This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json) Hash identifier: nVSZyXc/fDzzNFvpbviM6IHw3k1wXbD+R/rSfdUoTW0= Subject key identifier: 90:21:B8:A4:A7:00:41:E3:F2:35:B4:FE:2F:45:2A:6E:BB:DD:57:65 Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27 Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27 Certificate serial: 019B45B8A4888985FA9E856AE759F7BB0D67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft Manifest number: 07BB Signing time: Mon 22 Dec 2025 11:01:27 +0000 Manifest this update: Mon 22 Dec 2025 11:01:27 +0000 Manifest next update: Tue 23 Dec 2025 11:01:27 +0000 Files and hashes: 1: FXli7IVxfRti4qt1ad27nRecqaM.roa (hash: u1NhxzgiSWTpvPzqFkEG54wTsIn/+oZByZ4cbRuTRXA=) 2: H4J_7ypAJ4hgBEB4fVDKFhXluIE.roa (hash: BtWyDIO/zf/0LXUY6FzALBn7OXPRy7qH7floDc9wE5g=) 3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: kLb91kgpNMSq9vBt4PiL2WRW7kWJZKAiSWn/nU3iPfw=) 4: nHW9BLq4zRW7_GDpHKk8LDtfSmI.roa (hash: wgNVfFr1EUmSTQMiYZD3CFdfwE6KU5e+fnSwgZEt6SA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 11:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:a4:88:89:85:fa:9e:85:6a:e7:59:f7:bb:0d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27 Validity Not Before: Dec 22 11:01:27 2025 GMT Not After : Dec 23 11:01:27 2025 GMT Subject: CN=9021b8a4a70041e3f235b4fe2f452a6ebbdd5765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:93:c3:99:1a:c1:d9:e7:2a:0e:10:6c:d4:a0: 71:19:5c:c1:06:32:6c:41:b5:bd:03:70:13:7c:88: 7e:70:5c:5c:f7:5a:1a:93:11:cb:8d:fa:c5:03:0a: c1:7c:7d:0b:6d:7d:54:a4:1e:c9:26:23:f2:dd:51: 35:27:19:77:3a:0a:98:e8:55:bd:50:69:37:9e:7d: 79:0c:32:f9:17:01:4c:07:c5:0b:96:43:e2:9f:3e: bf:7c:27:07:63:30:67:18:df:c2:e8:4c:f9:4f:6c: c8:b6:cc:a7:8d:ce:9d:ac:76:76:a6:df:d6:12:40: 9f:35:43:3f:86:94:5e:a6:50:75:31:ce:be:e5:ad: 83:c9:70:28:fb:9d:5d:62:5f:99:99:3d:a0:18:c0: d1:f3:fe:27:ed:cf:11:42:4f:1d:7d:cf:df:e1:55: c6:ff:62:38:7e:23:65:8f:36:fc:f8:f4:cb:0c:19: ff:d6:b8:39:0b:f4:8d:e5:1f:a4:15:ef:e5:56:c3: b2:9f:99:07:95:0d:ba:58:25:08:c1:2a:95:25:bf: f2:f4:83:2d:b5:c8:11:4d:f9:57:81:a1:a3:37:44: 53:73:56:06:93:a8:73:a8:99:a3:56:1b:39:97:94: ca:91:9e:fd:57:e6:75:92:14:69:16:c5:ac:9e:3f: ba:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:21:B8:A4:A7:00:41:E3:F2:35:B4:FE:2F:45:2A:6E:BB:DD:57:65 X509v3 Authority Key Identifier: keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:98:ef:bf:15:31:ef:57:9b:13:13:e4:18:5d:89:21:4b:d1: