This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json) Hash identifier: yFmnkBSJOB/CeQA/Lt1MSKCqeBtVGikyRRUGZfruA+4= Subject key identifier: A0:B2:A2:01:9A:AF:86:49:C6:5E:03:B1:E0:7F:77:D2:10:DA:96:0A Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c Certificate serial: 019B4E848B12E9745120126B47EFFA95D680 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft Manifest number: 0507 Signing time: Wed 24 Dec 2025 04:01:07 +0000 Manifest this update: Wed 24 Dec 2025 04:01:07 +0000 Manifest next update: Thu 25 Dec 2025 04:01:07 +0000 Files and hashes: 1: B3Ys6xmlqC9wLcdB3cpexOusdU8.roa (hash: KigHTwHmCj6upextpp39A2hT194k5nIpvq7I4qZjAqg=) 2: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: u7iO5+/2WmnHDdcMkOEav/5VthGtuUmkrTKtblEmRG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:8b:12:e9:74:51:20:12:6b:47:ef:fa:95:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c Validity Not Before: Dec 24 04:01:07 2025 GMT Not After : Dec 25 04:01:07 2025 GMT Subject: CN=a0b2a2019aaf8649c65e03b1e07f77d210da960a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b4:0f:39:9d:bc:34:09:b2:d1:61:2d:17:2e: 3c:23:57:fb:98:42:95:14:78:b4:7d:57:a5:40:90: ce:66:4b:03:37:5a:34:6d:f4:0a:9a:77:6a:ee:2d: ee:6e:c9:16:1f:f0:1e:2f:d4:6f:04:08:3f:ac:bb: f8:ea:9a:5d:46:ed:98:ea:d2:40:ce:c2:ca:e2:6d: cd:39:0a:b8:82:d6:3b:b3:58:af:7c:04:53:45:db: b5:d3:4d:60:a6:7a:35:eb:42:79:73:6e:e1:14:14: 9a:d7:2d:04:14:38:53:93:1d:b3:f8:18:75:76:73: ce:ba:7a:52:c9:5b:a4:37:35:c6:ac:ff:4e:5e:fb: f8:cc:ff:d0:8c:95:45:88:ab:71:4e:69:a8:4a:7c: db:ba:4f:e5:88:e7:2a:96:6d:a1:d3:e6:d9:cd:b5: 79:04:7d:4c:a8:a7:fc:25:b6:04:98:3a:32:79:41: fe:c8:a5:33:05:05:d1:29:12:96:6d:70:91:0a:71: e8:0b:8e:09:a7:10:ad:cd:d3:2a:be:49:7e:b0:3d: 28:a2:08:f3:41:50:7f:5a:69:2a:49:59:eb:6c:e7: b3:99:2e:4a:e1:2a:66:ca:17:18:0b:b3:2d:0a:4e: 76:ba:b9:c2:00:bb:14:1a:02:bc:c2:5c:13:85:b9: 7a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B2:A2:01:9A:AF:86:49:C6:5E:03:B1:E0:7F:77:D2:10:DA:96:0A X509v3 Authority Key Identifier: keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:80:08:67:54:54:19:47:67:4a:a7:ba:79:f9:2e:31:cb:1d: c4:c1:9f:64:6f:91:51:55:a5:99:8f:3c:cb:3a:07:62:8e:05: b6:2c:58:9b:eb:bb:bb:3b:25:b2:5b:7c:68:f9:d9:b0:28:2f: 1a:5c:a1:ea:cc:69:4e:ec:54:98:e3:ca:aa:dd:ab:e2:46:68: ba:1d:0f:ea:4f:14:e9:9f:41:d1:86:e2:37:65:98:44:06:8b: cf:3c:ad:5d:2d:40:36:98:03:56:23:23:ba:55:06:25:88:d9: f2:72:72:3b:8f:53:07:da:73:47:24:49:60:b7:8e:45:c2:f8: f4:05:f6:fe:46:ef:cf:c2:f4:b1:87:0e:03:fa:3e:f5:bb:ef: 0b:ab:04:67:3f:3d:eb:75:3f:3d:31:f1:f1:03:b4:ad:c2:7d: ae:2f:d4:8a:4c:36:d7:f7:3c:7a:58:7d:ea:35:2c:df:b1:62: 64:37:9e:a2:3c:2a:83:ea:3c:28:07:b5:11:be:42:8f:07:3d: c2:ab:84:d9:4d:a1:24:ed:91:30:30:9c:40:05:ce:2d:85:c5: a4:02:64:2b:50:2c:82:79:25:e4:04:55:a8:dd:fd:9a:1e:e2: bc:bd:d2:96:e0:44:77:48:8f:b7:06:b8:7b:cc:38:be:50:e0: c1:eb:ba:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhIsS6XRRIBJrR+/6ldaAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzZiOTc3MzY3NjJkNjkwODBiNDNkOWIwMGM2MWFmMWQz MTFkOGMwHhcNMjUxMjI0MDQwMTA3WhcNMjUxMjI1MDQwMTA3WjAzMTEwLwYDVQQD EyhhMGIyYTIwMTlhYWY4NjQ5YzY1ZTAzYjFlMDdmNzdkMjEwZGE5NjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bQPOZ28NAmy0WEtFy48I1f7mEKV FHi0fVelQJDOZksDN1o0bfQKmndq7i3ubskWH/AeL9RvBAg/rLv46ppdRu2Y6tJA zsLK4m3NOQq4gtY7s1ivfARTRdu1001gpno160J5c27hFBSa1y0EFDhTkx2z+Bh1 dnPOunpSyVukNzXGrP9OXvv4zP/QjJVFiKtxTmmoSnzbuk/liOcqlm2h0+bZzbV5 BH1MqKf8JbYEmDoyeUH+yKUzBQXRKRKWbXCRCnHoC44JpxCtzdMqvkl+sD0oogjz QVB/WmkqSVnrbOezmS5K4SpmyhcYC7MtCk52urnCALsUGgK8wlwThbl6yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCyogGar4ZJxl4DseB/d9IQ2pYKMB8GA1UdIwQY MBaAFAo2uXc2di1pCAtD2bAMYa8dMR2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjIt MWEzMjI2ODMyYzkxLzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjItMWEzMjI2ODMyYzkx LzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooAIZ1RU GUdnSqe6efkuMcsdxMGfZG+RUVWlmY88yzoHYo4FtixYm+u7uzslslt8aPnZsCgv Glyh6sxpTuxUmOPKqt2r4kZouh0P6k8U6Z9B0YbiN2WYRAaLzzytXS1ANpgDViMj ulUGJYjZ8nJyO49TB9pzRyRJYLeORcL49AX2/kbvz8L0sYcOA/o+9bvvC6sEZz89 63U/PTHx8QO0rcJ9ri/Uikw21/c8elh96jUs37FiZDeeojwqg+o8KAe1Eb5Cjwc9 wquE2U2hJO2RMDCcQAXOLYXFpAJkK1Asgnkl5ARVqN39mh7ivL3SluBEd0iPtwa4 e8w4vlDgweu6JQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:08:36 2025 by rpki-client