This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json) Hash identifier: O0inYhkQgHoFB74YqLPyvq3jcEQrnCaa3xkG1WrLKRY= Subject key identifier: 8A:BA:21:26:FE:0A:25:DC:F0:18:2C:F9:AA:37:C6:36:C9:55:02:5D Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c Certificate serial: 019B40FFF905BCF7B562B97A0E1DB6FAE909 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft Manifest number: 0500 Signing time: Sun 21 Dec 2025 13:01:15 +0000 Manifest this update: Sun 21 Dec 2025 13:01:15 +0000 Manifest next update: Mon 22 Dec 2025 13:01:15 +0000 Files and hashes: 1: B3Ys6xmlqC9wLcdB3cpexOusdU8.roa (hash: KigHTwHmCj6upextpp39A2hT194k5nIpvq7I4qZjAqg=) 2: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: TCAKIot43366CzZMtogczPpRFM90Fy3240XzoetQ0YU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:f9:05:bc:f7:b5:62:b9:7a:0e:1d:b6:fa:e9:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c Validity Not Before: Dec 21 13:01:15 2025 GMT Not After : Dec 22 13:01:15 2025 GMT Subject: CN=8aba2126fe0a25dcf0182cf9aa37c636c955025d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:56:f5:6c:8e:fe:13:d2:63:c5:cc:cd:1b:c4: 45:a9:3c:e1:e3:6a:03:0c:6b:56:85:53:df:74:b8: ad:ef:e9:f1:11:3d:1b:75:22:b4:7d:13:49:29:3b: 28:2e:e3:6f:8d:82:6c:d8:bb:25:6b:d8:81:83:1f: 95:f3:82:10:5c:22:7a:ad:00:48:ef:99:e6:27:57: 5a:bc:bb:b7:77:59:c3:10:f7:b2:e3:fe:ae:ae:e3: b8:28:52:4b:e4:9d:ad:ad:e4:fd:8c:d7:e8:95:a6: ff:bf:14:17:1b:62:41:cb:16:39:b6:f4:59:46:07: 60:78:22:cf:e0:27:5b:b4:2e:6d:fa:43:19:dc:d7: 25:9f:a9:e0:08:e0:40:8d:a3:80:42:9c:f8:6a:90: d2:72:65:9f:46:5e:0c:dc:e0:28:59:97:b6:85:72: c2:03:3b:db:84:76:b6:7b:e0:ca:e5:6a:7c:3a:37: b5:5d:f7:bf:04:b1:85:b3:ec:ff:68:56:0e:d9:75: 2d:49:eb:ca:06:09:f4:2c:b4:6f:e6:19:11:64:fc: 8f:26:55:44:43:e1:00:69:60:76:38:90:bc:13:e8: 39:cc:98:ab:b5:f6:ee:70:77:ca:8b:80:42:96:a2: f7:11:67:5d:c7:bb:71:9d:76:cd:b1:89:33:62:ef: 0b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BA:21:26:FE:0A:25:DC:F0:18:2C:F9:AA:37:C6:36:C9:55:02:5D X509v3 Authority Key Identifier: keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:89:62:5c:3d:d4:db:a1:04:a9:5c:bd:c3:b8:3d:fa:d4:eb: 88:e9:fc:28:73:07:7d:bd:7c:b8:f0:bf:de:f4:ab:e8:ab:30: b9:cc:d2:12:42:9e:b5:2e:29:15:65:90:7e:6c:de:d7:4d:27: 7a:6c:de:8a:50:1d:dd:2d:94:3b:01:36:05:08:5a:01:c7:81: 4c:ed:08:c3:42:48:74:d9:21:a1:61:61:ad:19:5e:d5:95:41: 41:17:f0:9c:37:27:89:f8:0d:51:74:73:87:63:5b:d3:4f:33: 00:89:b2:d1:12:1a:51:5f:5f:c3:85:cc:e4:80:80:13:c7:42: c3:32:07:3e:53:12:d3:bc:b2:0e:f1:99:3e:44:ad:cd:73:bd: 6e:29:de:5f:4f:1d:4d:c9:3e:a3:e0:f2:e6:27:33:ff:2a:24: 0f:9c:4c:74:a2:76:6f:1a:fd:9a:c0:34:0f:94:9a:7a:ff:03: ce:cb:0e:bb:70:9b:db:ce:ac:93:66:34:b7:b1:54:aa:ff:da: 34:96:f6:41:60:dd:ee:b4:5f:51:4b:27:10:5a:2b:06:9d:e1: fe:77:0f:32:34:36:a5:88:35:1c:3a:e0:be:50:ee:9f:ef:a6: c0:31:c1:56:02:b0:58:5a:94:2d:e9:24:6b:a0:64:37:07:37: c3:8a:88:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA//kFvPe1Yrl6Dh22+ukJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzZiOTc3MzY3NjJkNjkwODBiNDNkOWIwMGM2MWFmMWQz MTFkOGMwHhcNMjUxMjIxMTMwMTE1WhcNMjUxMjIyMTMwMTE1WjAzMTEwLwYDVQQD Eyg4YWJhMjEyNmZlMGEyNWRjZjAxODJjZjlhYTM3YzYzNmM5NTUwMjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Fb1bI7+E9JjxczNG8RFqTzh42oD DGtWhVPfdLit7+nxET0bdSK0fRNJKTsoLuNvjYJs2Lsla9iBgx+V84IQXCJ6rQBI 75nmJ1davLu3d1nDEPey4/6uruO4KFJL5J2treT9jNfolab/vxQXG2JByxY5tvRZ RgdgeCLP4CdbtC5t+kMZ3Ncln6ngCOBAjaOAQpz4apDScmWfRl4M3OAoWZe2hXLC AzvbhHa2e+DK5Wp8Oje1Xfe/BLGFs+z/aFYO2XUtSevKBgn0LLRv5hkRZPyPJlVE Q+EAaWB2OJC8E+g5zJirtfbucHfKi4BClqL3EWddx7txnXbNsYkzYu8LkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIq6ISb+CiXc8Bgs+ao3xjbJVQJdMB8GA1UdIwQY MBaAFAo2uXc2di1pCAtD2bAMYa8dMR2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjIt MWEzMjI2ODMyYzkxLzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjItMWEzMjI2ODMyYzkx LzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYliXD3U 26EEqVy9w7g9+tTriOn8KHMHfb18uPC/3vSr6KswuczSEkKetS4pFWWQfmze100n emzeilAd3S2UOwE2BQhaAceBTO0Iw0JIdNkhoWFhrRle1ZVBQRfwnDcnifgNUXRz h2Nb008zAImy0RIaUV9fw4XM5ICAE8dCwzIHPlMS07yyDvGZPkStzXO9bineX08d Tck+o+Dy5icz/yokD5xMdKJ2bxr9msA0D5Saev8DzssOu3Cb286sk2Y0t7FUqv/a NJb2QWDd7rRfUUsnEForBp3h/ncPMjQ2pYg1HDrgvlDun++mwDHBVgKwWFqULekk a6BkNwc3w4qIow== -----END CERTIFICATE-----Generated at Sun Dec 21 19:27:02 2025 by rpki-client