This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft File: A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft (raw, json) Hash identifier: 1AWij30qg9PX7iaPBfDMYjKgtpZbjhTfyTMH13dHBFM= Subject key identifier: 5E:F3:22:3C:B5:55:99:B6:F6:F3:E2:4C:55:15:B4:8C:FE:CD:7F:AC Authority key identifier: 03:A5:E9:5A:BB:91:D6:4D:73:B9:14:8C:0A:AF:59:B3:AF:3F:4E:6A Certificate issuer: /CN=03a5e95abb91d64d73b9148c0aaf59b3af3f4e6a Certificate serial: 019B0ECA1051C5A29E6FCA91F69B9D52F2AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft Manifest number: 1703 Signing time: Thu 11 Dec 2025 19:01:22 +0000 Manifest this update: Thu 11 Dec 2025 19:01:22 +0000 Manifest next update: Fri 12 Dec 2025 19:01:22 +0000 Files and hashes: 1: A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl (hash: tdC9tzAGdGHEfx2vuIxXjf0AI8Ub8hUO1cy60PFFjxk=) 2: HE3ngXhibuMNnlUTqhNdyzJzI7E.roa (hash: vbHlj5WYFjRLuQiS72fylFam6l6ufmPPLhOlt+s0Jhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:ca:10:51:c5:a2:9e:6f:ca:91:f6:9b:9d:52:f2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03a5e95abb91d64d73b9148c0aaf59b3af3f4e6a Validity Not Before: Dec 11 19:01:22 2025 GMT Not After : Dec 12 19:01:22 2025 GMT Subject: CN=5ef3223cb55599b6f6f3e24c5515b48cfecd7fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:29:97:19:47:98:65:ad:2f:b8:2b:b9:57:7b: 46:15:0f:1b:c0:f5:38:c5:2d:f6:3a:f5:ea:8f:0a: bd:6f:7b:a0:0f:cc:ee:32:22:e6:27:e0:b2:ec:2d: 58:6d:71:4b:f0:c1:dc:fc:31:cb:e6:46:56:58:a4: 66:a5:1f:c2:00:63:53:22:6d:2e:84:a9:46:94:f6: f8:05:91:ea:4f:3d:a9:2b:75:d1:e0:ce:64:6a:1a: 58:ca:a4:47:4e:48:f6:60:d5:e6:94:de:3e:6d:6b: d5:76:17:8a:63:9e:2c:87:97:ed:5b:70:fb:61:cc: 7b:77:78:ae:12:88:2a:69:6f:74:da:b6:af:5b:85: a6:83:62:47:c5:56:02:74:46:a0:e9:cb:e0:19:7a: ec:8a:d6:a6:42:61:a8:23:dd:3d:59:e7:c1:7e:78: 83:8f:95:95:34:86:f8:1a:26:7a:46:05:1a:70:00: 73:e0:43:46:dd:d2:0c:e8:83:72:87:4b:c8:97:05: 8f:ad:49:5d:56:51:2b:f8:71:62:44:75:b1:c2:7a: 37:ac:ad:22:1d:7a:58:cb:e0:6e:85:64:7f:4d:52: 9a:4c:e1:80:d4:e1:d6:35:fd:96:08:36:24:26:ff: be:e9:06:15:f5:18:bb:6c:36:89:f0:ef:5d:7c:23: f0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F3:22:3C:B5:55:99:B6:F6:F3:E2:4C:55:15:B4:8C:FE:CD:7F:AC X509v3 Authority Key Identifier: keyid:03:A5:E9:5A:BB:91:D6:4D:73:B9:14:8C:0A:AF:59:B3:AF:3F:4E:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:41:56:b2:a3:26:6f:94:43:ba:3a:3d:d4:16:89:30:b2:e8: