This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft File: A1KD5iNe2yXotUdJtihfXj74U3E.mft (raw, json) Hash identifier: O8LTOSI3Be0J3z/Vyu52KzJJS2Zm9Ks12LUYS+GHhHw= Subject key identifier: E8:D6:9C:73:9B:38:B1:D5:B8:27:27:3C:22:E5:36:8A:19:A7:6C:8D Authority key identifier: 03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71 Certificate issuer: /CN=035283e6235edb25e8b54749b6285f5e3ef85371 Certificate serial: 019B49274F2452F6F90DFC3656622ED537F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft Manifest number: 02DC Signing time: Tue 23 Dec 2025 03:01:11 +0000 Manifest this update: Tue 23 Dec 2025 03:01:11 +0000 Manifest next update: Wed 24 Dec 2025 03:01:11 +0000 Files and hashes: 1: A1KD5iNe2yXotUdJtihfXj74U3E.crl (hash: xcJJT0GYgUx0L6p4ihM0BXrdKqnIC8QRcY6kQf1xUMQ=) 2: z96_ZJgr9Ouwu3H857DM3qPVUxI.roa (hash: XUjlH+TkzMgkjT2OPVskc/V8eVbqCCBWMoR0ix6MWrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:4f:24:52:f6:f9:0d:fc:36:56:62:2e:d5:37:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035283e6235edb25e8b54749b6285f5e3ef85371 Validity Not Before: Dec 23 03:01:11 2025 GMT Not After : Dec 24 03:01:11 2025 GMT Subject: CN=e8d69c739b38b1d5b827273c22e5368a19a76c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a5:11:6e:08:d5:f8:33:ff:a9:dc:f0:af:f1: 63:28:f0:c8:9b:d7:7e:df:8d:8f:16:70:10:76:53: 04:e8:a1:00:11:6a:c3:57:db:4a:c3:2e:80:b8:53: 24:53:aa:53:55:d3:9f:f9:5a:66:85:1c:ca:5a:46: 4f:54:f3:fb:cc:85:c1:c4:5c:f8:d8:99:54:ab:66: ed:91:cb:e2:27:da:f9:aa:aa:13:f3:86:bf:e9:7a: ca:20:28:2b:5c:a4:67:9c:d9:2c:92:de:64:da:a0: 21:00:5d:23:4c:fc:35:ed:6a:51:0d:64:50:2c:89: 17:32:f4:66:69:a0:63:96:76:75:57:c0:17:4e:2e: 9b:b1:3e:0e:c7:23:50:2b:84:87:56:d2:9a:23:e5: ea:50:31:ea:b6:4e:7a:da:0a:25:e5:5c:ec:00:6f: 49:4d:7e:97:ba:7a:19:58:13:80:a9:5b:27:cb:af: 8b:f1:e7:c8:64:a0:3d:b1:27:2f:e4:6a:f7:ea:e3: 08:41:c5:fc:51:3e:41:4c:ba:88:3f:bd:43:af:44: 58:51:97:75:e9:47:43:42:cd:70:50:ac:cb:a3:a6: 8e:ef:7e:38:50:a4:77:cb:39:31:ab:b6:9c:b2:ec: c5:5e:5c:61:98:91:0f:6c:83:45:88:cd:f9:60:74: bf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D6:9C:73:9B:38:B1:D5:B8:27:27:3C:22:E5:36:8A:19:A7:6C:8D X509v3 Authority Key Identifier: keyid:03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:88:16:95:01:25:72:d1:cd:58:19:57:09:85:40:d6:b0:57: b7:0c:9f:1e:44:fe:2a:a2:8c:11:26:48:83:a1:9f:b7:05:3e: 42:da:45:54:69:79:3e:8a:0b:75:7d:16:f8:77:30:a5:7b:46: 58:93:68:e5:31:99:c3:0a:c2:79:06:8f:29:f8:47:19:dc:b5: 2d:ce:c9:39:94:55:7d:71:28:76:bd:ae:ae:8e:80:24:d8:33: 10:f3:12:9b:56:59:b1:2f:b9:bf:85:4a:4f:df:28:39:f3:00: a3:b7:c5:3d:be:f4:9e:f6:94:a6:2a:00:e2:73:f2:e8:5f:08: 27:7c:bb:2f:18:da:26:ff:1c:4d:1e:a6:83:5a:e3:d1:94:8d: 5f:6b:55:57:56:be:db:2f:e5:77:38:13:f5:54:cb:22:5b:48: 3d:8b:19:84:92:a5:bc:d0:39:07:7c:54:56:b6:f6:02:bc:58: 99:19:c6:88:fb:b0:2e:9a:cb:6c:a1:cf:fd:7d:3e:79:fb:f0: aa:b9:c9:ad:8f:32:09:89:8a:74:1f:01:b8:f5:24:6e:d3:2f: 04:0b:0d:24:26:23:78:cd:1e:b8:d1:ae:2c:c2:3d:37:92:58: 07:ed:0b:34:4d:c0:d8:4d:1b:40:15:96:41:49:26:3e:74:38: 1c:e5:c4:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJ08kUvb5Dfw2VmIu1Tf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTI4M2U2MjM1ZWRiMjVlOGI1NDc0OWI2Mjg1ZjVlM2Vm ODUzNzEwHhcNMjUxMjIzMDMwMTExWhcNMjUxMjI0MDMwMTExWjAzMTEwLwYDVQQD EyhlOGQ2OWM3MzliMzhiMWQ1YjgyNzI3M2MyMmU1MzY4YTE5YTc2YzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KURbgjV+DP/qdzwr/FjKPDIm9d+ 342PFnAQdlME6KEAEWrDV9tKwy6AuFMkU6pTVdOf+VpmhRzKWkZPVPP7zIXBxFz4 2JlUq2btkcviJ9r5qqoT84a/6XrKICgrXKRnnNkskt5k2qAhAF0jTPw17WpRDWRQ LIkXMvRmaaBjlnZ1V8AXTi6bsT4OxyNQK4SHVtKaI+XqUDHqtk562gol5VzsAG9J TX6XunoZWBOAqVsny6+L8efIZKA9sScv5Gr36uMIQcX8UT5BTLqIP71Dr0RYUZd1 6UdDQs1wUKzLo6aO7344UKR3yzkxq7acsuzFXlxhmJEPbINFiM35YHS/uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjWnHObOLHVuCcnPCLlNooZp2yNMB8GA1UdIwQY MBaAFANSg+YjXtsl6LVHSbYoX14++FNxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMTFmNTctNjQwNC00NDZhLTlmMDgt MTFiOTI5MDY0MDZkLzEvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMTFmNTctNjQwNC00NDZhLTlmMDgtMTFiOTI5MDY0MDZk LzEvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuIgWlQEl ctHNWBlXCYVA1rBXtwyfHkT+KqKMESZIg6GftwU+QtpFVGl5PooLdX0W+HcwpXtG WJNo5TGZwwrCeQaPKfhHGdy1Lc7JOZRVfXEodr2uro6AJNgzEPMSm1ZZsS+5v4VK T98oOfMAo7fFPb70nvaUpioA4nPy6F8IJ3y7LxjaJv8cTR6mg1rj0ZSNX2tVV1a+ 2y/ldzgT9VTLIltIPYsZhJKlvNA5B3xUVrb2ArxYmRnGiPuwLprLbKHP/X0+efvw qrnJrY8yCYmKdB8BuPUkbtMvBAsNJCYjeM0euNGuLMI9N5JYB+0LNE3A2E0bQBWW QUkmPnQ4HOXEiA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:51:31 2025 by rpki-client