This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json) Hash identifier: eIJxDhPXqUuDoiSthb7BgjE1pWL4duLq86OOSRYtmV0= Subject key identifier: B4:59:67:3B:72:99:CB:C5:F6:DD:7A:FF:69:EB:C7:DF:A0:35:90:2B Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43 Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43 Certificate serial: 019B484B11FE156B70D7CB4271B76B9D3DE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 23:00:37 +0000 Manifest this update: Mon 22 Dec 2025 23:00:37 +0000 Manifest next update: Tue 23 Dec 2025 23:00:37 +0000 Files and hashes: 1: 6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa (hash: nJO5IBDQ2MODS/Zojmv3q8UXuHQA1f7Z7pPIMcFUXg8=) 2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: A7e57eN87pozPZgUWPkGU3QdmPpLcnAcCTOTDhG9x9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:11:fe:15:6b:70:d7:cb:42:71:b7:6b:9d:3d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43 Validity Not Before: Dec 22 23:00:37 2025 GMT Not After : Dec 23 23:00:37 2025 GMT Subject: CN=b459673b7299cbc5f6dd7aff69ebc7dfa035902b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:9f:df:d8:2a:60:15:d6:7a:75:a2:a5:08: e8:6a:a1:5f:bf:a9:8d:19:8f:f7:b3:51:29:72:77: 95:b8:9d:e3:c9:f1:14:6f:37:ea:83:b2:59:e2:ef: 25:75:94:de:7d:bb:67:21:34:41:d4:93:ab:50:74: bd:0c:81:ad:c6:48:f4:57:f5:4f:e1:51:f5:70:fe: 0f:1b:e6:1d:81:b1:32:20:d4:48:87:bd:65:c1:33: e9:d1:e3:77:25:11:b4:e5:92:81:6f:4f:46:32:a6: 30:c1:33:1f:17:dd:3e:b6:3e:43:97:b2:24:61:5b: 88:d9:ec:6a:f1:ab:64:b6:67:85:b4:3e:d5:96:c0: 3c:cf:5c:8e:e0:7e:3e:6f:b4:2c:fe:9c:12:b0:6d: c7:23:e0:7c:d1:17:5b:99:a3:57:1b:f3:d0:78:75: 8d:c2:e8:bb:7f:39:dc:7a:51:61:40:48:14:0f:ba: b1:10:b4:22:fd:28:a4:ba:ff:3f:81:ec:48:68:25: cd:f9:57:d0:77:0f:4c:90:2a:cf:f6:4e:a6:8c:06: 9d:d8:d9:79:f3:99:c3:d8:9c:ae:f2:2a:21:09:08: b6:40:09:e3:94:f0:b4:bb:a4:93:d8:4d:4c:ab:f5: 76:25:f4:5b:7c:13:f7:0b:05:0c:f7:25:a6:9b:92: 95:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:59:67:3B:72:99:CB:C5:F6:DD:7A:FF:69:EB:C7:DF:A0:35:90:2B X509v3 Authority Key Identifier: keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e3:a5:b5:d7:58:d7:20:c8:ef:e1:9b:4e:08:d8:45:18:6e: ee:a8:5c:0d:8c:53:8b:f2:a2:4a:e9:70:e9:94:15:61:e9:62: f3:e6:9f:23:25:7c:ae:bf:46:d9:f0:a5:f3:96:6e:44:d0:a9: 2b:f3:63:2b:ea:09:96:e8:65:b6:97:01:fc:ba:7e:0f:90:18: 85:da:73:41:40:8d:d6:d0:dd:6e:a6:b4:0d:d1:de:51:a0:e7: a8:38:11:79:a1:55:07:65:e9:0e:eb:ae:d3:8c:b8:94:f1:4c: 79:e8:62:02:a0:02:a0:e8:fb:6b:be:fd:61:c2:58:8a:aa:e5: 7b:d5:69:96:48:ca:40:20:ae:b4:af:a9:3c:0b:3d:4f:e4:8d: 19:ad:32:5b:de:cc:68:6a:65:b5:e2:33:31:76:9f:21:e8:d0: 6f:55:12:70:30:8d:5a:d7:d1:19:3b:bd:3f:d7:dc:d7:80:63: 3b:4c:52:45:a7:76:12:f8:2e:4e:98:40:07:9d:d6:f9:76:a0: ee:fc:55:54:93:1c:12:a1:57:e6:bf:38:70:82:ba:05:c2:75: 10:ef:58:60:ae:21:20:ef:b0:7f:79:2e:d7:1a:92:82:e8:d7: 89:5d:d4:c6:47:41:e8:5d:55:fb:a4:a5:54:6a:40:a7:26:e4: 76:d6:fc:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtISxH+FWtw18tCcbdrnT3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTM2ZTFhNjhlOTQ0YjIzNDc5MDhiOGJkZmU3NzQwZDhl OGFhNDMwHhcNMjUxMjIyMjMwMDM3WhcNMjUxMjIzMjMwMDM3WjAzMTEwLwYDVQQD EyhiNDU5NjczYjcyOTljYmM1ZjZkZDdhZmY2OWViYzdkZmEwMzU5MDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuCf39gqYBXWenWipQjoaqFfv6mN GY/3s1EpcneVuJ3jyfEUbzfqg7JZ4u8ldZTefbtnITRB1JOrUHS9DIGtxkj0V/VP 4VH1cP4PG+YdgbEyINRIh71lwTPp0eN3JRG05ZKBb09GMqYwwTMfF90+tj5Dl7Ik YVuI2exq8atktmeFtD7VlsA8z1yO4H4+b7Qs/pwSsG3HI+B80RdbmaNXG/PQeHWN wui7fzncelFhQEgUD7qxELQi/Sikuv8/gexIaCXN+VfQdw9MkCrP9k6mjAad2Nl5 85nD2Jyu8iohCQi2QAnjlPC0u6ST2E1Mq/V2JfRbfBP3CwUM9yWmm5KVPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRZZztymcvF9t16/2nrx9+gNZArMB8GA1UdIwQY MBaAFANTbhpo6USyNHkIuL3+d0DY6KpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzkt NWEzNzdjODc5MWY1LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzktNWEzNzdjODc5MWY1 LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuOltddY 1yDI7+GbTgjYRRhu7qhcDYxTi/KiSulw6ZQVYeli8+afIyV8rr9G2fCl85ZuRNCp K/NjK+oJluhltpcB/Lp+D5AYhdpzQUCN1tDdbqa0DdHeUaDnqDgReaFVB2XpDuuu 04y4lPFMeehiAqACoOj7a779YcJYiqrle9VplkjKQCCutK+pPAs9T+SNGa0yW97M aGplteIzMXafIejQb1UScDCNWtfRGTu9P9fc14BjO0xSRad2EvguTphAB53W+Xag 7vxVVJMcEqFX5r84cIK6BcJ1EO9YYK4hIO+wf3ku1xqSgujXiV3UxkdB6F1V+6Sl VGpApybkdtb8eQ== -----END CERTIFICATE-----Generated at Tue Dec 23 06:09:09 2025 by rpki-client