This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft File: cA5JDhDqN72DSWKGM7WIVmHmegI.mft (raw, json) Hash identifier: evK7bK5NTgtwYPTSEigcY2Kt9Ldll07zzfj7Nymrzzw= Subject key identifier: 8D:D4:10:DE:96:95:9B:39:87:23:1E:FE:D2:DB:15:36:30:17:60:1A Authority key identifier: 70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02 Certificate issuer: /CN=700e490e10ea37bd8349628633b5885661e67a02 Certificate serial: 019B5B65837661AB0C18F3181BD233AD9703 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft Manifest number: 02A2 Signing time: Fri 26 Dec 2025 16:02:17 +0000 Manifest this update: Fri 26 Dec 2025 16:02:17 +0000 Manifest next update: Sat 27 Dec 2025 16:02:17 +0000 Files and hashes: 1: cA5JDhDqN72DSWKGM7WIVmHmegI.crl (hash: c9pOLHnxRVWw8ITi9swFDkzwey/4xUbr27JJ+ONYaGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:83:76:61:ab:0c:18:f3:18:1b:d2:33:ad:97:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700e490e10ea37bd8349628633b5885661e67a02 Validity Not Before: Dec 26 16:02:17 2025 GMT Not After : Dec 27 16:02:17 2025 GMT Subject: CN=8dd410de96959b3987231efed2db15363017601a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:64:bf:ff:dd:af:f1:0f:35:f0:02:7d:31:10: af:8b:62:28:ea:cf:ce:46:61:22:0a:6f:07:ed:e2: 7e:a7:ee:0c:34:1e:33:12:90:8c:f8:9c:fa:51:1d: c1:0a:2b:34:22:87:f6:ef:ce:fe:92:ad:56:e6:6d: 07:c4:aa:33:36:b8:5a:9b:0f:12:e7:ed:95:c8:31: 34:c4:96:a6:1c:8c:4b:9d:79:1f:84:d2:a4:58:d7: ee:18:a7:d6:ba:27:ce:cd:71:79:88:05:68:f2:fb: 93:e1:c9:d7:8d:3b:c0:86:7c:b5:cd:75:ab:27:d1: 66:ab:c3:67:a1:62:5a:66:c5:30:7d:42:f1:a9:5f: b2:bf:1b:10:b9:6b:2f:15:64:b9:37:72:b9:b0:60: 6d:c5:34:d4:36:d3:4e:cc:15:bb:d2:26:4e:92:07: 55:73:dd:e0:60:74:08:07:ad:d0:4f:66:aa:e0:5d: 2f:2e:e8:bc:5e:02:af:56:60:58:6c:be:e0:b3:bd: cd:d9:f5:33:b6:15:21:da:f5:35:f6:30:71:f5:a8: 55:ac:a2:3f:02:c8:df:2a:27:9e:da:a9:85:4a:35: 33:c6:df:9f:98:8f:5d:46:6c:6a:f7:60:d6:b7:1c: 7d:3c:c5:37:a7:7e:1b:ee:ab:a3:2a:70:5b:24:48: 8c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D4:10:DE:96:95:9B:39:87:23:1E:FE:D2:DB:15:36:30:17:60:1A X509v3 Authority Key Identifier: keyid:70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:55:c2:7f:e6:71:ff:aa:3f:e5:df:0e:35:5b:89:57:09:8a: 9d:0e:76:9f:9a:d7:e8:c8:cc:5f:0f:ae:44:c6:5d:fe:55:51: 26:73:cf:d1:89:69:f1:e3:ec:fb:68:07:f6:64:da:93:f4:90: d1:8c:db:3c:cd:c7:b6:59:93:69:6b:3d:c8:04:7a:87:42:31: 29:82:eb:72:9f:05:25:0d:8a:b8:7b:95:41:d9:27:ac:cb:60: bf:65:28:6f:47:56:29:29:8f:50:30:b2:9e:00:e7:b9:d8:3e: f7:0e:bc:e6:69:43:0c:33:45:9c:c3:26:01:5d:53:4f:9e:09: 4f:00:9d:dd:2e:7f:57:d0:63:a6:25:7e:d2:4f:45:bf:f2:6a: e2:e6:1c:e8:5a:4f:00:17:b5:5a:4d:e6:0f:84:91:5a:65:a7: e5:79:bb:1d:81:38:4c:89:4c:ad:33:7d:60:d8:fe:e3:e6:23: a2:ac:fc:23:2e:23:ec:32:b6:63:e1:40:54:d5:44:f7:db:91: 89:43:36:b6:af:f5:8d:f8:ae:c4:d9:7f:65:cc:a6:27:02:97: 1d:4d:9d:b4:8a:39:65:7f:88:c4:6d:a8:d3:8d:ac:30:7a:29: 63:2a:35:48:b3:22:fc:2c:b1:3d:f7:18:1b:6d:41:4f:64:3a: 61:63:4f:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZYN2YasMGPMYG9IzrZcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMGU0OTBlMTBlYTM3YmQ4MzQ5NjI4NjMzYjU4ODU2NjFl NjdhMDIwHhcNMjUxMjI2MTYwMjE3WhcNMjUxMjI3MTYwMjE3WjAzMTEwLwYDVQQD Eyg4ZGQ0MTBkZTk2OTU5YjM5ODcyMzFlZmVkMmRiMTUzNjMwMTc2MDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2S//92v8Q818AJ9MRCvi2Io6s/O RmEiCm8H7eJ+p+4MNB4zEpCM+Jz6UR3BCis0Iof2787+kq1W5m0HxKozNrhamw8S 5+2VyDE0xJamHIxLnXkfhNKkWNfuGKfWuifOzXF5iAVo8vuT4cnXjTvAhny1zXWr J9Fmq8NnoWJaZsUwfULxqV+yvxsQuWsvFWS5N3K5sGBtxTTUNtNOzBW70iZOkgdV c93gYHQIB63QT2aq4F0vLui8XgKvVmBYbL7gs73N2fUzthUh2vU19jBx9ahVrKI/ AsjfKiee2qmFSjUzxt+fmI9dRmxq92DWtxx9PMU3p34b7qujKnBbJEiM7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3UEN6WlZs5hyMe/tLbFTYwF2AaMB8GA1UdIwQY MBaAFHAOSQ4Q6je9g0lihjO1iFZh5noCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hODBiNmQtY2NiNy00NGMyLWI0M2Yt ZWE2YjBiZTVjYWVlLzEvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9hODBiNmQtY2NiNy00NGMyLWI0M2YtZWE2YjBiZTVjYWVl LzEvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblXCf+Zx /6o/5d8ONVuJVwmKnQ52n5rX6MjMXw+uRMZd/lVRJnPP0Ylp8ePs+2gH9mTak/SQ 0YzbPM3HtlmTaWs9yAR6h0IxKYLrcp8FJQ2KuHuVQdknrMtgv2Uob0dWKSmPUDCy ngDnudg+9w685mlDDDNFnMMmAV1TT54JTwCd3S5/V9BjpiV+0k9Fv/Jq4uYc6FpP ABe1Wk3mD4SRWmWn5Xm7HYE4TIlMrTN9YNj+4+Yjoqz8Iy4j7DK2Y+FAVNVE99uR iUM2tq/1jfiuxNl/ZcymJwKXHU2dtIo5ZX+IxG2o042sMHopYyo1SLMi/CyxPfcY G21BT2Q6YWNPLQ== -----END CERTIFICATE-----Generated at Fri Dec 26 17:40:26 2025 by rpki-client