This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft File: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft (raw, json) Hash identifier: GCE7RZoa8wI1V70z7xW3mKhOseKRrPE+QIFqYUoQQDs= Subject key identifier: BE:BA:86:97:41:6F:26:8E:16:C8:24:69:5F:E2:D0:63:FD:4D:39:05 Authority key identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96 Certificate issuer: /CN=6b57c5dff70ebfe67a400d55f259db2c37192196 Certificate serial: 019AFCC33A9C69FBC7BF63B8385285F021DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft Manifest number: 0527 Signing time: Mon 08 Dec 2025 07:00:44 +0000 Manifest this update: Mon 08 Dec 2025 07:00:44 +0000 Manifest next update: Tue 09 Dec 2025 07:00:44 +0000 Files and hashes: 1: DXY1aPZOR4ljjfKNnTzK-ui2GtQ.roa (hash: HmRJXl6KdbWQ5yFSi3ORZiwzeQcQdEBbSpqG5+7FJoc=) 2: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl (hash: +fsiilcE+myYL6ZCv36MiMm2p+fV5lyNJYA8hhkLdE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:3a:9c:69:fb:c7:bf:63:b8:38:52:85:f0:21:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b57c5dff70ebfe67a400d55f259db2c37192196 Validity Not Before: Dec 8 07:00:44 2025 GMT Not After : Dec 9 07:00:44 2025 GMT Subject: CN=beba8697416f268e16c824695fe2d063fd4d3905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:dc:e6:21:bc:51:ed:91:2f:f6:94:a3:99: 47:67:65:79:27:7c:6f:67:04:b9:a5:78:ee:d3:a8: 63:91:ca:5b:73:5d:b8:bc:53:c7:fc:36:6c:9c:b9: f3:83:cc:36:a2:06:d6:09:22:b1:62:90:bf:7c:a7: e6:a2:ce:21:5d:f3:45:46:9e:02:ae:b1:11:03:8e: 2a:b8:03:ae:cf:35:0d:6b:b1:7a:c0:a5:7d:3d:1f: 08:fb:35:66:f3:99:3d:d4:53:10:7d:c2:8f:fa:12: fe:ac:ee:a7:33:35:5d:ad:a5:95:de:fd:a9:43:cf: 04:e3:3e:63:67:0c:43:cb:ea:81:e3:d0:cd:8b:b7: 9d:91:34:20:38:21:1c:46:4e:a8:83:ef:7d:ec:05: 07:58:7b:9e:1b:68:04:24:1c:13:86:a8:f9:82:54: 26:ce:d1:ad:6b:c2:8a:a9:e8:68:ed:4f:18:72:d7: 7b:5f:46:99:c4:78:a8:a8:db:38:8e:63:5e:60:7c: ed:90:1d:3a:1b:00:bb:eb:c2:60:93:28:57:16:81: ee:08:d2:8b:51:7e:46:e1:36:a4:8a:0c:c7:1b:f6: 4f:51:d9:94:9d:a0:4d:9a:15:80:ef:68:2d:49:1f: e4:52:ab:b7:84:46:39:76:47:48:72:51:3d:0f:89: 18:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BA:86:97:41:6F:26:8E:16:C8:24:69:5F:E2:D0:63:FD:4D:39:05 X509v3 Authority Key Identifier: keyid:6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fe:3d:71:0e:fd:88:a6:8d:ba:ca:31:69:4a:25:63:da:8d: a2:81:04:4a:c8:2d:94:36:bf:23:9c:87:5e:6a:eb:bc:ef:f0: 