This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft File: cAAC6c0sdKDvi1G0DUTRQaky0oM.mft (raw, json) Hash identifier: oHW7lPP3aQsjc/0s1m7t/SEXTIGx4NWzRxE36ox0vGk= Subject key identifier: E7:3D:C2:D4:BF:50:EE:1E:F7:47:93:83:72:00:79:4D:41:08:2A:62 Authority key identifier: 70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83 Certificate issuer: /CN=700002e9cd2c74a0ef8b51b40d44d141a932d283 Certificate serial: 019B59E3AD712B8711DF699DAF2016E54F6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft Manifest number: 0F32 Signing time: Fri 26 Dec 2025 09:00:51 +0000 Manifest this update: Fri 26 Dec 2025 09:00:51 +0000 Manifest next update: Sat 27 Dec 2025 09:00:51 +0000 Files and hashes: 1: 7oIzidmPV5DMaJu71KEE7TN3jrE.roa (hash: kCtY+zZ5Nv1Tl34nUDS681Pc5/oW0aaVlayqB3KyvjU=) 2: cAAC6c0sdKDvi1G0DUTRQaky0oM.crl (hash: n67JHXfkewUlnfsFfDITGynRtz9Pc0vs5XinIPoQlBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:ad:71:2b:87:11:df:69:9d:af:20:16:e5:4f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700002e9cd2c74a0ef8b51b40d44d141a932d283 Validity Not Before: Dec 26 09:00:51 2025 GMT Not After : Dec 27 09:00:51 2025 GMT Subject: CN=e73dc2d4bf50ee1ef74793837200794d41082a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:12:78:8b:e3:a3:a2:97:4e:01:6c:54:03:a2: 52:bd:51:88:bb:9a:d3:28:fc:fa:19:bd:2f:1b:6e: 22:59:2c:1f:90:af:42:00:58:c1:39:4c:7e:6c:f9: 8e:8f:37:c8:82:19:96:23:65:44:17:ae:d5:44:b8: ba:2c:45:de:45:03:dc:68:37:9c:1e:77:e4:1e:2e: a2:52:a7:d8:07:b5:ae:d5:15:ff:7f:dd:37:51:23: cb:d1:b0:8c:a5:5e:a2:7a:b4:c4:51:fa:b4:9e:2e: 1f:a3:01:20:1c:47:48:cf:71:f1:2d:45:2b:b5:0c: 76:11:70:0d:e1:a7:81:50:11:3d:02:ec:9d:7c:0d: b0:5e:4e:5b:15:1d:11:67:45:92:a3:ea:94:01:80: 1c:f7:29:22:02:33:f1:75:d9:82:2d:a5:b3:53:3f: 98:61:11:33:1a:b2:87:60:7c:17:18:33:0e:87:9d: 8f:a0:9c:50:af:0f:47:98:be:43:2d:f5:e0:d4:7b: ab:d0:e8:6a:91:30:2f:98:b5:44:e9:e6:61:10:88: e4:84:85:64:b3:45:77:e6:00:ed:d2:f8:ec:c5:e6: 5e:76:11:9e:d6:84:3c:ac:c5:b1:ed:b3:43:9f:6e: fa:eb:0d:52:d3:f3:76:f8:f5:97:7f:df:66:ae:ff: 77:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3D:C2:D4:BF:50:EE:1E:F7:47:93:83:72:00:79:4D:41:08:2A:62 X509v3 Authority Key Identifier: keyid:70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a2:ea:01:7a:83:0a:69:f8:89:af:59:8b:e2:62:62:ba:43: 71:2e:41:8f:2f:c2:86:8c:5d:e7:62:82:2c:62:2a:12:0a:9f: