This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json) Hash identifier: qh+40ZjqCTbtxt0j2Zji2jd0TGmOgf8/LRDnQNssWL8= Subject key identifier: 46:58:D2:5E:3C:B7:9B:AB:90:F2:CC:3F:5F:08:A6:2D:D6:F0:F1:0A Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda Certificate serial: 019B3B6B8BB17D236BA592DCEBE955E10DE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft Manifest number: 0395 Signing time: Sat 20 Dec 2025 11:01:02 +0000 Manifest this update: Sat 20 Dec 2025 11:01:02 +0000 Manifest next update: Sun 21 Dec 2025 11:01:02 +0000 Files and hashes: 1: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: YB2t9IDtVU5/CRA3gxcsSPIA6tViyZBmrz91XVSwEkg=) 2: jMIN8b0BVc9eEY8W0xUyZYn9gu0.roa (hash: T+38e+ztuuV+6KtpVMPU6c7/hBQtyKbXl9bJ797XzNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:8b:b1:7d:23:6b:a5:92:dc:eb:e9:55:e1:0d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda Validity Not Before: Dec 20 11:01:02 2025 GMT Not After : Dec 21 11:01:02 2025 GMT Subject: CN=4658d25e3cb79bab90f2cc3f5f08a62dd6f0f10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:81:db:bf:6e:84:a6:e2:d7:c5:15:e6:82: c7:47:b0:88:a8:3d:d6:2e:14:e3:6c:3b:11:65:d3: a3:59:3e:77:7a:45:7e:87:05:83:07:13:e6:30:f4: 7e:35:0e:90:4b:12:9a:c3:e1:e7:d9:88:33:6e:e2: cc:1b:c5:2d:b3:27:48:f4:50:d7:43:dc:c9:1b:9c: 1c:3d:08:ac:bf:63:5f:d5:1d:2d:fa:97:5a:65:53: 52:12:12:8e:54:63:ad:13:e8:56:d7:4e:8d:de:a3: ba:f1:e1:01:81:86:95:1b:dd:9b:23:ca:5a:5a:37: 5c:62:28:bf:06:0b:25:a0:2a:2d:8b:84:b0:0a:cf: ab:15:8f:47:e3:82:d0:ce:8b:0d:90:51:c6:a4:14: a3:af:f4:31:90:a3:f1:73:a8:7c:d1:00:a4:7a:19: bf:be:22:19:85:c9:8d:52:56:d2:8d:95:65:d5:f4: 8c:67:15:39:b2:79:ac:f5:f6:e5:c2:1f:ad:e2:ee: 50:5e:37:a1:c0:0f:ae:97:2e:b7:e8:0f:6e:5e:ba: 64:92:34:d9:5a:80:11:44:34:47:5d:f3:00:dd:d4: 80:d0:3e:fb:c5:35:18:05:02:6c:2a:02:fc:98:94: be:15:f3:82:fc:eb:f2:c2:97:20:4c:c4:0a:58:e0: f3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:58:D2:5E:3C:B7:9B:AB:90:F2:CC:3F:5F:08:A6:2D:D6:F0:F1:0A X509v3 Authority Key Identifier: keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:7a:4e:a2:11:94:bc:63:5f:54:4d:fa:d9:50:33:b4:08:5c: 99:18:e8:b0:be:ea:92:61:3b:0d:56:84:43:3a:85:37:49:ec: 6e:3c:96:54:42:57:cd:16:de:45:44:66:2f:cd:6c:f8:ee:c5: 5e:3e:94:f8:91:d2:df:51:69:ee:0c:d1:19:fa:e4:e8:d7:74: fa:98:95:0a:4c:dc:b7:60:0f:7f:06:31:c0:c2:29:4b:e1:46: 69:91:c0:05:18:c7:43:1b:c5:b7:3e:4a:c2:d0:69:cb:28:7f: ba:e3:56:37:2d:a7:b8:b6:7b:35:e0:6c:ab:11:f5:36:6b:a0: 86:a7:fe:6b:f1:27:65:a5:4f:26:1f:78:0a:56:09:3f:bb:f8: 3c:09:77:1d:39:54:4d:b4:15:14:08:ef:25:6c:1e:24:91:ac: 06:3d:12:9c:7d:cc:53:35:f1:85:bf:bb:cf:c5:c0:82:e5:66: fc:15:ef:af:ab:a5:fb:f6:b0:c2:17:0c:3f:1e:30:11:81:b3: 15:a7:03:04:d7:11:b0:13:54:3f:26:26:56:df:cf:ee:7d:30: b2:8e:45:66:cc:b6:b3:30:6c:3c:d9:7d:9f:37:6a:3a:b6:a7: d4:6b:f4:30:94:b0:ca:9c:76:88:ae:8d:45:c9:a7:da:aa:85: d7:ca:4c:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a4uxfSNrpZLc6+lV4Q3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzllYTRmOTY1ODhiMTZiZDRmY2EzOGQ0YzFkZGY2NWMx YWJmZGEwHhcNMjUxMjIwMTEwMTAyWhcNMjUxMjIxMTEwMTAyWjAzMTEwLwYDVQQD Eyg0NjU4ZDI1ZTNjYjc5YmFiOTBmMmNjM2Y1ZjA4YTYyZGQ2ZjBmMTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbyB279uhKbi18UV5oLHR7CIqD3W LhTjbDsRZdOjWT53ekV+hwWDBxPmMPR+NQ6QSxKaw+Hn2YgzbuLMG8UtsydI9FDX Q9zJG5wcPQisv2Nf1R0t+pdaZVNSEhKOVGOtE+hW106N3qO68eEBgYaVG92bI8pa WjdcYii/BgsloCoti4SwCs+rFY9H44LQzosNkFHGpBSjr/QxkKPxc6h80QCkehm/ viIZhcmNUlbSjZVl1fSMZxU5snms9fblwh+t4u5QXjehwA+uly636A9uXrpkkjTZ WoARRDRHXfMA3dSA0D77xTUYBQJsKgL8mJS+FfOC/OvywpcgTMQKWODz6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZY0l48t5urkPLMP18Ipi3W8PEKMB8GA1UdIwQY MBaAFAPJ6k+WWIsWvU/KONTB3fZcGr/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lN2QwZjAtZjQ4MS00ZmUzLTg2Nzct MWNkMzNjNjJjNDVjLzEvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lN2QwZjAtZjQ4MS00ZmUzLTg2NzctMWNkMzNjNjJjNDVj LzEvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnpOohGU vGNfVE362VAztAhcmRjosL7qkmE7DVaEQzqFN0nsbjyWVEJXzRbeRURmL81s+O7F Xj6U+JHS31Fp7gzRGfrk6Nd0+piVCkzct2APfwYxwMIpS+FGaZHABRjHQxvFtz5K wtBpyyh/uuNWNy2nuLZ7NeBsqxH1Nmughqf+a/EnZaVPJh94ClYJP7v4PAl3HTlU TbQVFAjvJWweJJGsBj0SnH3MUzXxhb+7z8XAguVm/BXvr6ul+/awwhcMPx4wEYGz FacDBNcRsBNUPyYmVt/P7n0wso5FZsy2szBsPNl9nzdqOran1Gv0MJSwypx2iK6N Rcmn2qqF18pMRA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:44:42 2025 by rpki-client