This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft File: A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json) Hash identifier: G202L6slZTdH31p3XCsX25Xuoxd7pGpTXs19w4a+N8U= Subject key identifier: C0:D4:96:C5:4F:8B:7D:6E:9D:E5:45:D1:D9:D7:31:BC:6F:A3:6F:92 Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2 Certificate issuer: /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2 Certificate serial: 019B108155F55ADA528F77056E74EC8C7625 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft Manifest number: 137E Signing time: Fri 12 Dec 2025 03:01:10 +0000 Manifest this update: Fri 12 Dec 2025 03:01:10 +0000 Manifest next update: Sat 13 Dec 2025 03:01:10 +0000 Files and hashes: 1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: /tkHrgtHEmKtfnY3H0jxa8vtHbyEy6vGrFesHmVfJy4=) 2: woal0JSD05J3-HE_srcu4HZklsQ.roa (hash: K5meebvZSg84nTxN3gUNn0hvuS4tbvBQ0f3EUj0mZV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:55:f5:5a:da:52:8f:77:05:6e:74:ec:8c:76:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2 Validity Not Before: Dec 12 03:01:10 2025 GMT Not After : Dec 13 03:01:10 2025 GMT Subject: CN=c0d496c54f8b7d6e9de545d1d9d731bc6fa36f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5d:79:7b:59:1d:50:14:73:3b:6d:f4:66:62: 98:68:fa:d0:67:a2:35:37:99:85:0b:01:be:c8:6e: 4c:1b:0e:b2:c9:bf:24:06:6f:3f:49:0f:bf:c5:eb: f8:e0:48:21:51:46:26:4b:24:3d:80:bf:92:55:66: 48:ac:ab:86:51:94:bc:0a:f1:02:e4:33:1f:11:e5: 43:cb:61:43:7d:8b:6f:8e:0c:60:de:87:b9:bc:01: 52:a9:ca:ca:96:3f:27:95:bc:d3:32:df:55:25:9b: 89:3e:d9:7d:5f:e4:e8:4d:dd:8f:9d:9d:e7:bf:4e: 8f:5f:54:40:c6:25:15:9b:0a:d8:7a:4f:6d:fc:d6: b0:ee:a0:9f:2f:12:09:ad:26:e8:f4:d4:11:15:62: 60:79:96:3a:7b:2f:b6:5a:67:77:89:94:f4:a7:6c: 58:0f:e8:9b:9d:83:1e:80:c0:0f:8c:62:6b:d7:2a: ca:ae:1c:e9:ea:97:c4:ff:32:a6:9a:1d:a0:d3:d8: a1:d6:c5:e3:53:8c:6b:31:31:7e:09:f4:28:ae:48: d2:9e:2f:eb:a1:87:bf:d9:a1:a0:16:30:e1:39:2b: 98:73:79:76:81:65:c0:53:8b:f6:22:ad:aa:51:36: 5b:47:2a:6e:eb:80:32:80:1d:d6:74:85:f4:bb:a2: f6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D4:96:C5:4F:8B:7D:6E:9D:E5:45:D1:D9:D7:31:BC:6F:A3:6F:92 X509v3 Authority Key Identifier: keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:81:95:d8:54:83:88:40:df:3f:8c:a6:3d:00:3c:7b:5b:43: 26:08:f2:52:e6:4d:8b:19:c2:a6:9d:dc:85:8d:3e:b5:99:c0: eb:30:c2:63:26:8f:31:72:d0:6d:25:46:9e:00:e4:a6:14:6f: 7f:dc:56:11:4d:4d:22:c0:a9:d2:a5:d3:5c:34:80:44:2e:fa: b3:2a:a2:59:1f:f0:9f:7e:6b:aa:d7:aa:ab:6b:c8:d9:8a:cd: 99:65:7f:e9:8e:22:d6:f2:bf:2a:53:a1:dc:b1:3a:3c:f3:2b: 1a:6d:7f:3b:a8:13:24:3c:c8:c6:50:61:1d:fd:6e:c4:4e:f5: 6e:ed:d0:a8:cd:f0:c6:20:24:9b:6d:39:8a:02:76:79:b5:9a: b6:71:f9:82:4a:9d:ba:81:c1:90:10:c4:83:31:1f:30:ba:a2: 21:08:e5:92:0a:2a:de:2f:e0:38:01:4c:09:76:bc:d1:06:8b: 21:4d:ea:47:6a:74:6c:20:9b:30:f1:d4:30:78:de:c2:fd:7e: ab:d1:46:f2:f1:82:56:c6:79:82:68:0d:df:b9:46:b9:fd:96: e4:90:52:90:99:93:79:a6:f1:31:d9:1f:de:ef:7d:07:86:a3: fb:8e:5d:20:d5:09:43:9b:05:c3:ba:27:7a:af:fa:70:b9:7c: 93:7a:24:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgVX1WtpSj3cFbnTsjHYlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZTg1ZmE0YmU2Njk0MmU1OTA5ZmQzYTFmZDRhMGMyNmUz NmEwZDIwHhcNMjUxMjEyMDMwMTEwWhcNMjUxMjEzMDMwMTEwWjAzMTEwLwYDVQQD EyhjMGQ0OTZjNTRmOGI3ZDZlOWRlNTQ1ZDFkOWQ3MzFiYzZmYTM2ZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx115e1kdUBRzO230ZmKYaPrQZ6I1 N5mFCwG+yG5MGw6yyb8kBm8/SQ+/xev44EghUUYmSyQ9gL+SVWZIrKuGUZS8CvEC 5DMfEeVDy2FDfYtvjgxg3oe5vAFSqcrKlj8nlbzTMt9VJZuJPtl9X+ToTd2PnZ3n v06PX1RAxiUVmwrYek9t/Naw7qCfLxIJrSbo9NQRFWJgeZY6ey+2Wmd3iZT0p2xY D+ibnYMegMAPjGJr1yrKrhzp6pfE/zKmmh2g09ih1sXjU4xrMTF+CfQorkjSni/r oYe/2aGgFjDhOSuYc3l2gWXAU4v2Iq2qUTZbRypu64AygB3WdIX0u6L2sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDUlsVPi31uneVF0dnXMbxvo2+SMB8GA1UdIwQY MBaAFAPoX6S+ZpQuWQn9Oh/UoMJuNqDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS1oZnBMNW1sQzVaQ2YwNkg5U2d3bTQyb05JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMjczMjktM2VjZi00ODg1LWE3NzMt NThlNWI3NmJlYmI3LzEvQS1oZnBMNW1sQzVaQ2YwNkg5U2d3bTQyb05JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMjczMjktM2VjZi00ODg1LWE3NzMtNThlNWI3NmJlYmI3 LzEvQS1oZnBMNW1sQzVaQ2YwNkg5U2d3bTQyb05JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIGV2FSD iEDfP4ymPQA8e1tDJgjyUuZNixnCpp3chY0+tZnA6zDCYyaPMXLQbSVGngDkphRv f9xWEU1NIsCp0qXTXDSARC76syqiWR/wn35rqteqq2vI2YrNmWV/6Y4i1vK/KlOh 3LE6PPMrGm1/O6gTJDzIxlBhHf1uxE71bu3QqM3wxiAkm205igJ2ebWatnH5gkqd uoHBkBDEgzEfMLqiIQjlkgoq3i/gOAFMCXa80QaLIU3qR2p0bCCbMPHUMHjewv1+ q9FG8vGCVsZ5gmgN37lGuf2W5JBSkJmTeabxMdkf3u99B4aj+45dINUJQ5sFw7on eq/6cLl8k3okHw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:38:18 2025 by rpki-client