This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json) Hash identifier: WQoQSX9mqSTCg6yza0TqyVaDiHA/333axEbQvpd9eH4= Subject key identifier: 9E:7C:F4:BD:AF:43:70:04:AA:33:B3:AD:AA:0C:34:0C:91:E3:EB:78 Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f Certificate serial: 019B1B3C2CDC3A40E80742631899A3E628E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft Manifest number: 0BC5 Signing time: Sun 14 Dec 2025 05:01:26 +0000 Manifest this update: Sun 14 Dec 2025 05:01:26 +0000 Manifest next update: Mon 15 Dec 2025 05:01:26 +0000 Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: /Ku5whstIqf1o00rll7OD7Or1ADYfSjp/SO7xmuEEcw=) 2: aAJKdn_u125mac3iiC8QVztvInI.roa (hash: 3b7fusF13hIUnZIhVd8QQY5Oa5mdPkxjIJ0o8cOzBGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3c:2c:dc:3a:40:e8:07:42:63:18:99:a3:e6:28:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f Validity Not Before: Dec 14 05:01:26 2025 GMT Not After : Dec 15 05:01:26 2025 GMT Subject: CN=9e7cf4bdaf437004aa33b3adaa0c340c91e3eb78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0f:6d:51:da:2d:bb:e2:02:2f:94:31:b5:df: 0b:56:8c:a7:c0:d5:e8:f5:94:2d:5a:44:22:74:b0: 10:0e:bb:7c:40:44:3b:32:53:0d:4b:72:de:21:5c: 94:87:cb:07:bb:d9:2d:26:0b:04:e0:e8:bb:56:c4: 31:5e:b7:53:c6:0f:93:7c:4c:63:f2:04:00:40:c8: a7:0a:9b:fd:bb:fd:6b:db:0e:38:92:f6:1e:0d:48: a6:60:0d:0d:15:9a:5b:e7:b5:81:5d:96:28:3d:7f: ef:c7:43:d8:d9:83:d4:bd:d7:9b:32:61:9f:f3:2a: d3:3d:e5:5f:ef:d7:b3:1d:97:49:02:32:59:22:b7: 14:e5:9e:62:e7:46:ff:8e:d7:52:5b:05:bb:5f:f5: 1e:bf:1d:0f:fd:be:a1:6b:03:2a:45:e1:a2:5a:82: fb:cf:be:b9:bf:21:41:26:12:01:04:c4:ce:c3:fb: 83:e4:8a:58:72:3d:8e:87:25:35:79:48:b3:aa:4b: f7:2e:cc:94:e3:2f:50:0e:1c:cb:c6:58:94:49:9f: 54:13:0e:99:66:9e:80:88:42:16:43:2b:05:34:81: 84:5c:dc:8d:8e:f0:be:20:5c:da:0a:9f:4e:13:6d: 48:12:61:97:5f:f0:eb:25:9c:71:23:b6:ae:13:f2: d2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7C:F4:BD:AF:43:70:04:AA:33:B3:AD:AA:0C:34:0C:91:E3:EB:78 X509v3 Authority Key Identifier: keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f7:48:6b:a5:27:9f:69:e7:7c:4e:a6:e6:dd:59:c6:0a:5d: 88:14:cd:4e:ea:ee:cd:86:6c:76:95:9b:3f:80:71:71:43:14: 4b:66:d9:14:1f:78:4a:94:5e:4e:90:d1:75:d1:6d:51:85:4f: 02:56:12:27:70:b6:1b:1d:28:06:43:49:60:65:a5:a9:ef:42: 51:ae:6c:db:02:c9:24:55:b4:6a:71:a4:7b:0b:71:b7:96:dc: 0c:7d:28:de:54:69:4d:f8:8d:14:24:c2:15:bb:6e:b3:3a:c4: 29:18:2b:9b:9c:fd:45:b6:38:f4:e8:df:2d:2e:f5:5d:ca:30: 46:2e:56:76:50:21:c3:e2:b3:11:ba:01:69:9f:80:c3:ae:6c: ec:bc:5b:be:b5:10:6e:42:44:9e:6f:c9:a0:ce:9f:86:2c:b2: eb:83:a4:ee:a7:da:19:10:97:9a:ff:fd:99:a4:fb:1d:d2:87: 10:95:10:2b:09:1b:cd:94:14:e3:b9:72:7c:99:1a:d6:c2:fe: f2:de:5a:c7:f9:f0:f1:37:ca:98:13:db:3b:36:df:72:a5:82: ac:3a:4d:a6:3f:37:c6:14:de:78:37:fb:0d:01:b2:12:7d:05: ef:59:42:8c:fe:85:41:9e:03:a4:2b:93:ef:ed:8e:22:7e:d5: b1:c0:ff:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbPCzcOkDoB0JjGJmj5ijkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTE1ZmZlMWRiZmU3NmE4MDVmZDBkZmIyZTBjOGQ3ZTQ5 YWY1OWYwHhcNMjUxMjE0MDUwMTI2WhcNMjUxMjE1MDUwMTI2WjAzMTEwLwYDVQQD Eyg5ZTdjZjRiZGFmNDM3MDA0YWEzM2IzYWRhYTBjMzQwYzkxZTNlYjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A9tUdotu+ICL5Qxtd8LVoynwNXo 9ZQtWkQidLAQDrt8QEQ7MlMNS3LeIVyUh8sHu9ktJgsE4Oi7VsQxXrdTxg+TfExj 8gQAQMinCpv9u/1r2w44kvYeDUimYA0NFZpb57WBXZYoPX/vx0PY2YPUvdebMmGf 8yrTPeVf79ezHZdJAjJZIrcU5Z5i50b/jtdSWwW7X/Uevx0P/b6hawMqReGiWoL7 z765vyFBJhIBBMTOw/uD5IpYcj2OhyU1eUizqkv3LsyU4y9QDhzLxliUSZ9UEw6Z Zp6AiEIWQysFNIGEXNyNjvC+IFzaCp9OE21IEmGXX/DrJZxxI7auE/LShwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ589L2vQ3AEqjOzraoMNAyR4+t4MB8GA1UdIwQY MBaAFANRX/4dv+dqgF/Q37LgyNfkmvWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAt ZDM4NDk1ZmIwOWEwLzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAtZDM4NDk1ZmIwOWEw LzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfdIa6Un n2nnfE6m5t1ZxgpdiBTNTuruzYZsdpWbP4BxcUMUS2bZFB94SpReTpDRddFtUYVP AlYSJ3C2Gx0oBkNJYGWlqe9CUa5s2wLJJFW0anGkewtxt5bcDH0o3lRpTfiNFCTC FbtuszrEKRgrm5z9RbY49OjfLS71XcowRi5WdlAhw+KzEboBaZ+Aw65s7LxbvrUQ bkJEnm/JoM6fhiyy64Ok7qfaGRCXmv/9maT7HdKHEJUQKwkbzZQU47lyfJka1sL+ 8t5ax/nw8TfKmBPbOzbfcqWCrDpNpj83xhTeeDf7DQGyEn0F71lCjP6FQZ4DpCuT 7+2OIn7VscD/OA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:42:52 2025 by rpki-client