This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft File: A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json) Hash identifier: BuNWwwsW5MjKXvcLr2Zn0St1oYU5hcIQXrYboJ55jKc= Subject key identifier: 92:5E:CD:26:60:57:EA:88:D9:A5:5A:3C:74:99:18:DF:E7:F2:FF:4B Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77 Certificate issuer: /CN=039e78b45b5f59594eb811f3ac69062967f28c77 Certificate serial: 019B5977BF59B107F21269C208E65B4B9D00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft Manifest number: 060B Signing time: Fri 26 Dec 2025 07:02:58 +0000 Manifest this update: Fri 26 Dec 2025 07:02:58 +0000 Manifest next update: Sat 27 Dec 2025 07:02:58 +0000 Files and hashes: 1: 7h2grz8OfZg3_f3qnvjsQOWeT0M.roa (hash: F0gJrE4+UT2zrGrF6oXGx/pjZ35hmL1zwnN5iPSHMCs=) 2: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: UbdPSmV/sXV0ylhagmWyM8fGd9cepR86/Sa299oP25g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:bf:59:b1:07:f2:12:69:c2:08:e6:5b:4b:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77 Validity Not Before: Dec 26 07:02:58 2025 GMT Not After : Dec 27 07:02:58 2025 GMT Subject: CN=925ecd266057ea88d9a55a3c749918dfe7f2ff4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:bb:6e:30:22:0f:0a:67:1e:39:9a:a3:60: 33:bf:5a:da:ea:73:c9:5e:43:39:46:98:b5:ad:5f: e9:21:95:df:9b:a8:41:4d:f3:ad:31:b8:52:10:1c: 1e:95:4a:1d:85:94:88:7e:7f:b4:fd:ff:41:ad:71: 6a:49:08:be:43:f3:40:a6:bc:b7:84:cc:b6:cb:57: 13:96:c0:f0:42:1d:cf:35:1f:a3:c2:53:fe:eb:58: 57:24:f4:82:06:fa:08:7a:84:b3:91:34:87:bf:13: bf:ad:3c:ce:0a:99:e2:61:bb:0d:86:4a:fb:53:6e: 94:98:5f:c9:2a:f3:b3:0e:e3:dd:e3:bc:db:b0:8c: 07:54:a8:23:8b:e3:44:b4:93:57:d3:2f:ad:45:1e: c3:8d:66:b2:55:17:75:73:ea:b4:0c:dc:61:f9:ef: 3e:65:ad:ca:bf:86:76:08:fc:bf:b3:a0:9a:27:0c: 23:6f:39:e4:57:81:1b:be:1a:97:5d:21:d8:3e:22: 81:86:81:60:ea:f7:7f:31:2c:57:2b:08:73:37:89: 61:1a:91:1d:10:81:8d:2c:90:13:1c:f2:a0:e0:6a: 6f:91:49:99:ad:3e:d4:6a:a2:10:d9:55:23:e4:76: bd:a2:5a:33:3c:b0:a9:ca:4c:0c:18:b3:f9:dd:05: ee:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5E:CD:26:60:57:EA:88:D9:A5:5A:3C:74:99:18:DF:E7:F2:FF:4B X509v3 Authority Key Identifier: keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:d7:fb:ec:94:5a:92:28:5a:86:16:f9:09:8f:e2:82:cb:aa: b9:ea:ed:78:ff:e2:05:df:35:b4:b7:e2:26:ee:4e:28:0c:9c: 02:c8:43:0b:f1:93:f3:09:c9:a7:f9:40:1f:4a:45:f3:1e:66: 3a:08:f8:66:df:9f:23:ec:94:53:c0:e2:be:eb:69:6b:c6:e2: 1f:6d:02:87:ce:e4:6a:44:93:16:55:82:27:34:e0:d8:b4:9e: 8e:87:46:44:26:40:b2:d1:59:88:30:3d:7d:61:30:88:e9:f5: eb:9e:d1:b9:a3:18:cf:be:c1:a1:1a:3a:4f:d7:d6:cc:c7:43: fe:49:e6:18:3f:c6:21:a0:2a:8a:2d:18:ab:2a:00:58:1d:51: 7b:25:06:41:e5:6f:23:e3:c6:9d:04:1c:c6:29:ed:c5:d4:53: e6:c7:7a:89:e7:10:ab:04:17:3f:dc:8d:66:2a:49:c0:64:c5: e2:5a:66:41:68:d5:ee:df:82:09:59:f7:aa:2b:50:a7:b9:03: 8b:f8:cd:19:c1:3b:66:db:f4:df:14:60:02:9c:b1:14:ad:e6: 17:fa:92:44:ff:e8:06:40:c4:c3:c5:19:4e:28:26:9b:d7:2d: d1:75:6b:af:98:a9:e2:70:4d:2c:04:76:f3:79:03:ef:8a:8c: f3:20:8b:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd79ZsQfyEmnCCOZbS50AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOWU3OGI0NWI1ZjU5NTk0ZWI4MTFmM2FjNjkwNjI5Njdm MjhjNzcwHhcNMjUxMjI2MDcwMjU4WhcNMjUxMjI3MDcwMjU4WjAzMTEwLwYDVQQD Eyg5MjVlY2QyNjYwNTdlYTg4ZDlhNTVhM2M3NDk5MThkZmU3ZjJmZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Im7bjAiDwpnHjmao2Azv1ra6nPJ XkM5Rpi1rV/pIZXfm6hBTfOtMbhSEBwelUodhZSIfn+0/f9BrXFqSQi+Q/NApry3 hMy2y1cTlsDwQh3PNR+jwlP+61hXJPSCBvoIeoSzkTSHvxO/rTzOCpniYbsNhkr7 U26UmF/JKvOzDuPd47zbsIwHVKgji+NEtJNX0y+tRR7DjWayVRd1c+q0DNxh+e8+ Za3Kv4Z2CPy/s6CaJwwjbznkV4EbvhqXXSHYPiKBhoFg6vd/MSxXKwhzN4lhGpEd EIGNLJATHPKg4GpvkUmZrT7UaqIQ2VUj5Ha9olozPLCpykwMGLP53QXuywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJezSZgV+qI2aVaPHSZGN/n8v9LMB8GA1UdIwQY MBaAFAOeeLRbX1lZTrgR86xpBiln8ox3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQt MjZhMzhkYzg2NzBiLzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQtMjZhMzhkYzg2NzBi LzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNf77JRa kihahhb5CY/igsuquerteP/iBd81tLfiJu5OKAycAshDC/GT8wnJp/lAH0pF8x5m Ogj4Zt+fI+yUU8Divutpa8biH20Ch87kakSTFlWCJzTg2LSejodGRCZAstFZiDA9 fWEwiOn1657RuaMYz77BoRo6T9fWzMdD/knmGD/GIaAqii0YqyoAWB1ReyUGQeVv I+PGnQQcxintxdRT5sd6iecQqwQXP9yNZipJwGTF4lpmQWjV7t+CCVn3qitQp7kD i/jNGcE7Ztv03xRgApyxFK3mF/qSRP/oBkDEw8UZTigmm9ct0XVrr5ip4nBNLAR2 83kD74qM8yCL4A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:23 2025 by rpki-client