This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/015bf9-1c22-4d8c-95f4-5fac460f1232/1/A00SbhXqcZD0LjHGksORHg6f-T0.mft File: A00SbhXqcZD0LjHGksORHg6f-T0.mft (raw, json) Hash identifier: eTrc5YzQmqPLIQJUrcvHUcF8SCxNbENteDraKQeUuEw= Subject key identifier: 31:5E:EE:31:14:C0:00:F1:84:4A:1E:A6:67:DE:39:26:E9:7B:FB:42 Authority key identifier: 03:4D:12:6E:15:EA:71:90:F4:2E:31:C6:92:C3:91:1E:0E:9F:F9:3D Certificate issuer: /CN=034d126e15ea7190f42e31c692c3911e0e9ff93d Certificate serial: 019B59778BD1388221AE0287EB07A8939D24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A00SbhXqcZD0LjHGksORHg6f-T0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/015bf9-1c22-4d8c-95f4-5fac460f1232/1/A00SbhXqcZD0LjHGksORHg6f-T0.mft Manifest number: 1B Signing time: Fri 26 Dec 2025 07:02:45 +0000 Manifest this update: Fri 26 Dec 2025 07:02:45 +0000 Manifest next update: Sat 27 Dec 2025 07:02:45 +0000 Files and hashes: 1: A00SbhXqcZD0LjHGksORHg6f-T0.crl (hash: XnIn7EX6VgQdlXIluECIzyXoChtjIuAsklBJAiu7Fec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/015bf9-1c22-4d8c-95f4-5fac460f1232/1/A00SbhXqcZD0LjHGksORHg6f-T0.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/015bf9-1c22-4d8c-95f4-5fac460f1232/1/A00SbhXqcZD0LjHGksORHg6f-T0.mft rsync://rpki.ripe.net/repository/DEFAULT/A00SbhXqcZD0LjHGksORHg6f-T0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:8b:d1:38:82:21:ae:02:87:eb:07:a8:93:9d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034d126e15ea7190f42e31c692c3911e0e9ff93d Validity Not Before: Dec 26 07:02:45 2025 GMT Not After : Dec 27 07:02:45 2025 GMT Subject: CN=315eee3114c000f1844a1ea667de3926e97bfb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c7:50:e6:c3:81:88:89:01:61:b5:75:a6:75: 63:7b:28:52:97:c4:1b:f6:f0:03:5c:b2:f6:f3:1e: b1:a1:a9:d5:6b:e0:54:4b:f1:6b:3c:5f:8e:94:57: 85:e2:78:be:b1:cd:b2:cd:b4:60:d3:82:7b:4e:3c: fd:4a:e5:34:90:a9:54:f8:56:7f:86:3c:5a:46:91: 67:f5:5e:f9:1b:b7:8a:1f:40:b5:50:a7:42:4f:62: 56:df:39:de:b6:63:11:4b:6a:4d:5d:e7:5c:4d:d8: fa:ba:fa:47:0d:0a:bd:77:2a:36:cc:40:d0:ac:df: 7e:ad:6d:ad:03:37:a3:0d:e7:b7:fb:5c:6c:5c:4e: 9f:9a:26:f3:d5:51:36:2e:5a:63:25:cb:48:62:39: 83:d5:82:b8:06:54:86:6e:1f:6c:8c:97:8f:ec:81: 78:62:d2:98:69:0f:bc:ee:5b:9a:c8:85:04:1b:a6: 7c:20:64:85:b7:bb:a9:79:54:a7:ec:2f:0f:b0:43: 0b:85:36:af:f9:85:f8:31:fb:d4:89:73:35:93:ad: 1a:e2:71:6b:6c:90:3d:09:fe:09:41:f2:da:b4:21: 9e:02:19:e1:19:2f:87:6d:53:5b:a0:ee:d7:2f:ff: ae:7a:aa:d8:34:83:ce:01:16:36:72:71:73:9e:3d: d6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5E:EE:31:14:C0:00:F1:84:4A:1E:A6:67:DE:39:26:E9:7B:FB:42 X509v3 Authority Key Identifier: keyid:03:4D:12:6E:15:EA:71:90:F4:2E:31:C6:92:C3:91:1E:0E:9F:F9:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A00SbhXqcZD0LjHGksORHg6f-T0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/015bf9-1c22-4d8c-95f4-5fac460f1232/1/A00SbhXqcZD0LjHGksORHg6f-T0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/015bf9-1c22-4d8c-95f4-5fac460f1232/1/A00SbhXqcZD0LjHGksORHg6f-T0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:95:39:ea:e7:bb:41:ff:81:88:fc:58:05:92:27:b4:0f:03: c5:ce:6e:59:f5:93:5b:ba:1f:41:0a:35:3d:36:3e:23:1f:0f: 73:a0:1a:97:25:11:dc:7f:70:ea:a1:87:79:77:b9:86:46:2c: 4d:18:31:45:fd:2c:64:e5:a6:a0:01:d4:e2:4b:81:fb:86:c7: 51:11:5c:65:87:af:7b:17:e8:de:aa:a6:c3:ad:1e:90:b3:9d: c7:3b:85:85:7e:2c:da:1f:5a:38:9c:da:13:ed:4e:f6:fd:82: c6:40:40:08:47:49:2c:d7:10:e6:af:8d:e6:ed:4e:24:bf:69: 09:e9:43:c5:96:76:03:17:c8:92:13:79:ce:11:86:4a:1e:5b: 47:fa:62:66:57:be:9f:a9:dd:65:37:ba:01:a2:cf:38:bc:4c: ff:58:5e:18:ee:4a:d5:c8:c5:1b:8b:3f:74:90:63:b4:a4:13: 1d:f6:de:e2:73:6b:65:5f:0b:11:84:b4:33:91:b9:bc:cf:f0: e1:96:b5:da:07:e7:19:50:02:9b:21:a5:3e:4f:46:f9:34:bf: 1b:92:fa:3a:37:05:99:66:e7:02:4f:6d:db:4a:ea:e5:e2:a3: 33:2d:2c:97:0d:f8:a8:0d:d2:cc:8f:35:18:8c:53:77:e2:3a: c7:fe:51:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd4vROIIhrgKH6weok50kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNGQxMjZlMTVlYTcxOTBmNDJlMzFjNjkyYzM5MTFlMGU5 ZmY5M2QwHhcNMjUxMjI2MDcwMjQ1WhcNMjUxMjI3MDcwMjQ1WjAzMTEwLwYDVQQD EygzMTVlZWUzMTE0YzAwMGYxODQ0YTFlYTY2N2RlMzkyNmU5N2JmYjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8dQ5sOBiIkBYbV1pnVjeyhSl8Qb 9vADXLL28x6xoanVa+BUS/FrPF+OlFeF4ni+sc2yzbRg04J7Tjz9SuU0kKlU+FZ/ hjxaRpFn9V75G7eKH0C1UKdCT2JW3znetmMRS2pNXedcTdj6uvpHDQq9dyo2zEDQ rN9+rW2tAzejDee3+1xsXE6fmibz1VE2LlpjJctIYjmD1YK4BlSGbh9sjJeP7IF4 YtKYaQ+87luayIUEG6Z8IGSFt7upeVSn7C8PsEMLhTav+YX4MfvUiXM1k60a4nFr bJA9Cf4JQfLatCGeAhnhGS+HbVNboO7XL/+ueqrYNIPOARY2cnFznj3W9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFe7jEUwADxhEoepmfeOSbpe/tCMB8GA1UdIwQY MBaAFANNEm4V6nGQ9C4xxpLDkR4On/k9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTAwU2JoWHFjWkQwTGpIR2tzT1JIZzZmLVQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wMTViZjktMWMyMi00ZDhjLTk1ZjQt NWZhYzQ2MGYxMjMyLzEvQTAwU2JoWHFjWkQwTGpIR2tzT1JIZzZmLVQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8wMTViZjktMWMyMi00ZDhjLTk1ZjQtNWZhYzQ2MGYxMjMy LzEvQTAwU2JoWHFjWkQwTGpIR2tzT1JIZzZmLVQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpU56ue7 Qf+BiPxYBZIntA8Dxc5uWfWTW7ofQQo1PTY+Ix8Pc6AalyUR3H9w6qGHeXe5hkYs TRgxRf0sZOWmoAHU4kuB+4bHURFcZYevexfo3qqmw60ekLOdxzuFhX4s2h9aOJza E+1O9v2CxkBACEdJLNcQ5q+N5u1OJL9pCelDxZZ2AxfIkhN5zhGGSh5bR/piZle+ n6ndZTe6AaLPOLxM/1heGO5K1cjFG4s/dJBjtKQTHfbe4nNrZV8LEYS0M5G5vM/w 4Za12gfnGVACmyGlPk9G+TS/G5L6OjcFmWbnAk9t20rq5eKjMy0slw34qA3SzI81 GIxTd+I6x/5Rkg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:37 2025 by rpki-client