This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json) Hash identifier: sEY8ya5dZA4fmi8oRV/TXEahXGU5pXtCdGoxemRTEds= Subject key identifier: 4B:1B:1A:F2:97:A3:8D:78:7A:88:83:26:8A:E7:19:1B:7D:C9:4A:22 Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc Certificate serial: 019B10149F143C2247709E208A86E136FA27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft Manifest number: 0454 Signing time: Fri 12 Dec 2025 01:02:25 +0000 Manifest this update: Fri 12 Dec 2025 01:02:25 +0000 Manifest next update: Sat 13 Dec 2025 01:02:25 +0000 Files and hashes: 1: 9EiTee9k8nFjET11hPatStF9nkM.roa (hash: rKaveA0rfCcy5/zhxw6q4cAzgO9tcO/IcjE7cyeyoGI=) 2: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: dt0wYYJUH8XnwZDeoqh3JQHmiB1ft8lYQ7GjDMVnfo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:9f:14:3c:22:47:70:9e:20:8a:86:e1:36:fa:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc Validity Not Before: Dec 12 01:02:25 2025 GMT Not After : Dec 13 01:02:25 2025 GMT Subject: CN=4b1b1af297a38d787a8883268ae7191b7dc94a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:41:8b:0f:93:1e:f6:3d:fb:f4:2d:94:b7:65: da:67:4f:0e:06:29:d9:06:88:6c:0c:26:1e:bf:df: 09:db:57:1f:07:44:4c:b0:38:7b:db:cc:68:44:d4: 49:09:8a:1c:57:67:bd:ac:d4:28:72:bc:46:aa:d7: b4:d2:9c:4e:db:15:15:5e:8e:67:8f:ac:9d:97:a6: 21:ff:04:d3:e2:3d:68:7d:e0:24:f5:42:92:46:32: ea:b4:c0:93:4b:b4:13:f8:9e:be:57:60:56:0b:46: 1e:8d:d9:e3:e2:b4:ef:8a:17:ac:1b:6d:f0:c1:97: 12:d2:d1:6d:13:f1:f2:19:2e:38:7c:69:a0:63:c4: 90:1f:9d:4b:e7:5c:96:69:9f:70:bc:51:01:d4:00: 17:22:d5:72:f3:83:3d:2f:30:09:1a:ac:a9:1a:a3: bc:b1:1f:6e:2d:6e:af:92:0f:69:6d:e6:33:3b:33: 1b:51:78:5c:08:98:62:e8:44:dd:6e:0b:d6:37:3a: f6:a5:68:ec:14:cf:11:4b:21:a1:fd:81:69:23:fe: 97:50:f6:c8:cf:ba:cf:25:3a:33:a1:24:a2:da:18: b0:74:3d:04:13:0f:db:c4:74:48:bd:a9:30:2d:3e: d3:c1:60:4d:8c:0a:a6:59:61:7f:d9:23:7e:a1:47: 0c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1B:1A:F2:97:A3:8D:78:7A:88:83:26:8A:E7:19:1B:7D:C9:4A:22 X509v3 Authority Key Identifier: keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:0e:a6:1f:9c:65:0d:0c:c8:bf:7c:c4:89:91:b3:37:1f:d4: 9f:c1:c7:cb:4c:99:d8:e1:a5:d3:e7:b0:73:e0:3f:7f:1d:e8: b8:38:78:0d:d7:51:86:dc:d8:be:42:bb:3e:c0:a5:56:e9:39: 3c:27:cc:3f:bd:c9:d4:4e:ec:6c:94:41:0a:9b:ef:b8:65:77: 12:a4:b7:07:72:58:5e:6a:b8:b1:83:b4:62:28:83:d6:a4:72: 33:6a:e7:0c:92:84:95:93:36:15:56:42:d3:6d:0a:dc:98:46: 04:ba:0a:40:39:23:f6:ae:88:1b:4c:4e:20:64:6b:71:87:4e: a7:8e:6f:a5:9d:11:3e:9a:18:21:95:9b:09:f8:f9:18:ca:75: 8b:87:aa:43:a9:d4:bd:88:7c:de:fc:c2:e4:cf:26:8e:27:46: 63:3c:98:4f:ae:c2:e4:c1:cd:d5:3b:c1:35:0c:65:50:6c:5c: 9e:8e:1c:7d:12:74:8b:8d:a2:38:97:5a:9e:ca:f7:d6:ee:ed: 85:29:28:11:03:db:a0:b7:fa:2a:ef:16:b3:67:4e:03:02:2c: 07:db:f2:ca:24:72:63:af:8c:e3:dd:74:69:62:e2:df:7c:0f: 0e:2a:e7:a8:ca:f5:f2:40:e9:dd:5b:c8:74:ef:ef:eb:61:91: 20:f2:9e:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFJ8UPCJHcJ4giobhNvonMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZDZhOGE2MzlmODhhYWYxZjQzNmQ2YTIwYjQxNzdiMzhk MzkwZmMwHhcNMjUxMjEyMDEwMjI1WhcNMjUxMjEzMDEwMjI1WjAzMTEwLwYDVQQD Eyg0YjFiMWFmMjk3YTM4ZDc4N2E4ODgzMjY4YWU3MTkxYjdkYzk0YTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEGLD5Me9j379C2Ut2XaZ08OBinZ BohsDCYev98J21cfB0RMsDh728xoRNRJCYocV2e9rNQocrxGqte00pxO2xUVXo5n j6ydl6Yh/wTT4j1ofeAk9UKSRjLqtMCTS7QT+J6+V2BWC0Yejdnj4rTvihesG23w wZcS0tFtE/HyGS44fGmgY8SQH51L51yWaZ9wvFEB1AAXItVy84M9LzAJGqypGqO8 sR9uLW6vkg9pbeYzOzMbUXhcCJhi6ETdbgvWNzr2pWjsFM8RSyGh/YFpI/6XUPbI z7rPJTozoSSi2hiwdD0EEw/bxHRIvakwLT7TwWBNjAqmWWF/2SN+oUcM6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsbGvKXo414eoiDJornGRt9yUoiMB8GA1UdIwQY MBaAFAPWqKY5+IqvH0NtaiC0F3s405D8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQt YzIwZGU1NDNjMGRmLzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQtYzIwZGU1NDNjMGRm LzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUA6mH5xl DQzIv3zEiZGzNx/Un8HHy0yZ2OGl0+ewc+A/fx3ouDh4DddRhtzYvkK7PsClVuk5 PCfMP73J1E7sbJRBCpvvuGV3EqS3B3JYXmq4sYO0YiiD1qRyM2rnDJKElZM2FVZC 020K3JhGBLoKQDkj9q6IG0xOIGRrcYdOp45vpZ0RPpoYIZWbCfj5GMp1i4eqQ6nU vYh83vzC5M8mjidGYzyYT67C5MHN1TvBNQxlUGxcno4cfRJ0i42iOJdansr31u7t hSkoEQPboLf6Ku8Ws2dOAwIsB9vyyiRyY6+M4910aWLi33wPDirnqMr18kDp3VvI dO/v62GRIPKeYQ== -----END CERTIFICATE-----Generated at Fri Dec 12 04:10:09 2025 by rpki-client