This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft File: a1a9UK-T9GN-LAfi7EAya8ZABSc.mft (raw, json) Hash identifier: NWqZEkDxKzw08M85zN1WmRzFrdObI70VkOlNlJcVyBI= Subject key identifier: EC:EE:40:BC:C0:47:88:2E:AD:47:EA:4F:4C:CA:00:49:05:5F:AC:35 Authority key identifier: 6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27 Certificate issuer: /CN=6b56bd50af93f4637e2c07e2ec40326bc6400527 Certificate serial: 019B3DC78C57ACDD4F954313B63B9822E26D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft Manifest number: 03E5 Signing time: Sat 20 Dec 2025 22:00:46 +0000 Manifest this update: Sat 20 Dec 2025 22:00:46 +0000 Manifest next update: Sun 21 Dec 2025 22:00:46 +0000 Files and hashes: 1: a1a9UK-T9GN-LAfi7EAya8ZABSc.crl (hash: fOki1jQVH72sJDmMDB+dC/QZw3hx62r5zrBPP24UhU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:8c:57:ac:dd:4f:95:43:13:b6:3b:98:22:e2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b56bd50af93f4637e2c07e2ec40326bc6400527 Validity Not Before: Dec 20 22:00:46 2025 GMT Not After : Dec 21 22:00:46 2025 GMT Subject: CN=ecee40bcc047882ead47ea4f4cca0049055fac35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3e:5e:f1:51:2d:b0:76:e4:e4:9f:f1:90:38: 0f:19:0a:03:87:84:af:89:bf:9a:b7:ca:42:c2:14: 4a:cf:a4:28:69:6b:01:b9:57:8f:26:f0:2f:51:b2: 52:8e:05:e9:f1:2d:15:7d:1a:98:74:cd:85:01:02: 8b:18:33:a9:49:be:d7:79:f9:11:30:68:30:cb:0d: 09:e9:53:e5:38:2b:8c:58:b8:a8:57:e7:60:7f:27: ab:af:e9:f4:0a:fb:75:ac:10:dc:75:96:a3:4b:49: df:36:18:8a:09:2e:53:6b:05:26:81:77:c5:35:37: 2d:29:9e:95:c3:db:af:ff:7e:7e:3e:4c:fa:87:a1: 3f:29:1a:b7:98:ab:ea:9d:be:cf:dd:c8:40:e8:98: c5:53:4d:55:0b:ee:29:4f:ff:5a:dc:8e:69:39:0d: dd:e4:24:53:34:5c:7b:84:19:e4:29:84:d3:37:44: 33:a1:1f:fc:cd:66:00:70:72:bf:7d:14:45:38:22: 7a:3a:df:63:40:61:28:7d:42:14:7f:fe:af:21:43: 9e:c4:03:75:d7:fd:e4:3e:e8:6c:ee:82:90:a4:be: a8:1e:f6:a0:da:6d:e0:e5:34:b0:13:03:76:a1:70: b5:a4:f0:e3:df:eb:db:dd:1d:90:1f:09:cd:a9:be: 44:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EE:40:BC:C0:47:88:2E:AD:47:EA:4F:4C:CA:00:49:05:5F:AC:35 X509v3 Authority Key Identifier: keyid:6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:95:5f:3a:7b:f1:3a:09:09:65:29:72:30:0e:92:bb:b0:52: c5:7a:f3:bc:b7:22:1e:2c:7b:fa:5b:1b:68:d5:b0:37:e8:c6: 36:b1:ef:66:f7:2e:73:a0:ec:d9:78:06:ec:b8:4d:04:b5:74: