This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft File: A5Wt2Guvay0G_0H1Um00f3HutBA.mft (raw, json) Hash identifier: qskQNaoIYu4aj5OJ/qgTeTYwHO9CNSyhcbA9rZJDmT4= Subject key identifier: CF:E4:82:80:2B:B6:CA:61:1D:75:36:86:43:3E:37:A9:B6:0B:49:2E Authority key identifier: 03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10 Certificate issuer: /CN=0395add86baf6b2d06ff41f5526d347f71eeb410 Certificate serial: 019B25BF5D5E2CC5F34813229DD879FC9F8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft Manifest number: 170E Signing time: Tue 16 Dec 2025 06:00:56 +0000 Manifest this update: Tue 16 Dec 2025 06:00:56 +0000 Manifest next update: Wed 17 Dec 2025 06:00:56 +0000 Files and hashes: 1: 1VRLJKU_iS-J5hpp2gSlpHTKJrM.roa (hash: wMqFEiKVsvmfTXQPWnG9RRXDiwBKVCmwH1hZAvPWe5Y=) 2: A5Wt2Guvay0G_0H1Um00f3HutBA.crl (hash: ux5z4gRN1OEvY+TheFBLidaXfu4ubZy+wLPeS4a1quk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:5d:5e:2c:c5:f3:48:13:22:9d:d8:79:fc:9f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0395add86baf6b2d06ff41f5526d347f71eeb410 Validity Not Before: Dec 16 06:00:56 2025 GMT Not After : Dec 17 06:00:56 2025 GMT Subject: CN=cfe482802bb6ca611d753686433e37a9b60b492e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:11:75:8d:14:e9:95:28:9f:94:ec:0c:77:62: ab:4e:34:e4:62:a6:d5:3d:e9:c0:1d:2a:3d:0f:f7: 5e:3c:e1:c4:a8:78:d1:7e:f6:78:07:bf:97:32:a4: 74:44:1d:56:e4:79:0e:ff:0c:68:2b:67:17:ba:42: 13:dd:47:09:82:3e:3a:7c:e1:07:fe:30:a5:35:90: 53:73:60:58:c3:65:59:bb:fe:fe:e4:65:3c:1d:f6: ad:dd:60:35:3b:63:9e:8e:3b:85:61:d8:b3:5b:15: 34:1b:08:9b:62:63:8f:11:2e:b4:71:a7:86:c9:ac: 57:95:a3:9b:61:25:d3:d4:d9:73:d4:37:55:da:15: e2:c6:28:89:84:0b:27:59:43:7b:2d:87:19:12:bb: 77:4d:98:c8:52:27:aa:2c:76:ba:46:35:dc:f0:8d: 9e:3b:4d:e3:c4:45:4c:e6:cd:5b:a8:c7:8e:36:3b: 9e:a8:08:6f:46:69:af:ec:16:11:a3:6b:54:ac:da: 92:84:e7:fc:58:19:46:56:7f:b2:6a:39:80:d8:21: 68:fb:71:73:ed:be:6a:56:cd:b0:52:80:ec:66:a1: 66:6a:40:c1:58:09:4d:a7:ff:07:07:a9:02:98:79: 24:4f:f9:19:5d:61:8f:8d:c9:e8:ca:23:12:18:8a: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E4:82:80:2B:B6:CA:61:1D:75:36:86:43:3E:37:A9:B6:0B:49:2E X509v3 Authority Key Identifier: keyid:03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b2:ed:f8:71:10:b6:ba:5f:d2:23:56:ba:89:ae:c8:58:2b: ee:03:6c:85:9f:a6:00:b1:32:db:52:d6:0d:8a:48:04:8a:9a: b7:92:57:bc:f5:89:7a:28:07:a4:81:81:6d:c1:8f:3d:f9:44: 28:53:2b:9e:dd:b1:8a:41:e6:13:dc:3f:13:53:07:01:49:40: b2:24:9c:c4:da:f2:b4:1d:a9:d5:13:9b:c8:07:cc:92:a4:b9: e1:9b:ec:d6:43:2b:ff:07:8a:5c:27:ac:47:56:81:64:75:94: 53:c8:54:bb:ce:c6:5a:95:d8:14:f2:89:7e:98:63:24:7b:c7: 47:58:fe:ea:eb:0a:db:8b:02:10:04:ab:be:61:0a:66:5b:12: 90:5a:4a:93:a1:7d:f8:fe:30:23:f7:03:17:d5:27:e5:01:97: 3c:a1:fa:30:2e:b4:b2:3d:ca:21:05:0e:5c:bf:0a:51:19:0a: a3:ff:2d:2f:25:3c:e5:3f:1c:cb:4a:b0:d4:74:41:1e:d9:c8: 25:56:e8:5f:4e:2a:0c:6f:e4:4a:86:1d:39:c5:d7:38:79:90: ce:d3:3b:7f:86:96:ed:2a:05:ab:e5:d2:f6:ab:f0:fb:52:0d: 1a:1b:72:e4:83:18:b8:dc:f0:02:0d:63:4c:28:7c:14:55:f3: c9:c4:3e:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv11eLMXzSBMindh5/J+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOTVhZGQ4NmJhZjZiMmQwNmZmNDFmNTUyNmQzNDdmNzFl ZWI0MTAwHhcNMjUxMjE2MDYwMDU2WhcNMjUxMjE3MDYwMDU2WjAzMTEwLwYDVQQD EyhjZmU0ODI4MDJiYjZjYTYxMWQ3NTM2ODY0MzNlMzdhOWI2MGI0OTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBF1jRTplSiflOwMd2KrTjTkYqbV PenAHSo9D/dePOHEqHjRfvZ4B7+XMqR0RB1W5HkO/wxoK2cXukIT3UcJgj46fOEH /jClNZBTc2BYw2VZu/7+5GU8Hfat3WA1O2OejjuFYdizWxU0GwibYmOPES60caeG yaxXlaObYSXT1Nlz1DdV2hXixiiJhAsnWUN7LYcZErt3TZjIUieqLHa6RjXc8I2e O03jxEVM5s1bqMeONjueqAhvRmmv7BYRo2tUrNqShOf8WBlGVn+yajmA2CFo+3Fz 7b5qVs2wUoDsZqFmakDBWAlNp/8HB6kCmHkkT/kZXWGPjcnoyiMSGIrvzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/kgoArtsphHXU2hkM+N6m2C0kuMB8GA1UdIwQY MBaAFAOVrdhrr2stBv9B9VJtNH9x7rQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mZGIzOTgtM2ZiNS00YjZhLWEwMDMt Y2ZjNGE2NzZkNmUwLzEvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mZGIzOTgtM2ZiNS00YjZhLWEwMDMtY2ZjNGE2NzZkNmUw LzEvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbLt+HEQ trpf0iNWuomuyFgr7gNshZ+mALEy21LWDYpIBIqat5JXvPWJeigHpIGBbcGPPflE KFMrnt2xikHmE9w/E1MHAUlAsiScxNrytB2p1RObyAfMkqS54Zvs1kMr/weKXCes R1aBZHWUU8hUu87GWpXYFPKJfphjJHvHR1j+6usK24sCEASrvmEKZlsSkFpKk6F9 +P4wI/cDF9Un5QGXPKH6MC60sj3KIQUOXL8KURkKo/8tLyU85T8cy0qw1HRBHtnI JVboX04qDG/kSoYdOcXXOHmQztM7f4aW7SoFq+XS9qvw+1INGhty5IMYuNzwAg1j TCh8FFXzycQ+pg== -----END CERTIFICATE-----Generated at Tue Dec 16 15:27:12 2025 by rpki-client