This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft File: A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json) Hash identifier: v3AAS1+i0p07G7IkYSTUshs50VvNg13oXxhPISEpGmw= Subject key identifier: 3F:C3:95:62:8C:EA:3E:FC:4E:BF:64:0D:2B:64:FE:A9:77:DB:E4:CE Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2 Certificate issuer: /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2 Certificate serial: 019B3CEBA5F0D9BB53D6A9EF78F31D2B0A99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft Manifest number: 1395 Signing time: Sat 20 Dec 2025 18:00:34 +0000 Manifest this update: Sat 20 Dec 2025 18:00:34 +0000 Manifest next update: Sun 21 Dec 2025 18:00:34 +0000 Files and hashes: 1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: AOO9CD8rfE5WIbPCn90XiIqaQRqpeP6GRe6o1S46A94=) 2: woal0JSD05J3-HE_srcu4HZklsQ.roa (hash: K5meebvZSg84nTxN3gUNn0hvuS4tbvBQ0f3EUj0mZV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:a5:f0:d9:bb:53:d6:a9:ef:78:f3:1d:2b:0a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2 Validity Not Before: Dec 20 18:00:34 2025 GMT Not After : Dec 21 18:00:34 2025 GMT Subject: CN=3fc395628cea3efc4ebf640d2b64fea977dbe4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:19:f5:59:40:ce:b3:e6:34:b7:a5:d7:ad: 9f:43:d5:e1:1d:2e:ab:c2:9a:5b:74:f9:29:47:90: a7:fe:0b:59:68:af:51:2d:60:b0:57:ce:dd:1a:a6: f6:37:76:97:40:14:36:0e:34:a0:57:b1:2e:80:62: 39:aa:19:a4:b1:6e:59:cb:1e:98:47:39:49:16:b8: 45:f0:fd:2a:73:0e:fb:5a:53:be:09:64:fc:24:83: 95:c1:25:e1:15:6b:e7:52:d1:8c:43:e3:05:db:74: 9f:82:05:34:11:03:d9:ad:8c:9b:94:20:ef:1a:d6: 98:ae:32:80:f4:9d:38:07:ad:6d:19:0f:dd:e1:1e: 89:70:3a:90:a3:11:9f:45:df:5b:f0:d0:d6:9f:af: a2:ed:1c:fe:ab:18:89:64:80:6c:2d:1b:31:58:d0: 3c:03:96:0a:e6:79:04:fd:93:13:47:2e:03:98:6f: 8d:e5:b6:df:eb:6c:e9:78:9f:b5:d1:4b:15:d1:b5: 12:6e:7f:d7:bf:d3:c1:ef:90:c5:11:d6:09:79:74: 80:1d:4f:56:60:73:a4:8b:a2:42:37:32:dd:dd:10: e6:a8:a1:0f:72:e4:4d:4a:c2:79:e6:9d:02:47:80: 71:b5:17:c2:9d:68:c7:8b:f4:ed:1c:08:a8:82:93: 7f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C3:95:62:8C:EA:3E:FC:4E:BF:64:0D:2B:64:FE:A9:77:DB:E4:CE X509v3 Authority Key Identifier: keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a5:42:f9:fe:83:2d:11:2b:5a:fa:c7:fc:e2:ae:f1:3c:7a: 09:e2:84:59:ff:04:8c:cb:98:bd:cf:be:52:90:1e:a1:5f:e0: 