This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json) Hash identifier: v41veYjc/zzXC5ufCWwnJN6lKaP89yd3tDxgFq5GWz8= Subject key identifier: AD:5F:9A:45:0E:10:13:8D:5A:99:AF:21:7C:28:94:8C:9F:93:E4:AA Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33 Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533 Certificate serial: 019AF276B3D8CB56FDD06617967DC4A3B36A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft Manifest number: 03A5 Signing time: Sat 06 Dec 2025 07:00:56 +0000 Manifest this update: Sat 06 Dec 2025 07:00:56 +0000 Manifest next update: Sun 07 Dec 2025 07:00:56 +0000 Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: ZbcFRqaCJgp1ihgpnDvvSDkTqRcwu9hyANKncPKgemg=) 2: lVxazzssSIQktTuekaP8gaWWHmA.roa (hash: XZofJOcbbYfDn8B1ukHfJuS3+okkzKxPP+y/thGcTl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b3:d8:cb:56:fd:d0:66:17:96:7d:c4:a3:b3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=080702932802c2743d335f67d47a4238c3324533 Validity Not Before: Dec 6 07:00:56 2025 GMT Not After : Dec 7 07:00:56 2025 GMT Subject: CN=ad5f9a450e10138d5a99af217c28948c9f93e4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:00:d7:80:f5:b4:4e:48:b5:03:24:7c:b4: 46:be:0d:0a:8a:4d:b5:a3:f3:93:19:22:d2:da:27: df:e0:0c:fe:27:05:7f:1d:1c:8d:75:09:8f:17:52: ad:4c:c2:a6:b2:d8:d3:df:b0:02:b9:09:a8:d1:eb: da:81:79:4d:94:e3:14:6b:70:22:93:12:22:78:90: 7b:63:87:e7:c7:83:ae:94:0d:dc:f7:ea:45:01:b9: be:59:da:f1:81:64:9f:49:1a:9f:e2:d5:c9:9e:df: bc:75:af:7f:d0:78:fd:1f:e9:49:ee:fd:ba:6f:16: b5:c3:38:45:ba:4a:bd:ce:ad:57:a7:ef:0c:47:9b: 35:eb:f7:10:d8:a6:f0:f7:b9:a4:f4:a8:b6:86:60: 03:bd:db:7b:2e:eb:66:ae:43:31:0c:c9:20:0e:93: 65:9c:c2:45:cd:a8:82:ef:48:cd:ee:36:60:95:13: 8c:c1:b8:58:b1:48:68:fb:97:11:31:83:6c:e0:8f: 34:b0:e9:20:f6:c4:6f:85:b5:00:d2:11:ab:69:9c: d9:34:48:96:48:d3:24:b0:2b:5d:27:40:99:c7:73: 21:87:dd:a5:e2:c5:e0:1b:bd:6d:bb:1f:e5:0e:28: a4:c5:cd:a2:06:aa:30:4a:c2:50:70:54:d6:7e:eb: e5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5F:9A:45:0E:10:13:8D:5A:99:AF:21:7C:28:94:8C:9F:93:E4:AA X509v3 Authority Key Identifier: keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a9:33:64:42:aa:ff:10:8b:7c:5f:06:d9:e2:e4:fe:40:c9: ee:f9:3b:7d:b2:ad:10:4f:89:ca:a5:c5:1f:e2:43:7a:92:30: d9:b3:65:00:c9:fb:70:e3:12:8b:59:1c:3e:7d:bb:c3:51:96: 1d:94:04:ec:34:66:6f:ab:a4:22:0c:37:19:7b:69:7a:f9:d6: ab:87:e6:3c:52:ac:e1:77:f1:e4:25:c8:28:49:65:29:75:3c: 25:29:9f:21:16:c1:51:43:19:3b:8e:09:41:0b:07:fa:d9:07: b5:80:5f:5c:60:43:8b:3a:49:a7:10:ec:fb:cf:dd:65:35:43: 6d:71:69:31:93:1c:62:9f:3a:02:a9:53:f1:41:71:3b:b2:44: bf:ab:47:f1:1c:3f:23:5c:ed:73:99:bd:6f:36:c6:61:21:4e: b0:a0:de:10:a9:16:a6:29:3b:db:b3:37:38:be:bd:b5:63:c5: a7:bb:2d:38:03:0d:04:8e:4e:36:67:fd:b7:d2:3a:1e:7e:10: 6a:b8:d8:68:6b:9f:f3:fd:c5:d2:cb:a1:41:d1:da:73:41:57: f3:b2:7c:9d:4f:40:f2:ec:99:e6:88:02:38:6b:d3:ca:54:f9: a4:56:97:40:99:b3:20:5a:c3:c2:1e:a7:e4:8f:b5:c0:ca:a8: ec:1a:21:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrPYy1b90GYXln3Eo7NqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDcwMjkzMjgwMmMyNzQzZDMzNWY2N2Q0N2E0MjM4YzMz MjQ1MzMwHhcNMjUxMjA2MDcwMDU2WhcNMjUxMjA3MDcwMDU2WjAzMTEwLwYDVQQD EyhhZDVmOWE0NTBlMTAxMzhkNWE5OWFmMjE3YzI4OTQ4YzlmOTNlNGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSQA14D1tE5ItQMkfLRGvg0Kik21 o/OTGSLS2iff4Az+JwV/HRyNdQmPF1KtTMKmstjT37ACuQmo0evagXlNlOMUa3Ai kxIieJB7Y4fnx4OulA3c9+pFAbm+WdrxgWSfSRqf4tXJnt+8da9/0Hj9H+lJ7v26 bxa1wzhFukq9zq1Xp+8MR5s16/cQ2Kbw97mk9Ki2hmADvdt7LutmrkMxDMkgDpNl nMJFzaiC70jN7jZglROMwbhYsUho+5cRMYNs4I80sOkg9sRvhbUA0hGraZzZNEiW SNMksCtdJ0CZx3Mhh92l4sXgG71tux/lDiikxc2iBqowSsJQcFTWfuvlkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1fmkUOEBONWpmvIXwolIyfk+SqMB8GA1UdIwQY MBaAFAgHApMoAsJ0PTNfZ9R6QjjDMkUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODct NDgwZmViOTJkNzE4LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODctNDgwZmViOTJkNzE4 LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6kzZEKq /xCLfF8G2eLk/kDJ7vk7fbKtEE+JyqXFH+JDepIw2bNlAMn7cOMSi1kcPn27w1GW HZQE7DRmb6ukIgw3GXtpevnWq4fmPFKs4Xfx5CXIKEllKXU8JSmfIRbBUUMZO44J QQsH+tkHtYBfXGBDizpJpxDs+8/dZTVDbXFpMZMcYp86AqlT8UFxO7JEv6tH8Rw/ I1ztc5m9bzbGYSFOsKDeEKkWpik727M3OL69tWPFp7stOAMNBI5ONmf9t9I6Hn4Q arjYaGuf8/3F0suhQdHac0FX87J8nU9A8uyZ5ogCOGvTylT5pFaXQJmzIFrDwh6n 5I+1wMqo7BohZg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:57 2025 by rpki-client