This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft File: A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json) Hash identifier: 4AGl/O5BDO62neHPxDI6NEiUgZ7RontvLuTtaevnrs0= Subject key identifier: 71:36:AE:EE:21:F6:07:AF:CE:76:AF:26:62:1C:F0:FA:AA:AA:AE:0A Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61 Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861 Certificate serial: 019B3BD96DC7324BF5923891840A39483E9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 13:01:03 +0000 Manifest this update: Sat 20 Dec 2025 13:01:03 +0000 Manifest next update: Sun 21 Dec 2025 13:01:03 +0000 Files and hashes: 1: 8uFEs8KT2lHNTf9FsmJqqvY7o28.roa (hash: vboc19xwSNPRyM8I2dQ1/VWhvxJAqCUk+Ws21D+P2qM=) 2: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: 0pKdKRSj+pVXz1qslKxZ4Ohgc5QC9Xrl233ynUgnGNM=) 3: JaJTfkcMlPavkQgIWd6Q5PErN44.roa (hash: xdZi+om1DwYfwvuK4ikXRudvdwfTqYCO5L9ilWGS09U=) 4: jBMHF4ZncYY2dSJ5CHqMIPV8Ofc.roa (hash: 42cb4s8kzaDp+6oFZFM5NFuRsfHrfiqhUgjsGF12wb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:6d:c7:32:4b:f5:92:38:91:84:0a:39:48:3e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861 Validity Not Before: Dec 20 13:01:03 2025 GMT Not After : Dec 21 13:01:03 2025 GMT Subject: CN=7136aeee21f607afce76af26621cf0faaaaaae0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:29:f4:c0:a1:b5:b3:7b:f5:13:97:f2:1d:25: b1:f0:99:9a:8b:19:18:2b:55:a2:c3:9b:99:9c:e8: b8:7c:86:49:ad:54:69:b4:fd:bb:0b:56:af:0c:71: d5:d4:dd:18:75:2b:73:05:d5:98:b6:a4:68:af:31: 05:4c:5a:22:65:f6:eb:fd:78:16:c9:d0:48:c9:93: e9:31:e5:41:bb:17:7d:02:00:5f:45:99:17:71:f3: 36:9c:76:0b:0c:72:ae:94:68:c2:6e:46:fe:9a:38: 75:cd:ec:58:ff:21:bf:85:a1:d9:b5:d6:3b:7f:bc: 3d:b6:c6:7e:36:ae:64:8a:0f:2e:ac:2b:6f:03:91: 87:a5:6e:bb:b8:c2:20:86:da:0f:a7:f1:47:1e:f7: 58:23:bd:3e:7d:8b:88:17:bd:c8:17:e5:7d:7f:14: 26:80:e6:c8:da:47:a1:87:02:5f:fb:40:a2:4d:0a: a1:b4:f6:97:ec:c0:14:d1:4d:86:7d:54:19:e7:80: da:43:eb:a3:b5:b6:51:45:43:d5:2e:de:b2:3f:5f: 4e:e9:99:f5:4c:0f:79:3d:b4:24:68:66:f1:b7:e4: 62:0f:c8:a3:20:53:e3:be:78:ad:22:2f:d3:b0:73: c8:4c:9b:2f:ea:51:be:f3:06:a2:8d:42:d3:3b:07: 47:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:36:AE:EE:21:F6:07:AF:CE:76:AF:26:62:1C:F0:FA:AA:AA:AE:0A X509v3 Authority Key Identifier: keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:58:f3:b9:41:85:9d:f9:0d:42:f0:65:20:4d:b2:e4:da:20: 23:b5:1f:a6:4a:6b:57:b4:24:b2:9b:66:00:78:c7:07:51:85: 76:69:3f:4a:4e:c4:c7:45:dc:98:8b:c6:78:36:18:d4:33:26: 2f:69:cb:5d:85:c3:f5:1d:22:70:63:66:b4:b6:c4:4e:df:37: 68:3d:1a:fb:99:01:af:c1:d2:a7:04:5b:9a:2d:2c:b9:ea:1c: 10:21:81:78:92:86:d2:5e:e0:3c:0d:41:f6:54:10:df:12:2d: 65:11:d0:94:01:ad:01:a6:68:78:1a:f4:18:63:2a:e5:92:15: 92:83:11:31:10:fa:bf:b2:cc:37:6e:7d:26:1c:22:f4:9c:f1: 8f:50:eb:7b:70:c6:a9:6b:67:3a:da:83:83:d4:5d:16:6a:1a: bf:61:36:2c:13:a9:13:e5:7e:e1:63:49:58:39:fc:6c:f3:b4: e4:6a:5b:3e:bb:d6:d2:bc:c2:6b:06:ee:f7:1c:82:c9:15:6e: b5:b0:6d:b4:24:93:50:2f:3d:97:2b:89:b6:87:51:d8:76:ff: 51:19:ef:26:4a:49:03:ce:47:62:30:18:b2:dc:7b:a5:6c:1b: f8:51:df:83:52:63:83:50:81:b5:1c:7a:0d:aa:98:39:29:f4: 84:87:22:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72W3HMkv1kjiRhAo5SD6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZjNmODI1OWIzMGVjMDM3MjJmOTQyMDM1YTk0ZTIwOWY4 ODI4NjEwHhcNMjUxMjIwMTMwMTAzWhcNMjUxMjIxMTMwMTAzWjAzMTEwLwYDVQQD Eyg3MTM2YWVlZTIxZjYwN2FmY2U3NmFmMjY2MjFjZjBmYWFhYWFhZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCn0wKG1s3v1E5fyHSWx8JmaixkY K1Wiw5uZnOi4fIZJrVRptP27C1avDHHV1N0YdStzBdWYtqRorzEFTFoiZfbr/XgW ydBIyZPpMeVBuxd9AgBfRZkXcfM2nHYLDHKulGjCbkb+mjh1zexY/yG/haHZtdY7 f7w9tsZ+Nq5kig8urCtvA5GHpW67uMIghtoPp/FHHvdYI70+fYuIF73IF+V9fxQm gObI2kehhwJf+0CiTQqhtPaX7MAU0U2GfVQZ54DaQ+ujtbZRRUPVLt6yP19O6Zn1 TA95PbQkaGbxt+RiD8ijIFPjvnitIi/TsHPITJsv6lG+8waijULTOwdHgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHE2ru4h9gevznavJmIc8Pqqqq4KMB8GA1UdIwQY MBaAFAPz+CWbMOwDci+UIDWpTiCfiChhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNDU4MmUtMWE0ZC00ZDRhLWE1ZjQt YWIxMzM1NmU1ZmVjLzEvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hNDU4MmUtMWE0ZC00ZDRhLWE1ZjQtYWIxMzM1NmU1ZmVj LzEvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVjzuUGF nfkNQvBlIE2y5NogI7UfpkprV7QksptmAHjHB1GFdmk/Sk7Ex0XcmIvGeDYY1DMm L2nLXYXD9R0icGNmtLbETt83aD0a+5kBr8HSpwRbmi0sueocECGBeJKG0l7gPA1B 9lQQ3xItZRHQlAGtAaZoeBr0GGMq5ZIVkoMRMRD6v7LMN259Jhwi9Jzxj1Dre3DG qWtnOtqDg9RdFmoav2E2LBOpE+V+4WNJWDn8bPO05GpbPrvW0rzCawbu9xyCyRVu tbBttCSTUC89lyuJtodR2Hb/URnvJkpJA85HYjAYstx7pWwb+FHfg1Jjg1CBtRx6 DaqYOSn0hIcirg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:20:46 2025 by rpki-client