This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft File: A3hitGCMefRQKV7FyAx8etbf4qI.mft (raw, json) Hash identifier: cWgmAc0jztH/SQkMYdD71WelKKh03wZKXDYQb+qPJZo= Subject key identifier: 87:B3:10:09:43:CB:82:93:F8:1F:F5:D4:81:58:7E:1B:28:D6:24:5D Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2 Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2 Certificate serial: 019B1193958066B73B0A4061B61D599F66CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft Manifest number: 1282 Signing time: Fri 12 Dec 2025 08:00:43 +0000 Manifest this update: Fri 12 Dec 2025 08:00:43 +0000 Manifest next update: Sat 13 Dec 2025 08:00:43 +0000 Files and hashes: 1: A3hitGCMefRQKV7FyAx8etbf4qI.crl (hash: fQQUc6rGsUUQd69aSWH+nYS/VeWgVQBDCRhOax9FUCU=) 2: H1OMOC2BAR_5642Cu7ZwMViudi8.roa (hash: XWP0BQbCva9Xp/f//R3LpuOJ9bWFeCg7RqrDman+FAE=) 3: _KO8Oi7vtPgAowOISHE5epxFK5Q.roa (hash: 8164lOA7eSdWjoo8q/K2tQc7tm9W3hWFjEkyCggGOH4=) 4: pg2Uo1mGaRZ4g8oAbIXuXT68ouw.roa (hash: dY7d7wlBY9scutfRZI+Jc0/ht66poZjZN1QodpAABEg=) 5: rS4RgydKxGdwOWf1j4StfouO-tE.roa (hash: sFUBBhbDyvVoCqaYLXicDjVpE7stEZC/MmSdQhndwec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:93:95:80:66:b7:3b:0a:40:61:b6:1d:59:9f:66:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2 Validity Not Before: Dec 12 08:00:43 2025 GMT Not After : Dec 13 08:00:43 2025 GMT Subject: CN=87b3100943cb8293f81ff5d481587e1b28d6245d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:24:8b:44:5a:f5:ff:a5:5a:e2:72:af:3a:d2: 4b:0a:4e:9e:63:69:b7:4c:14:56:1a:ba:8b:40:f1: 7b:c9:e2:9a:05:9a:f8:cb:4f:9d:db:b2:21:ef:31: bc:38:e8:4a:7f:3c:4f:2b:cb:1a:26:3b:f9:49:8b: c8:87:f0:90:c9:c7:f1:39:8a:e0:8c:0f:8b:cd:db: ce:b9:79:a5:52:d8:07:bc:62:8b:a4:7b:9f:82:ec: bb:4a:d6:84:b6:dd:8e:d4:e1:65:7a:ef:1b:3d:e8: 2f:55:3e:64:bf:84:85:b9:07:b8:cd:d2:24:45:b3: 74:68:37:a6:f3:37:dc:89:7b:02:c7:8a:4e:53:b2: da:8d:1d:56:53:03:1a:dd:a5:3a:d0:a8:27:ad:29: 4f:46:31:2a:7e:ea:68:e4:c2:7e:6f:b4:05:36:c5: 5f:77:fe:ea:1b:f7:6f:2b:02:ed:6f:cd:f3:93:01: 8f:2b:bb:5a:96:6e:86:79:56:33:62:96:7a:91:9c: 9c:07:97:35:b8:4c:09:bc:11:67:a1:b6:64:ff:3e: 06:e4:c4:fa:93:0c:6c:43:0a:59:06:4c:12:0c:9d: b8:e1:2c:9a:23:51:2a:87:7e:fa:8a:c3:6f:15:61: bb:7d:7f:8c:1d:b2:3b:c8:a2:8a:31:e6:7d:de:98: 6c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B3:10:09:43:CB:82:93:F8:1F:F5:D4:81:58:7E:1B:28:D6:24:5D