This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft File: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft (raw, json) Hash identifier: LmzCDqdmWZU2XPrs9V7I8M7kMlYquEL7AXFewKx0Z8A= Subject key identifier: 49:48:4B:27:C0:21:1A:D7:D5:96:BD:57:69:8C:7C:8C:D4:BC:A2:86 Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24 Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524 Certificate serial: 019B085AF6145159B1BE46FE3B177B084DD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft Manifest number: 1771 Signing time: Wed 10 Dec 2025 13:02:17 +0000 Manifest this update: Wed 10 Dec 2025 13:02:17 +0000 Manifest next update: Thu 11 Dec 2025 13:02:17 +0000 Files and hashes: 1: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl (hash: a5VsUOOlQZK7Ieu3zZjZkHOi2H4d4cM9jzeRFlJaXLA=) 2: SM900vRB7gei6pS6Q178I2UX-lU.roa (hash: EDUY4+JtCT9uXEY3z6PPpKcKtOUgL6hoTy+pDX+nuro=) 3: rE12S5_UCVz_qE96OpsYCotvRdo.roa (hash: HmY8gAlqRzAv6/rOzxQZtJmfpwofsJXd2sCI5/LnmTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5a:f6:14:51:59:b1:be:46:fe:3b:17:7b:08:4d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524 Validity Not Before: Dec 10 13:02:17 2025 GMT Not After : Dec 11 13:02:17 2025 GMT Subject: CN=49484b27c0211ad7d596bd57698c7c8cd4bca286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c4:9d:cd:b4:71:94:50:e4:cc:85:e6:a6:d5: c5:df:1d:1b:66:83:41:12:7a:e4:42:58:fe:c9:0c: 4a:89:58:2a:69:9a:24:98:9b:72:39:6c:4a:51:06: ff:bd:f6:59:97:c5:ed:65:83:26:d0:dc:65:9b:8c: 29:1c:43:6e:71:e7:2e:1d:c1:65:01:6a:ee:3c:a3: 7b:1c:c7:6b:86:34:9e:cc:b7:5d:08:b1:09:19:58: de:9c:ba:92:91:80:7a:a3:f8:29:6e:e9:7c:a4:43: ed:ab:c5:4f:88:34:1d:2f:2d:62:90:a5:21:12:cf: 16:39:24:c8:4b:0f:95:88:20:79:73:2d:31:6f:2a: 19:6a:b9:f6:b9:f9:ff:c6:c7:b5:c4:e6:69:ab:0b: c0:3e:23:a5:c4:47:9a:ee:d0:f8:ea:60:2a:15:cc: 6f:23:97:d1:43:a3:d4:eb:0d:52:15:66:82:ef:e1: 1f:bc:7c:bd:af:6d:dd:ac:94:1d:f2:5f:6a:15:a9: 7d:2d:a7:ab:e7:ef:e5:98:2c:b1:f4:f1:3e:56:54: e8:2a:aa:3f:08:19:7a:a5:82:37:7f:5d:b9:fc:fc: 00:a6:b9:68:7e:16:27:b0:2e:9b:d1:67:34:00:27: f1:01:94:b4:ec:6d:cf:1b:a7:09:7f:cb:ac:21:e2: db:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:48:4B:27:C0:21:1A:D7:D5:96:BD:57:69:8C:7C:8C:D4:BC:A2:86 X509v3 Authority Key Identifier: keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a0:c2:78:d1:5b:82:c6:46:87:4c:70:d7:88:64:9a:0f:a5: b6:ec:a4:f5:18:80:40:4e:50:ea:10:fd:3e:8f:d4:ef:b8:af: da:96:63:b4:f3:d6:2c:d1:55:b2:cf:14:47:e8:0b:8a:0b:46: 29:b0:13:36:c7:b2:4b:d5:04:de:02:74:2d:bb:0e:0a:53:37: 50:73:82:5d:05:36:57:0e:c8:42:26:0b:45:d5:b6:28:00:ba: 2f:2e:fb:ff:c5:88:00:23:45:8c:28:68:53:d6:a5:f3:c1:b2: 67:32:86:ed:5f:52:cc:3a:de:37:c0:48:aa:78:11:4d:1f:3f: ce:90:00:c0:0c:59:23:bb:2a:85:e7:5c:f6:6c:68:12:f5:2e: 24:19:b4:e3:e4:73:61:e1:8f:6c:0b:50:3e:72:76:4f:10:b5: ec:23:14:bc:46:97:4e:45:b3:8a:51:98:77:4c:b8:2c:95:1d: 48:52:c8:a8:a2:20:ac:e0:82:ad:de:c2:0d:18:3f:62:37:1e: 0d:d8:b3:0e:05:87:f2:ee:c5:b3:ad:c7:e6:c4:be:d1:49:2b: 60:4c:12:70:91:85:c5:bc:21:48:79:75:3f:75:f8:1b:2c:13: ef:1e:39:f4:c7:ff:0a:24:ca:d2:9b:33:6e:85:d9:c2:e3:11: a0:29:ac:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIWvYUUVmxvkb+Oxd7CE3ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZTUzZDE4ZjVmMjEyYWUwODAyYTE3ZWU1OTk0YzMzMzFh NDM1MjQwHhcNMjUxMjEwMTMwMjE3WhcNMjUxMjExMTMwMjE3WjAzMTEwLwYDVQQD Eyg0OTQ4NGIyN2MwMjExYWQ3ZDU5NmJkNTc2OThjN2M4Y2Q0YmNhMjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88SdzbRxlFDkzIXmptXF3x0bZoNB EnrkQlj+yQxKiVgqaZokmJtyOWxKUQb/vfZZl8XtZYMm0Nxlm4wpHENucecuHcFl AWruPKN7HMdrhjSezLddCLEJGVjenLqSkYB6o/gpbul8pEPtq8VPiDQdLy1ikKUh Es8WOSTISw+ViCB5cy0xbyoZarn2ufn/xse1xOZpqwvAPiOlxEea7tD46mAqFcxv I5fRQ6PU6w1SFWaC7+EfvHy9r23drJQd8l9qFal9Laer5+/lmCyx9PE+VlToKqo/ CBl6pYI3f125/PwAprlofhYnsC6b0Wc0ACfxAZS07G3PG6cJf8usIeLbdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElISyfAIRrX1Za9V2mMfIzUvKKGMB8GA1UdIwQY MBaAFAPlPRj18hKuCAKhfuWZTDMxpDUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kZGQ5ZjEtMGYyZS00ZDVmLTg1N2Qt MDJiYWI5ZjZmOTU1LzEvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9kZGQ5ZjEtMGYyZS00ZDVmLTg1N2QtMDJiYWI5ZjZmOTU1 LzEvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqDCeNFb gsZGh0xw14hkmg+ltuyk9RiAQE5Q6hD9Po/U77iv2pZjtPPWLNFVss8UR+gLigtG KbATNseyS9UE3gJ0LbsOClM3UHOCXQU2Vw7IQiYLRdW2KAC6Ly77/8WIACNFjCho U9al88GyZzKG7V9SzDreN8BIqngRTR8/zpAAwAxZI7sqhedc9mxoEvUuJBm04+Rz YeGPbAtQPnJ2TxC17CMUvEaXTkWzilGYd0y4LJUdSFLIqKIgrOCCrd7CDRg/Yjce DdizDgWH8u7Fs63H5sS+0UkrYEwScJGFxbwhSHl1P3X4GywT7x459Mf/CiTK0psz boXZwuMRoCmsvw== -----END CERTIFICATE-----Generated at Wed Dec 10 18:45:57 2025 by rpki-client