This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft File: A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json) Hash identifier: fm709WUcVZswNuCzlj5mdfb4qdNwzBRp1siReS64HaA= Subject key identifier: C5:B4:BB:E6:C0:DC:C9:E3:85:51:80:BA:EC:20:13:C9:6C:FB:B1:DB Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3 Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3 Certificate serial: 019B34C43CD585B8CE68E054307448EBDC41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft Manifest number: 07EE Signing time: Fri 19 Dec 2025 04:00:34 +0000 Manifest this update: Fri 19 Dec 2025 04:00:34 +0000 Manifest next update: Sat 20 Dec 2025 04:00:34 +0000 Files and hashes: 1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: lMemZCQcQyEzfv4ikhihhacLx5JVFHu0XuMEHMHhA1k=) 2: p0cL-vdhY3KSfcwz6s4koNapmbw.roa (hash: 9RImGj5UfNKUq/CzlTB6jfp8TR4Xc1sqYedIB3MDaIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:3c:d5:85:b8:ce:68:e0:54:30:74:48:eb:dc:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3 Validity Not Before: Dec 19 04:00:34 2025 GMT Not After : Dec 20 04:00:34 2025 GMT Subject: CN=c5b4bbe6c0dcc9e3855180baec2013c96cfbb1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a7:7b:70:f8:29:c3:28:b0:c6:ac:27:d0:79: 4d:bc:a0:f6:7b:5d:27:34:8c:5d:25:fc:f3:22:2e: a3:a0:86:74:7b:10:ac:63:8d:32:f7:14:89:bd:4f: fa:01:43:48:5e:b8:3a:55:23:c9:3b:c8:7a:ea:29: a0:6a:66:ae:e6:87:b0:5e:3a:5f:48:76:a0:c4:2e: 77:75:91:c6:ca:db:63:35:f4:4d:3f:7c:04:58:06: 47:e8:6b:ec:97:3e:f4:07:41:6a:f8:d0:f7:d0:72: d9:d2:c3:7e:51:cd:3e:44:f2:04:3a:df:f3:11:f7: cb:de:86:a7:43:f5:88:92:be:25:98:b9:36:15:49: 6e:d0:74:66:e1:cd:8a:3a:c1:1a:0a:8b:c5:93:48: 17:45:59:ea:d7:d5:76:e5:fe:a1:62:4c:a0:61:2f: fc:ff:d4:de:63:5a:0c:21:1c:8c:74:75:14:eb:06: f3:b1:24:7f:fe:16:8a:e6:da:9c:cb:f2:05:a4:86: 22:f6:ca:f9:77:dd:66:1a:62:d5:be:04:aa:d5:1d: f7:d6:73:cd:ed:b0:1e:3b:67:b4:ff:3d:57:51:46: ea:42:23:93:b7:36:79:96:70:07:b4:61:a4:06:5d: db:c8:0f:0a:48:35:c0:7d:12:4b:44:b1:87:15:57: bc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B4:BB:E6:C0:DC:C9:E3:85:51:80:BA:EC:20:13:C9:6C:FB:B1:DB X509v3 Authority Key Identifier: keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:6e:08:c4:37:11:95:f0:fb:91:8e:53:03:8b:fc:da:a5:e1: e1:cf:24:30:b3:7c:a7:69:b1:49:79:d5:06:d8:c7:f7:52:a5: 48:4f:ba:09:77:62:66:fb:8d:02:70:8d:0c:8f:70:ba:ff:a5: 85:fc:94:ba:44:f8:92:49:d6:1d:db:e5:71:8c:2b:2e:15:81: d7:da:1f:d8:a2:8b:11:ff:bc:76:83:9d:16:33:41:ca:4e:f6: 6c:7b:9e:64:e2:2a:38:b7:e5:a9:a1:c2:63:41:9b:f4:19:5c: c5:f0:d2:2b:57:7e:d1:9f:88:76:e6:b1:9d:4f:aa:c4:05:bf: 28:54:34:32:58:c7:5f:78:98:f9:26:aa:5e:2e:27:88:0e:b7: 35:96:05:51:e6:11:84:ed:1d:08:8a:b8:c0:79:0a:74:46:f8: 7d:7a:a2:5f:75:f7:78:0c:d1:4f:df:27:97:fd:28:cd:ef:d5: 49:2b:a3:0d:b4:13:19:ab:e2:5d:c1:c5:f9:a0:d5:a7:76:a1: a7:7c:55:19:39:4a:9c:b8:ef:0b:c5:7e:d8:93:cf:80:be:0e: 59:6c:fe:8d:1e:84:0d:66:50:cd:47:5e:46:15:49:57:f6:ab: 6c:fd:70:24:09:1b:13:99:35:58:d8:bd:77:52:3d:79:af:a3: c3:70:33:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xDzVhbjOaOBUMHRI69xBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOTgzMWY3YmEzZGUyZmJlZjE2ZDQ2NDlmZDQ4NjBjMTVl OWQ2YzMwHhcNMjUxMjE5MDQwMDM0WhcNMjUxMjIwMDQwMDM0WjAzMTEwLwYDVQQD EyhjNWI0YmJlNmMwZGNjOWUzODU1MTgwYmFlYzIwMTNjOTZjZmJiMWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6d7cPgpwyiwxqwn0HlNvKD2e10n NIxdJfzzIi6joIZ0exCsY40y9xSJvU/6AUNIXrg6VSPJO8h66imgamau5oewXjpf SHagxC53dZHGyttjNfRNP3wEWAZH6Gvslz70B0Fq+ND30HLZ0sN+Uc0+RPIEOt/z EffL3oanQ/WIkr4lmLk2FUlu0HRm4c2KOsEaCovFk0gXRVnq19V25f6hYkygYS/8 /9TeY1oMIRyMdHUU6wbzsSR//haK5tqcy/IFpIYi9sr5d91mGmLVvgSq1R331nPN 7bAeO2e0/z1XUUbqQiOTtzZ5lnAHtGGkBl3byA8KSDXAfRJLRLGHFVe8yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMW0u+bA3MnjhVGAuuwgE8ls+7HbMB8GA1UdIwQY MBaAFAOYMfe6PeL77xbUZJ/UhgwV6dbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lNDQ5NGUtMWUzMy00NDM3LTg0MzMt MDM3YjVhN2I5NTQ0LzEvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lNDQ5NGUtMWUzMy00NDM3LTg0MzMtMDM3YjVhN2I5NTQ0 LzEvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2m4IxDcR lfD7kY5TA4v82qXh4c8kMLN8p2mxSXnVBtjH91KlSE+6CXdiZvuNAnCNDI9wuv+l hfyUukT4kknWHdvlcYwrLhWB19of2KKLEf+8doOdFjNByk72bHueZOIqOLflqaHC Y0Gb9BlcxfDSK1d+0Z+IduaxnU+qxAW/KFQ0MljHX3iY+SaqXi4niA63NZYFUeYR hO0dCIq4wHkKdEb4fXqiX3X3eAzRT98nl/0oze/VSSujDbQTGaviXcHF+aDVp3ah p3xVGTlKnLjvC8V+2JPPgL4OWWz+jR6EDWZQzUdeRhVJV/arbP1wJAkbE5k1WNi9 d1I9ea+jw3Azig== -----END CERTIFICATE-----Generated at Fri Dec 19 12:07:13 2025 by rpki-client