This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft File: A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json) Hash identifier: R4qYjR3kjvdBsWqdnFZ7lHc26kv7XSDTVBQB24MFnLE= Subject key identifier: 6D:43:F6:44:46:4A:6E:07:7A:D8:27:9F:E2:20:D0:B3:E2:B7:F5:C8 Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61 Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861 Certificate serial: 019B5ABF98A345BF46343FD14EEF040520CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 13:01:04 +0000 Manifest this update: Fri 26 Dec 2025 13:01:04 +0000 Manifest next update: Sat 27 Dec 2025 13:01:04 +0000 Files and hashes: 1: 8uFEs8KT2lHNTf9FsmJqqvY7o28.roa (hash: vboc19xwSNPRyM8I2dQ1/VWhvxJAqCUk+Ws21D+P2qM=) 2: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: zeeNEQ4s5R/GbJyPuZz0cN+vGhJovpGKzl5STo5HikQ=) 3: JaJTfkcMlPavkQgIWd6Q5PErN44.roa (hash: xdZi+om1DwYfwvuK4ikXRudvdwfTqYCO5L9ilWGS09U=) 4: jBMHF4ZncYY2dSJ5CHqMIPV8Ofc.roa (hash: 42cb4s8kzaDp+6oFZFM5NFuRsfHrfiqhUgjsGF12wb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:98:a3:45:bf:46:34:3f:d1:4e:ef:04:05:20:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861 Validity Not Before: Dec 26 13:01:04 2025 GMT Not After : Dec 27 13:01:04 2025 GMT Subject: CN=6d43f644464a6e077ad8279fe220d0b3e2b7f5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4e:ce:4e:03:87:e0:0d:b9:e6:ba:dc:f5:ca: 54:26:cd:4a:c1:15:09:71:c1:f9:42:de:a7:e9:b9: 80:cb:92:44:fa:87:50:59:1a:dc:70:8f:2c:b4:c7: c4:89:96:0e:74:b3:bd:5f:e7:17:fe:ce:95:b8:40: c7:b1:4d:73:a9:1a:f2:dc:a6:09:11:7a:6c:b0:b3: b6:59:cd:90:33:b8:e9:09:92:f0:c0:df:9a:50:63: 26:c1:97:e8:72:99:b3:9d:a7:75:61:34:6b:8b:26: db:46:66:ba:af:70:f1:62:8a:3c:e3:8c:92:5e:c4: ce:c6:4c:5d:2b:24:ae:65:d8:57:c4:f1:11:d5:d3: 44:1c:4c:fd:5b:d9:8e:ab:e9:27:2d:bd:cc:40:64: 42:9f:79:6f:9d:88:9b:16:b7:77:74:01:bd:17:ff: df:21:93:63:2a:ec:ee:f2:8b:d0:9b:88:07:b3:65: f5:9e:7b:4e:73:d1:2e:d4:38:f6:da:a3:2a:c3:cc: 87:a5:18:7c:46:b9:03:e4:be:9a:c4:d4:bf:6f:92: 40:8a:5d:35:e1:74:26:98:e4:4c:46:f6:e0:a4:8a: 6f:9b:d2:45:6b:f5:a1:ca:f4:52:50:9b:cd:f3:05: f0:e7:67:a4:3a:fe:42:51:9f:37:ff:3f:82:70:45: 1a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:43:F6:44:46:4A:6E:07:7A:D8:27:9F:E2:20:D0:B3:E2:B7:F5:C8 X509v3 Authority Key Identifier: keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:17:c8:c1:96:87:43:b1:43:2f:2c:9e:57:90:a2:85:d7:79: ab:51:64:48:7b:19:4c:69:29:3a:f3:36:89:5e:1f:68:20:fc: 96:74:9e:34:c0:72:44:f3:26:ee:32:ff:a3:60:e3:86:67:cb: 9b:a4:16:ca:2a:7a:94:4d:11:3a:4d:15:b4:70:0c:90:6a:a2: 93:58:cf:82:47:b1:f9:a8:21:96:bf:07:8a:2b:62:1c:e8:d3: a6:b5:e6:85:66:5e:1c:7f:c3:ff:f9:5f:84:96:29:40:e9:25: 63:94:2d:4b:97:64:09:b0:ec:66:6c:70:67:62:db:6e:d9:5f: 25:c1:de:43:26:b4:03:93:c7:95:46:b6:65:40:44:f5:b6:65: c1:17:6e:a7:c2:8d:ff:e6:4b:fc:7e:f2:21:a3:dd:ee:e9:35: 0d:44:0b:78:b6:cc:87:2a:ba:45:e2:67:59:91:e8:bf:77:ed: 0e:ef:68:ef:8e:36:44:a2:93:a5:95:dd:f2:90:b0:ad:a3:7a: d3:2d:23:85:81:4c:f2:47:5c:e1:5c:f0:fe:8d:4b:ab:cb:90: c0:38:c8:2e:9c:47:5a:a9:5c:1f:60:be:84:6c:c4:8d:bd:03: ba:96:f7:41:22:eb:37:f2:20:41:41:c2:d0:02:66:72:85:e9: 23:33:db:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav5ijRb9GND/RTu8EBSDMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZjNmODI1OWIzMGVjMDM3MjJmOTQyMDM1YTk0ZTIwOWY4 ODI4NjEwHhcNMjUxMjI2MTMwMTA0WhcNMjUxMjI3MTMwMTA0WjAzMTEwLwYDVQQD Eyg2ZDQzZjY0NDQ2NGE2ZTA3N2FkODI3OWZlMjIwZDBiM2UyYjdmNWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA007OTgOH4A255rrc9cpUJs1KwRUJ ccH5Qt6n6bmAy5JE+odQWRrccI8stMfEiZYOdLO9X+cX/s6VuEDHsU1zqRry3KYJ EXpssLO2Wc2QM7jpCZLwwN+aUGMmwZfocpmznad1YTRriybbRma6r3DxYoo844yS XsTOxkxdKySuZdhXxPER1dNEHEz9W9mOq+knLb3MQGRCn3lvnYibFrd3dAG9F//f IZNjKuzu8ovQm4gHs2X1nntOc9Eu1Dj22qMqw8yHpRh8RrkD5L6axNS/b5JAil01 4XQmmORMRvbgpIpvm9JFa/WhyvRSUJvN8wXw52ekOv5CUZ83/z+CcEUavQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1D9kRGSm4Hetgnn+Ig0LPit/XIMB8GA1UdIwQY MBaAFAPz+CWbMOwDci+UIDWpTiCfiChhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNDU4MmUtMWE0ZC00ZDRhLWE1ZjQt YWIxMzM1NmU1ZmVjLzEvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hNDU4MmUtMWE0ZC00ZDRhLWE1ZjQtYWIxMzM1NmU1ZmVj LzEvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhfIwZaH Q7FDLyyeV5Cihdd5q1FkSHsZTGkpOvM2iV4faCD8lnSeNMByRPMm7jL/o2DjhmfL m6QWyip6lE0ROk0VtHAMkGqik1jPgkex+aghlr8HiitiHOjTprXmhWZeHH/D//lf hJYpQOklY5QtS5dkCbDsZmxwZ2LbbtlfJcHeQya0A5PHlUa2ZUBE9bZlwRdup8KN /+ZL/H7yIaPd7uk1DUQLeLbMhyq6ReJnWZHov3ftDu9o7442RKKTpZXd8pCwraN6 0y0jhYFM8kdc4Vzw/o1Lq8uQwDjILpxHWqlcH2C+hGzEjb0Dupb3QSLrN/IgQUHC 0AJmcoXpIzPbuw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:39 2025 by rpki-client