This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft File: A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json) Hash identifier: C2b+dxnsKsRVf0KNh+FDWdEDQ+ImVTOCYNeobHw799U= Subject key identifier: 9A:2C:0F:D6:92:E2:AB:35:20:ED:99:62:AC:29:BA:4A:8E:7D:56:A4 Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb Certificate serial: 019B3757A934EC0A41022B04D5A721B2832C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft Manifest number: 09CD Signing time: Fri 19 Dec 2025 16:00:50 +0000 Manifest this update: Fri 19 Dec 2025 16:00:50 +0000 Manifest next update: Sat 20 Dec 2025 16:00:50 +0000 Files and hashes: 1: 4ZVhrpuB1IHBXfe6fTnFzmbNef0.roa (hash: FuraICrae+dlC4EwK8Mlwdgne0MzMhtiCSQ/Z77/tTA=) 2: 5cQ1B8qaCGZjX6eh03Gxbe2gyAs.roa (hash: UnXYlFiyJBM2cbEBf2cCAcTXlYLcyD51tGVhPbgsuJM=) 3: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: wfCzqu4/aB32G8DUoLlfgEc+wjGs3adbE/xedPE5DGo=) 4: lVXMGaXCeYAS9UTzuCTj9xPIgOs.roa (hash: ACZLuIV4fCglmS12ajGiBEyZ0FBoWBDoJRm4zWyNSbY=) 5: x-3D4SyWxTWtE8fU6h7K761mso0.roa (hash: KVo2GWCkNTOgM8bW+F4avHQXlq7DnsAvg8lQU9Oqt1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:a9:34:ec:0a:41:02:2b:04:d5:a7:21:b2:83:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb Validity Not Before: Dec 19 16:00:50 2025 GMT Not After : Dec 20 16:00:50 2025 GMT Subject: CN=9a2c0fd692e2ab3520ed9962ac29ba4a8e7d56a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:ff:15:bf:8e:cd:a4:16:91:95:be:98:24: 54:d3:9a:a1:ff:06:23:e2:8f:9a:94:ba:8d:78:e7: 4f:c8:52:10:86:29:26:27:b8:51:ad:e9:fb:64:4b: 7e:46:dd:ed:69:f2:59:5a:dd:a6:a1:56:bd:92:a6: e6:f1:d1:24:a1:76:53:7a:af:c5:7e:d9:9d:4a:5a: 27:81:33:60:6f:38:e5:45:c2:db:10:34:97:0a:4b: 34:8f:d6:70:58:5c:e6:7f:6c:1b:b8:8e:77:7e:00: 79:47:17:98:10:8a:11:3c:14:cb:00:1c:e6:16:32: 97:ca:90:d7:d3:cd:21:a5:32:dd:93:1a:52:7c:69: f4:be:2a:93:17:dd:05:4d:15:62:c5:2d:a2:9a:57: ec:0f:57:cf:e9:d6:fa:d8:0d:ef:4e:ef:7d:39:55: 6e:f5:fb:3e:12:b2:fb:bf:8a:0e:ac:17:7e:f9:af: 5e:f8:1f:84:ea:2d:c3:d5:f8:c8:04:9f:8f:24:1c: 25:1f:88:ec:0c:96:43:48:64:c5:2d:ae:49:47:c7: 88:7a:81:cd:6b:ab:55:64:14:47:02:45:49:be:28: cd:6b:a4:f6:8d:dc:25:fe:b6:58:e2:b5:0f:b2:d1: ff:a7:d5:a7:2a:f2:19:8a:df:30:62:c9:0d:d3:1f: 00:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2C:0F:D6:92:E2:AB:35:20:ED:99:62:AC:29:BA:4A:8E:7D:56:A4 