This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft File: A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft (raw, json) Hash identifier: zgagTS6wV5we7lpqj+xcyP054Hm2UHT4z9Wj6AAd7cw= Subject key identifier: 5D:F0:2D:B0:82:0E:65:08:16:22:11:64:43:47:64:C1:B0:6F:69:06 Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77 Certificate issuer: /CN=039b01353e51a3a87e835963bd8833ed81853d77 Certificate serial: 019B1B048BEBB24D4326088FE48BE55B5665 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 04:00:41 +0000 Manifest this update: Sun 14 Dec 2025 04:00:41 +0000 Manifest next update: Mon 15 Dec 2025 04:00:41 +0000 Files and hashes: 1: A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl (hash: 1anDrI1ug2TexebzbXl3gHgfwjUluETSucWwJmdW4aU=) 2: aFAF2a0pf2_iQW_Ah5PtSVGIIsU.roa (hash: CRoJAvxL/AEhIjj3BGa3AOSm/IAStthRp+t6FhfWlZc=) 3: g0yUXdYSuBEU7wpjF_M-dIueuPE.roa (hash: PIV5IbeiUmm5gi+hdOXD1voi9O/jmaGDnpkEJZ2+Rwg=) 4: kLgY3X5leR0VtUr8VPTZGFKR1kc.roa (hash: LBSLrR+c9iEdXN69yxUzikKKOnVtulDFWy14eJ7VP9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:04:8b:eb:b2:4d:43:26:08:8f:e4:8b:e5:5b:56:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77 Validity Not Before: Dec 14 04:00:41 2025 GMT Not After : Dec 15 04:00:41 2025 GMT Subject: CN=5df02db0820e650816221164434764c1b06f6906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:48:ce:dc:10:5b:90:39:a2:4c:36:50:5e:88: 4d:ce:86:ae:c7:e1:aa:36:55:68:19:97:4d:f0:4b: 6b:af:1a:88:38:d9:90:85:b3:97:34:25:d0:22:de: e8:69:8e:2f:6d:07:0b:d1:b0:43:66:38:a2:d7:52: fe:09:c2:db:5b:dd:48:27:c8:93:8e:96:11:11:16: fc:9e:8b:cd:3e:58:b4:e2:b1:51:6d:1b:cb:64:d2: 18:bf:f1:65:b5:23:07:ea:72:c2:e6:8f:48:20:1d: 45:4e:28:a3:59:38:21:87:a6:41:77:36:ac:67:55: 80:18:f0:9e:63:49:f5:24:9a:57:93:86:70:ff:7e: ab:19:7d:12:5c:51:5f:12:01:f7:55:5c:f8:e6:67: ff:6d:5e:1b:21:4e:44:24:53:e3:96:cf:d4:d3:06: 98:f8:6b:cd:dd:4b:6f:5e:25:b0:d9:39:c1:a7:ad: 8b:b5:dc:4d:77:dc:ea:56:b3:72:68:43:67:d4:d4: 08:ac:72:30:4a:82:4b:9f:ba:e5:b4:72:64:49:fc: d7:45:92:ed:4f:9f:7a:65:13:8f:c6:45:39:bf:14: 60:a7:8a:d6:b6:1c:05:09:35:17:59:ed:9f:77:cf: c7:57:2d:f7:c7:e0:63:f6:a2:29:9c:e8:64:aa:e6: 15:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F0:2D:B0:82:0E:65:08:16:22:11:64:43:47:64:C1:B0:6F:69:06 X509v3 Authority Key Identifier: keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:09:1c:59:48:74:36:56:5e:5c:ac:90:d6:e0:21:3f:f3:a2: 23:ec:7b:32:91:7f:d4:b4:15:e8:59:90:d4:0c:13:ea:11:c5: 28:76:2b:a5:dd:1d:6c:f0:1f:67:8a:3e:8b:07:1b:45:08:fd: f8:95:6e:44:de:d3:89:8e:19:5b:fb:aa:a2:f9:5a:20:88:d5: d3:ba:16:6d:2b:0a:8a:61:5a:ff:22:6d:9b:62:cc:f4:5e:2e: 9e:81:b5:24:97:b3:64:9b:fb:6e:21:4e:74:7b:e8:16:e4:f7: 2f:58:7c:51:10:9e:85:cf:34:e1:f5:e4:a6:b5:53:32:77:f3: f0:f3:db:97:f8:16:fd:31:2f:88:af:37:95:ff:b2:f2:01:91: ca:d9:c0:05:c4:38:e6:d5:62:ec:ca:c0:30:f5:da:37:2c:fd: 4e:3e:3d:44:95:d9:85:e9:f0:2a:40:d1:6c:ad:1e:6b:3d:df: b2:b6:f2:cd:ac:73:c3:a0:40:77:ab:2d:78:ae:20:89:38:39: 55:9f:b5:3a:02:52:06:37:03:69:11:36:c7:92:91:bf:b8:4b: 7e:d4:65:44:8a:6d:94:7c:0a:2c:74:ef:46:f4:c4:05:15:36: 28:af:f1:8b:26:22:d8:73:2c:63:74:39:b5:7a:45:74:c4:66: c6:18:42:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBIvrsk1DJgiP5IvlW1ZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOWIwMTM1M2U1MWEzYTg3ZTgzNTk2M2JkODgzM2VkODE4 NTNkNzcwHhcNMjUxMjE0MDQwMDQxWhcNMjUxMjE1MDQwMDQxWjAzMTEwLwYDVQQD Eyg1ZGYwMmRiMDgyMGU2NTA4MTYyMjExNjQ0MzQ3NjRjMWIwNmY2OTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UjO3BBbkDmiTDZQXohNzoaux+Gq NlVoGZdN8EtrrxqIONmQhbOXNCXQIt7oaY4vbQcL0bBDZjii11L+CcLbW91IJ8iT jpYRERb8novNPli04rFRbRvLZNIYv/FltSMH6nLC5o9IIB1FTiijWTghh6ZBdzas Z1WAGPCeY0n1JJpXk4Zw/36rGX0SXFFfEgH3VVz45mf/bV4bIU5EJFPjls/U0waY +GvN3UtvXiWw2TnBp62LtdxNd9zqVrNyaENn1NQIrHIwSoJLn7rltHJkSfzXRZLt T596ZROPxkU5vxRgp4rWthwFCTUXWe2fd8/HVy33x+Bj9qIpnOhkquYVewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3wLbCCDmUIFiIRZENHZMGwb2kGMB8GA1UdIwQY MBaAFAObATU+UaOofoNZY72IM+2BhT13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUt NGE4YjZiNDA4MmIxLzEvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUtNGE4YjZiNDA4MmIx LzEvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgkcWUh0 NlZeXKyQ1uAhP/OiI+x7MpF/1LQV6FmQ1AwT6hHFKHYrpd0dbPAfZ4o+iwcbRQj9 +JVuRN7TiY4ZW/uqovlaIIjV07oWbSsKimFa/yJtm2LM9F4unoG1JJezZJv7biFO dHvoFuT3L1h8URCehc804fXkprVTMnfz8PPbl/gW/TEviK83lf+y8gGRytnABcQ4 5tVi7MrAMPXaNyz9Tj49RJXZhenwKkDRbK0eaz3fsrbyzaxzw6BAd6steK4giTg5 VZ+1OgJSBjcDaRE2x5KRv7hLftRlRIptlHwKLHTvRvTEBRU2KK/xiyYi2HMsY3Q5 tXpFdMRmxhhCzQ== -----END CERTIFICATE-----Generated at Sun Dec 14 11:36:11 2025 by rpki-client