This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft File: A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json) Hash identifier: aeLZ0vYzZiZEeedPGQ2kBHhDVPPekDU8joVRlHDEvpY= Subject key identifier: 20:E3:DE:4A:E6:CF:A2:D9:74:C3:06:0C:43:1D:5B:73:22:12:B6:8F Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44 Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44 Certificate serial: 019B24ACADBD90DCCC3494DACD87B282C39B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 01:00:54 +0000 Manifest this update: Tue 16 Dec 2025 01:00:54 +0000 Manifest next update: Wed 17 Dec 2025 01:00:54 +0000 Files and hashes: 1: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: F8aY07X3WROU6XKCMT0QAv14WNCY/XZu+nU7hpVosPU=) 2: LXtV1SOyemLIBBZI_VMF85otBtE.roa (hash: GHDun7QlntuZhx8oP1im/VJfuudrY5drYDWrntuirXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:ad:bd:90:dc:cc:34:94:da:cd:87:b2:82:c3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44 Validity Not Before: Dec 16 01:00:54 2025 GMT Not After : Dec 17 01:00:54 2025 GMT Subject: CN=20e3de4ae6cfa2d974c3060c431d5b732212b68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:7f:d9:03:9a:02:cb:f8:d8:e9:54:45:91: a1:9f:7b:09:cc:39:f7:e7:3d:4b:72:de:ad:87:a7: c3:95:cf:6d:55:25:83:dd:72:82:ef:c5:d4:20:9f: b9:2e:e1:f3:67:4c:a7:e8:a7:ce:5d:e7:25:83:ef: 9d:e7:f2:5a:c1:41:f7:12:f4:19:f5:c4:6b:9b:50: 35:8f:24:89:ad:11:cf:52:ff:62:86:f7:85:2e:9c: 7f:08:87:0e:b0:5b:ef:fd:30:db:69:e0:32:8f:90: f9:41:39:4b:7e:57:ea:f1:f9:bb:50:00:32:71:9b: dc:70:53:4e:3f:a8:55:57:7f:4f:f7:25:ae:ae:fa: fa:cc:fc:d3:24:c5:90:26:d0:76:d9:c8:93:87:04: 18:07:10:69:c8:53:49:86:9e:55:df:bf:a9:52:0d: a6:36:c6:69:e9:3d:ef:81:a3:28:1f:88:5e:dd:d0: 83:9c:7f:16:8a:bd:ba:b9:84:9a:c8:2a:cc:6c:75: fb:1e:64:1f:d2:77:fc:93:9a:f3:41:2a:87:77:3f: 96:92:5c:59:69:26:79:83:19:30:4b:79:9f:02:14: 70:40:6c:67:58:2e:90:f8:63:92:42:39:f8:69:f5: 0c:a9:de:0b:75:18:de:72:a9:bc:03:ab:19:8f:80: 7d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E3:DE:4A:E6:CF:A2:D9:74:C3:06:0C:43:1D:5B:73:22:12:B6:8F X509v3 Authority Key Identifier: keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:3c:a7:36:74:f3:8e:dd:7b:b7:34:f9:88:55:da:7b:38:df: 85:b9:b8:8b:7a:f8:74:14:46:df:06:9b:3e:4e:7d:03:e3:d8: 27:7b:b1:0e:54:ae:17:2f:2a:b7:f2:9e:97:03:a3:34:66:40: 99:bc:e7:3a:1e:a4:81:d7:fa:dd:d3:be:e3:13:da:84:77:18: 49:c3:88:c8:f6:b7:fb:df:9e:47:23:09:61:7b:1e:40:8d:dd: 1f:3e:6c:ff:55:2d:18:b3:31:9b:2d:25:8d:21:d1:a7:dc:5c: d1:37:cf:42:41:de:a3:6c:9b:c0:4d:13:b5:13:3b:14:b5:ba: e9:14:1e:36:27:8f:0c:de:4d:1f:f7:51:bc:e7:e3:eb:36:7e: 9c:fb:0b:10:71:05:6a:70:2a:c7:7c:c8:86:db:37:d0:ea:ef: 99:b4:44:fa:ac:e7:29:47:95:15:74:b1:6e:b1:72:eb:13:cd: bb:87:79:fa:f8:82:c8:db:2a:cf:02:43:03:ba:3f:82:f9:52: b6:41:d7:5c:a7:0a:28:8b:9f:81:98:ca:99:92:ff:c3:20:32: c0:91:e3:90:80:21:d8:fa:64:14:df:a4:47:a8:40:32:f0:cf: 3e:e6:1d:4c:c7:75:dc:ca:d7:42:b2:39:39:c0:d1:44:a8:89: ba:c3:d6:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrK29kNzMNJTazYeygsObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzODIwZTk2NGRmZDNkMjgxNDIwYWZkYTIwY2U5NDllNjBk NGNjNDQwHhcNMjUxMjE2MDEwMDU0WhcNMjUxMjE3MDEwMDU0WjAzMTEwLwYDVQQD EygyMGUzZGU0YWU2Y2ZhMmQ5NzRjMzA2MGM0MzFkNWI3MzIyMTJiNjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrZ/2QOaAsv42OlURZGhn3sJzDn3 5z1Lct6th6fDlc9tVSWD3XKC78XUIJ+5LuHzZ0yn6KfOXeclg++d5/JawUH3EvQZ 9cRrm1A1jySJrRHPUv9ihveFLpx/CIcOsFvv/TDbaeAyj5D5QTlLflfq8fm7UAAy cZvccFNOP6hVV39P9yWurvr6zPzTJMWQJtB22ciThwQYBxBpyFNJhp5V37+pUg2m NsZp6T3vgaMoH4he3dCDnH8Wir26uYSayCrMbHX7HmQf0nf8k5rzQSqHdz+WklxZ aSZ5gxkwS3mfAhRwQGxnWC6Q+GOSQjn4afUMqd4LdRjecqm8A6sZj4B9mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDj3krmz6LZdMMGDEMdW3MiEraPMB8GA1UdIwQY MBaAFAOCDpZN/T0oFCCv2iDOlJ5g1MxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTRJT2xrMzlQU2dVSUtfYUlNNlVubURVekVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yZWQ1ZGEtODVjZi00NDlmLWJkODUt NjI4YjBmYmNkMGI2LzEvQTRJT2xrMzlQU2dVSUtfYUlNNlVubURVekVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8yZWQ1ZGEtODVjZi00NDlmLWJkODUtNjI4YjBmYmNkMGI2 LzEvQTRJT2xrMzlQU2dVSUtfYUlNNlVubURVekVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjynNnTz jt17tzT5iFXaezjfhbm4i3r4dBRG3wabPk59A+PYJ3uxDlSuFy8qt/KelwOjNGZA mbznOh6kgdf63dO+4xPahHcYScOIyPa3+9+eRyMJYXseQI3dHz5s/1UtGLMxmy0l jSHRp9xc0TfPQkHeo2ybwE0TtRM7FLW66RQeNiePDN5NH/dRvOfj6zZ+nPsLEHEF anAqx3zIhts30OrvmbRE+qznKUeVFXSxbrFy6xPNu4d5+viCyNsqzwJDA7o/gvlS tkHXXKcKKIufgZjKmZL/wyAywJHjkIAh2PpkFN+kR6hAMvDPPuYdTMd13MrXQrI5 OcDRRKiJusPW+g== -----END CERTIFICATE-----Generated at Tue Dec 16 06:38:37 2025 by rpki-client