This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft File: A-ynkyRXUrZ6iB9441q4_0ndPsE.mft (raw, json) Hash identifier: LaX+9LcEj9R8dlHoiowLHg5hPKzprhxLWBAGH/fs3cE= Subject key identifier: 36:0D:88:7A:B0:42:4C:BB:99:1F:52:C6:71:5A:A6:0B:05:4D:B8:93 Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1 Certificate issuer: /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1 Certificate serial: 019B3D5A06DB5BB902AC72CE1E64F21A1DDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 20:01:08 +0000 Manifest this update: Sat 20 Dec 2025 20:01:08 +0000 Manifest next update: Sun 21 Dec 2025 20:01:08 +0000 Files and hashes: 1: A-ynkyRXUrZ6iB9441q4_0ndPsE.crl (hash: mL/jCSsiDRugEjFyq6z/hynfzKVg9LViCmCwpAMWoRM=) 2: KCo_EXF_kwXFBoy_-8g1vn9X4IU.roa (hash: 3gljbk7M1fRChLX3eXWg8UNcaSKjRzvlcThXCcbYJEs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:06:db:5b:b9:02:ac:72:ce:1e:64:f2:1a:1d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1 Validity Not Before: Dec 20 20:01:08 2025 GMT Not After : Dec 21 20:01:08 2025 GMT Subject: CN=360d887ab0424cbb991f52c6715aa60b054db893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5a:9d:d9:f1:54:d9:d9:7e:05:e1:98:fb:10: 29:4e:c7:8a:a4:4d:c7:e9:85:30:8a:b3:e9:b2:d8: 83:2c:86:1f:4d:f8:b6:72:34:aa:d7:22:0c:a1:0f: 0a:2b:e1:b2:08:65:40:b3:48:c1:4a:40:29:8a:b3: 6c:5a:9d:05:d9:79:04:5d:3b:f6:f1:f0:b0:32:44: 1c:72:df:35:d0:cc:94:40:8e:de:2f:e7:38:f2:39: 7f:ca:92:4d:01:b6:70:94:a0:61:3f:8c:5b:57:1f: 7b:ee:ff:f2:7b:29:23:fa:03:a5:98:6b:54:7f:be: 7f:c9:d7:6e:db:a2:3c:c0:0a:0c:55:b8:c2:73:b6: bd:4e:ff:43:52:b8:0c:25:ad:07:9e:4a:7a:fd:b6: ec:b7:df:69:73:b4:70:9a:57:91:2e:cf:e6:51:36: e3:a7:13:88:28:7b:6f:d5:01:2a:0a:e6:3b:ad:d5: 2e:71:29:95:de:14:73:0a:35:f8:e1:22:68:83:7c: d3:96:70:1a:cd:60:83:26:40:95:c9:22:fa:ea:47: 47:28:30:85:8f:e8:d1:56:31:d8:9e:a0:09:a3:96: 60:0c:43:43:09:a0:58:f4:42:56:f0:d3:50:b8:01: c3:c6:68:24:67:17:ea:ca:2f:a2:4f:e5:84:a3:d5: 8a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0D:88:7A:B0:42:4C:BB:99:1F:52:C6:71:5A:A6:0B:05:4D:B8:93 X509v3 Authority Key Identifier: keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:69:c5:0a:e7:eb:b1:c4:89:33:4b:15:bd:83:a0:33:05:13: 28:35:8f:e8:5a:89:e5:7d:9d:dc:b2:b8:66:1c:f3:0c:02:db: 81:27:73:46:32:8b:c2:b7:be:b2:a3:14:7f:8e:0f:81:bd:75: 