This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft File: A8gBV7VkJs46X0PIn-sdQ3x3y84.mft (raw, json) Hash identifier: spBG7CZRAdLNvc2H0mN7KIzfSFZwEnJpIH7HazLzcMc= Subject key identifier: D6:A3:4F:09:F1:5F:DB:DA:C1:FC:6A:14:39:D1:7B:25:62:A3:FC:71 Authority key identifier: 03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE Certificate issuer: /CN=03c80157b56426ce3a5f43c89feb1d437c77cbce Certificate serial: 019AECE2E2F11FF2E7CEF5E9C4F6F73ECF35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft Manifest number: 03 Signing time: Fri 05 Dec 2025 05:01:23 +0000 Manifest this update: Fri 05 Dec 2025 05:01:23 +0000 Manifest next update: Sat 06 Dec 2025 05:01:23 +0000 Files and hashes: 1: A8gBV7VkJs46X0PIn-sdQ3x3y84.crl (hash: APQN3NnCmYZuCjRI2vyrkSHdJHV8I5ewblRJ6Dqt4TE=) 2: vMm4FVPVdLv-D-lL17N1Am09G_8.roa (hash: /zMuON3m9VqJT9Tvl4GQhmfLyHwwcX8ez8M/3XuNpqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ec:e2:e2:f1:1f:f2:e7:ce:f5:e9:c4:f6:f7:3e:cf:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c80157b56426ce3a5f43c89feb1d437c77cbce Validity Not Before: Dec 5 05:01:23 2025 GMT Not After : Dec 6 05:01:23 2025 GMT Subject: CN=d6a34f09f15fdbdac1fc6a1439d17b2562a3fc71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:59:ac:22:2a:f7:e3:35:9b:c2:ac:b1:a0:71: b2:9a:00:12:68:38:55:60:4a:1c:cb:05:4e:51:a3: c9:1d:02:21:c3:da:8b:fc:59:22:18:f7:5c:1b:8e: fb:44:09:e2:fd:8a:eb:57:5f:db:85:25:3d:53:73: ee:84:7d:42:13:f2:c2:c8:f1:fa:1d:ae:c5:c0:b0: dc:97:ba:14:42:e7:47:5a:80:6f:79:df:5d:c5:84: f3:c2:ec:3c:f5:d2:e7:fd:66:50:54:62:f8:41:37: 38:4b:f2:ce:0f:53:b5:8c:aa:92:2e:5d:f5:97:f6: e6:48:25:fa:58:a8:00:32:a2:a6:f0:e4:8e:17:60: 68:95:ab:df:f8:26:e2:7c:3f:f7:a1:82:c6:64:c0: 89:d6:da:0e:a8:71:2f:8c:89:3a:23:3c:e1:28:95: 23:74:f2:17:65:9e:32:e6:c1:38:de:7a:b2:80:32: fe:da:84:bc:ff:dd:95:f2:01:6b:67:7d:d4:49:a3: 13:d9:18:f7:9b:ee:f7:c2:82:11:28:14:66:b7:36: 88:f5:c2:6f:5f:60:93:85:35:f0:3f:bb:3f:5a:98: 64:3c:01:42:ba:69:82:67:26:73:91:10:ef:fd:ba: a4:23:2e:fc:3f:09:68:94:08:27:af:34:9a:44:46: 8a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A3:4F:09:F1:5F:DB:DA:C1:FC:6A:14:39:D1:7B:25:62:A3:FC:71 X509v3 Authority Key Identifier: keyid:03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:5f:75:4d:96:5f:bb:80:9c:64:e2:bd:20:e5:cb:f0:29:9b: