This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json) Hash identifier: zITwZvYCMkp+Y2CGSr45qVWHDZXjn9X7SA2Aeqoh9QE= Subject key identifier: B0:55:5D:63:96:23:11:36:B6:CB:32:33:23:58:20:FB:45:18:60:D4 Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8 Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8 Certificate serial: 019ACAC52F59F59321C4A7B864002B72FE61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft Manifest number: 0DEC Signing time: Fri 28 Nov 2025 14:01:51 +0000 Manifest this update: Fri 28 Nov 2025 14:01:51 +0000 Manifest next update: Sat 29 Nov 2025 14:01:51 +0000 Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: T0vqTxiuzu+cdRDEoHLepp8hRz59L3HnhhOe8X/s8II=) 2: AThGgouxKv8fc_GjPfk1KTqcYJ8.roa (hash: pBwVTlstihKQTv02WIHNb7H+18sdn98VZXnJD5bJ+rM=) 3: O29Zxmmx6-HgpfQCaZNYO-hkBL0.roa (hash: AJ99xUwGr6nteSCZy2ZqWhrEmfyvYWpbIQR3DNjRUos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:c5:2f:59:f5:93:21:c4:a7:b8:64:00:2b:72:fe:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8 Validity Not Before: Nov 28 14:01:51 2025 GMT Not After : Nov 29 14:01:51 2025 GMT Subject: CN=b0555d6396231136b6cb3233235820fb451860d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:e2:ca:9c:70:f3:dc:2a:6f:3d:e0:0f:6e: 80:55:65:99:8d:81:a9:e6:52:28:ba:66:1c:39:5d: 71:14:ee:49:f5:ee:82:42:cb:87:2e:a6:11:59:58: 17:d9:56:62:45:d7:f8:af:21:38:c5:3f:46:99:91: c5:49:6b:93:7b:78:f8:a3:09:ca:93:1c:8c:21:c1: 6f:1d:02:73:d6:9c:54:0a:08:be:35:31:ac:77:61: 19:03:47:52:74:d4:03:28:c6:0f:cb:7e:26:d8:4d: b8:68:a2:b0:28:b9:79:de:bd:d0:61:27:a3:72:73: 3e:fe:17:3f:31:69:19:5c:15:80:0b:2c:4a:b6:7c: 22:cc:a9:0b:11:6d:31:4d:48:ff:ae:08:5a:4c:04: fc:7e:44:be:aa:56:60:9b:62:ef:cd:b6:d5:44:c9: 81:03:2d:fe:a5:f4:7e:93:5f:a9:92:e2:a0:e0:a9: 91:4b:2f:ad:fc:4a:5f:ff:20:31:32:9d:63:47:84: b1:a7:6b:e0:49:1f:f9:3d:a5:d0:8e:4f:20:0f:2b: 0d:0a:a2:60:37:e9:7b:34:21:a4:a9:df:d3:aa:b4: fd:9d:b7:ac:44:f7:bf:30:f5:1f:0c:3d:36:63:81: fe:6f:05:e9:61:bf:ec:f3:52:c7:14:dc:41:ee:45: 73:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:55:5D:63:96:23:11:36:B6:CB:32:33:23:58:20:FB:45:18:60:D4 X509v3 Authority Key Identifier: keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:97:a0:23:31:7a:c7:8d:58:93:ef:43:c0:7f:03:43:c6:3d: 7f:ed:fe:25:35:3f:06:c5:73:e0:32:33:eb:90:13:98:ac:31: 16:d9:6d:6a:f2:4a:29:81:0f:5d:9c:5d:b8:8a:88:89:c7:fe: aa:1a:bd:3d:39:ec:65:7d:03:c5:2f:15:b3:6d:71:3a:54:de: b5:e6:8d:2f:c1:80:73:f5:23:5c:c1:90:b9:c3:e7:74:a2:33: 4f:b1:da:23:7c:ce:6a:cb:fd:44:da:3d:f9:23:ff:5b:f0:88: 26:19:92:6e:8d:f2:fc:7a:d4:7c:52:58:5d:0c:6e:8e:9f:8c: 82:9a:59:e2:5b:3e:01:c8:fb:18:ee:be:3f:7f:2b:aa:9e:46: c8:71:10:02:55:3d:fa:10:be:63:0e:4b:71:9b:65:2f:d7:3a: 77:f9:a6:46:0d:31:29:45:02:0d:dc:d4:01:52:b3:c1:9d:1e: d2:a6:e5:c4:a7:c0:a0:be:15:f6:2e:23:5c:1b:0b:ff:77:07: 29:ef:f0:34:79:66:dd:18:ac:53:0f:42:72:23:01:93:ba:47: e9:6b:0a:3c:74:71:78:3b:92:18:85:45:d4:84:22:6e:79:35: bf:11:a0:52:fb:c8:a3:5c:7a:a8:1a:9f:8d:89:fe:f2:84:7a: 18:cd:ac:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrKxS9Z9ZMhxKe4ZAArcv5hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzODRlODhmYjc5YTM3NzZjYjA1ODNlMmI2N2EwYmVjNmRm YzY4YjgwHhcNMjUxMTI4MTQwMTUxWhcNMjUxMTI5MTQwMTUxWjAzMTEwLwYDVQQD EyhiMDU1NWQ2Mzk2MjMxMTM2YjZjYjMyMzMyMzU4MjBmYjQ1MTg2MGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG7iypxw89wqbz3gD26AVWWZjYGp 5lIoumYcOV1xFO5J9e6CQsuHLqYRWVgX2VZiRdf4ryE4xT9GmZHFSWuTe3j4ownK kxyMIcFvHQJz1pxUCgi+NTGsd2EZA0dSdNQDKMYPy34m2E24aKKwKLl53r3QYSej cnM+/hc/MWkZXBWACyxKtnwizKkLEW0xTUj/rghaTAT8fkS+qlZgm2LvzbbVRMmB Ay3+pfR+k1+pkuKg4KmRSy+t/Epf/yAxMp1jR4Sxp2vgSR/5PaXQjk8gDysNCqJg N+l7NCGkqd/TqrT9nbesRPe/MPUfDD02Y4H+bwXpYb/s81LHFNxB7kVz+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBVXWOWIxE2tssyMyNYIPtFGGDUMB8GA1UdIwQY MBaAFAOE6I+3mjd2ywWD4rZ6C+xt/Gi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMt MzMzYTM4NGQ0MTdkLzEvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMtMzMzYTM4NGQ0MTdk LzEvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5egIzF6 x41Yk+9DwH8DQ8Y9f+3+JTU/BsVz4DIz65ATmKwxFtltavJKKYEPXZxduIqIicf+ qhq9PTnsZX0DxS8Vs21xOlTeteaNL8GAc/UjXMGQucPndKIzT7HaI3zOasv9RNo9 +SP/W/CIJhmSbo3y/HrUfFJYXQxujp+MgppZ4ls+Acj7GO6+P38rqp5GyHEQAlU9 +hC+Yw5LcZtlL9c6d/mmRg0xKUUCDdzUAVKzwZ0e0qblxKfAoL4V9i4jXBsL/3cH Ke/wNHlm3RisUw9CciMBk7pH6WsKPHRxeDuSGIVF1IQibnk1vxGgUvvIo1x6qBqf jYn+8oR6GM2sOA== -----END CERTIFICATE-----Generated at Fri Nov 28 23:26:59 2025 by rpki-client