This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft File: A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json) Hash identifier: blAKQWCkx5JHKX+8k1C0b/vnl+JEuoGmXiFnJf7vg/s= Subject key identifier: 60:52:9C:6A:9D:F6:CC:F7:68:9E:C3:88:13:06:7E:F4:F6:A4:F3:51 Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d Certificate serial: 019B353260C8AF8052202263D5F5B2182C7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft Manifest number: 14AE Signing time: Fri 19 Dec 2025 06:00:52 +0000 Manifest this update: Fri 19 Dec 2025 06:00:52 +0000 Manifest next update: Sat 20 Dec 2025 06:00:52 +0000 Files and hashes: 1: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: IaaPPbwjT6aqHeI+nkCJV0ZUZk3X9JFgL0gm/BQh//M=) 2: AB4qyh-GFm_4fCIscWpIBFj0Kek.roa (hash: eMCLNriDfdANy3mBQaEbKePj36AsyrGRMWbPR231aA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:60:c8:af:80:52:20:22:63:d5:f5:b2:18:2c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d Validity Not Before: Dec 19 06:00:52 2025 GMT Not After : Dec 20 06:00:52 2025 GMT Subject: CN=60529c6a9df6ccf7689ec38813067ef4f6a4f351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:53:b2:7f:bb:f3:60:37:88:f9:b5:07:4a: 7d:96:83:5a:7c:55:ae:cf:82:b5:a1:96:53:50:12: 04:13:86:4e:e5:80:1c:33:22:ce:16:00:8c:f5:68: ba:79:e0:93:d3:74:a7:b9:44:0b:37:d0:e4:aa:74: b0:20:08:3c:63:cc:23:12:69:2c:88:e4:e7:2f:98: 58:5b:d6:6e:33:9d:4f:7c:39:52:92:b6:bd:b0:76: 7c:55:64:94:72:02:89:c5:7d:e7:45:66:e7:3c:7f: 8b:f9:b3:46:38:4b:1d:0a:73:bf:16:4a:ac:2e:c5: c0:83:fe:ef:54:27:40:4f:18:f3:06:75:0a:14:e4: 37:17:85:f5:ef:3c:e9:b8:c0:3a:ff:5a:eb:35:28: 60:73:28:5f:76:84:1b:6f:87:a2:82:43:28:db:ea: 03:11:ba:75:78:f3:bd:d2:e7:65:d9:e2:32:53:6e: 43:2d:32:6e:9b:39:39:39:c6:ad:7c:81:51:ed:22: 2f:4a:3c:ee:2a:e9:8b:fd:f4:b6:65:e9:3a:8d:dd: ac:e8:31:d2:a1:4c:fd:03:08:8c:8b:c0:d8:9d:5b: 48:ed:bb:1f:6b:75:d4:71:44:98:5e:b8:4b:ec:ec: b7:09:59:03:d0:17:a7:38:27:41:44:e4:6b:ca:df: a3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:52:9C:6A:9D:F6:CC:F7:68:9E:C3:88:13:06:7E:F4:F6:A4:F3:51 X509v3 Authority Key Identifier: keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c5:14:81:09:f1:83:f1:e8:de:eb:25:e5:60:47:4c:23:b4: 13:02:9e:8b:96:41:e5:d8:57:82:1a:2e:b2:89:36:16:ec:3e: 32:aa:62:27:92:e4:23:4e:91:67:3e:f9:58:e5:f1:97:78:0a: 87:36:80:e7:1d:b1:e3:74:39:f6:18:01:98:e3:11:f9:35:ed: 39:d0:f6:a1:76:7e:81:4e:9d:db:a7:8c:9e:8d:36:49:76:c4: 98:6e:1c:b5:03:37:b8:f6:2c:cb:4b:59:a2:7a:b3:bc:c3:e5: 62:5d:9a:65:0f:2b:e0:1b:b0:0e:1c:10:40:24:9e:fd:b9:60: a0:e5:2c:21:a4:85:cb:8e:3e:d9:56:3b:41:0f:ab:f8:cd:d1: b2:b3:e9:b5:1b:5a:32:ac:90:52:1c:3f:2a:43:8b:1c:54:a5: 90:46:df:a5:dc:b1:da:11:66:da:36:67:88:08:76:59:59:77: eb:96:7d:52:08:8f:ee:87:9a:30:6b:c0:a8:02:12:15:df:3c: de:bf:e4:95:9a:83:53:02:f8:80:dc:1a:27:8a:f6:e3:cf:8c: 24:dd:22:3b:22:cc:40:ca:4d:9f:b1:fc:d9:54:46:1f:41:18: 89:50:27:84:64:52:ba:0e:89:33:42:a4:82:64:09:14:12:24: a8:62:f0:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MmDIr4BSICJj1fWyGCx6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzN2IzZGY2ZDc4Mzk5ZjAzMTgyODU1NmZjZDkwZWJmZGY0 ZDBkMmQwHhcNMjUxMjE5MDYwMDUyWhcNMjUxMjIwMDYwMDUyWjAzMTEwLwYDVQQD Eyg2MDUyOWM2YTlkZjZjY2Y3Njg5ZWMzODgxMzA2N2VmNGY2YTRmMzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9NTsn+782A3iPm1B0p9loNafFWu z4K1oZZTUBIEE4ZO5YAcMyLOFgCM9Wi6eeCT03SnuUQLN9DkqnSwIAg8Y8wjEmks iOTnL5hYW9ZuM51PfDlSkra9sHZ8VWSUcgKJxX3nRWbnPH+L+bNGOEsdCnO/Fkqs LsXAg/7vVCdATxjzBnUKFOQ3F4X17zzpuMA6/1rrNShgcyhfdoQbb4eigkMo2+oD Ebp1ePO90udl2eIyU25DLTJumzk5OcatfIFR7SIvSjzuKumL/fS2Zek6jd2s6DHS oUz9AwiMi8DYnVtI7bsfa3XUcUSYXrhL7Oy3CVkD0BenOCdBRORryt+jzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBSnGqd9sz3aJ7DiBMGfvT2pPNRMB8GA1UdIwQY MBaAFAN7PfbXg5nwMYKFVvzZDr/fTQ0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lMjJlZjgtNTBiNy00MDQ2LTkyMDgt YTQ3NWFlYmIwOGQ1LzEvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9lMjJlZjgtNTBiNy00MDQ2LTkyMDgtYTQ3NWFlYmIwOGQ1 LzEvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcUUgQnx g/Ho3usl5WBHTCO0EwKei5ZB5dhXghousok2Fuw+MqpiJ5LkI06RZz75WOXxl3gK hzaA5x2x43Q59hgBmOMR+TXtOdD2oXZ+gU6d26eMno02SXbEmG4ctQM3uPYsy0tZ onqzvMPlYl2aZQ8r4BuwDhwQQCSe/blgoOUsIaSFy44+2VY7QQ+r+M3RsrPptRta MqyQUhw/KkOLHFSlkEbfpdyx2hFm2jZniAh2WVl365Z9UgiP7oeaMGvAqAISFd88 3r/klZqDUwL4gNwaJ4r248+MJN0iOyLMQMpNn7H82VRGH0EYiVAnhGRSug6JM0Kk gmQJFBIkqGLwRw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:34:38 2025 by rpki-client