This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft File: A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json) Hash identifier: 09Qz6I5l4hVLf6l9h4eVwVCHn13jdcq+8/lkfqUzz90= Subject key identifier: 61:52:0E:8E:21:44:88:C5:D0:7E:36:0D:27:11:BD:29:A0:8B:BE:71 Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97 Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397 Certificate serial: 019B54867709C4615265714D95A989C13F47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft Manifest number: 0ECD Signing time: Thu 25 Dec 2025 08:00:56 +0000 Manifest this update: Thu 25 Dec 2025 08:00:56 +0000 Manifest next update: Fri 26 Dec 2025 08:00:56 +0000 Files and hashes: 1: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: CpLQ0KfgkPNExbBdQRBZPeEftZ+Jt94erMX9pO7MayY=) 2: bdzpUxndz61zfLz7ajjz4tyOnrg.roa (hash: GGVEBdFUMRnBM929MvvBO/m7RzF/RhhQavvdN/BpLuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:77:09:c4:61:52:65:71:4d:95:a9:89:c1:3f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397 Validity Not Before: Dec 25 08:00:56 2025 GMT Not After : Dec 26 08:00:56 2025 GMT Subject: CN=61520e8e214488c5d07e360d2711bd29a08bbe71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:f7:cc:92:6f:b3:08:a3:69:76:f5:25:98: 04:52:07:55:83:10:1f:86:71:7f:4f:b8:da:d3:2a: 67:8b:ab:6f:f5:43:a8:fc:ad:13:28:9f:20:05:84: 47:6e:28:e2:d3:f0:13:f4:75:bc:bf:ee:dd:64:2a: 67:2d:29:c5:b4:d1:88:70:a5:b5:33:24:cc:98:81: 7e:d2:07:52:ed:c3:a7:f4:cd:01:aa:40:3e:39:d7: bb:04:0a:2a:68:5a:1e:05:5a:b9:79:a1:b8:6f:0e: cd:12:da:88:87:81:a7:4f:a4:40:3e:f0:54:01:6c: ab:30:a0:3b:26:bb:80:62:e5:31:98:6c:7e:8c:27: cd:e1:99:d1:44:ae:14:4b:c1:5f:01:48:c9:ba:41: 85:73:a6:34:b5:db:97:fb:8e:07:08:53:07:1e:ea: f9:98:9a:e0:59:66:d7:8c:40:6d:e0:49:bd:7b:0a: a1:0c:3e:52:4f:e2:f8:c8:82:78:a3:46:0a:9a:1b: 40:51:f9:36:b5:75:ef:db:ae:46:35:f0:9a:4e:63: f3:a3:a9:14:38:b5:93:87:4e:0f:ee:08:25:3a:f1: 8b:49:f4:79:c6:87:36:94:f1:61:7d:e9:8a:90:2c: 1c:12:83:46:c2:57:64:d0:48:4f:8f:f1:09:9e:a3: 75:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:52:0E:8E:21:44:88:C5:D0:7E:36:0D:27:11:BD:29:A0:8B:BE:71 X509v3 Authority Key Identifier: keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:59:b0:1f:4d:88:fb:30:53:6c:e0:15:e9:d4:a0:dc:9a:be: e3:65:82:f3:f8:d6:5b:eb:bd:50:5d:fd:f6:c4:84:c2:a6:13: 8c:cd:76:15:ba:b1:f6:5d:b3:76:37:eb:46:1c:bf:f3:29:fa: 7a:b8:95:46:2d:0a:30:3e:02:57:5d:e1:90:21:27:ff:0e:4e: 69:0f:50:7a:09:21:6c:8b:d4:e3:70:2b:dc:9a:57:0b:dd:d7: e5:95:f4:d1:68:b9:06:4b:18:26:4b:d5:3d:45:73:64:c1:af: 3d:ce:79:b6:d5:0b:26:e0:a1:f8:ac:1c:69:6b:f4:02:39:de: 0e:c4:14:87:f7:d6:f4:3f:08:4d:5d:a3:d0:47:4a:bb:18:9b: 3a:c2:fc:34:05:20:a8:3d:66:a5:76:17:99:29:06:ca:3a:c0: 7d:41:b3:b0:10:44:3e:e4:ee:b6:51:fc:a3:a4:17:33:5a:2f: 06:67:59:10:47:4b:c4:b0:7d:45:e2:bb:ac:7c:01:f3:6c:30: d0:37:a8:52:29:98:44:20:15:47:f1:7a:b1:6f:d2:b8:b3:f4: f6:31:1f:9c:66:84:41:4f:b3:a3:1d:b4:b7:a6:29:70:b5:78: c6:16:aa:6d:ac:74:59:c1:f4:ca:a8:02:6f:ca:dc:fc:7b:cd: 96:6f:5f:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhncJxGFSZXFNlamJwT9HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTkwZjU2MjA1MGQ5NzY5ZWQ1N2IwN2IxYmM5MzFlY2Rk ZjEzOTcwHhcNMjUxMjI1MDgwMDU2WhcNMjUxMjI2MDgwMDU2WjAzMTEwLwYDVQQD Eyg2MTUyMGU4ZTIxNDQ4OGM1ZDA3ZTM2MGQyNzExYmQyOWEwOGJiZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRj3zJJvswijaXb1JZgEUgdVgxAf hnF/T7ja0ypni6tv9UOo/K0TKJ8gBYRHbiji0/AT9HW8v+7dZCpnLSnFtNGIcKW1 MyTMmIF+0gdS7cOn9M0BqkA+Ode7BAoqaFoeBVq5eaG4bw7NEtqIh4GnT6RAPvBU AWyrMKA7JruAYuUxmGx+jCfN4ZnRRK4US8FfAUjJukGFc6Y0tduX+44HCFMHHur5 mJrgWWbXjEBt4Em9ewqhDD5ST+L4yIJ4o0YKmhtAUfk2tXXv265GNfCaTmPzo6kU OLWTh04P7gglOvGLSfR5xoc2lPFhfemKkCwcEoNGwldk0EhPj/EJnqN1AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFSDo4hRIjF0H42DScRvSmgi75xMB8GA1UdIwQY MBaAFANZD1YgUNl2ntV7B7G8kx7N3xOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAt ZWNjNGMxYzM2YjBkLzEvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAtZWNjNGMxYzM2YjBk LzEvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1mwH02I +zBTbOAV6dSg3Jq+42WC8/jWW+u9UF399sSEwqYTjM12Fbqx9l2zdjfrRhy/8yn6 eriVRi0KMD4CV13hkCEn/w5OaQ9QegkhbIvU43Ar3JpXC93X5ZX00Wi5BksYJkvV PUVzZMGvPc55ttULJuCh+KwcaWv0AjneDsQUh/fW9D8ITV2j0EdKuxibOsL8NAUg qD1mpXYXmSkGyjrAfUGzsBBEPuTutlH8o6QXM1ovBmdZEEdLxLB9ReK7rHwB82ww 0DeoUimYRCAVR/F6sW/SuLP09jEfnGaEQU+zox20t6YpcLV4xhaqbax0WcH0yqgC b8rc/HvNlm9fLg== -----END CERTIFICATE-----Generated at Thu Dec 25 12:46:31 2025 by rpki-client