This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft File: A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json) Hash identifier: YFziWYtqe1mOY9V1SSSgMlIIKsRkPYNP3/PwSd6IdyY= Subject key identifier: 6E:0E:D4:FF:DF:97:6B:60:E0:92:D0:24:6D:66:4D:01:A2:23:1E:E4 Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61 Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861 Certificate serial: 019B3EA358B25B97592C086639284C64EC76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 02:00:51 +0000 Manifest this update: Sun 21 Dec 2025 02:00:51 +0000 Manifest next update: Mon 22 Dec 2025 02:00:51 +0000 Files and hashes: 1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: ExSza1SmaSQb0Wv93lu0qkSYPQ6ruJHItcx/UZn5+yg=) 2: Xw_JxFKBt0xay86EnT10Cffhb2o.roa (hash: CcdZeMl6Gy8SVuqOk3A/APDzafeJm+A13qmOxZHMPq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:58:b2:5b:97:59:2c:08:66:39:28:4c:64:ec:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861 Validity Not Before: Dec 21 02:00:51 2025 GMT Not After : Dec 22 02:00:51 2025 GMT Subject: CN=6e0ed4ffdf976b60e092d0246d664d01a2231ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:05:5f:79:33:59:5e:b1:df:9f:83:72:5c: 8b:ab:33:86:3c:a4:46:44:cf:b9:d6:a6:b2:36:5a: 95:ef:2c:97:7f:47:e7:b4:b5:91:2f:ec:51:0e:04: 55:b0:a2:bd:78:9b:6e:c9:cc:7d:66:bd:a2:7e:08: 11:89:c4:ad:57:7d:ae:bf:7f:a1:a7:b8:39:19:02: d2:7a:74:ff:d6:dc:24:32:9b:e7:61:15:1c:4c:61: 1c:92:c2:0d:db:2b:f1:ee:39:88:95:75:8f:89:29: 7c:9d:d6:68:3a:c0:6a:c4:c2:3b:9c:e5:7a:83:d6: 28:b6:ce:01:fb:07:3c:bc:fa:ca:c6:ea:23:78:9a: ab:c0:d9:bf:5f:e3:54:d1:5c:8d:cb:3f:bf:00:5d: 16:e4:6a:58:4c:c0:e3:d8:78:15:cb:3d:38:60:bb: 78:fc:0e:e3:8f:e3:73:59:89:9c:44:86:15:b8:ac: f1:f5:13:32:2b:b7:60:bf:14:bd:62:0e:2f:fc:09: e0:85:f8:68:23:5b:92:3b:92:6b:02:d3:52:9f:67: 68:7f:e4:88:1d:d8:70:ba:ce:93:cc:dd:87:5a:0a: fb:1a:41:f6:3b:b8:8d:b3:e0:3b:1c:e9:d1:fe:fd: b8:b1:0a:3a:bf:e8:53:9d:75:69:6c:08:a8:5f:9c: ca:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0E:D4:FF:DF:97:6B:60:E0:92:D0:24:6D:66:4D:01:A2:23:1E:E4 X509v3 Authority Key Identifier: keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:36:40:68:13:59:33:5c:b9:67:fa:c1:3e:46:7f:3d:62:b4: 5a:4a:2d:8e:f6:ad:1d:20:9d:25:75:22:36:47:a1:14:cc:ba: 42:c3:38:c4:5f:95:5e:e8:ca:69:d0:bf:4b:1f:97:94:08:6e: df:77:0c:e6:19:7f:70:91:18:56:e1:ac:81:b7:28:7a:7c:06: 37:e2:3e:6d:5e:5e:bf:41:f9:9e:cb:1c:94:b3:26:95:39:c0: 60:f8:8a:e2:d6:32:57:5c:75:0d:97:80:54:73:dc:dc:ea:25: d4:c7:26:1b:23:7b:f2:d9:e3:7a:b9:3f:ff:21:3d:bf:85:50: 92:89:b2:a6:dc:0a:75:5d:8c:56:9a:de:f4:3c:76:43:6f:2f: 04:96:8b:ce:ef:04:9f:a4:40:9a:b5:b1:49:24:15:6c:a9:6a: 70:2f:d6:f6:85:82:1c:2c:a2:4f:5c:7e:14:96:ea:c5:f3:cc: e2:c1:40:79:98:6f:78:c4:67:87:32:66:5a:8d:bc:c4:aa:49: 17:19:71:28:e0:e8:c0:43:f7:98:b3:1e:25:ba:cb:65:e5:25: 66:05:46:39:41:1f:c3:32:f2:12:43:22:9d:e5:ba:a2:ea:dc: be:c9:be:fd:af:32:1c:d6:fa:f5:61:18:0c:14:40:35:6c:30: 19:74:d6:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o1iyW5dZLAhmOShMZOx2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNmFhYzM0YzY2ZmRhNjRiNjdlYjk2YjAyZDgxOTc4OWZl YmU4NjEwHhcNMjUxMjIxMDIwMDUxWhcNMjUxMjIyMDIwMDUxWjAzMTEwLwYDVQQD Eyg2ZTBlZDRmZmRmOTc2YjYwZTA5MmQwMjQ2ZDY2NGQwMWEyMjMxZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwIFX3kzWV6x35+DclyLqzOGPKRG RM+51qayNlqV7yyXf0fntLWRL+xRDgRVsKK9eJtuycx9Zr2ifggRicStV32uv3+h p7g5GQLSenT/1twkMpvnYRUcTGEcksIN2yvx7jmIlXWPiSl8ndZoOsBqxMI7nOV6 g9Yots4B+wc8vPrKxuojeJqrwNm/X+NU0VyNyz+/AF0W5GpYTMDj2HgVyz04YLt4 /A7jj+NzWYmcRIYVuKzx9RMyK7dgvxS9Yg4v/AnghfhoI1uSO5JrAtNSn2dof+SI Hdhwus6TzN2HWgr7GkH2O7iNs+A7HOnR/v24sQo6v+hTnXVpbAioX5zKcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4O1P/fl2tg4JLQJG1mTQGiIx7kMB8GA1UdIwQY MBaAFANqrDTGb9pktn65awLYGXif6+hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYt OTYzOTkzY2U1MTgxLzEvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYtOTYzOTkzY2U1MTgx LzEvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODZAaBNZ M1y5Z/rBPkZ/PWK0WkotjvatHSCdJXUiNkehFMy6QsM4xF+VXujKadC/Sx+XlAhu 33cM5hl/cJEYVuGsgbcoenwGN+I+bV5ev0H5nssclLMmlTnAYPiK4tYyV1x1DZeA VHPc3Ool1McmGyN78tnjerk//yE9v4VQkomyptwKdV2MVpre9Dx2Q28vBJaLzu8E n6RAmrWxSSQVbKlqcC/W9oWCHCyiT1x+FJbqxfPM4sFAeZhveMRnhzJmWo28xKpJ FxlxKODowEP3mLMeJbrLZeUlZgVGOUEfwzLyEkMineW6ourcvsm+/a8yHNb69WEY DBRANWwwGXTW7w== -----END CERTIFICATE-----Generated at Sun Dec 21 06:54:34 2025 by rpki-client