d7:05:91:c1:49:6b:c3:32:3e:bb:23:9c:1c:97:7e:97:51:74: 69:41:ca:1a:01:22:57:35:9c:a2:6e:1b:61:0d:3f:b9:75:22: f2:1e:a3:d5:7c:29:7a:d1:58:3c:8c:f1:8e:c3:2e:4c:e1:50: 52:97:9b:b7:5e:51:8e:2b:e6:0a:cf:e6:a6:68:59:01:17:5c: 8f:9f:1f:6f:07:ca:fa:cb:90:f1:dc:4e:73:6a:e8:8b:7f:d0: c7:8e:04:8d:ae:f1:7e:38:6e:1d:19:54:87:4e:f7:02:7f:1b: d9:7a:c4:0e:28:e6:2a:31:a5:d1:6b:58:9f:1a:ad:8b:e6:f5: 9f:3e:68:26:b8:f8:a3:0d:09:d9:ab:43:59:df:d3:83:43:19: b6:4c:c6:8f:03:4d:78:67:3a:0e:96:da:58:00:af:09:f1:cb: 2d:8c:b2:3c:e1:04:ea:35:31:62:ab:de:4f:23:6f:5c:2b:4f: af:e2:fa:4f:d9:f9:0e:68:36:a7:b9:c5:d7:22:04:e2:b9:e2: 21:96:b3:82:67:14:78:66:aa:68:f5:63:fc:26:d3:43:13:bc: 87:98:2a:6e:d6:37:f8:2f:e6:51:b6:b8:bd:e5:dc:bb:e0:08: ff:d9:3d:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrs4uLxH/LnzvXpxPb3Ps81MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzgwMTU3YjU2NDI2Y2UzYTVmNDNjODlmZWIxZDQzN2M3 N2NiY2UwHhcNMjUxMjA1MDUwMTIzWhcNMjUxMjA2MDUwMTIzWjAzMTEwLwYDVQQD EyhkNmEzNGYwOWYxNWZkYmRhYzFmYzZhMTQzOWQxN2IyNTYyYTNmYzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVmsIir34zWbwqyxoHGymgASaDhV YEocywVOUaPJHQIhw9qL/FkiGPdcG477RAni/YrrV1/bhSU9U3PuhH1CE/LCyPH6 Ha7FwLDcl7oUQudHWoBved9dxYTzwuw89dLn/WZQVGL4QTc4S/LOD1O1jKqSLl31 l/bmSCX6WKgAMqKm8OSOF2Bolavf+CbifD/3oYLGZMCJ1toOqHEvjIk6IzzhKJUj dPIXZZ4y5sE43nqygDL+2oS8/92V8gFrZ33USaMT2Rj3m+73woIRKBRmtzaI9cJv X2CThTXwP7s/WphkPAFCummCZyZzkRDv/bqkIy78PwlolAgnrzSaREaKvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNajTwnxX9vawfxqFDnReyVio/xxMB8GA1UdIwQY MBaAFAPIAVe1ZCbOOl9DyJ/rHUN8d8vOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kNzE2YWEtZGE4MC00OTNiLWFkZjEt ZjAxNGY4MTc3OTZhLzEvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9kNzE2YWEtZGE4MC00OTNiLWFkZjEtZjAxNGY4MTc3OTZh LzEvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAll91TZZf u4CcZOK9IOXL8Cmb1wWRwUlrwzI+uyOcHJd+l1F0aUHKGgEiVzWcom4bYQ0/uXUi 8h6j1XwpetFYPIzxjsMuTOFQUpebt15RjivmCs/mpmhZARdcj58fbwfK+suQ8dxO c2roi3/Qx44Eja7xfjhuHRlUh073An8b2XrEDijmKjGl0WtYnxqti+b1nz5oJrj4 ow0J2atDWd/Tg0MZtkzGjwNNeGc6DpbaWACvCfHLLYyyPOEE6jUxYqveTyNvXCtP r+L6T9n5Dmg2p7nF1yIE4rniIZazgmcUeGaqaPVj/CbTQxO8h5gqbtY3+C/mUba4 veXcu+AI/9k9tw== -----END CERTIFICATE-----Generated at Fri Dec 5 10:07:34 2025 by rpki-client