This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft File: A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json) Hash identifier: QFVuwKwTvW88emoQOGSccOTr4DfklKYt2aNBYYn6WGs= Subject key identifier: 99:BB:22:70:F2:7C:96:78:07:1D:D2:E8:99:55:47:E4:AF:34:DB:F8 Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d Certificate serial: 019B3CEBEA92718B93AA95D1F4878CAF3689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft Manifest number: 14B2 Signing time: Sat 20 Dec 2025 18:00:52 +0000 Manifest this update: Sat 20 Dec 2025 18:00:52 +0000 Manifest next update: Sun 21 Dec 2025 18:00:52 +0000 Files and hashes: 1: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: xAnUPnEjBtUEFfBm3LbvB5/tQF1m60KJZ7hLlzJbGQM=) 2: AB4qyh-GFm_4fCIscWpIBFj0Kek.roa (hash: eMCLNriDfdANy3mBQaEbKePj36AsyrGRMWbPR231aA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:ea:92:71:8b:93:aa:95:d1:f4:87:8c:af:36:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d Validity Not Before: Dec 20 18:00:52 2025 GMT Not After : Dec 21 18:00:52 2025 GMT Subject: CN=99bb2270f27c9678071dd2e8995547e4af34dbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b3:ff:f6:0a:a2:bc:fe:f4:5a:0e:5d:19:1c: 45:65:2d:8d:25:5a:11:64:d2:e3:0c:b9:97:a8:4c: a0:c0:41:3a:b5:3d:ae:20:d6:53:ed:fc:84:fa:0c: eb:01:d7:b3:a9:56:a2:fe:34:ef:54:fd:d2:e0:e3: b3:74:7a:4a:ac:fa:f7:70:a9:39:1c:d3:8a:eb:9b: 14:34:09:f9:50:37:9e:fd:2f:17:fb:5f:c6:2b:d5: fa:c9:52:44:84:8e:58:d4:62:10:dc:dc:3a:60:c0: 7e:16:49:65:c5:c8:99:33:4c:0a:2d:16:31:32:11: df:01:0c:26:78:bc:e2:3c:ed:69:41:f9:ab:e1:72: 3d:90:27:0e:8f:e8:e5:dc:37:90:32:00:55:df:10: 82:a6:54:12:49:26:58:b8:d9:b0:e2:2e:0e:e0:3c: 46:a1:ec:c5:d6:87:ac:bb:2a:de:af:2b:a8:8b:3b: 48:ba:8d:d5:69:8f:0f:3a:6f:31:94:2d:12:d9:b0: ae:27:89:07:78:e4:88:a8:da:98:e3:40:75:2e:53: 2f:12:4d:cf:a8:6a:4e:e3:af:bf:8b:84:12:99:9a: 4b:c1:a0:8b:b4:17:18:07:8c:65:f9:62:17:1e:9d: 24:35:16:49:f0:d6:7c:d6:3e:b4:a9:c7:ef:87:32: 83:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BB:22:70:F2:7C:96:78:07:1D:D2:E8:99:55:47:E4:AF:34:DB:F8 X509v3 Authority Key Identifier: keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:af:8b:62:64:21:d5:b1:a7:b5:4e:59:33:15:62:b5:b5:3d: 7b:3f:23:c9:28:e5:e4:90:0b:be:e5:7f:73:d5:56:65:5c:65: d0:25:af:74:5c:4b:c9:66:4f:ba:c5:e8:27:15:ec:e1:32:b7: 37:f9:6e:4e:89:76:de:ff:6a:aa:b1:1d:e8:e9:1c:f7:5d:f2: 21:c0:a5:d4:35:50:38:f2:24:90:e5:b4:ce:37:65:62:ac:14: 36:b2:be:26:93:e5:9f:95:db:56:dc:d9:0e:db:8a:20:9b:09: ff:c5:b4:2b:f3:43:31:cf:65:7e:4c:0a:0d:46:1f:1a:4f:25: 2e:43:6f:a0:4b:3a:1d:e8:ca:d3:d5:56:b8:1b:67:c1:58:e8: 38:8f:61:5e:1b:c9:29:53:41:69:eb:27:2c:b7:10:a9:09:86: 52:b8:d8:1f:22:49:5a:2e:40:d7:fc:09:a5:eb:7a:0d:19:ce: 34:2b:c1:94:ec:b3:09:eb:91:aa:97:86:bd:a6:74:3c:cf:21: 7a:72:e9:87:11:f5:42:24:11:52:e1:d2:82:19:8c:5f:76:93: 6f:2c:de:86:f1:b1:4e:09:40:f6:41:64:61:04:f4:96:38:d3: e3:0c:68:8a:bb:6a:57:44:14:eb:3c:76:b4:a9:20:f3:af:8a: 5e:42:de:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86+qScYuTqpXR9IeMrzaJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzN2IzZGY2ZDc4Mzk5ZjAzMTgyODU1NmZjZDkwZWJmZGY0 ZDBkMmQwHhcNMjUxMjIwMTgwMDUyWhcNMjUxMjIxMTgwMDUyWjAzMTEwLwYDVQQD Eyg5OWJiMjI3MGYyN2M5Njc4MDcxZGQyZTg5OTU1NDdlNGFmMzRkYmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37P/9gqivP70Wg5dGRxFZS2NJVoR ZNLjDLmXqEygwEE6tT2uINZT7fyE+gzrAdezqVai/jTvVP3S4OOzdHpKrPr3cKk5 HNOK65sUNAn5UDee/S8X+1/GK9X6yVJEhI5Y1GIQ3Nw6YMB+FkllxciZM0wKLRYx MhHfAQwmeLziPO1pQfmr4XI9kCcOj+jl3DeQMgBV3xCCplQSSSZYuNmw4i4O4DxG oezF1oesuyreryuoiztIuo3VaY8POm8xlC0S2bCuJ4kHeOSIqNqY40B1LlMvEk3P qGpO46+/i4QSmZpLwaCLtBcYB4xl+WIXHp0kNRZJ8NZ81j60qcfvhzKDhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJm7InDyfJZ4Bx3S6JlVR+SvNNv4MB8GA1UdIwQY MBaAFAN7PfbXg5nwMYKFVvzZDr/fTQ0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lMjJlZjgtNTBiNy00MDQ2LTkyMDgt YTQ3NWFlYmIwOGQ1LzEvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9lMjJlZjgtNTBiNy00MDQ2LTkyMDgtYTQ3NWFlYmIwOGQ1 LzEvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArq+LYmQh 1bGntU5ZMxVitbU9ez8jySjl5JALvuV/c9VWZVxl0CWvdFxLyWZPusXoJxXs4TK3 N/luTol23v9qqrEd6Okc913yIcCl1DVQOPIkkOW0zjdlYqwUNrK+JpPln5XbVtzZ DtuKIJsJ/8W0K/NDMc9lfkwKDUYfGk8lLkNvoEs6HejK09VWuBtnwVjoOI9hXhvJ KVNBaesnLLcQqQmGUrjYHyJJWi5A1/wJpet6DRnONCvBlOyzCeuRqpeGvaZ0PM8h enLphxH1QiQRUuHSghmMX3aTbyzehvGxTglA9kFkYQT0ljjT4wxoirtqV0QU6zx2 tKkg86+KXkLesg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:46:08 2025 by rpki-client