This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft File: ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json) Hash identifier: szobf6VDobPMO++Qgr5LPYg7OumHKomRx4kPI5YVwPE= Subject key identifier: F7:DA:1E:BD:4F:19:E1:BB:50:03:63:A1:CC:76:5A:96:D6:83:51:B2 Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70 Certificate issuer: /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170 Certificate serial: 019B3B6BCB61A12ADB75743EF8EF86495DCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 11:01:18 +0000 Manifest this update: Sat 20 Dec 2025 11:01:18 +0000 Manifest next update: Sun 21 Dec 2025 11:01:18 +0000 Files and hashes: 1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: cTIrQK/hnzA1GXFD61ohhmPghDU0ErbOkbZX4IeSXcw=) 2: bxyY92T1b4aJfspeGWuPWUl-Kkw.roa (hash: nKzuSfhFZMZ8pqYL4zAcXBecFHY0kOuZwNpuiZWVnMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:cb:61:a1:2a:db:75:74:3e:f8:ef:86:49:5d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170 Validity Not Before: Dec 20 11:01:18 2025 GMT Not After : Dec 21 11:01:18 2025 GMT Subject: CN=f7da1ebd4f19e1bb500363a1cc765a96d68351b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:e9:1c:f1:c9:d5:3f:c7:8e:7c:3a:b8:17: 33:b9:9a:f8:90:49:d6:0b:9b:40:f1:00:b9:cb:11: fc:5a:d1:e6:d6:bd:ae:da:90:6a:ec:8e:b2:cf:de: b7:bd:ad:de:ef:c3:1c:9b:36:c0:87:97:07:b3:a2: 2a:57:d0:8b:0b:a7:68:77:f0:60:ea:9c:0a:97:0f: ed:cb:b3:db:d4:df:d4:74:8e:67:11:21:e0:d1:88: 93:ab:77:ce:ba:59:ac:1a:76:7a:a6:c2:21:3e:5c: dd:50:a0:e7:8e:c6:25:b9:a8:35:71:5b:44:1c:94: 88:7c:33:17:bc:b6:b6:5c:87:c8:12:a8:b8:d2:cf: 07:f2:a1:15:8c:5e:2d:50:d9:99:81:56:d8:5f:58: 0f:80:5f:08:88:04:d7:86:2f:9c:b3:2e:71:86:e4: 9f:7d:f3:e4:b8:2d:7f:63:a9:e1:99:11:c9:61:1e: fd:fa:bf:96:12:f6:d0:a1:bf:27:30:ac:0d:94:e0: a8:57:3a:42:3b:35:25:ed:eb:e2:af:a1:11:a9:ee: 7e:93:0b:df:4f:5b:ab:4d:7e:51:c4:5a:42:6b:71: e1:2e:68:52:3f:42:65:83:be:e6:73:ae:ce:80:f0: 57:39:8c:d4:01:1d:8c:00:5b:b4:19:40:f0:a7:54: b9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DA:1E:BD:4F:19:E1:BB:50:03:63:A1:CC:76:5A:96:D6:83:51:B2 X509v3 Authority Key Identifier: keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ae:19:cb:81:9d:f5:71:0d:3c:b9:4f:af:09:e6:74:42:ac: c7:3d:50:02:00:71:54:f5:c5:f1:7a:4c:88:30:e4:8c:e0:3e: 44:f0:23:9a:5c:a9:2c:6a:c0:09:9f:c9:49:e2:42:81:eb:8f: 68:7f:54:8d:a1:2b:58:71:fe:70:19:9a:df:9f:3a:d6:ed:90: 98:1b:5a:8e:ab:db:b0:7a:67:40:d9:75:3c:9d:e5:e6:ab:b2: 6f:48:74:d2:8a:a5:dc:ab:8f:67:5e:51:ce:a8:01:94:07:93: ac:e4:bd:ae:cf:ce:e8:74:f3:49:99:67:7c:f8:a3:c9:e7:09: 08:db:4f:e6:c2:44:35:e4:a3:1c:6d:64:67:56:6a:2b:04:5d: c1:62:53:bd:67:6b:21:57:fb:bc:d6:f8:31:f9:48:26:4e:f2: 64:dd:33:1e:61:5f:70:f4:c0:93:f5:cb:c5:db:c0:93:3a:36: 6b:03:01:59:77:f6:07:77:58:74:92:f9:27:b9:d9:e0:e4:d9: 10:6f:44:17:ff:1b:20:cf:0f:6c:c8:f5:c0:a6:1c:9a:7e:ed: 77:c7:b0:8b:a6:85:7a:1d:c9:2d:a6:22:c8:8a:36:ec:27:b4: 33:a2:94:66:cc:2d:b6:f4:ce:8e:07:71:17:be:97:ad:69:91: 0f:20:89:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a8thoSrbdXQ++O+GSV3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwM2EwZDE0YjAzZWEzNDJlZGUzYjJmNDlhZDhjYWEyYmY3 NGUxNzAwHhcNMjUxMjIwMTEwMTE4WhcNMjUxMjIxMTEwMTE4WjAzMTEwLwYDVQQD EyhmN2RhMWViZDRmMTllMWJiNTAwMzYzYTFjYzc2NWE5NmQ2ODM1MWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9zpHPHJ1T/Hjnw6uBczuZr4kEnW C5tA8QC5yxH8WtHm1r2u2pBq7I6yz963va3e78McmzbAh5cHs6IqV9CLC6dod/Bg 6pwKlw/ty7Pb1N/UdI5nESHg0YiTq3fOulmsGnZ6psIhPlzdUKDnjsYluag1cVtE HJSIfDMXvLa2XIfIEqi40s8H8qEVjF4tUNmZgVbYX1gPgF8IiATXhi+csy5xhuSf ffPkuC1/Y6nhmRHJYR79+r+WEvbQob8nMKwNlOCoVzpCOzUl7evir6ERqe5+kwvf T1urTX5RxFpCa3HhLmhSP0Jlg77mc67OgPBXOYzUAR2MAFu0GUDwp1S5gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfaHr1PGeG7UANjocx2WpbWg1GyMB8GA1UdIwQY MBaAFAA6DRSwPqNC7eOy9JrYyqK/dOFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGIt MmZkZDFmZDk5NjU3LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGItMmZkZDFmZDk5NjU3 LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR64Zy4Gd 9XENPLlPrwnmdEKsxz1QAgBxVPXF8XpMiDDkjOA+RPAjmlypLGrACZ/JSeJCgeuP aH9UjaErWHH+cBma35861u2QmBtajqvbsHpnQNl1PJ3l5quyb0h00oql3KuPZ15R zqgBlAeTrOS9rs/O6HTzSZlnfPijyecJCNtP5sJENeSjHG1kZ1ZqKwRdwWJTvWdr IVf7vNb4MflIJk7yZN0zHmFfcPTAk/XLxdvAkzo2awMBWXf2B3dYdJL5J7nZ4OTZ EG9EF/8bIM8PbMj1wKYcmn7td8ewi6aFeh3JLaYiyIo27Ce0M6KUZswttvTOjgdx F76XrWmRDyCJ8g== -----END CERTIFICATE-----Generated at Sat Dec 20 19:30:59 2025 by rpki-client