This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json) Hash identifier: dXqDkGL7nFCfZAgbmPEh/qDIOfuu3iYJPbR2gqBduFc= Subject key identifier: 28:0E:BA:0B:32:A9:F8:37:A6:D7:1D:49:03:8C:65:88:1E:66:FC:AC Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49 Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149 Certificate serial: 019B58D0E6BF8130450E503D3DF69A1152CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 04:00:44 +0000 Manifest this update: Fri 26 Dec 2025 04:00:44 +0000 Manifest next update: Sat 27 Dec 2025 04:00:44 +0000 Files and hashes: 1: 3Et5DSQTmjw5JoMUf-Wa1H5e4PY.roa (hash: FOwnE+/UGLrWULx1HSQ846yUR+XWmJ/pKo/EVwX3S1M=) 2: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: hY9Y7TDyZZ7GdnMJ+I28RPLxV9wVGWiwTTQKhKxIM9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d0:e6:bf:81:30:45:0e:50:3d:3d:f6:9a:11:52:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149 Validity Not Before: Dec 26 04:00:44 2025 GMT Not After : Dec 27 04:00:44 2025 GMT Subject: CN=280eba0b32a9f837a6d71d49038c65881e66fcac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:34:88:9c:75:6a:65:b8:d3:2d:bb:5b:e0:af: 98:e0:11:97:61:56:62:ad:d6:95:a5:52:d4:b2:75: a4:7b:b6:93:8d:17:69:89:11:a8:61:36:f1:bf:4c: 5f:9b:9d:08:5b:b1:05:7b:c2:aa:56:ef:c2:d3:9c: 0f:d7:21:03:57:0a:b4:bf:14:92:57:64:1c:53:90: 85:34:88:93:00:6b:7e:f1:5c:e1:5e:ee:5c:7d:02: b4:60:41:1b:2f:b0:90:9e:a8:7f:63:d3:f6:e0:28: ff:40:db:e9:5a:e7:6e:16:34:e0:1d:5b:2a:7d:f1: 66:82:5f:e4:44:4d:4e:5b:5e:61:5d:0c:3c:a9:49: 33:0e:71:78:c4:ee:1c:f9:e4:97:44:51:a6:b0:5e: fe:b4:cd:bf:73:ce:d7:92:ba:6c:97:7d:ea:00:42: 8e:a5:1b:52:ec:e2:3e:02:4c:83:db:80:bc:1b:3f: 8f:d3:f0:06:9b:a1:eb:07:d8:8e:bd:d0:ea:8c:53: 09:bd:f0:bf:a5:95:38:12:56:4d:ab:b7:1f:69:fd: 24:30:e0:6f:aa:d5:ae:69:90:3d:55:bf:b1:5a:40: c6:8a:ad:31:07:bd:33:76:bb:55:95:83:91:a1:2c: e6:93:48:21:e6:fd:33:3b:a0:de:b9:3d:44:f2:86: b1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0E:BA:0B:32:A9:F8:37:A6:D7:1D:49:03:8C:65:88:1E:66:FC:AC X509v3 Authority Key Identifier: keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:fd:79:ee:b6:b4:92:36:18:cb:21:04:dd:3f:15:b4:3f:8b: 2f:8a:a3:71:13:b5:3d:2b:1c:87:fc:7b:52:47:11:e1:9d:16: 7c:9a:fe:74:92:28:cd:3d:10:32:87:3d:a4:0c:97:f2:d9:bf: 9f:81:ad:23:6d:97:62:a9:fb:e7:06:10:1a:39:39:b0:f7:2b: 73:96:de:81:f4:de:20:e5:c8:cf:08:65:2f:09:e0:2d:98:b5: 78:d4:ce:4e:c4:c2:50:a8:f8:89:56:71:80:f5:89:fa:24:cc: 68:46:81:09:7e:7f:63:35:e0:23:b3:12:b4:65:a5:9a:2a:0c: 86:83:0f:a6:d7:65:11:6d:fa:8d:f6:2a:fb:d5:68:32:51:f1: f0:1c:4a:cf:6d:2a:77:e3:06:02:4b:84:66:f0:10:e0:3f:51: 92:10:06:c1:66:b5:65:7d:78:8b:f3:40:6a:93:b7:b1:2e:3c: 31:90:d2:3f:3c:f4:8d:68:89:d5:ca:07:14:12:0b:d6:1b:62: 0f:6a:2b:69:cc:65:2a:d7:ac:41:8c:63:f2:8c:94:1e:f3:b4: c6:bd:8d:28:b2:cf:3f:92:99:cb:3e:06:27:94:e5:8a:f3:af: a0:34:37:c2:d1:79:bd:12:bf:cf:d0:02:be:3b:3c:c5:57:24: f3:cd:fb:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0Oa/gTBFDlA9PfaaEVLLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOGI5OTYzYzk3MmMxZDdhMDNkZjk2ZmFkMjVmNjhlYmQ0 ZmExNDkwHhcNMjUxMjI2MDQwMDQ0WhcNMjUxMjI3MDQwMDQ0WjAzMTEwLwYDVQQD EygyODBlYmEwYjMyYTlmODM3YTZkNzFkNDkwMzhjNjU4ODFlNjZmY2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TSInHVqZbjTLbtb4K+Y4BGXYVZi rdaVpVLUsnWke7aTjRdpiRGoYTbxv0xfm50IW7EFe8KqVu/C05wP1yEDVwq0vxSS V2QcU5CFNIiTAGt+8VzhXu5cfQK0YEEbL7CQnqh/Y9P24Cj/QNvpWuduFjTgHVsq ffFmgl/kRE1OW15hXQw8qUkzDnF4xO4c+eSXRFGmsF7+tM2/c87Xkrpsl33qAEKO pRtS7OI+AkyD24C8Gz+P0/AGm6HrB9iOvdDqjFMJvfC/pZU4ElZNq7cfaf0kMOBv qtWuaZA9Vb+xWkDGiq0xB70zdrtVlYORoSzmk0gh5v0zO6DeuT1E8oaxQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgOugsyqfg3ptcdSQOMZYgeZvysMB8GA1UdIwQY MBaAFAOLmWPJcsHXoD35b60l9o69T6FJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWIt NjE2M2I5OTdiNjQyLzEvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWItNjE2M2I5OTdiNjQy LzEvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARv157ra0 kjYYyyEE3T8VtD+LL4qjcRO1PSsch/x7UkcR4Z0WfJr+dJIozT0QMoc9pAyX8tm/ n4GtI22XYqn75wYQGjk5sPcrc5begfTeIOXIzwhlLwngLZi1eNTOTsTCUKj4iVZx gPWJ+iTMaEaBCX5/YzXgI7MStGWlmioMhoMPptdlEW36jfYq+9VoMlHx8BxKz20q d+MGAkuEZvAQ4D9RkhAGwWa1ZX14i/NAapO3sS48MZDSPzz0jWiJ1coHFBIL1hti D2oracxlKtesQYxj8oyUHvO0xr2NKLLPP5KZyz4GJ5TlivOvoDQ3wtF5vRK/z9AC vjs8xVck8837rA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:21 2025 by rpki-client