This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json) Hash identifier: jATcKN64FmHENDgAOMzxdfLLWjbxaZqHt0WMumI0Vjg= Subject key identifier: FD:31:AC:92:A6:22:E8:C7:B7:D0:EE:FC:2E:F6:C4:86:F5:DA:FC:C5 Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f Certificate serial: 019B194D623D4A82AA924007D672E5A67218 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft Manifest number: 0BC4 Signing time: Sat 13 Dec 2025 20:01:00 +0000 Manifest this update: Sat 13 Dec 2025 20:01:00 +0000 Manifest next update: Sun 14 Dec 2025 20:01:00 +0000 Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: bp3rKes3Gk7UDe1aQhZwHonVOKGPVPUNaEBnvUQwBfo=) 2: aAJKdn_u125mac3iiC8QVztvInI.roa (hash: 3b7fusF13hIUnZIhVd8QQY5Oa5mdPkxjIJ0o8cOzBGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:62:3d:4a:82:aa:92:40:07:d6:72:e5:a6:72:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f Validity Not Before: Dec 13 20:01:00 2025 GMT Not After : Dec 14 20:01:00 2025 GMT Subject: CN=fd31ac92a622e8c7b7d0eefc2ef6c486f5dafcc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9e:fc:a3:b9:62:7c:8f:8b:47:29:49:3b:8c: 23:06:04:81:9f:84:6f:4a:55:6b:1a:fa:39:47:e8: 88:df:81:0e:72:db:9d:9c:0e:d4:92:32:9a:d5:5c: 5d:90:a6:d1:42:cf:e7:d1:cb:6d:78:b4:f1:a7:7a: a0:84:0f:75:b8:c8:df:4d:ab:fe:cb:22:9b:49:c4: 4c:65:3e:b7:f3:63:22:2d:04:40:28:f2:24:5d:fc: fa:c6:04:79:b2:f7:8f:98:96:18:cb:33:c7:d4:77: 22:41:21:e8:23:ca:17:2c:54:b4:25:15:a0:b9:79: ff:94:38:bc:38:5d:51:93:95:27:1c:d3:f8:e2:95: 01:bc:43:ab:35:27:7c:2c:91:a3:28:c0:0c:03:a3: 71:fb:d5:b9:83:3b:81:85:0d:c7:a0:33:f2:ed:fb: 26:73:0d:4f:f0:83:4a:97:a5:60:61:d9:c8:ac:89: 59:36:58:dd:d5:fe:5c:18:6d:57:83:b9:72:ed:51: cb:16:f2:18:79:ca:d1:a3:22:43:b2:8d:c2:92:ef: 5e:7e:4f:61:d3:e9:c8:79:e7:38:fd:e6:04:34:4e: 93:60:cb:02:e5:dd:e7:62:0d:c1:91:76:73:bc:1f: 20:a8:b6:d0:df:28:d5:ad:ba:85:26:a9:1a:22:af: 99:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:31:AC:92:A6:22:E8:C7:B7:D0:EE:FC:2E:F6:C4:86:F5:DA:FC:C5 X509v3 Authority Key Identifier: keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ff:87:5f:dd:46:1e:ba:5d:18:e5:e0:f4:36:61:e1:88:c9: 1e:25:98:60:f3:d2:bc:c1:ce:b6:09:26:f3:b7:3b:3f:ff:59: f1:66:8c:84:28:e2:dc:7d:95:fa:da:0c:f2:b2:ea:87:0e:65: 61:00:e6:dd:97:df:93:83:eb:d8:c9:b0:be:06:e2:06:2c:06: 44:35:3b:d5:b5:b1:a5:e9:b1:16:46:17:d1:ba:98:d6:f0:d0: 43:90:62:e5:7a:e7:88:2a:b0:ef:1b:be:54:36:fd:16:da:10: 77:a2:02:c7:e2:27:d3:32:0b:69:1d:cb:dd:07:dc:37:c0:fb: b4:3e:d6:c8:f2:5a:07:ab:39:0e:48:cd:a9:54:fc:3b:48:1e: fa:21:8b:bd:a0:5c:ea:fc:33:2d:14:80:e0:83:7e:5c:fa:7d: 9d:25:d2:c4:1d:bd:82:81:45:f7:9f:31:8f:20:93:57:0d:29: bf:e4:f5:2a:83:d0:29:71:af:e2:e9:c3:cd:4e:2d:87:f8:08: 1e:36:b7:0c:09:40:ed:ad:cb:0c:7f:18:8a:99:48:ec:a7:00: da:7f:cb:1a:e3:e3:68:1d:1f:83:01:ae:45:3a:b8:f3:b0:f1: f0:45:c1:87:1c:ba:7e:27:16:38:a7:18:d6:37:55:3a:fe:5c: 49:fd:05:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTWI9SoKqkkAH1nLlpnIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTE1ZmZlMWRiZmU3NmE4MDVmZDBkZmIyZTBjOGQ3ZTQ5 YWY1OWYwHhcNMjUxMjEzMjAwMTAwWhcNMjUxMjE0MjAwMTAwWjAzMTEwLwYDVQQD EyhmZDMxYWM5MmE2MjJlOGM3YjdkMGVlZmMyZWY2YzQ4NmY1ZGFmY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J78o7lifI+LRylJO4wjBgSBn4Rv SlVrGvo5R+iI34EOctudnA7UkjKa1VxdkKbRQs/n0ctteLTxp3qghA91uMjfTav+ yyKbScRMZT6382MiLQRAKPIkXfz6xgR5svePmJYYyzPH1HciQSHoI8oXLFS0JRWg uXn/lDi8OF1Rk5UnHNP44pUBvEOrNSd8LJGjKMAMA6Nx+9W5gzuBhQ3HoDPy7fsm cw1P8INKl6VgYdnIrIlZNljd1f5cGG1Xg7ly7VHLFvIYecrRoyJDso3Cku9efk9h 0+nIeec4/eYENE6TYMsC5d3nYg3BkXZzvB8gqLbQ3yjVrbqFJqkaIq+Z1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0xrJKmIujHt9Du/C72xIb12vzFMB8GA1UdIwQY MBaAFANRX/4dv+dqgF/Q37LgyNfkmvWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAt ZDM4NDk1ZmIwOWEwLzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAtZDM4NDk1ZmIwOWEw LzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdP+HX91G HrpdGOXg9DZh4YjJHiWYYPPSvMHOtgkm87c7P/9Z8WaMhCji3H2V+toM8rLqhw5l YQDm3Zffk4Pr2MmwvgbiBiwGRDU71bWxpemxFkYX0bqY1vDQQ5Bi5XrniCqw7xu+ VDb9FtoQd6ICx+In0zILaR3L3QfcN8D7tD7WyPJaB6s5DkjNqVT8O0ge+iGLvaBc 6vwzLRSA4IN+XPp9nSXSxB29goFF958xjyCTVw0pv+T1KoPQKXGv4unDzU4th/gI Hja3DAlA7a3LDH8YiplI7KcA2n/LGuPjaB0fgwGuRTq487Dx8EXBhxy6ficWOKcY 1jdVOv5cSf0FnQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:57:00 2025 by rpki-client