This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft File: A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json) Hash identifier: yySlDExiPA9HygfyvWOmHh9uPn9efEdJ7Kh52tpAki8= Subject key identifier: 4A:FB:90:35:33:53:67:EB:E4:01:9E:0C:9F:0C:ED:E0:89:15:2D:BC Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61 Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861 Certificate serial: 019B258848EB6BC6C9B143553E51158DFC98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 05:00:46 +0000 Manifest this update: Tue 16 Dec 2025 05:00:46 +0000 Manifest next update: Wed 17 Dec 2025 05:00:46 +0000 Files and hashes: 1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: aVyT5Fg77EvOfazCZjlEjyordU7mOMLAruyKa/F14w8=) 2: Xw_JxFKBt0xay86EnT10Cffhb2o.roa (hash: CcdZeMl6Gy8SVuqOk3A/APDzafeJm+A13qmOxZHMPq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:48:eb:6b:c6:c9:b1:43:55:3e:51:15:8d:fc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861 Validity Not Before: Dec 16 05:00:46 2025 GMT Not After : Dec 17 05:00:46 2025 GMT Subject: CN=4afb9035335367ebe4019e0c9f0cede089152dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:b8:50:1c:e9:b3:e5:51:4a:48:ad:be:c0: 0b:23:11:c9:7a:71:76:06:70:3e:e8:bc:61:fa:a3: ab:11:92:a2:b6:0e:8e:ce:0b:70:3f:8a:26:ea:77: 42:16:5c:c9:dc:27:d9:da:8e:56:5c:99:73:c7:21: 42:0a:da:44:a3:2e:3f:91:69:8c:c5:6a:69:3d:52: 9b:71:44:4a:3f:69:75:e6:4a:6f:bb:36:06:97:67: a7:3e:e4:7f:22:c0:17:f1:98:19:62:14:f3:e4:4c: a2:ef:8a:ca:43:e3:79:a3:80:38:8f:e0:b6:d9:31: 5d:ab:f9:99:3e:a7:b9:ad:62:4a:ba:d5:cc:18:bc: fc:ae:a4:83:2e:77:b3:44:14:89:86:40:ac:37:69: 34:43:df:5c:7a:36:0a:bd:95:c1:ce:cc:ba:67:db: 7b:3e:70:08:92:e2:e1:72:24:ac:6a:d5:10:ec:9f: 02:0a:06:0e:db:0d:8b:7b:46:69:35:f8:f8:e0:4b: d2:d3:91:43:91:90:13:71:c6:af:b0:af:ae:9a:11: 7b:61:ce:9d:b5:48:c0:a9:73:7c:d7:8a:88:30:5c: 56:e6:4c:47:8e:d8:d2:45:a2:f0:81:5d:b3:f9:bf: 71:ec:b8:96:5e:ce:d1:ee:4c:54:0e:5f:86:ea:e8: 83:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FB:90:35:33:53:67:EB:E4:01:9E:0C:9F:0C:ED:E0:89:15:2D:BC X509v3 Authority Key Identifier: keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:f3:fd:c0:5f:f3:8a:91:fd:e1:8e:7a:85:37:42:74:7b:f6: da:6c:c8:81:84:28:90:83:85:ae:a0:ad:67:4f:dc:65:2a:09: c7:23:c1:83:59:e8:a5:80:9e:8e:f8:ab:31:3c:64:73:84:0f: 51:93:43:2d:bc:c2:85:12:b6:a7:1c:3a:5e:0e:77:92:72:4d: 11:3a:83:fe:59:8d:ee:9b:db:26:41:50:a9:bb:d8:fb:a9:6a: 7d:12:a9:27:d0:e8:5f:c2:8a:ed:d9:b8:5b:3c:34:ac:01:d4: 65:c1:d5:92:0a:31:50:7c:dd:05:a1:75:0a:2b:3c:76:ae:76: 20:2e:9a:19:d7:fe:79:af:ca:26:dd:66:53:dc:db:06:d5:1c: 93:21:98:c6:a2:65:b6:57:ce:d1:bf:23:a4:28:b0:e5:e3:b7: 11:06:1c:f9:b7:85:6f:45:88:f0:25:63:7e:ea:d5:6b:ab:fb: 4f:f8:09:ec:4b:58:aa:f1:62:74:d1:d7:ce:a3:5d:18:6f:a8: 12:c3:b3:86:26:9e:02:37:e6:ad:7c:cd:c6:17:cc:66:bd:c8: 41:02:91:43:fe:77:d6:71:80:0b:dc:14:de:ef:4a:bf:24:68: de:80:9a:7d:86:f6:e1:5b:da:7e:16:c2:21:32:2c:7c:38:c9: ae:00:6b:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliEjra8bJsUNVPlEVjfyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNmFhYzM0YzY2ZmRhNjRiNjdlYjk2YjAyZDgxOTc4OWZl YmU4NjEwHhcNMjUxMjE2MDUwMDQ2WhcNMjUxMjE3MDUwMDQ2WjAzMTEwLwYDVQQD Eyg0YWZiOTAzNTMzNTM2N2ViZTQwMTllMGM5ZjBjZWRlMDg5MTUyZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaG4UBzps+VRSkitvsALIxHJenF2 BnA+6Lxh+qOrEZKitg6OzgtwP4om6ndCFlzJ3CfZ2o5WXJlzxyFCCtpEoy4/kWmM xWppPVKbcURKP2l15kpvuzYGl2enPuR/IsAX8ZgZYhTz5Eyi74rKQ+N5o4A4j+C2 2TFdq/mZPqe5rWJKutXMGLz8rqSDLnezRBSJhkCsN2k0Q99cejYKvZXBzsy6Z9t7 PnAIkuLhciSsatUQ7J8CCgYO2w2Le0ZpNfj44EvS05FDkZATccavsK+umhF7Yc6d tUjAqXN814qIMFxW5kxHjtjSRaLwgV2z+b9x7LiWXs7R7kxUDl+G6uiD9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEr7kDUzU2fr5AGeDJ8M7eCJFS28MB8GA1UdIwQY MBaAFANqrDTGb9pktn65awLYGXif6+hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYt OTYzOTkzY2U1MTgxLzEvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYtOTYzOTkzY2U1MTgx LzEvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPP9wF/z ipH94Y56hTdCdHv22mzIgYQokIOFrqCtZ0/cZSoJxyPBg1nopYCejvirMTxkc4QP UZNDLbzChRK2pxw6Xg53knJNETqD/lmN7pvbJkFQqbvY+6lqfRKpJ9DoX8KK7dm4 Wzw0rAHUZcHVkgoxUHzdBaF1Cis8dq52IC6aGdf+ea/KJt1mU9zbBtUckyGYxqJl tlfO0b8jpCiw5eO3EQYc+beFb0WI8CVjfurVa6v7T/gJ7EtYqvFidNHXzqNdGG+o EsOzhiaeAjfmrXzNxhfMZr3IQQKRQ/531nGAC9wU3u9KvyRo3oCafYb24VvafhbC ITIsfDjJrgBrVw== -----END CERTIFICATE-----Generated at Tue Dec 16 07:19:40 2025 by rpki-client