This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json) Hash identifier: J9hh2ILCvT7Hp5Ae0tldsbadxB0NgYlLbLbpfpnJkVI= Subject key identifier: FD:D9:C7:81:41:FC:2B:27:3F:1A:5E:2B:3A:DE:9A:C3:78:63:8D:E1 Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8 Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8 Certificate serial: 019B36EA17BBBC1E90BBA783F5EDCACE4AAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft Manifest number: 0E24 Signing time: Fri 19 Dec 2025 14:01:09 +0000 Manifest this update: Fri 19 Dec 2025 14:01:09 +0000 Manifest next update: Sat 20 Dec 2025 14:01:09 +0000 Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: 5y+prdc4mKF2LCCJJSPEzOB2kjHhzkMviByDDtYVpzg=) 2: AThGgouxKv8fc_GjPfk1KTqcYJ8.roa (hash: pBwVTlstihKQTv02WIHNb7H+18sdn98VZXnJD5bJ+rM=) 3: O29Zxmmx6-HgpfQCaZNYO-hkBL0.roa (hash: AJ99xUwGr6nteSCZy2ZqWhrEmfyvYWpbIQR3DNjRUos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:ea:17:bb:bc:1e:90:bb:a7:83:f5:ed:ca:ce:4a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8 Validity Not Before: Dec 19 14:01:09 2025 GMT Not After : Dec 20 14:01:09 2025 GMT Subject: CN=fdd9c78141fc2b273f1a5e2b3ade9ac378638de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:69:10:ae:21:18:af:24:1e:35:b2:37:70:c7: 37:85:dc:c8:6d:f3:50:0b:ea:fd:65:50:b1:80:ad: 2d:88:23:af:6b:d4:1e:17:13:2c:4f:94:b5:c7:d7: 96:25:cc:0f:af:26:e3:f0:dc:9d:45:ec:0c:d4:41: 70:bb:28:1e:4b:19:89:ae:61:9e:2b:f1:fb:d0:1d: 76:8b:69:42:77:13:5c:f7:e8:5b:32:32:45:7d:67: 29:8c:0b:b1:46:6d:8e:da:b6:78:9f:28:6f:9a:bf: 35:e3:54:70:9f:ad:c1:8c:76:30:e0:51:db:0e:62: 90:e8:6f:18:86:e5:2c:0e:59:38:2e:cc:d7:14:b3: 9e:a1:b2:fb:52:77:11:b6:4f:df:f4:a8:1c:b8:1d: 74:4b:9f:c3:53:03:97:14:07:81:df:db:5c:80:88: 73:cb:c2:07:6c:c0:71:9f:e6:0c:d0:5f:2c:66:bb: ea:9d:4e:a5:49:cf:e4:6c:13:82:b1:65:41:ac:f8: c7:f4:c6:70:55:77:ef:fb:28:1b:88:19:a5:e6:4c: 45:2a:93:62:8f:d8:5c:33:aa:fa:9e:7d:f1:12:72: 66:8f:d5:3a:ed:84:7c:0d:be:7e:a6:34:bc:4d:5c: f8:5c:57:e2:c9:35:74:e2:00:d8:1e:6b:20:ab:38: 2f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D9:C7:81:41:FC:2B:27:3F:1A:5E:2B:3A:DE:9A:C3:78:63:8D:E1 X509v3 Authority Key Identifier: keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a7:6e:09:06:a6:24:03:ae:32:ef:ad:c1:7a:0e:8b:e4:fc: f6:73:8e:37:24:f3:e0:bf:40:a1:d2:59:1a:71:48:d8:91:e8: 35:7c:11:22:dd:f5:38:e8:84:44:a0:90:09:52:76:19:56:0c: 75:e2:d6:c1:1e:d5:95:be:43:1e:e3:37:7d:93:a3:d2:65:67: 23:97:cc:ac:49:1d:64:99:d7:d6:b7:03:c4:15:81:ca:e7:4f: 32:67:89:de:f2:d6:53:bc:f4:19:cb:4e:11:34:70:88:3b:0e: 77:81:ba:a4:03:82:31:d1:89:fc:ee:be:57:34:28:7c:ed:a4: 5b:06:2f:54:32:b9:de:34:f3:0e:70:8a:b5:a3:63:1c:36:ac: 7b:ea:b1:74:b4:b6:04:39:4d:cb:a0:8b:a8:37:83:40:29:50: 82:32:b9:12:d6:f7:d7:40:b9:6a:7b:d6:81:76:34:21:aa:89: 96:60:0c:d6:fb:98:fb:9f:57:c1:6f:39:46:4b:91:0e:5e:c5: 65:d0:36:2a:17:f3:4a:95:f8:e0:45:f5:bf:6f:e7:1b:f3:d2: 77:50:9d:0b:b5:76:4b:58:e6:d7:4b:7f:47:3c:89:e4:b6:9f: ea:c0:54:24:60:e5:d6:d1:f8:fd:dc:e8:3c:f6:6f:7e:80:2c: 55:15:35:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26he7vB6Qu6eD9e3KzkqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzODRlODhmYjc5YTM3NzZjYjA1ODNlMmI2N2EwYmVjNmRm YzY4YjgwHhcNMjUxMjE5MTQwMTA5WhcNMjUxMjIwMTQwMTA5WjAzMTEwLwYDVQQD EyhmZGQ5Yzc4MTQxZmMyYjI3M2YxYTVlMmIzYWRlOWFjMzc4NjM4ZGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGkQriEYryQeNbI3cMc3hdzIbfNQ C+r9ZVCxgK0tiCOva9QeFxMsT5S1x9eWJcwPrybj8NydRewM1EFwuygeSxmJrmGe K/H70B12i2lCdxNc9+hbMjJFfWcpjAuxRm2O2rZ4nyhvmr8141Rwn63BjHYw4FHb DmKQ6G8YhuUsDlk4LszXFLOeobL7UncRtk/f9KgcuB10S5/DUwOXFAeB39tcgIhz y8IHbMBxn+YM0F8sZrvqnU6lSc/kbBOCsWVBrPjH9MZwVXfv+ygbiBml5kxFKpNi j9hcM6r6nn3xEnJmj9U67YR8Db5+pjS8TVz4XFfiyTV04gDYHmsgqzgviQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3Zx4FB/CsnPxpeKzremsN4Y43hMB8GA1UdIwQY MBaAFAOE6I+3mjd2ywWD4rZ6C+xt/Gi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMt MzMzYTM4NGQ0MTdkLzEvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMtMzMzYTM4NGQ0MTdk LzEvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKduCQam JAOuMu+twXoOi+T89nOONyTz4L9AodJZGnFI2JHoNXwRIt31OOiERKCQCVJ2GVYM deLWwR7Vlb5DHuM3fZOj0mVnI5fMrEkdZJnX1rcDxBWByudPMmeJ3vLWU7z0GctO ETRwiDsOd4G6pAOCMdGJ/O6+VzQofO2kWwYvVDK53jTzDnCKtaNjHDase+qxdLS2 BDlNy6CLqDeDQClQgjK5Etb310C5anvWgXY0IaqJlmAM1vuY+59XwW85RkuRDl7F ZdA2KhfzSpX44EX1v2/nG/PSd1CdC7V2S1jm10t/RzyJ5Laf6sBUJGDl1tH4/dzo PPZvfoAsVRU1Ow== -----END CERTIFICATE-----Generated at Fri Dec 19 23:07:30 2025 by rpki-client