04:75:2f:c7:c8:7f: 56:b0:f7:c7:96:bf:22:34:1f:17:18:fb:a4:ce:e4:2e:6e:0a: 2a:d2:26:f6:b0:a5:4d:5b:d6:52:34:84:16:f6:9b:82:d6:71: ef:d4:e4:52:c2:46:08:b7:80:63:dd:09:73:39:7b:30:2e:19: ed:1c:ff:35:3d:69:e7:de:e6:ff:73:27:31:5b:6d:8d:2b:1d: fe:bb:2e:10:b7:d2:29:dd:ad:71:13:da:ea:58:fe:80:74:13: 4f:04:df:f5:5b:57:36:aa:8d:9c:04:89:1e:c1:3a:be:91:7a: d7:32:ea:06:16:be:7c:81:b5:87:94:fe:f7:fc:07:e2:d0:81: 6a:ea:d4:f8:86:bb:25:b0:40:21:d6:f3:63:48:d1:9e:14:23: eb:13:07:b5:62:24:ae:cd:4a:c8:a8:8d:8f:37:33:e6:9b:e8: 33:da:af:c5:63:e8:63:0c:a4:09:a0:1b:92:cb:ea:0e:1b:ad: 47:b4:e1:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7PpNsKKpSS8lbDhOdEd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTE1ZmZlMWRiZmU3NmE4MDVmZDBkZmIyZTBjOGQ3ZTQ5 YWY1OWYwHhcNMjUxMjIxMDgwMDUzWhcNMjUxMjIyMDgwMDUzWjAzMTEwLwYDVQQD EygxMjA5NjlkNDQ4ZDg0ZWVlYmNmNjhmZGU5ZjU5ZjJhMmVlMTViYzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK6VWkp1MXj0OXanMy+okkr9YYkf jj2MdpsuFKTwiQqMwx8S5nUhWQCc/Cm8h9wSHpsbpdbbVG1LtzeegqE1jFzcVIJ8 gLnU5PJzb+FcQXDHTIkHrJvddUm3e/2t2gBP8VazBbqEKDdH1aGiBHeUeL2c8Lla uoT4y1U5KJK8JACOHAus/oA4iiZUzS4i/P0WRU/OEd0h9x6dl7t39WdSil2fFk+q Q3xTn9WptclEXtjLBzNGMJaEihNDmneNrq/3KUssCjNMUBMalcbjlw+7R9HNJxqk C0wh/GNgPNwFDqyRh3l3C2BpPpP3YvkfBuS+31OUR3UEw8zT/2TQQ07SwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIJadRI2E7uvPaP3p9Z8qLuFbwrMB8GA1UdIwQY MBaAFANRX/4dv+dqgF/Q37LgyNfkmvWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAt ZDM4NDk1ZmIwOWEwLzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAtZDM4NDk1ZmIwOWEw LzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7xKDY4g SjpuodWV4QmRZ2k5yIesZ+LZ78lf/7TdMUvhViylmQs1kEk13tfdODDlz3jBAvbp e3fpBx/cV9My39+qBHUvx8h/VrD3x5a/IjQfFxj7pM7kLm4KKtIm9rClTVvWUjSE FvabgtZx79TkUsJGCLeAY90Jczl7MC4Z7Rz/NT1p597m/3MnMVttjSsd/rsuELfS Kd2tcRPa6lj+gHQTTwTf9VtXNqqNnASJHsE6vpF61zLqBha+fIG1h5T+9/wH4tCB aurU+Ia7JbBAIdbzY0jRnhQj6xMHtWIkrs1KyKiNjzcz5pvoM9qvxWPoYwykCaAb ksvqDhutR7ThGw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:48:48 2025 by rpki-client