This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft File: A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json) Hash identifier: hXldMoQ/KZlGnMooEdY+y7hVJGiMIw6nzShMhxh0LR4= Subject key identifier: 2A:06:01:B2:3F:46:74:CB:15:8F:96:6F:FF:A9:B9:5F:A2:8E:89:FD Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77 Certificate issuer: /CN=039e78b45b5f59594eb811f3ac69062967f28c77 Certificate serial: 019B405A9A9FABC50E951484FBFAACE3FCA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft Manifest number: 05FE Signing time: Sun 21 Dec 2025 10:00:38 +0000 Manifest this update: Sun 21 Dec 2025 10:00:38 +0000 Manifest next update: Mon 22 Dec 2025 10:00:38 +0000 Files and hashes: 1: 7h2grz8OfZg3_f3qnvjsQOWeT0M.roa (hash: F0gJrE4+UT2zrGrF6oXGx/pjZ35hmL1zwnN5iPSHMCs=) 2: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: aJPYDh3FLaMTC43UV3z8/72B0kyQExWw3NEPAhr12Lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:9a:9f:ab:c5:0e:95:14:84:fb:fa:ac:e3:fc:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77 Validity Not Before: Dec 21 10:00:38 2025 GMT Not After : Dec 22 10:00:38 2025 GMT Subject: CN=2a0601b23f4674cb158f966fffa9b95fa28e89fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3a:d0:3d:c1:fe:97:22:87:cf:5e:df:fc:48: a7:89:bc:97:70:1c:85:4f:93:71:24:73:3d:7a:e9: 87:f6:0c:ac:c5:ff:0c:41:8e:34:c7:53:e8:17:f5: 35:3c:3a:8d:7a:a9:8e:7f:3a:1c:c1:45:15:c1:85: d9:69:14:91:d2:25:84:72:51:ae:76:1b:c7:b0:03: 0f:dd:32:82:99:75:7a:21:b2:ba:0b:e5:0c:a6:6a: 77:07:ad:9a:f2:b4:1f:91:a4:62:7f:fc:6f:d5:f1: ba:03:87:c1:39:ef:df:5e:de:e1:41:3b:66:9e:24: 8d:bb:8e:5c:3f:8d:97:5a:57:a3:16:5d:a6:9d:db: 77:d9:9a:e1:1b:be:26:0a:cd:af:bc:38:83:8c:de: 42:ff:68:e6:28:40:e2:dc:81:09:00:8a:0e:0b:95: cd:f3:fd:18:5f:5b:2c:6c:49:d1:0d:8e:02:a4:78: 87:f1:81:9a:1f:2a:76:c6:a8:7f:3f:a7:19:30:91: df:9c:b1:3b:76:8e:c6:21:6a:54:4e:a9:c0:fc:3a: 4f:b4:73:02:9b:ad:68:53:e2:22:9c:54:6e:48:74: 98:36:5a:92:99:12:90:f2:57:1f:ab:1a:da:ed:b5: 78:c4:9a:ac:6d:a8:bb:42:73:f7:65:8f:b5:72:ec: 2c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:06:01:B2:3F:46:74:CB:15:8F:96:6F:FF:A9:B9:5F:A2:8E:89:FD X509v3 Authority Key Identifier: keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:be:53:90:b7:19:cc:64:4c:23:26:94:58:de:0c:38:2d:ae: 35:b0:d3:c3:e0:f3:a1:82:f1:5e:40:e9:55:f4:51:53:c2:1d: 0e:4b:a4:1f:f4:f3:39:83:2e:88:ee:a1:e3:3a:c3:be:c7:c7: 89:10:a4:cc:a6:32:6c:a4:07:38:89:3c:9b:4b:16:32:9a:24: bb:09:59:45:0c:d6:40:2b:bb:57:43:e6:5f:e2:65:c9:1a:b3: 19:e7:92:4f:01:c0:90:ad:19:31:ee:2e:b6:19:8a:df:74:fa: 98:4c:bc:70:48:a4:2c:98:95:48:e8:23:77:22:e0:fe:24:67: 0b:4f:ef:09:f9:86:c1:45:18:5d:d0:6a:67:da:04:a1:d5:ed: e4:be:53:d3:d3:cd:6a:b1:66:f3:55:27:2c:83:22:f9:74:2e: 9b:81:52:96:e3:0c:c7:ff:d7:18:ca:1c:11:ab:b2:e7:b7:0b: 70:64:54:6e:75:88:df:10:83:84:85:1e:69:dc:57:75:d0:c1: 88:44:b7:eb:76:54:58:42:4d:d7:14:95:24:12:10:29:f3:24: ed:aa:70:c6:08:48:04:1e:28:e1:58:48:e5:f9:07:d4:ed:82: 08:a0:98:72:f6:b3:65:57:8a:f7:ed:ac:65:87:0d:7a:12:d9: 0a:9b:55:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWpqfq8UOlRSE+/qs4/yiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOWU3OGI0NWI1ZjU5NTk0ZWI4MTFmM2FjNjkwNjI5Njdm MjhjNzcwHhcNMjUxMjIxMTAwMDM4WhcNMjUxMjIyMTAwMDM4WjAzMTEwLwYDVQQD EygyYTA2MDFiMjNmNDY3NGNiMTU4Zjk2NmZmZmE5Yjk1ZmEyOGU4OWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TrQPcH+lyKHz17f/EinibyXcByF T5NxJHM9eumH9gysxf8MQY40x1PoF/U1PDqNeqmOfzocwUUVwYXZaRSR0iWEclGu dhvHsAMP3TKCmXV6IbK6C+UMpmp3B62a8rQfkaRif/xv1fG6A4fBOe/fXt7hQTtm niSNu45cP42XWlejFl2mndt32ZrhG74mCs2vvDiDjN5C/2jmKEDi3IEJAIoOC5XN 8/0YX1ssbEnRDY4CpHiH8YGaHyp2xqh/P6cZMJHfnLE7do7GIWpUTqnA/DpPtHMC m61oU+IinFRuSHSYNlqSmRKQ8lcfqxra7bV4xJqsbai7QnP3ZY+1cuwswQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoGAbI/RnTLFY+Wb/+puV+ijon9MB8GA1UdIwQY MBaAFAOeeLRbX1lZTrgR86xpBiln8ox3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQt MjZhMzhkYzg2NzBiLzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQtMjZhMzhkYzg2NzBi LzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHr5TkLcZ zGRMIyaUWN4MOC2uNbDTw+DzoYLxXkDpVfRRU8IdDkukH/TzOYMuiO6h4zrDvsfH iRCkzKYybKQHOIk8m0sWMpokuwlZRQzWQCu7V0PmX+JlyRqzGeeSTwHAkK0ZMe4u thmK33T6mEy8cEikLJiVSOgjdyLg/iRnC0/vCfmGwUUYXdBqZ9oEodXt5L5T09PN arFm81UnLIMi+XQum4FSluMMx//XGMocEauy57cLcGRUbnWI3xCDhIUeadxXddDB iES363ZUWEJN1xSVJBIQKfMk7apwxghIBB4o4VhI5fkH1O2CCKCYcvazZVeK9+2s ZYcNehLZCptVBA== -----END CERTIFICATE-----Generated at Sun Dec 21 18:58:27 2025 by rpki-client