d6:d2:23:ae:a2:39:de:44:80:86:ed:82:ef:71:0e:83:86:f1: bd:2c:44:db:5c:5f:9d:d3:4a:6e:4f:ec:b9:47:bd:5b:13:18: 44:e9:79:ef:78:5b:1a:5e:bb:76:b7:eb:83:89:c8:c2:e5:03: 56:b2:a1:a2:99:72:ed:e0:36:fe:92:37:24:82:a6:8b:3a:72: 4e:10:dc:56:0f:cb:44:e1:f0:da:ce:c1:5f:5c:4d:4e:5a:17: 55:09:6e:5c:88:ce:bd:1a:c1:9e:f1:0a:a2:86:01:f8:23:e5: a1:b6:fd:ba:80:f4:a2:d8:c5:c7:b3:86:08:cd:b0:e0:84:80: 35:b0:aa:5a:72:d6:33:1f:28:4e:f8:05:42:a2:01:77:26:fa: 6a:fc:04:ae:e7:1a:d5:b9:c2:e2:1d:e7:8a:4c:10:d2:e1:ee: 44:37:31:e9:7b:62:fa:49:76:5f:3f:fb:7c:63:2e:6d:15:84: 37:86:f1:f1:ef:54:67:f1:ae:a6:cf:7b:46:0b:55:56:10:ca: c1:dd:b5:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x4xXrN1PlUMTtjuYIuJtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNTZiZDUwYWY5M2Y0NjM3ZTJjMDdlMmVjNDAzMjZiYzY0 MDA1MjcwHhcNMjUxMjIwMjIwMDQ2WhcNMjUxMjIxMjIwMDQ2WjAzMTEwLwYDVQQD EyhlY2VlNDBiY2MwNDc4ODJlYWQ0N2VhNGY0Y2NhMDA0OTA1NWZhYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj5e8VEtsHbk5J/xkDgPGQoDh4Sv ib+at8pCwhRKz6QoaWsBuVePJvAvUbJSjgXp8S0VfRqYdM2FAQKLGDOpSb7XefkR MGgwyw0J6VPlOCuMWLioV+dgfyerr+n0Cvt1rBDcdZajS0nfNhiKCS5TawUmgXfF NTctKZ6Vw9uv/35+Pkz6h6E/KRq3mKvqnb7P3chA6JjFU01VC+4pT/9a3I5pOQ3d 5CRTNFx7hBnkKYTTN0QzoR/8zWYAcHK/fRRFOCJ6Ot9jQGEofUIUf/6vIUOexAN1 1/3kPuhs7oKQpL6oHvag2m3g5TSwEwN2oXC1pPDj3+vb3R2QHwnNqb5EiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzuQLzAR4gurUfqT0zKAEkFX6w1MB8GA1UdIwQY MBaAFGtWvVCvk/RjfiwH4uxAMmvGQAUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFhOVVLLVQ5R04tTEFmaTdFQXlhOFpBQlNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZDM0MjktNDUyNC00ZmNmLTk1OTIt Mjk5NmQ4ZmI2OTdlLzEvYTFhOVVLLVQ5R04tTEFmaTdFQXlhOFpBQlNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mZDM0MjktNDUyNC00ZmNmLTk1OTItMjk5NmQ4ZmI2OTdl LzEvYTFhOVVLLVQ5R04tTEFmaTdFQXlhOFpBQlNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZVfOnvx OgkJZSlyMA6Su7BSxXrzvLciHix7+lsbaNWwN+jGNrHvZvcuc6Ds2XgG7LhNBLV0 1tIjrqI53kSAhu2C73EOg4bxvSxE21xfndNKbk/suUe9WxMYROl573hbGl67drfr g4nIwuUDVrKhoply7eA2/pI3JIKmizpyThDcVg/LROHw2s7BX1xNTloXVQluXIjO vRrBnvEKooYB+CPlobb9uoD0otjFx7OGCM2w4ISANbCqWnLWMx8oTvgFQqIBdyb6 avwEruca1bnC4h3nikwQ0uHuRDcx6Xti+kl2Xz/7fGMubRWEN4bx8e9UZ/Gups97 RgtVVhDKwd210w== -----END CERTIFICATE-----Generated at Sun Dec 21 02:28:50 2025 by rpki-client