X509v3 Authority Key Identifier: keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:33:24:55:ff:60:14:ac:ef:fd:7f:f1:30:21:be:54:dd:ab: 70:ae:81:12:8a:21:d6:c9:4a:ab:eb:ed:c4:ef:5e:36:e8:6b: 48:ea:8d:c0:81:e7:6b:a9:71:0d:60:32:36:a1:f1:6b:6d:de: 64:43:db:82:6a:52:9e:b5:5b:2f:de:69:2a:90:09:e8:a3:c8: a5:f4:95:38:87:44:eb:3f:00:6b:3b:d0:f8:d1:c6:12:bc:66: 03:95:bf:11:c0:47:73:eb:18:66:a2:c9:68:0d:3e:68:58:6c: ce:47:24:72:cd:aa:42:89:2b:b8:f4:91:71:da:dc:85:19:c6: c7:4b:e1:82:9c:8b:f8:4d:f0:f0:42:ab:07:9d:85:a8:fd:97: 2e:42:96:40:43:e0:45:c1:5e:17:56:3c:4a:30:82:79:c8:21: bc:79:0c:ee:d2:b9:e9:73:81:65:ba:49:f6:f0:19:3e:db:de: db:74:f0:db:06:1d:db:b7:df:dc:e9:9a:bd:93:ab:f7:a9:a3: 40:0e:2e:b9:10:28:49:b5:d3:9f:aa:a1:0e:35:7b:5b:cd:f2: e7:cb:71:f9:45:42:87:0c:ae:df:49:5b:56:36:99:01:5f:55: 06:35:da:1b:f0:fb:5d:8f:7e:f9:75:0e:91:c9:75:63:e1:1e: 8e:34:c6:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRk5WAZrc7CkBhth1Zn2bMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNzg2MmI0NjA4Yzc5ZjQ1MDI5NWVjNWM4MGM3YzdhZDZk ZmUyYTIwHhcNMjUxMjEyMDgwMDQzWhcNMjUxMjEzMDgwMDQzWjAzMTEwLwYDVQQD Eyg4N2IzMTAwOTQzY2I4MjkzZjgxZmY1ZDQ4MTU4N2UxYjI4ZDYyNDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxySLRFr1/6Va4nKvOtJLCk6eY2m3 TBRWGrqLQPF7yeKaBZr4y0+d27Ih7zG8OOhKfzxPK8saJjv5SYvIh/CQycfxOYrg jA+LzdvOuXmlUtgHvGKLpHufguy7StaEtt2O1OFleu8bPegvVT5kv4SFuQe4zdIk RbN0aDem8zfciXsCx4pOU7LajR1WUwMa3aU60KgnrSlPRjEqfupo5MJ+b7QFNsVf d/7qG/dvKwLtb83zkwGPK7talm6GeVYzYpZ6kZycB5c1uEwJvBFnobZk/z4G5MT6 kwxsQwpZBkwSDJ244SyaI1Eqh376isNvFWG7fX+MHbI7yKKKMeZ93phsjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIezEAlDy4KT+B/11IFYfhso1iRdMB8GA1UdIwQY MBaAFAN4YrRgjHn0UClexcgMfHrW3+KiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMt ZjQ3NGY3YmQzNTMxLzEvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMtZjQ3NGY3YmQzNTMx LzEvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjMkVf9g FKzv/X/xMCG+VN2rcK6BEooh1slKq+vtxO9eNuhrSOqNwIHna6lxDWAyNqHxa23e ZEPbgmpSnrVbL95pKpAJ6KPIpfSVOIdE6z8AazvQ+NHGErxmA5W/EcBHc+sYZqLJ aA0+aFhszkckcs2qQokruPSRcdrchRnGx0vhgpyL+E3w8EKrB52FqP2XLkKWQEPg RcFeF1Y8SjCCecghvHkM7tK56XOBZbpJ9vAZPtve23Tw2wYd27ff3OmavZOr96mj QA4uuRAoSbXTn6qhDjV7W83y58tx+UVChwyu30lbVjaZAV9VBjXaG/D7XY9++XUO kcl1Y+EejjTGLg== -----END CERTIFICATE-----Generated at Fri Dec 12 12:59:18 2025 by rpki-client