This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft File: 1-A4BfPFxFRmw_59lhYxJGy-l1As.mft (raw, json) Hash identifier: k2U4prZpf0Qwx4nvVvuSL6BUNMDnv8l5mM5ciUxHq5g= Subject key identifier: DB:7D:16:2E:DD:9D:F0:5C:D7:61:2C:76:49:77:55:21:E4:A3:BF:93 Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b Certificate serial: 019B04EAB0294447056542B415E2AD1942F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft Manifest number: 133E Signing time: Tue 09 Dec 2025 21:00:47 +0000 Manifest this update: Tue 09 Dec 2025 21:00:47 +0000 Manifest next update: Wed 10 Dec 2025 21:00:47 +0000 Files and hashes: 1: 0cg-ABQ5F07wo1zUc9k0K5Ly8to.roa (hash: Rkj4lRwYBqE7QsZIcMHOzWOT71EQLWq7kKtekOL+dc8=) 2: 1-A4BfPFxFRmw_59lhYxJGy-l1As.crl (hash: 3sDk3nWl7bto/TqAOIEkI3zbXzbftfZ/EPe4IJtqlT8=) 3: BQSRgsrnX8JnjaCE0pOBIpQ5ebc.roa (hash: h3wwdJrizfCgG4S/e0JuPLlbVsXDFB1J+2NlIEyZmsM=) 4: TntDV8H0cxrOGkDYWiJ5vwYXM6U.roa (hash: U/d+Fv7E47cWBLg/rWP1IbXjQkA8lalBfzHWx2kVZS4=) 5: Wem4R1HhiLTH9JF3d-SZOmy37u0.roa (hash: 7MdQgNFI/gw33JrzBz7PAxkDLsGz7qoxKurvzPVxBTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:ea:b0:29:44:47:05:65:42:b4:15:e2:ad:19:42:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b Validity Not Before: Dec 9 21:00:47 2025 GMT Not After : Dec 10 21:00:47 2025 GMT Subject: CN=db7d162edd9df05cd7612c7649775521e4a3bf93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4f:a4:d5:5c:96:fa:ae:df:c7:66:0f:87:ba: ea:ac:86:5d:75:f9:b7:b0:e9:57:2c:42:0d:aa:87: 63:1c:0a:3b:9b:8e:a8:84:bd:6c:27:dd:da:40:1c: da:c9:04:80:b9:b6:32:84:a2:38:da:01:46:7c:4e: 04:81:12:b1:cb:27:2a:10:ef:c9:29:29:90:5f:ad: 31:28:3c:11:8a:e8:5d:86:ae:78:92:86:d1:3d:e2: aa:24:c7:be:7b:b4:2f:eb:2e:73:8d:0c:7c:9e:11: 29:57:f0:0b:d7:21:c1:b5:17:00:67:02:ca:f3:7c: 63:ab:90:f7:63:9a:01:ce:d8:09:84:c8:80:fd:25: 61:06:83:c8:7a:ff:5b:ca:af:f8:c2:22:a9:89:6a: 87:8c:6d:63:d1:98:93:3a:80:e1:45:6b:98:54:02: 91:e7:2b:80:09:c1:b3:47:43:c6:d0:c2:74:10:e0: 04:3e:05:b7:1b:7a:11:d0:e9:b9:7e:16:ca:31:fe: b5:27:a1:37:08:35:5d:32:46:86:d1:1d:1b:de:c5: 30:af:3b:6a:9b:c0:b3:09:95:91:68:9c:da:76:c0: 16:23:92:7d:f7:78:98:57:08:0f:8a:62:a4:7c:2e: 50:fb:9b:ab:65:60:a3:e1:b5:fe:ce:b5:1c:37:b3: c7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7D:16:2E:DD:9D:F0:5C:D7:61:2C:76:49:77:55:21:E4:A3:BF:93 X509v3 Authority Key Identifier: keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:c3:f3:52:df:ca:3c:85:78:51:f9:4a:03:dd:8d:ab:02:75: 