7f:fa:49:14:5d:ca:00:68:23:6d:38:29:bc:4b:35:13:0f:84: b3:57:0b:71:2f:2e:95:8b:3b:e8:4a:ca:a9:fd:ad:f3:e6:bc: f2:f5:0f:0c:4a:cd:6d:78:25:e3:f0:19:2b:85:91:83:21:34: a8:3c:8b:b5:1d:d1:23:f0:c9:b8:25:48:12:5b:b4:7f:bd:3f: 20:7d:6b:2c:e1:e8:7c:bf:11:a4:02:35:df:f6:1c:90:e5:f2: 7f:e2:30:e8:4d:f9:6c:5e:9e:78:61:c5:3a:0c:b3:be:dd:8e: 1c:a4:61:4e:0f:ae:3a:f5:c0:ff:74:1f:90:b8:96:c2:98:bf: 73:42:70:d8:1a:f3:6d:46:4d:90:ea:49:8c:c7:b3:9f:8b:a7: 2f:b5:ce:79:d1:04:48:f1:5b:b7:d5:c1:31:a7:06:9e:53:22: d5:ef:f5:24:c5:fa:48:c0:6c:e3:d1:12:00:e9:f1:4d:96:87: c3:34:2e:b4:64:a8:1d:7f:10:3f:36:df:cf:3e:2a:b2:93:06: c2:2f:d9:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WgbbW7kCrHLOHmTyGh3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZWNhNzkzMjQ1NzUyYjY3YTg4MWY3OGUzNWFiOGZmNDlk ZDNlYzEwHhcNMjUxMjIwMjAwMTA4WhcNMjUxMjIxMjAwMTA4WjAzMTEwLwYDVQQD EygzNjBkODg3YWIwNDI0Y2JiOTkxZjUyYzY3MTVhYTYwYjA1NGRiODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61qd2fFU2dl+BeGY+xApTseKpE3H 6YUwirPpstiDLIYfTfi2cjSq1yIMoQ8KK+GyCGVAs0jBSkApirNsWp0F2XkEXTv2 8fCwMkQcct810MyUQI7eL+c48jl/ypJNAbZwlKBhP4xbVx977v/yeykj+gOlmGtU f75/yddu26I8wAoMVbjCc7a9Tv9DUrgMJa0Hnkp6/bbst99pc7RwmleRLs/mUTbj pxOIKHtv1QEqCuY7rdUucSmV3hRzCjX44SJog3zTlnAazWCDJkCVySL66kdHKDCF j+jRVjHYnqAJo5ZgDENDCaBY9EJW8NNQuAHDxmgkZxfqyi+iT+WEo9WKywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYNiHqwQky7mR9SxnFapgsFTbiTMB8GA1UdIwQY MBaAFAPsp5MkV1K2eogfeONauP9J3T7BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS15bmt5UlhVclo2aUI5NDQxcTRfMG5kUHNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wM2JlYjQtMjQwYi00Y2JmLWFhM2Yt OWZkYzEwNmM4MTUzLzEvQS15bmt5UlhVclo2aUI5NDQxcTRfMG5kUHNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wM2JlYjQtMjQwYi00Y2JmLWFhM2YtOWZkYzEwNmM4MTUz LzEvQS15bmt5UlhVclo2aUI5NDQxcTRfMG5kUHNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmnFCufr scSJM0sVvYOgMwUTKDWP6FqJ5X2d3LK4ZhzzDALbgSdzRjKLwre+sqMUf44Pgb11 f/pJFF3KAGgjbTgpvEs1Ew+Es1cLcS8ulYs76ErKqf2t8+a88vUPDErNbXgl4/AZ K4WRgyE0qDyLtR3RI/DJuCVIElu0f70/IH1rLOHofL8RpAI13/YckOXyf+Iw6E35 bF6eeGHFOgyzvt2OHKRhTg+uOvXA/3QfkLiWwpi/c0Jw2BrzbUZNkOpJjMezn4un L7XOedEESPFbt9XBMacGnlMi1e/1JMX6SMBs49ESAOnxTZaHwzQutGSoHX8QPzbf zz4qspMGwi/Zkw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:33:58 2025 by rpki-client