This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json) Hash identifier: sLE1ypaRavRVB5rZZqDav8wh+7eRK97EDlr898an87E= Subject key identifier: 2D:50:48:00:15:F4:3A:50:27:82:2E:00:AE:96:7B:6D:2E:39:EC:92 Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad Certificate serial: 019B3A222F32F7B2DE82920BAFC5B8A6AF2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft Manifest number: 0732 Signing time: Sat 20 Dec 2025 05:01:17 +0000 Manifest this update: Sat 20 Dec 2025 05:01:17 +0000 Manifest next update: Sun 21 Dec 2025 05:01:17 +0000 Files and hashes: 1: 6rvpyTq3GpToeI0SORQBn8auSqk.roa (hash: It3me0g3R8Ie8D4qrGq2UTC1Pz9Blt9bU50UXq7GwOE=) 2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: rp/HHkNcVSuJA3p4VVpNDWW26+u9KMpy6oPOR4efZ4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:2f:32:f7:b2:de:82:92:0b:af:c5:b8:a6:af:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad Validity Not Before: Dec 20 05:01:17 2025 GMT Not After : Dec 21 05:01:17 2025 GMT Subject: CN=2d50480015f43a5027822e00ae967b6d2e39ec92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:3c:bc:2f:ed:a5:cf:ba:61:0a:c2:00:b2: ab:1d:02:b1:dd:57:cb:76:7a:2d:b7:af:ed:a2:04: a9:4a:2a:81:ed:ac:f0:ab:c8:11:1d:ee:1e:ed:38: 72:9f:0c:99:5a:d3:91:40:a8:a7:af:ac:f7:af:d1: c8:15:32:fb:b0:49:54:ce:f7:1b:c4:c0:6d:51:b4: 4f:91:5f:1c:a2:d5:3b:3c:35:f8:d3:a0:e7:48:dd: 9a:26:03:d0:12:6c:b3:32:a1:a4:da:0f:00:5d:3e: a9:ea:a3:9a:84:49:e0:d1:bb:54:59:bd:82:4a:d8: 95:37:53:eb:11:30:a0:9d:63:3b:24:d2:94:dd:7f: a8:17:7d:5c:a8:0f:a7:6b:59:9f:fa:62:7e:09:e7: 00:10:64:85:0b:8d:14:8e:7b:a1:f7:c4:7d:4e:af: bc:81:64:fd:82:06:6b:a2:74:9f:ce:50:cf:d1:23: 8e:80:be:0c:0a:34:f0:f6:57:00:2c:e2:a3:85:f3: 6b:31:50:be:f5:25:56:96:ff:dc:53:cb:77:e6:49: fe:68:fa:4c:8a:96:bc:27:04:4f:6d:da:c0:b6:48: 87:1c:d6:74:81:c5:28:36:95:ad:90:81:23:49:32: e6:20:2c:60:83:6c:81:6c:0e:6d:23:6b:ab:79:10: 82:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:50:48:00:15:F4:3A:50:27:82:2E:00:AE:96:7B:6D:2E:39:EC:92 X509v3 Authority Key Identifier: keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e9:93:f2:16:bf:86:7e:aa:60:bb:8a:72:2e:20:e1:d9:58: d1:f6:3d:b5:d4:1f:4d:1b:64:fd:c2:93:c2:0c:11:b0:0b:79: e4:28:a6:9b:c7:b1:43:b5:60:af:4b:9f:02:da:84:6a:1f:25: 4a:2a:74:72:5a:51:c2:cb:6e:f2:49:10:dc:92:c7:ac:c3:e9: 99:87:39:8b:8e:ad:32:b9:80:c4:ca:85:22:53:c4:ae:8a:32: ff:63:d2:51:c4:df:12:26:c1:1d:00:cc:a3:0f:0f:23:d6:ce: 44:8b:ac:8d:44:60:ce:90:02:56:0e:df:d1:b9:48:d9:39:c8: fd:be:b2:0d:62:89:76:23:17:f2:ef:db:b4:83:aa:93:d0:5a: d4:ce:d3:05:c1:74:75:b9:39:41:ca:79:48:cb:ba:38:73:8b: 9c:ff:7a:30:4a:20:59:d6:31:06:0a:82:c1:a2:7d:35:83:a3: aa:1a:5b:a7:ab:54:22:5f:b3:62:38:a5:c5:7e:80:00:ba:5f: 2b:84:68:20:d7:ec:98:f4:c7:45:24:d0:10:42:68:58:6c:2a: f4:92:fe:48:45:ee:39:db:4e:a3:c1:d9:57:25:9f:31:06:ad: d9:ff:94:07:88:32:20:fe:0f:03:29:7e:1f:ec:90:04:d6:dd: 7a:7e:5d:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Ii8y97LegpILr8W4pq8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2IxMjA0NWIxYWYwOWFjZjk2NjJlZTM1YmEyY2Q3ZTFj ODViYWQwHhcNMjUxMjIwMDUwMTE3WhcNMjUxMjIxMDUwMTE3WjAzMTEwLwYDVQQD EygyZDUwNDgwMDE1ZjQzYTUwMjc4MjJlMDBhZTk2N2I2ZDJlMzllYzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts08vC/tpc+6YQrCALKrHQKx3VfL dnott6/togSpSiqB7azwq8gRHe4e7ThynwyZWtORQKinr6z3r9HIFTL7sElUzvcb xMBtUbRPkV8cotU7PDX406DnSN2aJgPQEmyzMqGk2g8AXT6p6qOahEng0btUWb2C StiVN1PrETCgnWM7JNKU3X+oF31cqA+na1mf+mJ+CecAEGSFC40Ujnuh98R9Tq+8 gWT9ggZronSfzlDP0SOOgL4MCjTw9lcALOKjhfNrMVC+9SVWlv/cU8t35kn+aPpM ipa8JwRPbdrAtkiHHNZ0gcUoNpWtkIEjSTLmICxgg2yBbA5tI2ureRCCywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1QSAAV9DpQJ4IuAK6We20uOeySMB8GA1UdIwQY MBaAFGt7EgRbGvCaz5Zi7jW6LNfhyFutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTNzU0JGc2E4SnJQbG1MdU5ib3MxLUhJVzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84NjhhOWMtZmUyNS00YjU5LWEzMjkt MTg0MDFkYTQzNTYzLzEvYTNzU0JGc2E4SnJQbG1MdU5ib3MxLUhJVzYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84NjhhOWMtZmUyNS00YjU5LWEzMjktMTg0MDFkYTQzNTYz LzEvYTNzU0JGc2E4SnJQbG1MdU5ib3MxLUhJVzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOmT8ha/ hn6qYLuKci4g4dlY0fY9tdQfTRtk/cKTwgwRsAt55Cimm8exQ7Vgr0ufAtqEah8l Sip0clpRwstu8kkQ3JLHrMPpmYc5i46tMrmAxMqFIlPErooy/2PSUcTfEibBHQDM ow8PI9bORIusjURgzpACVg7f0blI2TnI/b6yDWKJdiMX8u/btIOqk9Ba1M7TBcF0 dbk5Qcp5SMu6OHOLnP96MEogWdYxBgqCwaJ9NYOjqhpbp6tUIl+zYjilxX6AALpf K4RoINfsmPTHRSTQEEJoWGwq9JL+SEXuOdtOo8HZVyWfMQat2f+UB4gyIP4PAyl+ H+yQBNbden5dAQ== -----END CERTIFICATE-----Generated at Sat Dec 20 13:09:11 2025 by rpki-client