3d:79:70:f4:8b:f4:eb:f2:e5:74:cf:f9:5c:e7:b9:99:a5:76: 1c:99:14:6b:51:15:a3:74:e9:29:1e:83:8d:a8:f5:36:cd:cb: ab:11:a1:cf:6c:aa:52:02:4c:f8:0f:7a:59:0e:38:fe:cf:d2: 50:38:56:d4:82:6d:7e:92:47:bb:6b:67:dd:e5:58:1f:33:49: 4d:b4:09:f5:51:ef:66:c1:37:61:44:97:68:2a:39:78:04:9a: a7:30:dd:81:dd:e4:6d:77:58:3a:f8:af:e4:b8:d6:4a:7b:ce: 97:a0:9d:0a:a8:eb:34:90:1d:25:7f:49:9b:3b:2f:7a:cb:c9: a0:be:7b:55:f6:fe:c9:92:dc:57:de:61:ea:c4:3d:b2:61:e9: 33:02:c0:99:c0:ed:62:6a:db:84:27:ae:3b:81:67:b4:aa:25: bc:ff:72:18:28:f0:76:a5:82:3c:01:4d:41:03:de:f3:0b:3e: d7:69:a3:34:81:2f:86:72:3d:12:29:4d:17:82:1b:e2:ef:e6: 8d:3f:c0:5d:48:ee:01:49:9d:78:7e:69:df:21:8c:b1:64:65: 3c:7d:7d:02:cf:fe:10:84:aa:ef:82:80:12:7e:05:9d:2a:e5: 01:d2:d0:09 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsE6rApREcFZUK0FeKtGULyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MGUwMTdjZjE3MTE1MTliMGZmOWY2NTg1OGM0OTFiMmZh NWQ0MGIwHhcNMjUxMjA5MjEwMDQ3WhcNMjUxMjEwMjEwMDQ3WjAzMTEwLwYDVQQD EyhkYjdkMTYyZWRkOWRmMDVjZDc2MTJjNzY0OTc3NTUyMWU0YTNiZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k+k1VyW+q7fx2YPh7rqrIZddfm3 sOlXLEINqodjHAo7m46ohL1sJ93aQBzayQSAubYyhKI42gFGfE4EgRKxyycqEO/J KSmQX60xKDwRiuhdhq54kobRPeKqJMe+e7Qv6y5zjQx8nhEpV/AL1yHBtRcAZwLK 83xjq5D3Y5oBztgJhMiA/SVhBoPIev9byq/4wiKpiWqHjG1j0ZiTOoDhRWuYVAKR 5yuACcGzR0PG0MJ0EOAEPgW3G3oR0Om5fhbKMf61J6E3CDVdMkaG0R0b3sUwrztq m8CzCZWRaJzadsAWI5J993iYVwgPimKkfC5Q+5urZWCj4bX+zrUcN7PHAQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNt9Fi7dnfBc12Esdkl3VSHko7+TMB8GA1UdIwQY MBaAFPgOAXzxcRUZsP+fZYWMSRsvpdQLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1BNEJmUEZ4RlJtd181OWxoWXhKR3ktbDFBcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2 LThjZTYwYTVjOGIxZi8xLzEtQTRCZlBGeEZSbXdfNTlsaFl4Skd5LWwxQXMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzg3LzJkYzEzNi00MDBkLTQwZTctYWQ4Ni04Y2U2MGE1Yzhi MWYvMS8xLUE0QmZQRnhGUm13XzU5bGhZeEpHeS1sMUFzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMPz Ut/KPIV4UflKA92NqwJ1PXlw9Iv06/LldM/5XOe5maV2HJkUa1EVo3TpKR6Djaj1 Ns3LqxGhz2yqUgJM+A96WQ44/s/SUDhW1IJtfpJHu2tn3eVYHzNJTbQJ9VHvZsE3 YUSXaCo5eASapzDdgd3kbXdYOviv5LjWSnvOl6CdCqjrNJAdJX9JmzsvesvJoL57 Vfb+yZLcV95h6sQ9smHpMwLAmcDtYmrbhCeuO4FntKolvP9yGCjwdqWCPAFNQQPe 8ws+12mjNIEvhnI9EilNF4Ib4u/mjT/AXUjuAUmdeH5p3yGMsWRlPH19As/+EISq 74KAEn4FnSrlAdLQCQ== -----END CERTIFICATE-----Generated at Wed Dec 10 06:26:55 2025 by rpki-client