b6:e5:8e:42:36:a2:49:bd:6d:4d:73:8e:c0:24:87:6b:c7:58: 7f:88:77:f2:30:de:29:03:13:47:b1:a0:08:50:e8:5e:25:93: e5:e3:67:1a:d5:40:5c:e8:de:c5:e3:c9:df:7a:b0:20:47:2c: 00:73:eb:dc:5b:5d:00:20:86:3e:bb:15:3a:9a:d7:0a:58:74: aa:27:37:76:a0:38:35:d6:dd:56:e0:58:1b:cb:42:f9:14:44: 9e:7a:55:95:20:99:b3:aa:b5:52:eb:0a:75:0b:a2:10:9f:91: 3a:b5:d5:eb:3c:e0:7d:b3:36:d5:05:cc:7b:94:38:ff:eb:f8: da:44:75:44:39:af:bc:1b:9d:05:87:22:b0:c6:b4:80:3f:c7: 7f:cd:44:92:64:87:52:0a:e1:92:06:d3:83:cc:d0:95:32:8f: 3f:d9:8e:b9:28:75:2d:1f:c0:ab:cd:a4:1c:0b:18:02:2f:a1: 48:ed:1f:d8:4c:38:7a:fd:e5:78:5a:93:f2:a3:3f:c6:8c:62: 56:fe:21:1e:9c:62:97:6b:c2:f4:8b:8a:25:75:45:5f:ed:43: 70:b1:46:fc:4f:ac:f7:aa:a7:a1:2f:23:45:f1:21:06:c1:a2: 0b:82:80:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyhBRxaKeb8qR9pudUvKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYTVlOTVhYmI5MWQ2NGQ3M2I5MTQ4YzBhYWY1OWIzYWYz ZjRlNmEwHhcNMjUxMjExMTkwMTIyWhcNMjUxMjEyMTkwMTIyWjAzMTEwLwYDVQQD Eyg1ZWYzMjIzY2I1NTU5OWI2ZjZmM2UyNGM1NTE1YjQ4Y2ZlY2Q3ZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzimXGUeYZa0vuCu5V3tGFQ8bwPU4 xS32OvXqjwq9b3ugD8zuMiLmJ+Cy7C1YbXFL8MHc/DHL5kZWWKRmpR/CAGNTIm0u hKlGlPb4BZHqTz2pK3XR4M5kahpYyqRHTkj2YNXmlN4+bWvVdheKY54sh5ftW3D7 Ycx7d3iuEogqaW902ravW4Wmg2JHxVYCdEag6cvgGXrsitamQmGoI909WefBfniD j5WVNIb4GiZ6RgUacABz4ENG3dIM6INyh0vIlwWPrUldVlEr+HFiRHWxwno3rK0i HXpYy+BuhWR/TVKaTOGA1OHWNf2WCDYkJv++6QYV9Ri7bDaJ8O9dfCPwIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7zIjy1VZm29vPiTFUVtIz+zX+sMB8GA1UdIwQY MBaAFAOl6Vq7kdZNc7kUjAqvWbOvP05qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTZYcFdydVIxazF6dVJTTUNxOVpzNjhfVG1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni81YWEyODQtMjQxNC00NTU4LWJlYjYt N2Q0YmUwNjhjOWE1LzEvQTZYcFdydVIxazF6dVJTTUNxOVpzNjhfVG1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni81YWEyODQtMjQxNC00NTU4LWJlYjYtN2Q0YmUwNjhjOWE1 LzEvQTZYcFdydVIxazF6dVJTTUNxOVpzNjhfVG1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0FWsqMm b5RDujo91BaJMLLotuWOQjaiSb1tTXOOwCSHa8dYf4h38jDeKQMTR7GgCFDoXiWT 5eNnGtVAXOjexePJ33qwIEcsAHPr3FtdACCGPrsVOprXClh0qic3dqA4NdbdVuBY G8tC+RREnnpVlSCZs6q1UusKdQuiEJ+ROrXV6zzgfbM21QXMe5Q4/+v42kR1RDmv vBudBYcisMa0gD/Hf81EkmSHUgrhkgbTg8zQlTKPP9mOuSh1LR/Aq82kHAsYAi+h SO0f2Ew4ev3leFqT8qM/xoxiVv4hHpxil2vC9IuKJXVFX+1DcLFG/E+s96qnoS8j RfEhBsGiC4KAxw== -----END CERTIFICATE-----Generated at Fri Dec 12 03:42:48 2025 by rpki-client