This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json) Hash identifier: sv2SP+uEz4JSLMfYgAKkIWXaStvUxrlUY1/uVGadvEs= Subject key identifier: DF:8A:49:61:BE:FE:B8:D4:01:B9:CC:FB:B6:0F:87:6C:C1:E8:64:B2 Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4 Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4 Certificate serial: 019B42EE11085C8FC53A03E6D1FC199AB8FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft Manifest number: 1390 Signing time: Sun 21 Dec 2025 22:00:56 +0000 Manifest this update: Sun 21 Dec 2025 22:00:56 +0000 Manifest next update: Mon 22 Dec 2025 22:00:56 +0000 Files and hashes: 1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: 2DGj/hlwN12sgM+llVoJtDwbm6ufA1MaakXCmTzywF0=) 2: nMVNf2lQw6OBO1n2yk42KKveQrw.roa (hash: wyqNzIcUGswTCmLW0W5XZCdk6EXaGRyb1txoc0qPRcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:11:08:5c:8f:c5:3a:03:e6:d1:fc:19:9a:b8:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4 Validity Not Before: Dec 21 22:00:56 2025 GMT Not After : Dec 22 22:00:56 2025 GMT Subject: CN=df8a4961befeb8d401b9ccfbb60f876cc1e864b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:da:af:0c:17:25:4b:25:fd:b2:b7:f2:0d: 33:69:ac:3e:c9:e4:58:d2:6b:22:25:bc:80:30:ba: 86:33:9d:26:8d:02:d8:45:ca:7f:94:13:9e:c8:fa: b2:d5:3f:19:95:4e:ac:a8:82:40:c9:06:37:32:d3: c7:ed:db:47:fe:5b:4e:92:7a:10:0a:e1:fa:5c:17: 32:ec:cd:8e:c5:70:8c:33:87:d6:98:48:8e:06:8f: 22:12:40:4c:8f:fc:09:69:12:7c:3b:5f:ef:5e:e1: e1:7f:37:9a:5c:2b:c9:be:67:fc:91:c5:92:27:37: 73:c5:92:17:2c:e6:08:3c:c5:20:eb:34:4d:5a:86: 7b:e0:de:64:cb:28:ae:3c:15:2b:12:12:39:b1:a6: b8:27:eb:e3:9d:88:33:e7:c9:8c:47:38:e9:c0:57: 9f:dc:ef:5d:66:1a:7d:28:33:7b:3d:73:c0:9a:cf: 2b:73:20:6f:eb:6a:2f:97:96:8a:25:78:f3:fb:0b: ef:c3:8a:4e:83:53:37:8b:9b:21:34:16:e3:61:c6: 7b:a0:5f:d4:46:35:cf:8a:07:e9:25:83:d7:87:5a: 5f:68:e8:b0:d9:69:d8:92:cd:cd:da:1e:5c:e3:89: df:dc:83:96:01:31:75:cf:9c:8e:c1:54:75:aa:41: 30:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8A:49:61:BE:FE:B8:D4:01:B9:CC:FB:B6:0F:87:6C:C1:E8:64:B2 X509v3 Authority Key Identifier: keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:63:4f:13:93:f9:44:68:d3:bc:52:4f:a3:1a:9d:d7:92:d8: 0f:c5:20:1d:dd:71:62:56:db:c7:ef:6a:6e:2c:c3:5e:d6:26: d3:3c:c6:a0:de:ee:a6:09:b5:2d:89:8d:c1:3f:60:f3:c0:25: 9c:87:f8:2e:5e:84:a8:c4:53:7e:19:d7:cc:0d:5d:1d:f4:be: a6:6a:13:9c:63:8d:05:e7:52:9e:4e:34:70:67:e9:a9:1a:63: 22:d0:11:bf:69:25:72:3d:bb:df:67:ae:02:42:21:65:fa:19: 51:9c:c8:c2:06:f2:6e:c6:50:a4:22:55:e6:6c:38:e5:4f:a7: 83:e2:ba:f8:d0:05:e6:b1:aa:19:85:98:2f:02:74:10:0d:06: 0f:3b:e0:6e:e6:fb:89:19:32:b2:e4:75:a2:9a:1f:8a:d1:fd: a9:82:29:5a:c3:e8:43:02:c6:4b:8b:da:5c:24:b6:de:80:46: 3f:49:9e:2e:d7:46:78:7f:25:73:4b:a8:95:6a:75:ad:01:07: f0:a6:a1:80:57:b5:5c:45:a5:aa:3a:4e:45:57:20:92:e5:b2: 6b:7f:d3:fd:e6:aa:9e:f1:f5:51:44:f6:17:d8:9d:25:3f:5d: 65:b2:b7:f0:2b:0b:c0:c2:48:7e:a8:fd:30:66:1e:9f:5f:ac: 1c:7a:f8:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7hEIXI/FOgPm0fwZmrj/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNDg1ZmJkYjBiMWEwNGQ1MmU4MWRjZGI5NTg1ODkxNmEx ZGRhZTQwHhcNMjUxMjIxMjIwMDU2WhcNMjUxMjIyMjIwMDU2WjAzMTEwLwYDVQQD EyhkZjhhNDk2MWJlZmViOGQ0MDFiOWNjZmJiNjBmODc2Y2MxZTg2NGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8XarwwXJUsl/bK38g0zaaw+yeRY 0msiJbyAMLqGM50mjQLYRcp/lBOeyPqy1T8ZlU6sqIJAyQY3MtPH7dtH/ltOknoQ CuH6XBcy7M2OxXCMM4fWmEiOBo8iEkBMj/wJaRJ8O1/vXuHhfzeaXCvJvmf8kcWS JzdzxZIXLOYIPMUg6zRNWoZ74N5kyyiuPBUrEhI5saa4J+vjnYgz58mMRzjpwFef 3O9dZhp9KDN7PXPAms8rcyBv62ovl5aKJXjz+wvvw4pOg1M3i5shNBbjYcZ7oF/U RjXPigfpJYPXh1pfaOiw2WnYks3N2h5c44nf3IOWATF1z5yOwVR1qkEwywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+KSWG+/rjUAbnM+7YPh2zB6GSyMB8GA1UdIwQY MBaAFANIX72wsaBNUugdzblYWJFqHdrkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTBoZnZiQ3hvRTFTNkIzTnVWaFlrV29kMnVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81MjRlNWItYThhZS00NWFiLWJiZDkt NDQ5MTg0NWRjZDQ3LzEvQTBoZnZiQ3hvRTFTNkIzTnVWaFlrV29kMnVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81MjRlNWItYThhZS00NWFiLWJiZDktNDQ5MTg0NWRjZDQ3 LzEvQTBoZnZiQ3hvRTFTNkIzTnVWaFlrV29kMnVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2NPE5P5 RGjTvFJPoxqd15LYD8UgHd1xYlbbx+9qbizDXtYm0zzGoN7upgm1LYmNwT9g88Al nIf4Ll6EqMRTfhnXzA1dHfS+pmoTnGONBedSnk40cGfpqRpjItARv2klcj2732eu AkIhZfoZUZzIwgbybsZQpCJV5mw45U+ng+K6+NAF5rGqGYWYLwJ0EA0GDzvgbub7 iRkysuR1opofitH9qYIpWsPoQwLGS4vaXCS23oBGP0meLtdGeH8lc0uolWp1rQEH 8KahgFe1XEWlqjpORVcgkuWya3/T/eaqnvH1UUT2F9idJT9dZbK38CsLwMJIfqj9 MGYen1+sHHr4JA== -----END CERTIFICATE-----Generated at Mon Dec 22 03:48:15 2025 by rpki-client