f8:c5:dc:d5:a7:a9:bf:4a:78:59:1f:ce:fb:1a:7f:38:de:ba: d7:ec:11:72:6a:ea:d9:03:44:7f:a2:af:d1:df:23:2d:31:a5: 1f:ef:aa:ef:d6:65:9f:b4:50:e6:7f:a4:3a:31:fc:c7:36:f2: 7c:7f:01:d3:c8:90:e8:85:94:5a:f7:af:e4:31:06:60:b3:1f: 0a:ad:43:8f:e0:9a:0b:06:1d:95:2e:4c:b9:51:e6:73:41:85: 2d:ea:bc:28:11:2d:68:fb:d9:e7:f1:aa:ca:43:ae:a7:21:98: fe:48:5c:db:ba:6c:46:ab:3d:e1:c3:6d:bf:51:85:b2:ab:68: 20:84:66:54:a8:ad:c2:cb:4b:eb:76:1f:d5:19:d4:65:5b:20: d1:f1:ac:8b:f3:e5:39:79:87:f8:96:8f:4d:f3:41:ca:21:09: a8:48:11:c9:49:3b:c3:36:3c:ce:75:1c:35:cb:6f:97:d2:6c: 11:16:d2:bb:5c:9d:98:17:1c:69:eb:b6:83:4b:60:60:2b:b9: 2f:36:6f:2f:37:52:28:de:00:0b:18:27:54:ea:da:85:1e:7e: 3e:e1:1c:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ461xK4cR32mdryAW5U9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMDAwMmU5Y2QyYzc0YTBlZjhiNTFiNDBkNDRkMTQxYTkz MmQyODMwHhcNMjUxMjI2MDkwMDUxWhcNMjUxMjI3MDkwMDUxWjAzMTEwLwYDVQQD EyhlNzNkYzJkNGJmNTBlZTFlZjc0NzkzODM3MjAwNzk0ZDQxMDgyYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhJ4i+OjopdOAWxUA6JSvVGIu5rT KPz6Gb0vG24iWSwfkK9CAFjBOUx+bPmOjzfIghmWI2VEF67VRLi6LEXeRQPcaDec HnfkHi6iUqfYB7Wu1RX/f903USPL0bCMpV6ierTEUfq0ni4fowEgHEdIz3HxLUUr tQx2EXAN4aeBUBE9AuydfA2wXk5bFR0RZ0WSo+qUAYAc9ykiAjPxddmCLaWzUz+Y YREzGrKHYHwXGDMOh52PoJxQrw9HmL5DLfXg1Hur0OhqkTAvmLVE6eZhEIjkhIVk s0V35gDt0vjsxeZedhGe1oQ8rMWx7bNDn2766w1S0/N2+PWXf99mrv93YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOc9wtS/UO4e90eTg3IAeU1BCCpiMB8GA1UdIwQY MBaAFHAAAunNLHSg74tRtA1E0UGpMtKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FBQzZjMHNkS0R2aTFHMERVVFJRYWt5MG9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81MmUwYmMtOTYyOS00YTIwLWEwMDIt OTA5MjA5MzU2YjJmLzEvY0FBQzZjMHNkS0R2aTFHMERVVFJRYWt5MG9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81MmUwYmMtOTYyOS00YTIwLWEwMDItOTA5MjA5MzU2YjJm LzEvY0FBQzZjMHNkS0R2aTFHMERVVFJRYWt5MG9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaLqAXqD Cmn4ia9Zi+JiYrpDcS5Bjy/Choxd52KCLGIqEgqf+MXc1aepv0p4WR/O+xp/ON66 1+wRcmrq2QNEf6Kv0d8jLTGlH++q79Zln7RQ5n+kOjH8xzbyfH8B08iQ6IWUWvev 5DEGYLMfCq1Dj+CaCwYdlS5MuVHmc0GFLeq8KBEtaPvZ5/GqykOupyGY/khc27ps Rqs94cNtv1GFsqtoIIRmVKitwstL63Yf1RnUZVsg0fGsi/PlOXmH+JaPTfNByiEJ qEgRyUk7wzY8znUcNctvl9JsERbSu1ydmBccaeu2g0tgYCu5LzZvLzdSKN4ACxgn VOrahR5+PuEc8g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:51 2025 by rpki-client