This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft File: A7sK13ZWE5U7krbL9M2pP5wTcuY.mft (raw, json) Hash identifier: oUBOY6ruwDrwA9ra0T3aJtngulcODrdnIs2SAs8CvVo= Subject key identifier: 34:12:7E:73:52:C6:1E:6D:EC:26:B3:85:B9:81:A7:00:69:BA:64:85 Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6 Certificate issuer: /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6 Certificate serial: 019B3833A16DBC7D2A4CACA940F9C0A47BFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft Manifest number: 0409 Signing time: Fri 19 Dec 2025 20:01:06 +0000 Manifest this update: Fri 19 Dec 2025 20:01:06 +0000 Manifest next update: Sat 20 Dec 2025 20:01:06 +0000 Files and hashes: 1: A7sK13ZWE5U7krbL9M2pP5wTcuY.crl (hash: hnSuiOJrAxhGw13SVAhkdQ2p4owRQTWkMGlITemrUao=) 2: E09vqP6Dhzwi3swUd7vdKQdAZ-E.roa (hash: MzWcZL4YZkWICabmNLBtwrsQlq2zb5xWQgY5PAU+5oM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:a1:6d:bc:7d:2a:4c:ac:a9:40:f9:c0:a4:7b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6 Validity Not Before: Dec 19 20:01:06 2025 GMT Not After : Dec 20 20:01:06 2025 GMT Subject: CN=34127e7352c61e6dec26b385b981a70069ba6485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7d:af:2c:b2:6e:e1:49:31:21:45:5f:10:12: 2b:fa:c0:3d:05:b0:27:91:9e:0b:1a:0f:45:a8:d9: 45:50:ab:e2:c3:5d:55:cd:79:ad:da:b2:12:41:92: 25:25:25:8c:08:0e:91:e3:ba:66:21:77:09:5a:ab: 1a:9a:15:bb:e6:aa:e4:6b:cc:4e:fa:b5:8c:99:c8: c1:dc:3b:42:40:82:2a:ae:9c:ce:69:1a:d4:8f:86: 2b:1e:c9:a3:be:ba:5a:fd:59:51:71:19:d1:eb:65: 7a:78:f1:86:e4:63:9e:00:a2:90:74:73:2b:0c:32: 9c:de:1f:57:03:c4:4c:3f:4d:8b:d9:11:b2:52:b3: ec:da:a9:02:17:b3:90:b6:95:9c:07:dc:f5:50:a8: 15:0c:52:13:35:9c:0f:e6:f8:70:f7:66:4a:d0:58: 2f:e8:8b:ce:56:6e:ec:d6:df:f5:a2:d7:19:6b:b7: 2e:83:68:23:5b:30:ef:51:fb:09:66:65:d4:bc:74: 64:06:69:16:5c:79:93:fe:66:bf:d4:5c:c8:6f:95: b2:a8:4e:da:ad:c8:e3:fd:27:30:ff:d5:93:67:63: 09:14:4d:1d:52:3f:e4:64:aa:53:dd:06:1a:98:54: b0:29:45:6a:cc:7d:ee:7c:07:63:7c:a9:c3:7e:0e: f6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:12:7E:73:52:C6:1E:6D:EC:26:B3:85:B9:81:A7:00:69:BA:64:85 X509v3 Authority Key Identifier: keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:23:da:62:de:6c:44:ac:8d:c7:c8:6e:4d:f8:32:9c:9e:0b: 3c:7c:c7:6b:f4:3a:57:df:fc:9f:aa:0a:c9:e1:ab:20:19:80: e8:26:19:d9:af:1a:8c:34:6c:f5:6d:99:95:25:90:22:f8:c8: e4:a0:17:70:20:3b:54:2f:69:a9:98:26:12:85:24:32:a6:7d: ef:6b:fb:aa:19:14:7c:21:15:5a:e9:07:70:ce:73:78:23:6e: ee:c0:99:84:8e:ba:56:37:10:10:50:91:af:d0:73:56:29:dd: b7:fb:0f:f0:89:8b:69:5c:62:30:ae:ab:dc:bc:07:c7:fe:16: f8:3d:28:f7:7f:d8:a9:18:f4:bf:16:3c:51:c6:13:d0:67:2c: 06:5d:c2:9b:69:1f:4f:77:29:c0:29:89:32:e2:d6:c7:71:6c: 9c:55:89:94:25:23:24:e8:df:83:33:4d:ba:80:69:99:18:26: 86:bb:3d:63:78:c0:21:cb:86:8c:7c:d2:06:e9:e1:55:70:f9: cb:83:e2:4a:48:20:c8:22:3c:fb:af:42:05:ef:cd:9d:b6:ce: 12:a1:b0:ce:64:d2:8b:e5:b7:6d:0a:4e:9a:bd:c9:3a:80:93: e9:ca:ba:28:4a:79:03:7d:ac:64:57:df:2c:b0:dd:a8:2f:77: 51:10:78:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M6FtvH0qTKypQPnApHv7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYmIwYWQ3NzY1NjEzOTUzYjkyYjZjYmY0Y2RhOTNmOWMx MzcyZTYwHhcNMjUxMjE5MjAwMTA2WhcNMjUxMjIwMjAwMTA2WjAzMTEwLwYDVQQD EygzNDEyN2U3MzUyYzYxZTZkZWMyNmIzODViOTgxYTcwMDY5YmE2NDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo32vLLJu4UkxIUVfEBIr+sA9BbAn kZ4LGg9FqNlFUKviw11VzXmt2rISQZIlJSWMCA6R47pmIXcJWqsamhW75qrka8xO +rWMmcjB3DtCQIIqrpzOaRrUj4YrHsmjvrpa/VlRcRnR62V6ePGG5GOeAKKQdHMr DDKc3h9XA8RMP02L2RGyUrPs2qkCF7OQtpWcB9z1UKgVDFITNZwP5vhw92ZK0Fgv 6IvOVm7s1t/1otcZa7cug2gjWzDvUfsJZmXUvHRkBmkWXHmT/ma/1FzIb5WyqE7a rcjj/Scw/9WTZ2MJFE0dUj/kZKpT3QYamFSwKUVqzH3ufAdjfKnDfg729QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQSfnNSxh5t7CazhbmBpwBpumSFMB8GA1UdIwQY MBaAFAO7Ctd2VhOVO5K2y/TNqT+cE3LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTIt ZDc1ODI1ODliYjU5LzEvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTItZDc1ODI1ODliYjU5 LzEvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSPaYt5s RKyNx8huTfgynJ4LPHzHa/Q6V9/8n6oKyeGrIBmA6CYZ2a8ajDRs9W2ZlSWQIvjI 5KAXcCA7VC9pqZgmEoUkMqZ972v7qhkUfCEVWukHcM5zeCNu7sCZhI66VjcQEFCR r9BzVindt/sP8ImLaVxiMK6r3LwHx/4W+D0o93/YqRj0vxY8UcYT0GcsBl3Cm2kf T3cpwCmJMuLWx3FsnFWJlCUjJOjfgzNNuoBpmRgmhrs9Y3jAIcuGjHzSBunhVXD5 y4PiSkggyCI8+69CBe/NnbbOEqGwzmTSi+W3bQpOmr3JOoCT6cq6KEp5A32sZFff LLDdqC93URB4Zg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:07:30 2025 by rpki-client