This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json) Hash identifier: m4PINv5vMWcMpQflqjI06S2oNo2ETtDRAp6UXML7K7A= Subject key identifier: B9:B3:64:9B:B2:85:04:2E:68:B4:76:76:00:A8:4F:B5:19:FC:81:DD Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8 Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8 Certificate serial: 019B53E185C805EA591608D324FA097DF923 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft Manifest number: 0E33 Signing time: Thu 25 Dec 2025 05:00:47 +0000 Manifest this update: Thu 25 Dec 2025 05:00:47 +0000 Manifest next update: Fri 26 Dec 2025 05:00:47 +0000 Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: 6FoisJeVR6D6kebMmVleEL//QvzzjOG17aCwMp4D0uc=) 2: AThGgouxKv8fc_GjPfk1KTqcYJ8.roa (hash: pBwVTlstihKQTv02WIHNb7H+18sdn98VZXnJD5bJ+rM=) 3: O29Zxmmx6-HgpfQCaZNYO-hkBL0.roa (hash: AJ99xUwGr6nteSCZy2ZqWhrEmfyvYWpbIQR3DNjRUos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:85:c8:05:ea:59:16:08:d3:24:fa:09:7d:f9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8 Validity Not Before: Dec 25 05:00:47 2025 GMT Not After : Dec 26 05:00:47 2025 GMT Subject: CN=b9b3649bb285042e68b4767600a84fb519fc81dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:35:df:27:c4:da:3d:86:bf:72:40:81:3b: 73:87:7d:42:9a:0b:37:cc:22:08:90:85:73:c8:b6: 54:55:35:2b:da:f2:fc:8a:89:bf:da:a2:e8:ba:a8: fd:37:4e:91:0d:a9:c6:fd:91:9c:1f:e2:da:d0:b3: 08:7f:25:81:8b:cf:61:2b:9e:a7:d7:3c:72:97:1b: 30:69:32:33:2c:49:7c:8f:cf:f1:8d:e4:56:de:6d: 98:9c:d2:b9:fb:52:92:71:b7:26:dc:63:de:c1:d5: 13:d0:2f:1d:36:3b:68:d0:ad:27:dd:ff:0b:93:3c: 23:d1:0a:42:b6:6a:58:ab:25:6b:3d:e4:a0:d1:75: ba:ce:27:81:e0:f6:0a:8a:76:9f:7e:ad:7c:6a:97: a8:29:57:84:b4:bf:a2:6b:34:94:fa:f4:09:51:fe: ab:45:45:29:ad:92:38:6f:a9:f9:4d:55:34:6f:37: 66:34:bb:28:7f:0b:ef:5e:7b:8f:55:b5:4a:33:45: 03:98:5f:d7:a0:ff:d8:e4:c7:85:a1:5b:e7:98:2e: 36:8d:03:66:20:8c:43:73:e6:16:ee:2c:a0:9a:27: c9:95:82:79:43:37:05:16:8c:7f:76:ef:ba:95:18: 67:53:d6:e1:1f:83:17:1c:de:c9:b8:e2:6d:fc:46: 1f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B3:64:9B:B2:85:04:2E:68:B4:76:76:00:A8:4F:B5:19:FC:81:DD X509v3 Authority Key Identifier: keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:a5:4e:78:f6:8c:d4:9f:67:f4:3e:6a:61:56:23:8d:bb:15: 3b:63:09:51:da:f0:c2:4a:4d:fb:a7:37:05:3b:c8:40:9d:b8: c6:3e:1d:eb:0b:a1:6e:b6:98:b3:c0:8c:a7:74:33:02:eb:4a: 03:9b:17:e3:db:b7:d8:a3:d8:53:9c:5c:eb:8e:94:20:7d:7b: d1:ff:81:75:8f:a6:e3:5e:1b:ce:22:5f:50:82:0a:bb:26:1e: 79:7d:de:e5:3e:61:c7:31:41:91:b6:05:a6:2f:d1:a7:48:d4: ef:47:37:4d:93:b8:7b:ca:82:ac:da:11:1b:a3:39:78:7c:a0: da:13:19:a5:0b:56:4d:b8:0f:bc:55:55:a2:5d:be:f1:9a:fb: e6:c3:27:c7:43:2f:d1:7e:fa:52:bd:15:c0:4a:06:64:9f:e9: 30:9f:c0:de:a7:13:bd:1a:b0:55:09:89:d7:cd:86:fe:b7:7e: 3c:6f:62:5c:8a:9a:68:ed:7c:4c:af:ff:b1:71:9f:2b:a2:92: 8a:ca:83:32:ca:a6:79:2a:17:38:b2:66:1d:98:3e:9a:00:7e: ea:53:3f:e3:b2:3f:0a:18:11:9d:23:c8:c0:76:3c:8f:24:ce: dc:20:47:0d:c0:98:3c:05:a2:a8:85:66:4e:bd:b1:5d:19:28: a2:e5:1c:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4YXIBepZFgjTJPoJffkjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzODRlODhmYjc5YTM3NzZjYjA1ODNlMmI2N2EwYmVjNmRm YzY4YjgwHhcNMjUxMjI1MDUwMDQ3WhcNMjUxMjI2MDUwMDQ3WjAzMTEwLwYDVQQD EyhiOWIzNjQ5YmIyODUwNDJlNjhiNDc2NzYwMGE4NGZiNTE5ZmM4MWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva013yfE2j2Gv3JAgTtzh31Cmgs3 zCIIkIVzyLZUVTUr2vL8iom/2qLouqj9N06RDanG/ZGcH+La0LMIfyWBi89hK56n 1zxylxswaTIzLEl8j8/xjeRW3m2YnNK5+1KScbcm3GPewdUT0C8dNjto0K0n3f8L kzwj0QpCtmpYqyVrPeSg0XW6zieB4PYKinaffq18apeoKVeEtL+iazSU+vQJUf6r RUUprZI4b6n5TVU0bzdmNLsofwvvXnuPVbVKM0UDmF/XoP/Y5MeFoVvnmC42jQNm IIxDc+YW7iygmifJlYJ5QzcFFox/du+6lRhnU9bhH4MXHN7JuOJt/EYf4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmzZJuyhQQuaLR2dgCoT7UZ/IHdMB8GA1UdIwQY MBaAFAOE6I+3mjd2ywWD4rZ6C+xt/Gi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMt MzMzYTM4NGQ0MTdkLzEvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMtMzMzYTM4NGQ0MTdk LzEvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGaVOePaM 1J9n9D5qYVYjjbsVO2MJUdrwwkpN+6c3BTvIQJ24xj4d6wuhbraYs8CMp3QzAutK A5sX49u32KPYU5xc646UIH170f+BdY+m414bziJfUIIKuyYeeX3e5T5hxzFBkbYF pi/Rp0jU70c3TZO4e8qCrNoRG6M5eHyg2hMZpQtWTbgPvFVVol2+8Zr75sMnx0Mv 0X76Ur0VwEoGZJ/pMJ/A3qcTvRqwVQmJ182G/rd+PG9iXIqaaO18TK//sXGfK6KS isqDMsqmeSoXOLJmHZg+mgB+6lM/47I/ChgRnSPIwHY8jyTO3CBHDcCYPAWiqIVm Tr2xXRkoouUcKA== -----END CERTIFICATE-----Generated at Thu Dec 25 07:08:00 2025 by rpki-client