This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json) Hash identifier: 7P+0L0Am/8o+n7QlZzos07qTJSuXuf168Y+aMOTedCA= Subject key identifier: 12:65:93:1F:DA:72:CC:1C:EE:06:DF:18:3B:C0:C6:AE:D4:97:6A:7D Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a Certificate serial: 019AF19B8D8DD6079C7ECED064557690BE7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft Manifest number: 085D Signing time: Sat 06 Dec 2025 03:01:34 +0000 Manifest this update: Sat 06 Dec 2025 03:01:34 +0000 Manifest next update: Sun 07 Dec 2025 03:01:34 +0000 Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: jY+JTKTToMSPe8cVBeX/hB1JhEGxpiWgzPFURc9kqPk=) 2: CepTD_sRHzQKM1km_XqGFUiFw_A.roa (hash: 6VmSpRvYGLL0kNu4j1w0e4FEukjB/A4DJqf8FlG66dI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:8d:8d:d6:07:9c:7e:ce:d0:64:55:76:90:be:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a Validity Not Before: Dec 6 03:01:34 2025 GMT Not After : Dec 7 03:01:34 2025 GMT Subject: CN=1265931fda72cc1cee06df183bc0c6aed4976a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ba:c4:92:f2:ea:d9:c5:68:1d:06:08:be:52: c5:00:fd:41:38:7e:e9:45:c7:23:96:54:b0:da:87: de:a8:c6:30:fc:27:6d:b0:9f:a1:1d:41:8b:c3:23: 7f:28:02:76:66:ab:2f:f9:17:ad:7d:36:54:06:42: 41:8b:d1:97:67:a6:b5:fa:2e:c3:26:79:a4:7f:f7: 86:e2:f8:00:22:81:3c:11:f5:8d:79:2e:cd:8b:5f: 9e:24:6a:8d:75:a3:78:22:03:a2:6f:28:92:f1:15: d8:40:6a:a3:a8:b7:01:c3:fb:31:de:ff:5a:4e:50: 12:46:fe:02:46:63:31:fc:ea:b5:1c:d7:94:66:79: 78:54:7c:d3:75:99:73:59:ff:52:2b:34:d1:cb:8a: e1:5c:06:7c:69:b0:fb:8e:50:15:15:e2:52:4a:51: 92:03:76:0a:f6:98:a8:00:0c:1f:fa:21:bd:6a:d4: 16:57:16:50:7d:9e:02:6c:27:1f:51:48:35:ae:dc: ca:0a:1a:3d:be:2b:c1:ad:58:63:ec:b3:bb:61:16: e3:5d:82:81:d9:da:09:fc:4e:9f:fd:18:f3:51:ff: b6:c6:3e:3f:03:a0:c7:e3:ca:32:31:d2:71:68:51: 84:e8:5e:3b:c3:a2:21:59:36:69:e9:7b:1e:0a:8e: 19:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:65:93:1F:DA:72:CC:1C:EE:06:DF:18:3B:C0:C6:AE:D4:97:6A:7D X509v3 Authority Key Identifier: keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2b:e2:1c:20:68:6c:b9:a9:d7:ef:9a:c4:87:11:a5:0a:f5: 00:1e:c0:47:c4:85:da:da:64:c3:1c:7e:7d:5a:33:4f:01:0f: 4d:d8:82:25:4c:62:57:b4:5c:16:c2:c7:c1:c2:00:c0:06:0b: e0:d7:74:f2:10:a2:a1:e9:b5:da:c5:87:24:3f:0c:fe:34:64: ac:da:28:28:86:6a:cb:55:89:05:30:1a:3a:2e:d5:31:bc:f5: df:40:0a:83:91:cf:af:43:6a:a1:b3:9a:a7:e2:48:ad:6e:67: ec:4e:bb:20:eb:62:70:c0:92:f7:23:b1:72:d2:e0:6a:1c:93: 69:6b:40:00:7a:10:9c:ee:fa:cb:78:47:95:41:f2:79:45:6a: 8e:b8:dd:72:06:3e:bf:2b:58:4a:9a:83:06:7a:92:e5:df:a6: f2:b4:e9:c8:57:84:4b:2e:88:e3:1a:97:36:98:26:bc:49:2b: b9:2b:ca:10:44:c0:f9:ea:af:e7:78:f1:ea:2b:9c:83:14:e5: c3:5c:f3:22:f1:65:f3:cf:d9:e6:11:21:aa:6b:c7:93:bc:68: b0:06:76:a0:52:64:09:83:a5:91:b0:d6:60:38:c2:12:ba:49: 83:74:21:4d:47:c2:f3:d9:72:4d:c2:0e:40:0a:c7:de:cf:15: 28:e4:2c:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm42N1gecfs7QZFV2kL5+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDRhY2U2OTQ2ZmI3MDFiYjJjNDVlMzBhY2FmZWE2NmRh YzJmN2EwHhcNMjUxMjA2MDMwMTM0WhcNMjUxMjA3MDMwMTM0WjAzMTEwLwYDVQQD EygxMjY1OTMxZmRhNzJjYzFjZWUwNmRmMTgzYmMwYzZhZWQ0OTc2YTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2brEkvLq2cVoHQYIvlLFAP1BOH7p RccjllSw2ofeqMYw/CdtsJ+hHUGLwyN/KAJ2Zqsv+RetfTZUBkJBi9GXZ6a1+i7D Jnmkf/eG4vgAIoE8EfWNeS7Ni1+eJGqNdaN4IgOibyiS8RXYQGqjqLcBw/sx3v9a TlASRv4CRmMx/Oq1HNeUZnl4VHzTdZlzWf9SKzTRy4rhXAZ8abD7jlAVFeJSSlGS A3YK9pioAAwf+iG9atQWVxZQfZ4CbCcfUUg1rtzKCho9vivBrVhj7LO7YRbjXYKB 2doJ/E6f/RjzUf+2xj4/A6DH48oyMdJxaFGE6F47w6IhWTZp6XseCo4ZSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJlkx/acswc7gbfGDvAxq7Ul2p9MB8GA1UdIwQY MBaAFAgErOaUb7cBuyxF4wrK/qZtrC96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81YmNlZTAtNTEyZS00MWY0LThkNmIt OTVkMTYzNjRkYmI5LzEvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81YmNlZTAtNTEyZS00MWY0LThkNmItOTVkMTYzNjRkYmI5 LzEvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyviHCBo bLmp1++axIcRpQr1AB7AR8SF2tpkwxx+fVozTwEPTdiCJUxiV7RcFsLHwcIAwAYL 4Nd08hCioem12sWHJD8M/jRkrNooKIZqy1WJBTAaOi7VMbz130AKg5HPr0NqobOa p+JIrW5n7E67IOticMCS9yOxctLgahyTaWtAAHoQnO76y3hHlUHyeUVqjrjdcgY+ vytYSpqDBnqS5d+m8rTpyFeESy6I4xqXNpgmvEkruSvKEETA+eqv53jx6iucgxTl w1zzIvFl88/Z5hEhqmvHk7xosAZ2oFJkCYOlkbDWYDjCErpJg3QhTUfC89lyTcIO QArH3s8VKOQsGA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:56:40 2025 by rpki-client