This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft File: A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json) Hash identifier: LKUXgY8XX7MfkY769FUXDfY5T0Cb5YSFFp9oxl2KVxs= Subject key identifier: E5:8B:46:25:BC:D8:F4:0D:2B:AD:74:72:B5:8A:7A:11:16:A8:5A:92 Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77 Certificate issuer: /CN=039e78b45b5f59594eb811f3ac69062967f28c77 Certificate serial: 019B4DE019DB2F01EBD89C2C0B6B9A38906F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft Manifest number: 0605 Signing time: Wed 24 Dec 2025 01:01:30 +0000 Manifest this update: Wed 24 Dec 2025 01:01:30 +0000 Manifest next update: Thu 25 Dec 2025 01:01:30 +0000 Files and hashes: 1: 7h2grz8OfZg3_f3qnvjsQOWeT0M.roa (hash: F0gJrE4+UT2zrGrF6oXGx/pjZ35hmL1zwnN5iPSHMCs=) 2: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: XRoiTmCVj3S0baZCq/HdJRXMPOYciFfIHZKFMnAHkQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:19:db:2f:01:eb:d8:9c:2c:0b:6b:9a:38:90:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77 Validity Not Before: Dec 24 01:01:30 2025 GMT Not After : Dec 25 01:01:30 2025 GMT Subject: CN=e58b4625bcd8f40d2bad7472b58a7a1116a85a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:07:e6:98:65:cb:af:5a:ef:3f:12:b9:04:13: 43:bd:53:d4:12:1e:dd:60:fc:99:1e:60:b6:a9:02: 25:51:83:d5:74:7e:d4:50:6a:16:38:9e:8f:1f:4f: 8f:ca:3d:d8:fc:af:21:ce:a8:e1:aa:62:b8:fc:4e: 84:81:2d:52:cd:25:0d:fe:80:c1:3b:4b:b3:87:f3: c0:ba:ad:9c:f5:e4:99:18:20:66:bc:65:8f:78:5a: cb:f4:00:cf:cf:01:f7:f6:73:d8:75:01:4d:10:24: 89:d7:a9:b3:31:01:f5:12:82:84:17:80:ee:03:f3: 32:fa:ba:60:98:2a:c1:69:ca:cd:0a:b7:04:a6:b2: 6c:df:e9:e6:98:54:ea:6c:ea:ce:0b:a6:f4:e9:2e: ec:c6:c2:be:f1:65:08:c1:43:1c:1e:0e:51:3e:17: 65:d4:14:f5:7c:af:ce:ad:46:81:8f:d2:cf:6f:c7: 3d:10:84:d7:c2:44:e8:97:c1:29:b0:df:8b:06:05: d9:48:4e:2f:5e:c6:50:83:43:1b:c7:4c:05:7f:65: 8b:df:7c:14:53:7f:3e:a2:40:ce:c8:09:5f:a8:37: b1:66:7c:2e:64:2e:ab:37:ce:73:0b:20:a2:bd:23: eb:a0:a6:11:7c:06:5f:de:f9:d7:50:1a:d0:e3:25: 1f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8B:46:25:BC:D8:F4:0D:2B:AD:74:72:B5:8A:7A:11:16:A8:5A:92 X509v3 Authority Key Identifier: keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b3:e1:39:d4:34:d5:18:cc:7d:dc:cd:83:7f:a0:0a:5e:5a: 33:7f:1b:a0:32:6d:63:80:59:9e:e1:d8:09:01:d2:12:48:a6: 00:33:f3:5c:f7:69:9d:9c:b5:c1:fb:15:64:2a:85:df:98:73: f9:6e:cd:46:5d:62:2a:d5:f3:03:e1:c7:6f:43:54:3d:74:a3: 4e:d9:08:16:bc:78:fa:3c:aa:8f:a4:51:2b:f2:57:8e:ed:98: 20:07:0c:92:c8:e8:f0:d3:46:27:43:5e:26:80:dc:5f:9c:a8: bd:56:82:f4:25:58:23:07:e6:33:92:61:a3:90:30:f0:31:74: ff:f3:9e:c5:21:ed:13:ee:a5:43:8c:da:9f:33:52:33:e9:f3: bc:dd:9b:06:81:e2:3f:d3:e8:15:cc:ca:95:bc:41:98:fd:3c: 50:c1:b9:af:d8:a3:08:d2:a7:b1:69:67:83:ab:ce:49:16:1a: 67:05:b4:00:ce:76:f3:09:fe:04:07:6e:f6:64:5c:ba:de:e3: 45:fb:df:6d:fc:67:89:a1:11:78:aa:8b:a3:56:b8:2a:fc:58: 1c:f0:e1:fa:09:ac:6d:c0:cd:7c:94:9e:7a:d2:00:b4:a7:98: 9b:f0:ca:77:0b:64:c6:c0:d0:78:2d:4c:76:23:b5:26:e0:32: 8a:04:66:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4BnbLwHr2JwsC2uaOJBvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOWU3OGI0NWI1ZjU5NTk0ZWI4MTFmM2FjNjkwNjI5Njdm MjhjNzcwHhcNMjUxMjI0MDEwMTMwWhcNMjUxMjI1MDEwMTMwWjAzMTEwLwYDVQQD EyhlNThiNDYyNWJjZDhmNDBkMmJhZDc0NzJiNThhN2ExMTE2YTg1YTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgfmmGXLr1rvPxK5BBNDvVPUEh7d YPyZHmC2qQIlUYPVdH7UUGoWOJ6PH0+Pyj3Y/K8hzqjhqmK4/E6EgS1SzSUN/oDB O0uzh/PAuq2c9eSZGCBmvGWPeFrL9ADPzwH39nPYdQFNECSJ16mzMQH1EoKEF4Du A/My+rpgmCrBacrNCrcEprJs3+nmmFTqbOrOC6b06S7sxsK+8WUIwUMcHg5RPhdl 1BT1fK/OrUaBj9LPb8c9EITXwkTol8EpsN+LBgXZSE4vXsZQg0Mbx0wFf2WL33wU U38+okDOyAlfqDexZnwuZC6rN85zCyCivSProKYRfAZf3vnXUBrQ4yUf4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWLRiW82PQNK610crWKehEWqFqSMB8GA1UdIwQY MBaAFAOeeLRbX1lZTrgR86xpBiln8ox3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQt MjZhMzhkYzg2NzBiLzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQtMjZhMzhkYzg2NzBi LzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbPhOdQ0 1RjMfdzNg3+gCl5aM38boDJtY4BZnuHYCQHSEkimADPzXPdpnZy1wfsVZCqF35hz +W7NRl1iKtXzA+HHb0NUPXSjTtkIFrx4+jyqj6RRK/JXju2YIAcMksjo8NNGJ0Ne JoDcX5yovVaC9CVYIwfmM5Jho5Aw8DF0//OexSHtE+6lQ4zanzNSM+nzvN2bBoHi P9PoFczKlbxBmP08UMG5r9ijCNKnsWlng6vOSRYaZwW0AM528wn+BAdu9mRcut7j RfvfbfxniaEReKqLo1a4KvxYHPDh+gmsbcDNfJSeetIAtKeYm/DKdwtkxsDQeC1M diO1JuAyigRmVQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:37:32 2025 by rpki-client