22:3e:57:b4:da:ed:79:16:d2:d1:3f:0d:c2:dd:77:ad:b1:6f: 9d:d0:1d:86:88:c7:20:10:3b:c7:01:3e:a5:ee:ff:53:7f:1c: ce:85:dc:76:cc:ce:75:ff:27:e0:eb:3a:37:fc:fa:a0:71:e3: d1:30:e6:1f:16:dd:79:c2:d3:de:36:a0:c4:1f:a6:f0:ff:ff: 96:58:84:ab:d6:61:32:30:37:cb:03:8d:99:cb:16:10:c7:cb: f4:f9:48:01:db:63:82:ee:d5:d9:3c:52:bf:ef:b5:39:b4:9d: bb:3d:c8:8e:c5:3c:ad:cf:1d:f3:f8:10:d8:9b:dd:93:e7:e9: 26:36:50:06:53:f2:56:29:70:6a:40:64:4c:e3:3d:03:5c:5b: 33:28:9f:3b:c5:5d:60:1f:60:a0:7c:2f:ea:07:5c:73:09:e7: be:7c:d2:74:a8:63:11:f8:aa:d5:98:a8:24:4c:b5:15:b2:31: 7a:e0:2f:54:52:6d:63:84:59:df:32:a7:98:d6:56:10:e5:22: 48:55:87:f0:54:67:dd:fd:fb:86:73:58:0f:fc:f3:ad:e6:75: 65:be:3d:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs866Xw2btT1qnvePMdKwqZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZTg1ZmE0YmU2Njk0MmU1OTA5ZmQzYTFmZDRhMGMyNmUz NmEwZDIwHhcNMjUxMjIwMTgwMDM0WhcNMjUxMjIxMTgwMDM0WjAzMTEwLwYDVQQD EygzZmMzOTU2MjhjZWEzZWZjNGViZjY0MGQyYjY0ZmVhOTc3ZGJlNGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/oZ9VlAzrPmNLel162fQ9XhHS6r wppbdPkpR5Cn/gtZaK9RLWCwV87dGqb2N3aXQBQ2DjSgV7EugGI5qhmksW5Zyx6Y RzlJFrhF8P0qcw77WlO+CWT8JIOVwSXhFWvnUtGMQ+MF23SfggU0EQPZrYyblCDv GtaYrjKA9J04B61tGQ/d4R6JcDqQoxGfRd9b8NDWn6+i7Rz+qxiJZIBsLRsxWNA8 A5YK5nkE/ZMTRy4DmG+N5bbf62zpeJ+10UsV0bUSbn/Xv9PB75DFEdYJeXSAHU9W YHOki6JCNzLd3RDmqKEPcuRNSsJ55p0CR4BxtRfCnWjHi/TtHAiogpN/IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/DlWKM6j78Tr9kDStk/ql32+TOMB8GA1UdIwQY MBaAFAPoX6S+ZpQuWQn9Oh/UoMJuNqDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS1oZnBMNW1sQzVaQ2YwNkg5U2d3bTQyb05JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMjczMjktM2VjZi00ODg1LWE3NzMt NThlNWI3NmJlYmI3LzEvQS1oZnBMNW1sQzVaQ2YwNkg5U2d3bTQyb05JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMjczMjktM2VjZi00ODg1LWE3NzMtNThlNWI3NmJlYmI3 LzEvQS1oZnBMNW1sQzVaQ2YwNkg5U2d3bTQyb05JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6VC+f6D LRErWvrH/OKu8Tx6CeKEWf8EjMuYvc++UpAeoV/gIj5XtNrteRbS0T8Nwt13rbFv ndAdhojHIBA7xwE+pe7/U38czoXcdszOdf8n4Os6N/z6oHHj0TDmHxbdecLT3jag xB+m8P//lliEq9ZhMjA3ywONmcsWEMfL9PlIAdtjgu7V2TxSv++1ObSduz3IjsU8 rc8d8/gQ2Jvdk+fpJjZQBlPyVilwakBkTOM9A1xbMyifO8VdYB9goHwv6gdccwnn vnzSdKhjEfiq1ZioJEy1FbIxeuAvVFJtY4RZ3zKnmNZWEOUiSFWH8FRn3f37hnNY D/zzreZ1Zb49Ug== -----END CERTIFICATE-----Generated at Sat Dec 20 21:28:59 2025 by rpki-client