This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft File: A1KD5iNe2yXotUdJtihfXj74U3E.mft (raw, json) Hash identifier: xeDl8HwU0wcrx4p668IOnMJn0FIwMXbGImhFKKJz16o= Subject key identifier: CF:12:5C:46:A2:A9:7D:01:A6:05:D1:90:77:69:14:AE:92:4A:4B:17 Authority key identifier: 03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71 Certificate issuer: /CN=035283e6235edb25e8b54749b6285f5e3ef85371 Certificate serial: 019B454A1E276DEFD264A75DD01C8AD52692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft Manifest number: 02DA Signing time: Mon 22 Dec 2025 09:00:43 +0000 Manifest this update: Mon 22 Dec 2025 09:00:43 +0000 Manifest next update: Tue 23 Dec 2025 09:00:43 +0000 Files and hashes: 1: A1KD5iNe2yXotUdJtihfXj74U3E.crl (hash: osy13YWwqf2ie2fI+xPHAlIVThG10OdBpVUWRRkgTS8=) 2: z96_ZJgr9Ouwu3H857DM3qPVUxI.roa (hash: XUjlH+TkzMgkjT2OPVskc/V8eVbqCCBWMoR0ix6MWrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:1e:27:6d:ef:d2:64:a7:5d:d0:1c:8a:d5:26:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035283e6235edb25e8b54749b6285f5e3ef85371 Validity Not Before: Dec 22 09:00:43 2025 GMT Not After : Dec 23 09:00:43 2025 GMT Subject: CN=cf125c46a2a97d01a605d190776914ae924a4b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:95:93:51:ff:c7:a7:b5:c9:12:48:4d:bc:bb: 1d:0d:1d:8d:2d:b4:21:7e:ec:3f:b1:29:0f:0a:13: 0e:6c:1a:f7:8b:26:76:b7:0b:56:00:ab:83:51:4c: a2:ea:65:2a:5a:a9:76:9a:b4:d0:cf:b3:5d:85:fd: e9:c9:3b:25:99:0a:34:ce:3f:f1:3d:78:9a:86:1e: cb:2f:3a:73:bc:53:f9:83:86:06:60:83:7c:ab:58: 5e:32:e6:f4:56:c4:0a:cc:12:13:15:d0:95:5c:13: 43:a2:a7:34:e9:2d:dd:61:ce:b1:c5:b3:39:aa:b5: 35:da:ee:f1:4e:b0:94:06:b4:2f:b9:31:b1:e5:75: 8d:4a:4e:a7:65:5a:00:0f:24:44:93:b2:fd:b3:f3: 0c:53:4d:9d:57:60:0c:19:a0:f3:6f:60:dc:dc:54: 5c:59:1b:06:51:63:35:1a:60:63:a0:15:2d:44:d5: fe:73:38:eb:47:b3:31:68:81:d2:79:3b:5c:81:46: aa:0c:92:f7:7d:2a:33:c5:01:be:eb:4c:6e:ed:1b: d8:b6:8d:3b:57:bd:3f:8a:ce:9d:4a:30:97:7f:39: 2e:2e:3a:05:9c:4c:44:ba:d7:9c:2f:75:b5:e7:72: cc:52:e6:87:23:a1:bc:44:be:e9:63:27:a1:6a:fd: 2c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:12:5C:46:A2:A9:7D:01:A6:05:D1:90:77:69:14:AE:92:4A:4B:17 X509v3 Authority Key Identifier: keyid:03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:53:66:16:05:78:31:24:35:27:8b:19:7e:d1:f8:a7:54:2b: 6d:73:64:f6:58:7e:c3:ca:27:da:41:ed:eb:b6:88:49:9c:04: 75:89:9b:d6:2e:0b:6b:05:f9:f2:75:66:2e:a5:2d:e6:2d:b6: 2a:40:ce:12:63:f4:e9:ac:83:68:60:4f:35:2a:92:2c:d4:29: 27:3e:f2:25:bb:10:3b:db:89:75:04:ab:8b:5b:70:15:e4:06: d3:78:af:7c:ed:af:3a:b5:29:c4:94:9e:5c:3f:86:04:1d:9a: 81:7f:80:71:13:9e:9a:53:55:91:c2:64:96:ff:e3:b3:85:99: cb:e4:9f:b2:dc:73:b4:ca:20:d6:a5:9b:0a:27:a5:b9:86:53: 6f:3e:e5:cf:a5:68:c1:5a:15:34:7e:59:9f:0e:f4:a1:87:cb: 0c:45:df:e4:b6:c9:a2:ce:3f:ce:ac:35:23:19:97:a1:c9:bc: 72:87:86:52:b6:d3:f2:0a:eb:7d:03:14:53:9b:b9:fd:23:22: 82:47:ef:2f:e4:5a:83:35:d4:35:c0:c0:ea:e3:aa:5e:19:93: 13:50:69:6a:cc:68:a3:f4:00:e3:6a:be:8e:ee:ab:bf:03:62: 6c:63:ca:45:f7:8b:65:ed:17:35:ed:ca:2a:12:98:7a:e4:cb: e2:20:04:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSh4nbe/SZKdd0ByK1SaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTI4M2U2MjM1ZWRiMjVlOGI1NDc0OWI2Mjg1ZjVlM2Vm ODUzNzEwHhcNMjUxMjIyMDkwMDQzWhcNMjUxMjIzMDkwMDQzWjAzMTEwLwYDVQQD EyhjZjEyNWM0NmEyYTk3ZDAxYTYwNWQxOTA3NzY5MTRhZTkyNGE0YjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJWTUf/Hp7XJEkhNvLsdDR2NLbQh fuw/sSkPChMObBr3iyZ2twtWAKuDUUyi6mUqWql2mrTQz7Ndhf3pyTslmQo0zj/x PXiahh7LLzpzvFP5g4YGYIN8q1heMub0VsQKzBITFdCVXBNDoqc06S3dYc6xxbM5 qrU12u7xTrCUBrQvuTGx5XWNSk6nZVoADyREk7L9s/MMU02dV2AMGaDzb2Dc3FRc WRsGUWM1GmBjoBUtRNX+czjrR7MxaIHSeTtcgUaqDJL3fSozxQG+60xu7RvYto07 V70/is6dSjCXfzkuLjoFnExEutecL3W153LMUuaHI6G8RL7pYyehav0sYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8SXEaiqX0BpgXRkHdpFK6SSksXMB8GA1UdIwQY MBaAFANSg+YjXtsl6LVHSbYoX14++FNxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMTFmNTctNjQwNC00NDZhLTlmMDgt MTFiOTI5MDY0MDZkLzEvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMTFmNTctNjQwNC00NDZhLTlmMDgtMTFiOTI5MDY0MDZk LzEvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1NmFgV4 MSQ1J4sZftH4p1QrbXNk9lh+w8on2kHt67aISZwEdYmb1i4LawX58nVmLqUt5i22 KkDOEmP06ayDaGBPNSqSLNQpJz7yJbsQO9uJdQSri1twFeQG03ivfO2vOrUpxJSe XD+GBB2agX+AcROemlNVkcJklv/js4WZy+SfstxztMog1qWbCieluYZTbz7lz6Vo wVoVNH5Znw70oYfLDEXf5LbJos4/zqw1IxmXocm8coeGUrbT8grrfQMUU5u5/SMi gkfvL+RagzXUNcDA6uOqXhmTE1Bpasxoo/QA42q+ju6rvwNibGPKRfeLZe0XNe3K KhKYeuTL4iAEZA== -----END CERTIFICATE-----Generated at Mon Dec 22 14:00:28 2025 by rpki-client