This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json) Hash identifier: wRpDShYZScMS1+3gYuZ3jfcMW35RIJev3I3Ib0sVvx8= Subject key identifier: A7:3C:EF:E9:28:A2:E9:C8:6E:54:A4:69:FF:3F:04:F5:74:78:35:18 Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Certificate serial: 019B2476137AE204FB24FF08B02A763115F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft Manifest number: 0C68 Signing time: Tue 16 Dec 2025 00:01:16 +0000 Manifest this update: Tue 16 Dec 2025 00:01:16 +0000 Manifest next update: Wed 17 Dec 2025 00:01:16 +0000 Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: Lb1kUmdfVL/z38qzHTVhnaGwm3/BLLPVJOrwDyi5rLY=) 2: UU-ZPgHLSl7n9-aFlFBn6cpPmcU.roa (hash: Q6YDAvzuzbvQcAN8CcizevWV2gHJhbtqI7OUoG4zkxk=) 3: eK7sZ1D_OT19uO-hHprpcrVXcWU.roa (hash: bVKg53TVS+OiFbk3Bkeg0BfOZQFTwlQ5IxwlXslILAc=) 4: hxpDIvDSUNYIW-RymDBwexWB-8g.roa (hash: Jv5BRt+QxxWpqyESuYnWjL1CPNaN/TrtWzKi1FkPja0=) 5: xLGL3BfWxMtcUVRxtiUbq631owE.roa (hash: +UNhAurOfSKP8/97u/DACbGsjraqdASOxaVTIj4mWJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:76:13:7a:e2:04:fb:24:ff:08:b0:2a:76:31:15:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Validity Not Before: Dec 16 00:01:16 2025 GMT Not After : Dec 17 00:01:16 2025 GMT Subject: CN=a73cefe928a2e9c86e54a469ff3f04f574783518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:18:59:b8:61:3d:b5:09:3f:75:a8:92:80:1a: 57:c4:cb:0e:25:f7:38:f9:bf:38:7f:99:1e:ec:56: c6:db:4c:04:c9:55:0d:b8:f8:71:c0:d3:25:d1:cd: 0c:1b:52:9a:15:9b:0a:3f:47:13:c8:5d:0a:d1:e2: 22:3a:fa:19:ed:88:fc:5b:de:a1:c4:69:ca:ae:46: e2:c9:fe:09:d6:57:6f:72:d8:89:2d:bd:c6:f9:df: e2:c6:56:43:ee:ab:0d:7b:58:34:bb:18:13:7c:e5: 6e:6d:27:43:a0:50:d3:b0:11:c9:9d:b5:96:f9:21: b5:6e:ff:ed:46:37:64:84:6c:49:0f:44:1b:0a:ae: 7c:0b:97:15:67:e4:53:8e:93:bf:10:e0:0e:35:08: 92:71:1a:6b:66:3f:ce:f0:2b:f1:66:5d:ce:ff:b7: fc:5f:da:c8:e7:15:93:a0:fa:f6:c2:3d:df:19:c1: bc:5b:23:15:58:f4:06:17:e7:73:d7:72:56:a6:08: 84:bb:74:98:da:d1:28:a6:15:47:46:92:84:26:1a: 88:1f:16:c4:6c:fd:a3:4a:d6:38:8b:29:ae:aa:82: 16:8c:15:77:ec:87:6d:ff:d3:ab:55:34:49:2e:cb: 88:60:6e:56:93:f6:3d:17:d5:a6:17:08:19:fc:00: 37:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3C:EF:E9:28:A2:E9:C8:6E:54:A4:69:FF:3F:04:F5:74:78:35:18 X509v3 Authority Key Identifier: keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c3:ec:78:66:6a:c3:5c:fd:4c:05:52:df:87:15:6e:1e:fc: ee:ce:5e:b2:59:5c:01:2f:71:35:bc:e0:dd:11:d8:47:e6:3c: 84:16:e2:6b:d5:06:aa:e1:51:94:cb:f8:4d:71:72:e0:43:0b: c5:47:30:42:4e:4d:23:f3:70:39:01:80:8d:6e:89:8a:52:d5: 37:06:d0:5d:c8:55:3a:af:83:d4:51:86:3a:0b:7d:90:21:d4: fd:7f:cb:f9:bb:e1:06:15:ad:25:9c:59:50:ea:7d:f3:4c:ad: 06:22:b8:01:6b:53:40:3a:b2:ce:2e:ae:94:9c:d3:8b:6f:66: 7a:b3:f4:de:5a:32:c6:bb:2e:1d:dd:63:9e:7c:2b:a0:e4:29: 39:02:90:7f:9a:85:ce:c7:02:a2:48:7e:10:49:b3:54:72:07: fa:41:36:01:28:9e:a7:c4:23:f3:89:24:a1:87:b6:3b:22:f4: 30:34:b5:91:24:50:ea:fd:df:93:40:7e:64:3e:7f:fa:46:8f: 12:e3:39:f7:25:cd:1c:1e:39:8a:ba:7d:d1:06:f3:5d:d5:82: 50:6b:ff:5c:c1:97:5c:66:92:72:f8:4e:21:2d:d7:8d:6e:c7: 89:ee:d6:fa:6a:29:6f:cf:18:e0:9e:87:f4:04:60:7e:34:65: 23:47:53:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdhN64gT7JP8IsCp2MRX2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzY2JkYjA1OTVmYzQ4OTAyOTM4YTc4ZjQyYzFlYWYwYTE1 OWJmNDYwHhcNMjUxMjE2MDAwMTE2WhcNMjUxMjE3MDAwMTE2WjAzMTEwLwYDVQQD EyhhNzNjZWZlOTI4YTJlOWM4NmU1NGE0NjlmZjNmMDRmNTc0NzgzNTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBhZuGE9tQk/daiSgBpXxMsOJfc4 +b84f5ke7FbG20wEyVUNuPhxwNMl0c0MG1KaFZsKP0cTyF0K0eIiOvoZ7Yj8W96h xGnKrkbiyf4J1ldvctiJLb3G+d/ixlZD7qsNe1g0uxgTfOVubSdDoFDTsBHJnbWW +SG1bv/tRjdkhGxJD0QbCq58C5cVZ+RTjpO/EOAONQiScRprZj/O8CvxZl3O/7f8 X9rI5xWToPr2wj3fGcG8WyMVWPQGF+dz13JWpgiEu3SY2tEophVHRpKEJhqIHxbE bP2jStY4iymuqoIWjBV37Idt/9OrVTRJLsuIYG5Wk/Y9F9WmFwgZ/AA3gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKc87+koounIblSkaf8/BPV0eDUYMB8GA1UdIwQY MBaAFAPL2wWV/EiQKTinj0LB6vChWb9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYt ZjY2MTM4MDY2MzU4LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYtZjY2MTM4MDY2MzU4 LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcPseGZq w1z9TAVS34cVbh787s5esllcAS9xNbzg3RHYR+Y8hBbia9UGquFRlMv4TXFy4EML xUcwQk5NI/NwOQGAjW6JilLVNwbQXchVOq+D1FGGOgt9kCHU/X/L+bvhBhWtJZxZ UOp980ytBiK4AWtTQDqyzi6ulJzTi29merP03loyxrsuHd1jnnwroOQpOQKQf5qF zscCokh+EEmzVHIH+kE2ASiep8Qj84kkoYe2OyL0MDS1kSRQ6v3fk0B+ZD5/+kaP EuM59yXNHB45irp90QbzXdWCUGv/XMGXXGaScvhOIS3XjW7Hie7W+mopb88Y4J6H 9ARgfjRlI0dTug== -----END CERTIFICATE-----Generated at Tue Dec 16 09:25:10 2025 by rpki-client