This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json) Hash identifier: lBuWLnJQ0CczGqcgnNNo2kuAnHayTCUo1DnikQqKIN4= Subject key identifier: 66:05:E1:1D:7F:21:AB:80:30:86:34:3F:27:E3:8F:50:69:60:0E:3F Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a Certificate serial: 019B1E0680F87D502800ED1FF57D70352EBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft Manifest number: 0874 Signing time: Sun 14 Dec 2025 18:01:40 +0000 Manifest this update: Sun 14 Dec 2025 18:01:40 +0000 Manifest next update: Mon 15 Dec 2025 18:01:40 +0000 Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: wzMcrvIIJhSmcHI3jwDAmprtQb5uXW1OOI8Z7dqEshA=) 2: CepTD_sRHzQKM1km_XqGFUiFw_A.roa (hash: 6VmSpRvYGLL0kNu4j1w0e4FEukjB/A4DJqf8FlG66dI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 18:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:06:80:f8:7d:50:28:00:ed:1f:f5:7d:70:35:2e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a Validity Not Before: Dec 14 18:01:40 2025 GMT Not After : Dec 15 18:01:40 2025 GMT Subject: CN=6605e11d7f21ab803086343f27e38f5069600e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a1:ae:8c:1d:4f:d9:39:e4:25:71:63:61:5a: 93:11:be:45:5a:e8:fb:e2:03:2c:02:c5:12:fc:0f: 27:5b:35:8d:45:dd:1f:2e:fe:db:90:ec:80:b8:bf: 08:58:79:4f:82:7e:b5:de:32:55:c1:b0:f4:9e:f1: 72:5a:f5:c2:96:9a:54:f3:0a:26:f1:c3:4a:fa:22: de:3e:fd:b9:b4:5f:ef:bf:fc:50:7e:11:fc:db:c0: fd:83:78:78:df:d7:38:55:f6:9d:ec:46:17:8d:34: 6f:a1:b3:d4:34:c4:6d:47:0d:e3:e7:29:e7:2f:8f: cf:d2:95:38:3e:a7:f5:06:fd:4e:78:d1:d5:96:f8: 2c:a4:d8:94:df:a7:24:22:aa:af:d8:ab:57:44:e5: 7d:0f:ba:55:c9:63:d1:ac:fc:e9:b7:16:53:26:90: 9c:b4:cc:30:13:fc:e0:ac:b0:a7:60:5f:75:c8:55: 9e:4b:37:f6:57:af:11:7c:52:c2:92:cf:ee:b7:07: 7f:27:a5:1f:b1:19:10:ce:0b:6a:14:20:46:81:82: 16:99:63:b1:72:d5:0f:05:87:67:17:b8:69:2d:02: 7b:7d:29:85:74:21:ea:f1:b6:28:be:76:76:2c:b8: b2:0d:2f:31:97:e2:95:60:98:a5:23:d2:fa:61:2c: 35:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:05:E1:1D:7F:21:AB:80:30:86:34:3F:27:E3:8F:50:69:60:0E:3F X509v3 Authority Key Identifier: keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:1e:53:dc:b9:8d:11:82:52:1d:68:48:2c:7e:c9:ea:51:85: a4:cb:b8:ff:f3:aa:69:d0:82:0f:68:0c:0a:c2:7e:7d:d2:be: 9e:11:84:e8:d7:12:f4:aa:07:14:01:0c:d6:a9:f0:1f:dc:c0: 68:1d:0f:f4:12:73:af:b4:91:61:cf:11:7d:f8:33:77:9c:bd: c6:59:0f:8a:43:df:5c:19:46:fb:08:60:2c:59:cd:c5:89:eb: 58:23:88:33:5a:f8:2b:00:48:25:c4:85:ff:a3:04:f9:3a:15: 9d:ac:7b:a3:2e:c8:26:56:03:c2:ab:ac:c8:b4:e9:51:92:87: e6:35:7c:45:1e:2c:cd:92:4e:95:d2:1c:8f:da:63:73:9f:a6: bc:b3:5b:9b:92:82:7e:6d:75:11:d4:4d:99:78:3f:67:5b:f5: 11:62:67:65:e5:77:46:8c:75:3d:a7:c7:b5:d9:8d:42:c1:ac: ea:51:4d:07:00:1b:fe:c1:73:79:1a:0a:71:b1:d0:36:e6:4f: b9:69:38:cc:2b:a5:0a:82:37:b1:3b:18:9e:6f:02:2e:66:55: 97:ae:1a:f1:97:a7:c0:90:00:27:c6:d5:0a:99:eb:fa:82:04: 86:94:1c:54:5a:7e:57:f7:78:c3:54:94:28:73:f6:08:7f:b3: 06:52:f0:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBoD4fVAoAO0f9X1wNS68MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDRhY2U2OTQ2ZmI3MDFiYjJjNDVlMzBhY2FmZWE2NmRh YzJmN2EwHhcNMjUxMjE0MTgwMTQwWhcNMjUxMjE1MTgwMTQwWjAzMTEwLwYDVQQD Eyg2NjA1ZTExZDdmMjFhYjgwMzA4NjM0M2YyN2UzOGY1MDY5NjAwZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKGujB1P2TnkJXFjYVqTEb5FWuj7 4gMsAsUS/A8nWzWNRd0fLv7bkOyAuL8IWHlPgn613jJVwbD0nvFyWvXClppU8wom 8cNK+iLePv25tF/vv/xQfhH828D9g3h439c4Vfad7EYXjTRvobPUNMRtRw3j5ynn L4/P0pU4Pqf1Bv1OeNHVlvgspNiU36ckIqqv2KtXROV9D7pVyWPRrPzptxZTJpCc tMwwE/zgrLCnYF91yFWeSzf2V68RfFLCks/utwd/J6UfsRkQzgtqFCBGgYIWmWOx ctUPBYdnF7hpLQJ7fSmFdCHq8bYovnZ2LLiyDS8xl+KVYJilI9L6YSw13wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYF4R1/IauAMIY0Pyfjj1BpYA4/MB8GA1UdIwQY MBaAFAgErOaUb7cBuyxF4wrK/qZtrC96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81YmNlZTAtNTEyZS00MWY0LThkNmIt OTVkMTYzNjRkYmI5LzEvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81YmNlZTAtNTEyZS00MWY0LThkNmItOTVkMTYzNjRkYmI5 LzEvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgR5T3LmN EYJSHWhILH7J6lGFpMu4//OqadCCD2gMCsJ+fdK+nhGE6NcS9KoHFAEM1qnwH9zA aB0P9BJzr7SRYc8Rffgzd5y9xlkPikPfXBlG+whgLFnNxYnrWCOIM1r4KwBIJcSF /6ME+ToVnax7oy7IJlYDwqusyLTpUZKH5jV8RR4szZJOldIcj9pjc5+mvLNbm5KC fm11EdRNmXg/Z1v1EWJnZeV3Rox1PafHtdmNQsGs6lFNBwAb/sFzeRoKcbHQNuZP uWk4zCulCoI3sTsYnm8CLmZVl64a8ZenwJAAJ8bVCpnr+oIEhpQcVFp+V/d4w1SU KHP2CH+zBlLw5w== -----END CERTIFICATE-----Generated at Mon Dec 15 04:58:58 2025 by rpki-client