This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft File: A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json) Hash identifier: gnDTVhDWAy+HNER6K9gsaPdADzurLeeLQ3bIZ08gwvk= Subject key identifier: 11:79:60:ED:58:C3:0C:67:DB:B7:42:3A:D7:D6:74:B3:86:AB:93:0B Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59 Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459 Certificate serial: 019B18A8FDE2997E6A72570FF6D5B0A4A6C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft Manifest number: 045B Signing time: Sat 13 Dec 2025 17:01:26 +0000 Manifest this update: Sat 13 Dec 2025 17:01:26 +0000 Manifest next update: Sun 14 Dec 2025 17:01:26 +0000 Files and hashes: 1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: hEBDz25ZeU43urXj9ojiuD04eXElpDXPOxIPJ2RuIko=) 2: E8WGVCVQ2vQcr6hkNNKIojuNOXE.roa (hash: iVgNdkvECViWn4o3AN2B9ArIprpbGN6IKP4DqlGFKl4=) 3: muuJi1VdiXZZEsVnfkSMCgo8AdA.roa (hash: RV8C8rfSq70k09HRUmJ6d7w5nFgphIHDRVJYbJs+zIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:fd:e2:99:7e:6a:72:57:0f:f6:d5:b0:a4:a6:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459 Validity Not Before: Dec 13 17:01:26 2025 GMT Not After : Dec 14 17:01:26 2025 GMT Subject: CN=117960ed58c30c67dbb7423ad7d674b386ab930b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:fd:31:9e:b1:05:e8:72:9a:3c:74:85:39: 55:50:6c:7c:8d:bc:83:20:2a:d5:bf:47:d0:16:2c: 46:92:ea:9f:52:54:66:f8:67:0c:84:b2:5a:db:86: 81:4b:20:2f:de:9b:39:2f:bc:12:19:6a:fe:55:ea: 36:94:18:07:9f:bd:42:c3:72:09:08:77:c3:d9:71: ea:9b:b4:32:28:1d:f0:56:cc:84:77:f5:a5:1c:a3: 6b:1f:0f:27:ce:1a:da:e7:c0:84:b1:5b:31:87:c5: 17:97:63:57:72:4a:4e:03:a2:ba:10:76:db:e0:4c: ca:63:d1:f2:d0:2c:98:af:cf:00:fa:2b:58:98:b3: 7f:ef:55:98:ee:b8:08:39:c9:db:2f:3f:d2:c2:83: 63:e9:e9:94:7a:d9:87:51:a0:5d:a4:54:be:8d:6d: ba:26:5a:7e:42:29:6f:69:4d:2a:7b:86:dd:9f:d6: 91:6e:e1:2f:80:99:c2:cc:fe:0e:9f:bc:0b:5d:55: 6b:69:f2:3d:0b:3b:a0:37:5a:b2:c5:a2:d6:a1:cf: db:4b:2e:5f:3b:7f:cb:d7:2f:19:5d:ed:01:92:bc: 61:0b:33:a3:4e:0a:ac:94:7f:80:d5:42:5e:45:fa: 75:fe:e3:92:a8:7d:78:1a:f0:49:d4:ab:e6:ba:45: bd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:79:60:ED:58:C3:0C:67:DB:B7:42:3A:D7:D6:74:B3:86:AB:93:0B X509v3 Authority Key Identifier: keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:76:f3:96:8b:2b:6d:c2:14:15:59:8b:3b:61:fb:f5:44:38: 64:29:38:7b:42:dc:8f:d4:40:76:5e:73:77:97:e1:93:65:66: 86:70:0e:ae:cb:2e:4f:e5:b8:ba:cc:64:36:df:20:ae:b0:08: 9f:af:d7:8b:94:20:68:8d:e5:26:ee:ef:48:f0:d6:62:e4:4e: 7b:e9:a1:a7:ac:e1:97:e3:48:00:af:ad:2a:a2:be:80:b7:c8: 25:5e:86:e4:56:f3:f9:e3:fe:71:eb:ba:96:eb:3d:80:c8:df: 55:02:cb:5b:29:86:3c:d8:f3:b5:87:62:d1:6c:1f:d8:d8:aa: ad:6a:c3:a4:4f:28:45:9b:10:a5:3a:30:dd:5c:04:68:cf:75: 11:b5:12:32:d3:4a:b7:96:ed:b2:a8:b9:4f:79:ec:f7:d2:25: e9:53:81:0e:77:e2:71:09:29:f7:2c:ae:70:84:b8:49:60:2c: 7c:64:43:44:a5:90:d4:a5:40:d9:7a:70:b1:6b:9e:73:95:59: 1a:6c:cc:83:3f:84:92:44:98:a9:a7:8f:85:bd:d5:f5:96:81: bc:f4:78:04:d8:7f:22:b6:d5:14:5a:ff:98:7b:3a:18:50:1b: 10:58:69:4c:5e:d1:00:9e:d2:4d:08:32:a1:ef:c1:0e:4d:b0: f2:50:39:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqP3imX5qclcP9tWwpKbFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZWMwOGFlNmE5MzI1Mjg1YmRkNGE0YWRlOWMyMDdkN2Zh MTA0NTkwHhcNMjUxMjEzMTcwMTI2WhcNMjUxMjE0MTcwMTI2WjAzMTEwLwYDVQQD EygxMTc5NjBlZDU4YzMwYzY3ZGJiNzQyM2FkN2Q2NzRiMzg2YWI5MzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7/9MZ6xBehymjx0hTlVUGx8jbyD ICrVv0fQFixGkuqfUlRm+GcMhLJa24aBSyAv3ps5L7wSGWr+Veo2lBgHn71Cw3IJ CHfD2XHqm7QyKB3wVsyEd/WlHKNrHw8nzhra58CEsVsxh8UXl2NXckpOA6K6EHbb 4EzKY9Hy0CyYr88A+itYmLN/71WY7rgIOcnbLz/SwoNj6emUetmHUaBdpFS+jW26 Jlp+QilvaU0qe4bdn9aRbuEvgJnCzP4On7wLXVVrafI9CzugN1qyxaLWoc/bSy5f O3/L1y8ZXe0BkrxhCzOjTgqslH+A1UJeRfp1/uOSqH14GvBJ1KvmukW9MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBF5YO1Ywwxn27dCOtfWdLOGq5MLMB8GA1UdIwQY MBaAFAPsCK5qkyUoW91KSt6cIH1/oQRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mMzE5ODItY2Q4Yy00NWY2LWEzMDIt M2Q3NWM0ZjQ4OWU3LzEvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mMzE5ODItY2Q4Yy00NWY2LWEzMDItM2Q3NWM0ZjQ4OWU3 LzEvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3bzlosr bcIUFVmLO2H79UQ4ZCk4e0Lcj9RAdl5zd5fhk2VmhnAOrssuT+W4usxkNt8grrAI n6/Xi5QgaI3lJu7vSPDWYuROe+mhp6zhl+NIAK+tKqK+gLfIJV6G5Fbz+eP+ceu6 lus9gMjfVQLLWymGPNjztYdi0Wwf2NiqrWrDpE8oRZsQpTow3VwEaM91EbUSMtNK t5btsqi5T3ns99Il6VOBDnficQkp9yyucIS4SWAsfGRDRKWQ1KVA2XpwsWuec5VZ GmzMgz+EkkSYqaePhb3V9ZaBvPR4BNh/IrbVFFr/mHs6GFAbEFhpTF7RAJ7STQgy oe/BDk2w8lA5UQ== -----END CERTIFICATE-----Generated at Sun Dec 14 00:05:46 2025 by rpki-client