X509v3 Authority Key Identifier: keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:13:11:d7:c7:37:ec:1b:a0:87:b6:60:10:0f:23:93:ea:34: a7:5f:40:fe:84:1b:01:e9:59:4e:ee:c2:06:8a:01:23:37:cf: a2:b8:eb:34:90:25:9a:90:4f:fd:be:44:ae:11:c7:78:31:64: 4e:d4:75:88:13:39:33:39:06:78:51:be:d7:cf:21:66:39:00: 89:f7:0e:06:bf:6a:ed:18:b0:27:e0:3f:2d:1f:db:3f:f1:80: 55:8a:e9:cc:8c:3e:16:06:e6:cf:9c:ed:75:dc:35:09:91:6a: 4e:77:c3:fa:b7:70:74:a5:64:85:d8:27:e8:34:55:6f:09:f8: 66:15:2b:70:87:43:e6:da:f3:8f:0f:f8:d9:8f:f1:4c:a1:f3: 84:b2:59:29:e0:13:f7:9f:12:22:b0:c3:64:aa:a7:07:20:0f: ae:33:a1:f3:26:71:a8:f9:30:fa:b8:84:78:17:6c:c3:6b:c2: bb:7e:19:a7:6e:94:3d:fa:98:12:30:fa:41:8a:42:62:aa:14: 89:89:fd:40:e9:bc:30:a7:9d:9f:c5:ed:a9:b5:a8:d0:69:71: a6:05:f3:85:92:26:7c:94:49:08:25:f2:89:cb:8b:5d:8a:12: 83:c0:fb:6e:aa:3d:97:7f:c7:ab:b4:e9:8c:de:c8:50:96:84: 31:a3:2e:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V6k07ApBAisE1achsoMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzN2I0ODQ0OWJhMWNhZTE1YmRlMmMyZjA4NmQ5NDIxOGUw NzIwYmIwHhcNMjUxMjE5MTYwMDUwWhcNMjUxMjIwMTYwMDUwWjAzMTEwLwYDVQQD Eyg5YTJjMGZkNjkyZTJhYjM1MjBlZDk5NjJhYzI5YmE0YThlN2Q1NmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHP/Fb+OzaQWkZW+mCRU05qh/wYj 4o+alLqNeOdPyFIQhikmJ7hRren7ZEt+Rt3tafJZWt2moVa9kqbm8dEkoXZTeq/F ftmdSlongTNgbzjlRcLbEDSXCks0j9ZwWFzmf2wbuI53fgB5RxeYEIoRPBTLABzm FjKXypDX080hpTLdkxpSfGn0viqTF90FTRVixS2imlfsD1fP6db62A3vTu99OVVu 9fs+ErL7v4oOrBd++a9e+B+E6i3D1fjIBJ+PJBwlH4jsDJZDSGTFLa5JR8eIeoHN a6tVZBRHAkVJvijNa6T2jdwl/rZY4rUPstH/p9WnKvIZit8wYskN0x8ASwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJosD9aS4qs1IO2ZYqwpukqOfVakMB8GA1UdIwQY MBaAFAN7SESbocrhW94sLwhtlCGOByC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYt NzQwM2UxMzY3NWFiLzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYtNzQwM2UxMzY3NWFi LzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBMR18c3 7Bugh7ZgEA8jk+o0p19A/oQbAelZTu7CBooBIzfPorjrNJAlmpBP/b5ErhHHeDFk TtR1iBM5MzkGeFG+188hZjkAifcOBr9q7RiwJ+A/LR/bP/GAVYrpzIw+Fgbmz5zt ddw1CZFqTnfD+rdwdKVkhdgn6DRVbwn4ZhUrcIdD5trzjw/42Y/xTKHzhLJZKeAT 958SIrDDZKqnByAPrjOh8yZxqPkw+riEeBdsw2vCu34Zp26UPfqYEjD6QYpCYqoU iYn9QOm8MKedn8XtqbWo0GlxpgXzhZImfJRJCCXyicuLXYoSg8D7bqo9l3/Hq7Tp jN7IUJaEMaMuaw== -----END CERTIFICATE-----Generated at Fri Dec 19 19:01:33 2025 by rpki-client