This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft File: cAAC6c0sdKDvi1G0DUTRQaky0oM.mft (raw, json) Hash identifier: IIbrgxuDXrZ9m7SjsSaMPcgdueTvRipWTkfK4lWL5EY= Subject key identifier: 96:5E:D9:5C:81:9B:A2:DA:92:A1:33:1B:E5:F7:8D:43:9A:A3:5F:39 Authority key identifier: 70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83 Certificate issuer: /CN=700002e9cd2c74a0ef8b51b40d44d141a932d283 Certificate serial: 019B33442057029DCD4CD32A8E3ADADC2738 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft Manifest number: 0F1E Signing time: Thu 18 Dec 2025 21:01:01 +0000 Manifest this update: Thu 18 Dec 2025 21:01:01 +0000 Manifest next update: Fri 19 Dec 2025 21:01:01 +0000 Files and hashes: 1: 7oIzidmPV5DMaJu71KEE7TN3jrE.roa (hash: kCtY+zZ5Nv1Tl34nUDS681Pc5/oW0aaVlayqB3KyvjU=) 2: cAAC6c0sdKDvi1G0DUTRQaky0oM.crl (hash: f6RV666zbSNgIJSv2xQsiRSF2U0VirSxj2Oh7+Okhak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:20:57:02:9d:cd:4c:d3:2a:8e:3a:da:dc:27:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700002e9cd2c74a0ef8b51b40d44d141a932d283 Validity Not Before: Dec 18 21:01:01 2025 GMT Not After : Dec 19 21:01:01 2025 GMT Subject: CN=965ed95c819ba2da92a1331be5f78d439aa35f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c0:bd:6b:0e:e5:bc:87:07:3c:95:7a:da:fc: 2c:85:4d:fd:df:59:5e:b8:de:a0:da:6f:6a:b4:72: 3f:08:ae:2e:3c:34:68:d3:d2:4c:8f:58:89:e4:ed: c7:03:b5:8f:3e:53:f4:fd:1b:25:80:e7:de:1b:12: 00:af:68:36:41:7d:0f:71:a8:d9:2d:2c:90:44:df: e6:00:98:2e:bb:bd:dd:0c:e4:76:2b:7b:2c:cf:c9: ae:52:ba:e9:87:e7:a1:c0:79:86:89:63:aa:4b:ea: 68:1b:3c:94:24:fc:9c:e5:d0:5d:e4:d4:ac:64:0d: f6:28:96:9d:87:db:b0:b8:06:1d:69:7b:ad:de:e1: 94:34:0b:10:bb:65:9e:94:af:cc:79:b8:99:fa:5d: a6:4c:62:ef:49:ad:3e:92:c8:6d:a3:13:d1:fa:f6: 10:91:1b:fa:a2:bb:61:cd:84:96:74:df:ce:9d:43: 2f:cf:ea:87:56:1f:f7:0e:27:16:6d:16:4a:a7:ca: 11:a6:04:d9:91:3d:34:3f:d8:1b:f9:50:23:80:87: 99:e5:a8:79:45:7c:76:cb:66:ed:e1:91:90:d1:56: be:d8:7d:05:81:bf:d5:85:40:cf:4f:f7:29:d5:f7: c2:87:91:8f:3f:04:02:11:99:1e:dd:cf:a3:98:a8: ab:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5E:D9:5C:81:9B:A2:DA:92:A1:33:1B:E5:F7:8D:43:9A:A3:5F:39 X509v3 Authority Key Identifier: keyid:70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ec:91:8f:0e:1e:8a:28:41:96:f9:f2:dc:eb:4d:b3:49:aa: ea:c2:a0:f9:40:20:01:83:1c:79:ee:e6:fa:ad:4d:e4:92:23: 