This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft File: cA5JDhDqN72DSWKGM7WIVmHmegI.mft (raw, json) Hash identifier: FVQVV6bM4940YvsNI2yJfEtaZoQrHmfs7OuStviHjN0= Subject key identifier: 8F:AB:1A:FB:47:BC:EF:62:2E:B7:FD:9D:B4:71:EC:5C:A1:24:D4:BD Authority key identifier: 70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02 Certificate issuer: /CN=700e490e10ea37bd8349628633b5885661e67a02 Certificate serial: 019B2EFA728D4F4FC396FC8B1F1AF3511A74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft Manifest number: 028B Signing time: Thu 18 Dec 2025 01:02:03 +0000 Manifest this update: Thu 18 Dec 2025 01:02:03 +0000 Manifest next update: Fri 19 Dec 2025 01:02:03 +0000 Files and hashes: 1: cA5JDhDqN72DSWKGM7WIVmHmegI.crl (hash: 1Ifv3teBVoxf1c2Uz4It5qmSELRl4jq0ONjOS4Qrkjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:72:8d:4f:4f:c3:96:fc:8b:1f:1a:f3:51:1a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700e490e10ea37bd8349628633b5885661e67a02 Validity Not Before: Dec 18 01:02:03 2025 GMT Not After : Dec 19 01:02:03 2025 GMT Subject: CN=8fab1afb47bcef622eb7fd9db471ec5ca124d4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:13:09:fa:10:53:08:2f:cd:c7:50:9a:58:1d: 15:24:a4:34:24:73:e1:f1:9c:37:3b:03:11:80:cf: e3:7b:f1:94:42:98:ca:00:2e:09:f0:7b:10:47:f3: 5d:e0:69:62:41:4d:06:cc:d5:f4:30:70:e1:3f:99: 2d:fa:d2:bc:ea:a4:9a:5f:bb:55:3a:d5:f3:e5:71: 5b:40:d8:f9:87:d1:c7:32:3f:89:72:99:3a:b3:1e: d4:49:15:48:eb:41:5a:cc:81:42:5a:99:74:ac:be: 58:fa:69:2c:ec:76:20:35:6e:70:61:63:4c:d7:65: 08:cb:32:e3:17:c3:da:8d:6b:64:24:84:ea:99:64: df:53:54:c9:a1:aa:18:85:07:e2:a9:71:34:39:2a: 23:fc:a9:5e:f6:16:2e:7b:fc:35:af:18:86:38:54: a2:1d:8e:8b:36:75:44:3e:0f:6e:48:73:de:7d:f5: fb:3d:bb:66:cb:ae:5c:71:1b:3e:b7:9a:e4:3f:bb: b1:c4:dd:64:63:56:73:07:7c:b7:00:5a:6b:c5:32: b2:bd:be:e7:24:9b:b2:a0:56:13:5f:6e:5d:05:95: 32:ed:3e:61:94:42:d2:75:a3:34:7c:e0:2f:06:a5: 36:ad:c1:e3:1f:54:40:f4:6b:2e:7c:c7:11:8a:7d: 93:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AB:1A:FB:47:BC:EF:62:2E:B7:FD:9D:B4:71:EC:5C:A1:24:D4:BD X509v3 Authority Key Identifier: keyid:70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:89:3f:14:24:a6:4e:61:7e:a7:46:f6:9d:3b:b5:da:f8:c2: be:71:55:9e:bb:b8:3c:47:a8:6c:37:c1:b4:d8:e1:a5:ca:a4: 1d:26:8d:65:47:99:62:d7:5e:2f:6f:d9:32:ec:8e:be:bc:c5: 80:1b:3a:2d:76:ee:61:ea:77:2d:0f:6b:e3:f4:59:ca:a5:cd: b3:6a:17:c2:91:e0:d1:ea:d4:83:2c:9a:33:3c:62:ee:a0:86: d5:c7:1d:73:60:5e:65:13:15:31:f6:e3:4d:24:cd:72:70:11: b4:fd:09:b7:05:84:8c:1f:3b:33:c5:f9:5e:61:39:ad:49:11: 58:74:27:14:0f:58:0a:d9:be:bf:63:f4:cb:1b:4d:15:0c:30: fe:e3:3f:7c:05:96:81:dc:a6:0b:e0:d2:ce:af:23:0e:b8:56: ce:38:ed:4a:78:b8:04:2a:16:1f:ef:5f:c6:a7:6c:fe:83:a0: bd:3a:5d:94:a2:09:75:0d:ad:53:10:78:50:24:d0:93:3c:4e: b6:9d:70:b7:d3:51:1a:60:b5:ba:fd:f3:f9:54:14:a7:03:7a: 78:fe:55:d4:9c:70:ec:18:64:c9:dd:b6:be:42:ec:0d:09:2f: d4:66:9c:aa:68:23:5f:00:5e:97:cb:7f:9c:ee:e0:fb:1c:77: f6:50:27:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+nKNT0/DlvyLHxrzURp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMGU0OTBlMTBlYTM3YmQ4MzQ5NjI4NjMzYjU4ODU2NjFl NjdhMDIwHhcNMjUxMjE4MDEwMjAzWhcNMjUxMjE5MDEwMjAzWjAzMTEwLwYDVQQD Eyg4ZmFiMWFmYjQ3YmNlZjYyMmViN2ZkOWRiNDcxZWM1Y2ExMjRkNGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xMJ+hBTCC/Nx1CaWB0VJKQ0JHPh 8Zw3OwMRgM/je/GUQpjKAC4J8HsQR/Nd4GliQU0GzNX0MHDhP5kt+tK86qSaX7tV OtXz5XFbQNj5h9HHMj+Jcpk6sx7USRVI60FazIFCWpl0rL5Y+mks7HYgNW5wYWNM 12UIyzLjF8PajWtkJITqmWTfU1TJoaoYhQfiqXE0OSoj/Kle9hYue/w1rxiGOFSi HY6LNnVEPg9uSHPeffX7Pbtmy65ccRs+t5rkP7uxxN1kY1ZzB3y3AFprxTKyvb7n JJuyoFYTX25dBZUy7T5hlELSdaM0fOAvBqU2rcHjH1RA9GsufMcRin2TuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+rGvtHvO9iLrf9nbRx7FyhJNS9MB8GA1UdIwQY MBaAFHAOSQ4Q6je9g0lihjO1iFZh5noCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hODBiNmQtY2NiNy00NGMyLWI0M2Yt ZWE2YjBiZTVjYWVlLzEvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9hODBiNmQtY2NiNy00NGMyLWI0M2YtZWE2YjBiZTVjYWVl LzEvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYk/FCSm TmF+p0b2nTu12vjCvnFVnru4PEeobDfBtNjhpcqkHSaNZUeZYtdeL2/ZMuyOvrzF gBs6LXbuYep3LQ9r4/RZyqXNs2oXwpHg0erUgyyaMzxi7qCG1ccdc2BeZRMVMfbj TSTNcnARtP0JtwWEjB87M8X5XmE5rUkRWHQnFA9YCtm+v2P0yxtNFQww/uM/fAWW gdymC+DSzq8jDrhWzjjtSni4BCoWH+9fxqds/oOgvTpdlKIJdQ2tUxB4UCTQkzxO tp1wt9NRGmC1uv3z+VQUpwN6eP5V1Jxw7Bhkyd22vkLsDQkv1GacqmgjXwBel8t/ nO7g+xx39lAn9w== -----END CERTIFICATE-----Generated at Thu Dec 18 11:13:59 2025 by rpki-client