This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft File: 1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft (raw, json) Hash identifier: PbdLl9IDuR3Mzxv5VRitReiwWd11Wk44krHSnT8uHkA= Subject key identifier: 5A:1A:8B:65:55:E2:2A:84:A3:16:1F:5B:63:D4:5C:B3:C9:6B:0C:E1 Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7 Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7 Certificate serial: 019B3FB6A7CA91A63EA90C3FC6EF884C885B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft Manifest number: 1795 Signing time: Sun 21 Dec 2025 07:01:33 +0000 Manifest this update: Sun 21 Dec 2025 07:01:33 +0000 Manifest next update: Mon 22 Dec 2025 07:01:33 +0000 Files and hashes: 1: 1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl (hash: R+lUvMJzF0LeuZIcdGDtdHvKy5cZZTbaZZcQwyojNGs=) 2: SVu_Rhlf-7B0-LrZBWZ_lATeixo.roa (hash: z3DEUmnDk72CZ2z3i1AK8FkYVNV6rEs5/0h0eR+TClE=) 3: USACkltJE4QqwVVNlMM3MAOHbI4.roa (hash: JKLOLgv3d9BtTTCj6wlSjdzlBfme6YgxxZZXaxE+z9Y=) 4: dbrSfqG4yJ8e6RjT1uN9s6dEGrQ.roa (hash: o+ewDMF8kuHL4BLfo2Z0qsDG7FEYFuX7LdWzLtyg2Y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:a7:ca:91:a6:3e:a9:0c:3f:c6:ef:88:4c:88:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7 Validity Not Before: Dec 21 07:01:33 2025 GMT Not After : Dec 22 07:01:33 2025 GMT Subject: CN=5a1a8b6555e22a84a3161f5b63d45cb3c96b0ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:31:90:89:08:70:6f:4a:fe:fc:57:8d:81:3a: 18:2d:86:74:c2:9b:8e:9a:c3:9d:4b:f1:a4:df:e3: 6c:ec:84:26:d3:36:64:b8:11:5d:be:c9:a0:ca:44: 37:ac:bb:b9:8a:20:60:10:ce:e9:99:b7:8e:93:3a: 05:53:9c:f2:dd:a9:31:62:e4:59:ed:e0:a3:ed:63: 97:07:91:cc:9a:f2:e9:40:8d:0d:6d:72:47:46:43: 9d:a1:2c:a6:98:39:ad:5a:03:64:8c:43:96:e1:95: a2:34:f6:51:d3:d0:ec:08:65:fb:b4:d6:3f:0c:7e: 41:bd:3f:6b:06:49:6c:87:d1:1f:ed:39:af:27:32: 0c:45:21:7f:9c:08:2c:ad:ac:a4:bc:36:05:c7:8d: ed:06:7d:76:65:fa:cb:ea:80:7d:70:37:92:5f:ac: 73:74:53:02:a3:90:e2:08:fa:a8:e0:b2:5e:4e:b2: f0:48:46:4d:e5:26:94:3b:7b:93:66:47:0d:c7:6b: 8a:8c:35:e7:1d:89:93:f1:92:34:3c:8b:90:e0:89: 45:33:b2:ff:c1:61:eb:99:12:3e:42:a2:6c:1e:de: ff:e4:a4:b5:ea:71:58:89:36:1b:68:d2:02:1d:8a: b3:f9:d4:10:20:38:f2:7a:6f:82:1f:5f:c3:e3:a3: eb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1A:8B:65:55:E2:2A:84:A3:16:1F:5B:63:D4:5C:B3:C9:6B:0C:E1 X509v3 Authority Key Identifier: keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:1d:11:40:5b:86:71:a9:e8:25:00:76:b5:91:f3:6a:66:a8: c0:f0:cf:4b:a0:8f:81:30:1f:f3:76:d6:4e:9c:e6:39:47:12: 97:b1:93:56:73:9d:35:a9:1e:55:87:2f:6a:57:6a:50:98:4d: 97:ac:10:0c:39:fc:21:17:90:7e:fa:f2:50:ea:54:53:eb:36: 27:69:7b:fa:80:df:9f:f2:ce:87:6e:c2:8a:4d:59:0d:ce:28: a3:6e:10:12:5a:f5:61:73:b3:a8:f7:49:0c:83:81:65:b0:5c: 1c:96:20:6d:26:de:58:60:0e:51:27:46:58:88:6a:30:e5:47: 1f:e2:67:fc:4f:08:0c:e4:cd:01:73:d4:6a:cf:26:86:d3:5a: 67:2d:16:28:4f:cc:63:30:d5:f7:d3:6e:82:04:7d:4b:5f:28: 23:15:54:cb:d9:73:a3:52:1b:32:a2:01:90:87:6e:b2:b2:c8: 77:b2:f4:19:1a:52:5d:5a:ac:6c:ba:d3:78:d7:9a:b5:ae:fe: a2:0f:24:20:77:08:e1:84:af:d6:6c:bb:b5:3b:37:91:ae:29: c3:f3:aa:b5:ed:ed:e5:94:d4:0c:75:cd:8e:18:7c:f6:57:b1: 4a:66:ec:54:b7:e3:d2:6a:e4:84:72:da:85:c8:78:21:d3:d9: 2a:cc:e1:3f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs/tqfKkaY+qQw/xu+ITIhbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjAzYTBjMDRiODFmZTE3NjZmYTQxYmQzMWI3M2I1ODgx ODhhYzcwHhcNMjUxMjIxMDcwMTMzWhcNMjUxMjIyMDcwMTMzWjAzMTEwLwYDVQQD Eyg1YTFhOGI2NTU1ZTIyYTg0YTMxNjFmNWI2M2Q0NWNiM2M5NmIwY2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TGQiQhwb0r+/FeNgToYLYZ0wpuO msOdS/Gk3+Ns7IQm0zZkuBFdvsmgykQ3rLu5iiBgEM7pmbeOkzoFU5zy3akxYuRZ 7eCj7WOXB5HMmvLpQI0NbXJHRkOdoSymmDmtWgNkjEOW4ZWiNPZR09DsCGX7tNY/ DH5BvT9rBklsh9Ef7TmvJzIMRSF/nAgsraykvDYFx43tBn12ZfrL6oB9cDeSX6xz dFMCo5DiCPqo4LJeTrLwSEZN5SaUO3uTZkcNx2uKjDXnHYmT8ZI0PIuQ4IlFM7L/ wWHrmRI+QqJsHt7/5KS16nFYiTYbaNICHYqz+dQQIDjyem+CH1/D46PrZwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFoai2VV4iqEoxYfW2PUXLPJawzhMB8GA1UdIwQY MBaAFPggOgwEuB/hdm+kG9Mbc7WIGIrHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DQTZEQVM0SC1GMmI2UWIweHR6dFlnWWlzYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvZTE0Y2EzLWRhOGUtNGI1OC04NjNh LTMzODk2MjBjMWJkNy8xLzEtQ0E2REFTNEgtRjJiNlFiMHh0enRZZ1lpc2MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzViL2UxNGNhMy1kYThlLTRiNTgtODYzYS0zMzg5NjIwYzFi ZDcvMS8xLUNBNkRBUzRILUYyYjZRYjB4dHp0WWdZaXNjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYh0R QFuGcanoJQB2tZHzamaowPDPS6CPgTAf83bWTpzmOUcSl7GTVnOdNakeVYcvaldq UJhNl6wQDDn8IReQfvryUOpUU+s2J2l7+oDfn/LOh27Cik1ZDc4oo24QElr1YXOz qPdJDIOBZbBcHJYgbSbeWGAOUSdGWIhqMOVHH+Jn/E8IDOTNAXPUas8mhtNaZy0W KE/MYzDV99NuggR9S18oIxVUy9lzo1IbMqIBkIdusrLId7L0GRpSXVqsbLrTeNea ta7+og8kIHcI4YSv1my7tTs3ka4pw/Oqte3t5ZTUDHXNjhh89lexSmbsVLfj0mrk hHLahch4IdPZKszhPw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:38:26 2025 by rpki-client