2e:8e:40:f7:d3:d5:c7:02:d6:6c:39:b6:a6:01:80:c3:00:10: 0c:3b:47:ff:e0:a0:94:3a:b8:0c:0b:92:a3:c1:62:24:0d:af: e0:b0:a1:a3:85:ce:8f:44:79:ad:c5:14:1b:43:6b:13:1f:c2: 49:e9:03:5c:1b:c9:0d:50:b6:24:34:e2:0f:c2:29:9a:48:67: 1c:4e:b9:66:09:30:64:ae:82:b6:9c:b7:99:41:99:d7:5f:90: d7:0d:97:3e:92:b1:61:5a:c3:24:07:dd:3d:5d:3a:fb:03:53: e4:e2:ea:17:b9:5a:62:a2:ad:7c:69:47:7a:3c:2c:89:c0:69: 95:a3:35:04:09:1a:76:57:75:04:d8:c6:cc:7d:53:2f:b9:e5: fd:a9:15:77:2e:65:c3:15:c7:35:6d:10:20:2c:a2:25:a5:23: 84:c6:ae:33:a2:ef:33:64:3e:6e:59:c2:58:b6:dd:26:2d:ac: 2b:0b:cc:d4:c6:fb:b0:f9:99:d2:b5:fa:59:1c:18:fe:55:86: 6e:0a:46:aa:45:72:ea:93:7f:88:f9:a5:1e:08:89:15:52:c8: 2c:7e:ba:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8wzqcafvHv2O4OFKF8CHaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNTdjNWRmZjcwZWJmZTY3YTQwMGQ1NWYyNTlkYjJjMzcx OTIxOTYwHhcNMjUxMjA4MDcwMDQ0WhcNMjUxMjA5MDcwMDQ0WjAzMTEwLwYDVQQD EyhiZWJhODY5NzQxNmYyNjhlMTZjODI0Njk1ZmUyZDA2M2ZkNGQzOTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Hc5iG8Ue2RL/aUo5lHZ2V5J3xv ZwS5pXju06hjkcpbc124vFPH/DZsnLnzg8w2ogbWCSKxYpC/fKfmos4hXfNFRp4C rrERA44quAOuzzUNa7F6wKV9PR8I+zVm85k91FMQfcKP+hL+rO6nMzVdraWV3v2p Q88E4z5jZwxDy+qB49DNi7edkTQgOCEcRk6og+997AUHWHueG2gEJBwThqj5glQm ztGta8KKqeho7U8Yctd7X0aZxHioqNs4jmNeYHztkB06GwC768JgkyhXFoHuCNKL UX5G4TakigzHG/ZPUdmUnaBNmhWA72gtSR/kUqu3hEY5dkdIclE9D4kY3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL66hpdBbyaOFsgkaV/i0GP9TTkFMB8GA1UdIwQY MBaAFGtXxd/3Dr/mekANVfJZ2yw3GSGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFmRjNfY092LVo2UUExVjhsbmJMRGNaSVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82YWU1OGMtNzYxOC00MWJhLWEzNDMt YzQ2ZDdiYWMwMmZjLzEvYTFmRjNfY092LVo2UUExVjhsbmJMRGNaSVpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82YWU1OGMtNzYxOC00MWJhLWEzNDMtYzQ2ZDdiYWMwMmZj LzEvYTFmRjNfY092LVo2UUExVjhsbmJMRGNaSVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWv49cQ79 iKaNusoxaUolY9qNooEESsgtlDa/I5yHXmrrvO/wLo5A99PVxwLWbDm2pgGAwwAQ DDtH/+CglDq4DAuSo8FiJA2v4LCho4XOj0R5rcUUG0NrEx/CSekDXBvJDVC2JDTi D8IpmkhnHE65ZgkwZK6Ctpy3mUGZ11+Q1w2XPpKxYVrDJAfdPV06+wNT5OLqF7la YqKtfGlHejwsicBplaM1BAkadld1BNjGzH1TL7nl/akVdy5lwxXHNW0QICyiJaUj hMauM6LvM2Q+blnCWLbdJi2sKwvM1Mb7sPmZ0rX6WRwY/lWGbgpGqkVy6pN/iPml HgiJFVLILH66gw== -----END CERTIFICATE-----Generated at Mon Dec 8 09:32:14 2025 by rpki-client