This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft File: 1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft (raw, json) Hash identifier: PiLaip9JQ6BSsA228xll4Lc19iClFg5R1PiTqAJTAss= Subject key identifier: FF:B5:EC:81:41:90:C8:C8:31:08:8F:77:FF:83:2F:F6:7F:BB:7C:23 Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7 Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7 Certificate serial: 019AECAC23531BA6CBE7707FFC49E4A51E0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft Manifest number: 176A Signing time: Fri 05 Dec 2025 04:01:35 +0000 Manifest this update: Fri 05 Dec 2025 04:01:35 +0000 Manifest next update: Sat 06 Dec 2025 04:01:35 +0000 Files and hashes: 1: 1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl (hash: 7Toxe30Jd3m8+oLfkjD8q79h1TDQsGOZnL0K3MvZcmc=) 2: SVu_Rhlf-7B0-LrZBWZ_lATeixo.roa (hash: z3DEUmnDk72CZ2z3i1AK8FkYVNV6rEs5/0h0eR+TClE=) 3: USACkltJE4QqwVVNlMM3MAOHbI4.roa (hash: JKLOLgv3d9BtTTCj6wlSjdzlBfme6YgxxZZXaxE+z9Y=) 4: dbrSfqG4yJ8e6RjT1uN9s6dEGrQ.roa (hash: o+ewDMF8kuHL4BLfo2Z0qsDG7FEYFuX7LdWzLtyg2Y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ec:ac:23:53:1b:a6:cb:e7:70:7f:fc:49:e4:a5:1e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7 Validity Not Before: Dec 5 04:01:35 2025 GMT Not After : Dec 6 04:01:35 2025 GMT Subject: CN=ffb5ec814190c8c831088f77ff832ff67fbb7c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:16:6d:81:34:07:fe:4f:00:cc:c4:41:7b:58: 40:ea:1b:04:5e:63:a0:7c:ce:a7:84:17:cd:3f:1b: 61:78:9f:96:52:2e:ca:e2:a6:dd:3a:5e:80:a7:a4: 8a:33:94:b5:1c:5d:dd:96:b2:fa:c1:cb:16:4e:7b: cf:67:f9:2d:a0:56:84:c9:ac:f8:ef:9f:3d:26:d3: cb:95:8c:31:59:76:2e:33:f4:66:51:38:a2:d8:0f: 0b:82:cf:3d:76:5b:d5:08:af:c4:07:5a:8f:92:5e: 69:d0:77:2b:b6:ee:a9:b2:8e:d0:f8:e8:1d:9c:3a: 84:ed:13:55:19:5e:2e:4b:cf:1d:ce:36:b8:eb:2c: c0:60:51:e7:ba:fc:66:9f:60:5d:4b:2b:db:44:f0: ee:0b:76:54:6a:2b:a3:1d:ab:e0:6c:ca:9e:0d:c3: 76:00:62:c7:8f:f3:fb:a1:fb:de:a7:14:f8:58:ef: a6:fe:db:41:96:db:c4:d5:6b:21:53:d5:b8:10:b6: 1b:ac:2e:5c:d9:66:f2:79:65:ee:78:bd:21:7f:33: a6:92:15:5b:c0:e8:f1:24:00:fe:63:d7:ba:fb:90: 7d:be:d8:26:09:97:29:c3:22:4f:35:7d:c0:13:fa: b8:bc:1c:cc:8d:19:99:a6:ab:97:07:40:16:a8:d6: 0f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B5:EC:81:41:90:C8:C8:31:08:8F:77:FF:83:2F:F6:7F:BB:7C:23 X509v3 Authority Key Identifier: keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:1d:86:de:58:92:8e:bf:2c:4d:26:cc:9a:12:d1:e7:27:2c: d9:3f:93:bc:fa:74:bf:c0:94:72:3c:4f:f5:13:26:ac:d7:d6: d2:9b:7b:ef:ae:f7:d6:b1:8a:f9:09:3c:a7:95:7a:58:24:e8: 91:51:17:d0:33:c0:b0:f7:20:2e:47:ae:94:99:b8:9d:e0:de: 9a:69:7e:ca:7d:7e:ee:97:cd:16:a0:c5:f1:cc:70:07:bb:19: 93:22:86:13:eb:35:fb:44:8c:20:4d:73:aa:f4:f2:9f:32:83: 6d:ce:23:48:e8:f0:0a:5b:99:60:d2:9b:fa:2e:7b:21:d7:34: 01:ad:ba:84:31:81:ed:d8:65:78:a3:1d:4c:25:14:cd:71:72: 13:72:7a:e3:34:10:f7:3c:6a:0c:dc:10:64:59:7f:d1:ea:4d: c7:dd:c8:b1:b4:0a:1f:3f:7a:7c:c0:cd:b2:d7:4c:a2:bd:5f: d6:2b:52:87:3d:95:9a:70:9f:fc:9b:a0:6d:06:23:ec:19:73: ee:9e:9e:4b:e8:57:bd:c2:de:5d:11:bc:c7:6f:f8:9c:20:52: 07:cf:5d:ef:ef:66:8e:1e:c3:1f:ef:88:d4:11:c4:ab:66:2d: e0:79:f5:14:b4:2d:49:28:40:39:f8:a4:32:92:92:92:b0:0e: 9a:da:3b:38 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrsrCNTG6bL53B//EnkpR4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjAzYTBjMDRiODFmZTE3NjZmYTQxYmQzMWI3M2I1ODgx ODhhYzcwHhcNMjUxMjA1MDQwMTM1WhcNMjUxMjA2MDQwMTM1WjAzMTEwLwYDVQQD EyhmZmI1ZWM4MTQxOTBjOGM4MzEwODhmNzdmZjgzMmZmNjdmYmI3YzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hZtgTQH/k8AzMRBe1hA6hsEXmOg fM6nhBfNPxtheJ+WUi7K4qbdOl6Ap6SKM5S1HF3dlrL6wcsWTnvPZ/ktoFaEyaz4 7589JtPLlYwxWXYuM/RmUTii2A8Lgs89dlvVCK/EB1qPkl5p0Hcrtu6pso7Q+Ogd nDqE7RNVGV4uS88dzja46yzAYFHnuvxmn2BdSyvbRPDuC3ZUaiujHavgbMqeDcN2 AGLHj/P7ofvepxT4WO+m/ttBltvE1WshU9W4ELYbrC5c2WbyeWXueL0hfzOmkhVb wOjxJAD+Y9e6+5B9vtgmCZcpwyJPNX3AE/q4vBzMjRmZpquXB0AWqNYPnwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFP+17IFBkMjIMQiPd/+DL/Z/u3wjMB8GA1UdIwQY MBaAFPggOgwEuB/hdm+kG9Mbc7WIGIrHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DQTZEQVM0SC1GMmI2UWIweHR6dFlnWWlzYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvZTE0Y2EzLWRhOGUtNGI1OC04NjNh LTMzODk2MjBjMWJkNy8xLzEtQ0E2REFTNEgtRjJiNlFiMHh0enRZZ1lpc2MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzViL2UxNGNhMy1kYThlLTRiNTgtODYzYS0zMzg5NjIwYzFi ZDcvMS8xLUNBNkRBUzRILUYyYjZRYjB4dHp0WWdZaXNjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACR2G 3liSjr8sTSbMmhLR5ycs2T+TvPp0v8CUcjxP9RMmrNfW0pt776731rGK+Qk8p5V6 WCTokVEX0DPAsPcgLkeulJm4neDemml+yn1+7pfNFqDF8cxwB7sZkyKGE+s1+0SM IE1zqvTynzKDbc4jSOjwCluZYNKb+i57Idc0Aa26hDGB7dhleKMdTCUUzXFyE3J6 4zQQ9zxqDNwQZFl/0epNx93IsbQKHz96fMDNstdMor1f1itShz2VmnCf/JugbQYj 7Blz7p6eS+hXvcLeXRG8x2/4nCBSB89d7+9mjh7DH++I1BHEq2Yt4Hn1FLQtSShA OfikMpKSkrAOmto7OA== -----END CERTIFICATE-----Generated at Fri Dec 5 07:57:24 2025 by rpki-client