This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft File: A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json) Hash identifier: l0puEy4q/hl6S/qEJljbsdkGCsdgJiRpXBiJwzbFVng= Subject key identifier: 19:AD:44:0C:EC:DB:68:7C:F0:F5:4C:94:0F:4A:30:EB:46:4A:D2:A9 Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59 Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459 Certificate serial: 019B281BD4F38F1B427AAF61F3B83B143B57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft Manifest number: 0463 Signing time: Tue 16 Dec 2025 17:01:11 +0000 Manifest this update: Tue 16 Dec 2025 17:01:11 +0000 Manifest next update: Wed 17 Dec 2025 17:01:11 +0000 Files and hashes: 1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: AlCiKoGr2Eu770Sx9017vpvjzpBU/narImuBcR5O1QQ=) 2: E8WGVCVQ2vQcr6hkNNKIojuNOXE.roa (hash: iVgNdkvECViWn4o3AN2B9ArIprpbGN6IKP4DqlGFKl4=) 3: muuJi1VdiXZZEsVnfkSMCgo8AdA.roa (hash: RV8C8rfSq70k09HRUmJ6d7w5nFgphIHDRVJYbJs+zIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:d4:f3:8f:1b:42:7a:af:61:f3:b8:3b:14:3b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459 Validity Not Before: Dec 16 17:01:11 2025 GMT Not After : Dec 17 17:01:11 2025 GMT Subject: CN=19ad440cecdb687cf0f54c940f4a30eb464ad2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9d:29:7d:39:58:49:f7:c6:16:18:90:17:24: d5:4f:6c:c3:9e:9b:ab:74:3f:74:8c:69:51:a6:a3: fb:06:a1:c2:11:a0:4e:8a:fc:63:fe:64:5c:34:a3: d1:17:b2:a9:68:11:80:f4:49:ad:bb:28:51:d1:7d: 02:f0:24:5b:5a:b7:02:0f:fd:97:f5:04:2f:be:66: a4:fa:af:46:ee:2f:84:ce:b5:f3:b1:17:14:7a:99: 8e:cd:d6:9d:85:b8:c1:ce:b7:50:e3:70:11:9a:ec: ef:54:48:93:8c:8c:13:08:f2:3d:e2:f6:e1:c1:32: df:27:ee:b2:e9:f7:b2:df:9a:c0:79:a5:95:be:e0: 4d:3e:18:d3:b1:37:12:7d:46:fd:b9:1f:a8:50:4e: 96:3c:5a:e4:64:ec:ae:19:b9:c4:69:ac:aa:1b:60: 00:3a:fb:d6:bd:12:cc:06:4b:79:d2:da:fd:09:c6: 9a:ff:0e:54:47:1c:d8:39:a5:0e:41:2c:23:31:3e: 57:07:c6:6f:67:27:ff:6c:d8:8b:ec:cb:50:e4:69: b7:ac:d3:e0:51:39:b3:a0:a6:ab:9c:e9:4b:bb:9d: 10:92:d4:15:66:f7:e6:71:d1:31:66:9b:18:84:ca: f0:1e:dc:0f:17:8f:13:33:ec:82:3c:ed:5d:b1:7b: a6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AD:44:0C:EC:DB:68:7C:F0:F5:4C:94:0F:4A:30:EB:46:4A:D2:A9 X509v3 Authority Key Identifier: keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:d0:ea:4e:89:e9:a6:57:f6:fc:ee:f9:60:1d:c9:54:ad:ee: bf:22:cb:fe:f9:68:aa:25:30:ad:51:cb:48:91:2e:47:13:4f: 73:a9:04:e5:fd:f2:46:6d:13:6a:f2:e9:43:3b:68:59:f0:5b: e6:3d:8c:fb:48:db:27:49:f7:7f:0f:5f:da:e5:73:6d:96:b9: 1f:d1:d2:72:11:fa:f0:f7:16:3b:80:89:6b:25:4d:4e:4f:dd: a1:e9:37:6b:8a:98:e7:a3:20:71:fc:7a:70:95:bb:dc:84:8d: 6c:ef:64:64:ca:90:59:72:28:7e:eb:51:e1:5a:3b:7c:49:93: aa:1c:d5:34:54:b8:1a:0f:47:96:ab:67:07:e3:43:7b:d8:29: ba:e3:59:78:f5:73:d7:8f:90:1b:4a:da:18:c6:23:76:48:e3: 03:a8:4a:97:25:7e:5d:e9:85:ad:91:ff:97:e6:72:99:87:73: 0c:c5:71:59:85:57:d1:8d:90:3d:9d:a0:e9:b0:c5:51:78:6a: ae:d2:ab:13:af:fc:46:e3:98:c1:50:e6:8f:7d:86:a2:dc:d8: d7:53:b7:c4:a8:fb:4b:1c:0b:94:0f:68:74:a6:ab:ea:79:93: f1:59:c9:b8:b5:56:15:9a:b8:f0:fd:2a:f0:93:96:05:5f:59: 69:21:01:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG9TzjxtCeq9h87g7FDtXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZWMwOGFlNmE5MzI1Mjg1YmRkNGE0YWRlOWMyMDdkN2Zh MTA0NTkwHhcNMjUxMjE2MTcwMTExWhcNMjUxMjE3MTcwMTExWjAzMTEwLwYDVQQD EygxOWFkNDQwY2VjZGI2ODdjZjBmNTRjOTQwZjRhMzBlYjQ2NGFkMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ0pfTlYSffGFhiQFyTVT2zDnpur dD90jGlRpqP7BqHCEaBOivxj/mRcNKPRF7KpaBGA9EmtuyhR0X0C8CRbWrcCD/2X 9QQvvmak+q9G7i+EzrXzsRcUepmOzdadhbjBzrdQ43ARmuzvVEiTjIwTCPI94vbh wTLfJ+6y6fey35rAeaWVvuBNPhjTsTcSfUb9uR+oUE6WPFrkZOyuGbnEaayqG2AA OvvWvRLMBkt50tr9Ccaa/w5URxzYOaUOQSwjMT5XB8ZvZyf/bNiL7MtQ5Gm3rNPg UTmzoKarnOlLu50QktQVZvfmcdExZpsYhMrwHtwPF48TM+yCPO1dsXumwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmtRAzs22h88PVMlA9KMOtGStKpMB8GA1UdIwQY MBaAFAPsCK5qkyUoW91KSt6cIH1/oQRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mMzE5ODItY2Q4Yy00NWY2LWEzMDIt M2Q3NWM0ZjQ4OWU3LzEvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mMzE5ODItY2Q4Yy00NWY2LWEzMDItM2Q3NWM0ZjQ4OWU3 LzEvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdDqTonp plf2/O75YB3JVK3uvyLL/vloqiUwrVHLSJEuRxNPc6kE5f3yRm0TavLpQztoWfBb 5j2M+0jbJ0n3fw9f2uVzbZa5H9HSchH68PcWO4CJayVNTk/doek3a4qY56Mgcfx6 cJW73ISNbO9kZMqQWXIofutR4Vo7fEmTqhzVNFS4Gg9HlqtnB+NDe9gpuuNZePVz 14+QG0raGMYjdkjjA6hKlyV+XemFrZH/l+ZymYdzDMVxWYVX0Y2QPZ2g6bDFUXhq rtKrE6/8RuOYwVDmj32GotzY11O3xKj7SxwLlA9odKar6nmT8VnJuLVWFZq48P0q 8JOWBV9ZaSEBMA== -----END CERTIFICATE-----Generated at Tue Dec 16 22:33:21 2025 by rpki-client