d6:97:af:30:9b:b4:79:77:bb:81:f1:59:d0:7b:c3:da:f2:c0: ae:b5:9a:f6:cc:16:4c:7f:84:3a:74:53:6f:95:2d:89:e3:32: bf:b7:9a:d0:d6:99:9a:fa:cb:de:c5:78:10:c8:81:d4:38:4c: 99:ef:9e:c8:38:53:43:3f:d7:d7:8c:d6:a5:2d:bd:5a:89:69: 70:f2:b1:2f:d4:d3:fd:be:45:35:a4:bd:a5:35:1b:4a:90:27: ff:44:ba:3e:4d:0c:10:40:dc:5f:bd:5e:6a:44:99:30:91:03: 9f:e5:ff:20:f2:ef:16:32:86:30:84:94:c3:86:85:4a:75:ad: 80:7d:20:45:a5:d6:ee:00:e9:71:ff:41:ae:b4:e0:29:8d:15: 24:1d:68:5b:18:dd:78:80:1d:70:72:d1:8f:95:34:f2:f2:e9: ea:1d:88:b3:4e:a8:78:68:27:d4:05:80:91:ea:5d:cb:cb:65: ec:8e:16:86:ab:70:12:8c:9a:bd:4a:59:83:f4:e5:46:cc:ed: ca:00:c9:87:04:c5:19:ce:40:9b:a3:7c:c3:b6:17:16:1f:bd: 74:e9:9d:7a:4f:da:b7:9a:50:48:73:9a:bf:2c:88:27:ed:91: 77:b8:30:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuKSIiYX6noVq51n3uw1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiOTJjZjMzOTBjYWE1ODc5ZTc1OTcyOWNkOTAwOGM2ZWNh NTVhMjcwHhcNMjUxMjIyMTEwMTI3WhcNMjUxMjIzMTEwMTI3WjAzMTEwLwYDVQQD Eyg5MDIxYjhhNGE3MDA0MWUzZjIzNWI0ZmUyZjQ1MmE2ZWJiZGQ1NzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5PDmRrB2ecqDhBs1KBxGVzBBjJs QbW9A3ATfIh+cFxc91oakxHLjfrFAwrBfH0LbX1UpB7JJiPy3VE1Jxl3OgqY6FW9 UGk3nn15DDL5FwFMB8ULlkPinz6/fCcHYzBnGN/C6Ez5T2zItsynjc6drHZ2pt/W EkCfNUM/hpReplB1Mc6+5a2DyXAo+51dYl+ZmT2gGMDR8/4n7c8RQk8dfc/f4VXG /2I4fiNljzb8+PTLDBn/1rg5C/SN5R+kFe/lVsOyn5kHlQ26WCUIwSqVJb/y9IMt tcgRTflXgaGjN0RTc1YGk6hzqJmjVhs5l5TKkZ79V+Z1khRpFsWsnj+6lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAhuKSnAEHj8jW0/i9FKm673VdlMB8GA1UdIwQY MBaAFGuSzzOQyqWHnnWXKc2QCMbspVonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTVMUE01REtwWWVlZFpjcHpaQUl4dXlsV2ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xMjM0OWUtNTI4Mi00NzJhLWFlNTIt MmEwNjIyMzYyM2UwLzEvYTVMUE01REtwWWVlZFpjcHpaQUl4dXlsV2ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xMjM0OWUtNTI4Mi00NzJhLWFlNTItMmEwNjIyMzYyM2Uw LzEvYTVMUE01REtwWWVlZFpjcHpaQUl4dXlsV2ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJjvvxUx 71ebExPkGF2JIUvR1pevMJu0eXe7gfFZ0HvD2vLArrWa9swWTH+EOnRTb5UtieMy v7ea0NaZmvrL3sV4EMiB1DhMme+eyDhTQz/X14zWpS29WolpcPKxL9TT/b5FNaS9 pTUbSpAn/0S6Pk0MEEDcX71eakSZMJEDn+X/IPLvFjKGMISUw4aFSnWtgH0gRaXW 7gDpcf9BrrTgKY0VJB1oWxjdeIAdcHLRj5U08vLp6h2Is06oeGgn1AWAkepdy8tl 7I4WhqtwEoyavUpZg/TlRsztygDJhwTFGc5Am6N8w7YXFh+9dOmdek/at5pQSHOa vyyIJ+2Rd7gwmg== -----END CERTIFICATE-----Generated at Mon Dec 22 17:50:40 2025 by rpki-client