This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json) Hash identifier: mJsE1m6g6M7hnVVOQdnAjX9xb6BE5b8eLTAdJqtmXI8= Subject key identifier: E6:41:AC:1B:20:1F:C9:79:C7:C9:20:50:53:02:04:41:EC:41:7A:B3 Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f Certificate serial: 019B0FA57518321D221A909D13DCB4766E48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft Manifest number: 0BBF Signing time: Thu 11 Dec 2025 23:01:00 +0000 Manifest this update: Thu 11 Dec 2025 23:01:00 +0000 Manifest next update: Fri 12 Dec 2025 23:01:00 +0000 Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: EDHHghT7nTH3ijvsryoXlYja9qDOuNJDuqTI6fHvQgI=) 2: aAJKdn_u125mac3iiC8QVztvInI.roa (hash: 3b7fusF13hIUnZIhVd8QQY5Oa5mdPkxjIJ0o8cOzBGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:75:18:32:1d:22:1a:90:9d:13:dc:b4:76:6e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f Validity Not Before: Dec 11 23:01:00 2025 GMT Not After : Dec 12 23:01:00 2025 GMT Subject: CN=e641ac1b201fc979c7c9205053020441ec417ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:93:95:7b:7e:6f:b8:57:91:83:d9:f7:ae: 31:34:72:2c:cf:ab:16:2f:6a:91:ac:86:11:02:e4: 0b:e6:25:6c:50:6d:c2:b1:fc:b7:bb:cf:ab:de:fc: 5a:55:e6:4e:0a:a6:08:68:aa:2b:46:4f:0d:d6:b6: 80:5b:6d:4a:7a:fd:de:03:09:fb:67:b6:15:3a:03: 00:ff:f3:9d:bd:37:8f:f8:d5:f3:da:34:65:00:8c: 08:a8:94:85:ed:e3:c6:05:05:e2:90:39:57:d1:6a: 1f:af:6c:e6:eb:0f:eb:d0:86:f5:7a:1b:10:e5:88: 2e:d5:2c:08:ac:a8:01:3a:ef:87:6c:a1:0c:e2:43: 1b:13:85:06:e3:41:d9:b3:75:e3:e2:33:dd:5e:42: 0b:6f:0e:77:45:9c:d4:82:ea:aa:42:e1:15:aa:3a: e1:42:4e:0b:98:df:f4:63:1d:fb:5c:23:3b:0c:a6: 67:d2:53:f3:9f:d6:f7:e4:97:60:30:39:c6:a9:5d: a1:c3:3f:2f:eb:17:07:80:d0:7f:27:b8:e8:bb:6a: d6:4d:93:69:06:8b:45:1a:41:a2:66:fe:90:01:20: 65:a3:29:29:c6:1d:e2:8a:a3:9b:89:63:9f:39:a0: e0:4d:c4:ce:fd:77:89:71:31:da:c7:d9:53:94:81: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:41:AC:1B:20:1F:C9:79:C7:C9:20:50:53:02:04:41:EC:41:7A:B3 X509v3 Authority Key Identifier: keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:da:20:18:bb:b3:26:8d:56:7e:ad:60:8a:9d:37:71:56:5e: fb:45:78:36:24:71:72:ef:4d:5b:40:c1:5c:10:ed:86:ef:c9: 6d:fa:d4:d5:93:63:cb:c1:15:c1:3a:15:06:7a:83:4e:e2:e6: 64:16:46:5f:47:45:c2:a7:39:24:3b:c4:3c:4e:80:54:47:cc: 83:57:e0:1d:75:f7:1e:8b:53:07:e4:ab:35:3c:ac:d5:08:09: 9f:d3:bb:3d:72:9a:2e:50:e1:93:6f:c4:68:5c:a8:47:34:ee: 40:bb:01:58:93:11:da:f8:93:c5:56:20:c3:e0:ec:e2:95:39: 26:7f:4f:11:72:bc:5b:3c:43:5d:b3:ac:30:1d:bf:79:91:71: 6f:2c:78:f5:c8:f0:02:81:15:23:cf:fc:a0:bf:19:7b:3b:74: 52:ba:47:7a:03:db:4a:25:47:dd:4a:d4:c1:03:dc:3e:3e:9a: d3:ac:29:84:c8:9f:1a:75:16:63:0d:6c:c7:05:5a:d0:02:1d: fe:81:33:0b:43:57:4d:13:35:27:38:00:9b:df:64:fb:ec:4d: ac:34:42:04:fd:fe:8f:47:f0:12:54:e4:b6:cd:06:c8:02:da: 42:17:83:4e:0a:65:be:d5:8e:29:56:bf:ff:39:16:82:a6:01: 79:9b:77:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpXUYMh0iGpCdE9y0dm5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTE1ZmZlMWRiZmU3NmE4MDVmZDBkZmIyZTBjOGQ3ZTQ5 YWY1OWYwHhcNMjUxMjExMjMwMTAwWhcNMjUxMjEyMjMwMTAwWjAzMTEwLwYDVQQD EyhlNjQxYWMxYjIwMWZjOTc5YzdjOTIwNTA1MzAyMDQ0MWVjNDE3YWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk2TlXt+b7hXkYPZ964xNHIsz6sW L2qRrIYRAuQL5iVsUG3Csfy3u8+r3vxaVeZOCqYIaKorRk8N1raAW21Kev3eAwn7 Z7YVOgMA//OdvTeP+NXz2jRlAIwIqJSF7ePGBQXikDlX0Wofr2zm6w/r0Ib1ehsQ 5Ygu1SwIrKgBOu+HbKEM4kMbE4UG40HZs3Xj4jPdXkILbw53RZzUguqqQuEVqjrh Qk4LmN/0Yx37XCM7DKZn0lPzn9b35JdgMDnGqV2hwz8v6xcHgNB/J7jou2rWTZNp BotFGkGiZv6QASBloykpxh3iiqObiWOfOaDgTcTO/XeJcTHax9lTlIH53wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZBrBsgH8l5x8kgUFMCBEHsQXqzMB8GA1UdIwQY MBaAFANRX/4dv+dqgF/Q37LgyNfkmvWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAt ZDM4NDk1ZmIwOWEwLzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAtZDM4NDk1ZmIwOWEw LzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9ogGLuz Jo1Wfq1gip03cVZe+0V4NiRxcu9NW0DBXBDthu/JbfrU1ZNjy8EVwToVBnqDTuLm ZBZGX0dFwqc5JDvEPE6AVEfMg1fgHXX3HotTB+SrNTys1QgJn9O7PXKaLlDhk2/E aFyoRzTuQLsBWJMR2viTxVYgw+Ds4pU5Jn9PEXK8WzxDXbOsMB2/eZFxbyx49cjw AoEVI8/8oL8Zezt0UrpHegPbSiVH3UrUwQPcPj6a06wphMifGnUWYw1sxwVa0AId /oEzC0NXTRM1JzgAm99k++xNrDRCBP3+j0fwElTkts0GyALaQheDTgplvtWOKVa/ /zkWgqYBeZt3qw== -----END CERTIFICATE-----Generated at Fri Dec 12 08:00:20 2025 by rpki-client