35:d7:6e:e9:20:51:6e:e0:fa:bd:81:49:5b:d1:59:0f:0e:82: 51:47:68:82:57:c6:be:57:da:56:79:36:45:90:69:2b:99:d0: 6f:28:0f:33:9d:72:a7:b8:2a:0f:0d:0b:16:75:3e:b6:63:6e: d6:f9:79:9d:5b:f5:99:f2:b6:62:f2:78:af:4a:20:88:da:bc: 6e:c7:ff:48:3e:c1:56:ce:8e:4b:ae:3f:ea:04:dc:2f:b9:95: 88:e0:6d:f6:3a:5c:cd:f7:62:3f:62:5b:b7:ad:2e:5f:69:18: db:d9:6a:24:32:a2:0f:fa:f4:b5:12:fd:86:7a:ba:df:a7:5d: 63:91:de:81:9e:6b:e4:c3:35:2f:d8:26:49:f4:51:08:a6:13: d8:00:f6:69:85:e8:f6:b2:9b:99:ed:3d:74:1c:68:3b:fe:6f: 49:2f:d6:ed:44:b2:d3:ae:28:65:da:0a:ad:4c:34:d3:95:d5: 3f:03:e2:d0:84:51:8e:95:55:41:e5:a2:53:96:53:7b:24:be: 08:17:1c:62:90:00:bb:5d:80:97:65:21:33:c7:cc:75:92:03: 0c:ab:09:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRCBXAp3NTNMqjjra3Cc4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMDAwMmU5Y2QyYzc0YTBlZjhiNTFiNDBkNDRkMTQxYTkz MmQyODMwHhcNMjUxMjE4MjEwMTAxWhcNMjUxMjE5MjEwMTAxWjAzMTEwLwYDVQQD Eyg5NjVlZDk1YzgxOWJhMmRhOTJhMTMzMWJlNWY3OGQ0MzlhYTM1ZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMC9aw7lvIcHPJV62vwshU3931le uN6g2m9qtHI/CK4uPDRo09JMj1iJ5O3HA7WPPlP0/RslgOfeGxIAr2g2QX0PcajZ LSyQRN/mAJguu73dDOR2K3ssz8muUrrph+ehwHmGiWOqS+poGzyUJPyc5dBd5NSs ZA32KJadh9uwuAYdaXut3uGUNAsQu2WelK/MebiZ+l2mTGLvSa0+kshtoxPR+vYQ kRv6orthzYSWdN/OnUMvz+qHVh/3DicWbRZKp8oRpgTZkT00P9gb+VAjgIeZ5ah5 RXx2y2bt4ZGQ0Va+2H0Fgb/VhUDPT/cp1ffCh5GPPwQCEZke3c+jmKirWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZe2VyBm6LakqEzG+X3jUOao185MB8GA1UdIwQY MBaAFHAAAunNLHSg74tRtA1E0UGpMtKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FBQzZjMHNkS0R2aTFHMERVVFJRYWt5MG9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81MmUwYmMtOTYyOS00YTIwLWEwMDIt OTA5MjA5MzU2YjJmLzEvY0FBQzZjMHNkS0R2aTFHMERVVFJRYWt5MG9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81MmUwYmMtOTYyOS00YTIwLWEwMDItOTA5MjA5MzU2YjJm LzEvY0FBQzZjMHNkS0R2aTFHMERVVFJRYWt5MG9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+yRjw4e iihBlvny3OtNs0mq6sKg+UAgAYMcee7m+q1N5JIjNddu6SBRbuD6vYFJW9FZDw6C UUdoglfGvlfaVnk2RZBpK5nQbygPM51yp7gqDw0LFnU+tmNu1vl5nVv1mfK2YvJ4 r0ogiNq8bsf/SD7BVs6OS64/6gTcL7mViOBt9jpczfdiP2Jbt60uX2kY29lqJDKi D/r0tRL9hnq636ddY5HegZ5r5MM1L9gmSfRRCKYT2AD2aYXo9rKbme09dBxoO/5v SS/W7USy064oZdoKrUw005XVPwPi0IRRjpVVQeWiU5ZTeyS+CBccYpAAu12Al2Uh M8fMdZIDDKsJaQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:28 2025 by rpki-client