This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json) Hash identifier: yefBSK6OcgJHDV0FPe3DHB7P0TwskyohFBV5o+Eec+8= Subject key identifier: A9:C2:19:90:D1:66:D7:9C:DF:7E:66:CA:F0:10:2E:5C:AC:C0:89:B4 Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a Certificate serial: 019B2B8AD6216C21643E7C8348451CE25E81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft Manifest number: 087B Signing time: Wed 17 Dec 2025 09:01:17 +0000 Manifest this update: Wed 17 Dec 2025 09:01:17 +0000 Manifest next update: Thu 18 Dec 2025 09:01:17 +0000 Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: 51MbBNZcMbMK9eTUjAEufPyec7VnlOIdvTxj/cGaWxg=) 2: CepTD_sRHzQKM1km_XqGFUiFw_A.roa (hash: 6VmSpRvYGLL0kNu4j1w0e4FEukjB/A4DJqf8FlG66dI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:d6:21:6c:21:64:3e:7c:83:48:45:1c:e2:5e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a Validity Not Before: Dec 17 09:01:17 2025 GMT Not After : Dec 18 09:01:17 2025 GMT Subject: CN=a9c21990d166d79cdf7e66caf0102e5cacc089b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:25:ce:1b:71:18:bd:b0:8d:67:5a:20:11:1f: e1:bb:60:65:f7:e6:a7:15:c0:27:bb:af:a2:c4:1f: 90:76:b3:6a:0e:74:24:b3:de:f9:7f:af:f0:e0:ba: 19:32:bc:7d:50:51:2f:62:85:22:bc:73:37:80:40: c0:0c:1d:9b:c1:a3:2d:ad:a3:f8:ba:71:7c:8b:ee: e8:9e:31:eb:1a:ba:de:7e:42:8f:18:09:fa:05:51: 89:7b:51:49:ab:c1:55:bd:86:4c:42:14:9b:fa:b2: 9c:85:4e:3a:04:dc:4d:20:88:6b:97:22:99:c8:30: ff:53:46:b8:52:67:d7:c5:a1:0e:9b:3c:c6:64:f5: db:d9:5a:ef:06:0c:93:43:67:68:11:ec:b9:73:5c: 27:aa:75:1f:f6:32:c6:0a:c1:c2:45:bb:f0:74:d0: 4c:db:e6:b6:7c:29:86:7b:5f:15:73:3b:af:41:9b: 25:fa:d9:74:a0:51:e6:69:dd:23:6e:69:ba:30:6e: 11:cd:9d:8f:6a:7d:5e:e8:2f:2a:bc:9d:e0:24:92: 02:f0:4a:3f:5d:9c:a2:ae:b6:cc:8a:20:69:a9:49: 86:c0:a8:78:28:d5:f1:97:74:64:a3:f3:bb:7f:55: a4:15:12:10:11:1c:2d:90:7f:21:c3:6a:24:67:d5: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C2:19:90:D1:66:D7:9C:DF:7E:66:CA:F0:10:2E:5C:AC:C0:89:B4 X509v3 Authority Key Identifier: keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d1:7f:71:75:77:58:52:8f:7f:9a:44:8b:34:35:aa:14:2a: 8c:4d:e3:45:3c:a3:28:85:23:25:6d:c3:83:97:64:9e:a6:59: a3:ad:bf:4e:ee:8f:63:15:1f:10:55:fe:b6:54:34:5f:9f:55: 39:07:90:a3:e5:4d:13:85:94:8f:7e:a3:85:42:1d:87:87:8a: b6:50:d7:39:a6:e3:3a:e6:39:39:f9:09:68:c7:ff:c0:a2:b6: 7b:8c:ad:2c:49:77:57:54:69:a3:ec:72:59:1e:33:69:28:5f: 5b:cd:67:dc:dd:06:f0:77:09:b4:42:5e:a2:5c:50:1e:82:35: 93:f6:82:27:1c:bd:ac:e1:7e:a3:96:f2:33:0d:30:56:97:d9: bd:42:d5:08:d2:dd:4e:3a:32:04:2b:00:1e:9f:59:27:67:a2: 97:2f:c3:c4:18:3c:38:0e:6e:f7:0f:01:c0:54:e3:ec:dc:20: 99:36:ef:90:cf:ac:84:d8:ef:2b:5f:ba:c9:7c:c5:e2:0b:4b: 32:31:ee:ab:ce:71:c4:3f:10:42:fc:94:17:c3:cd:04:ae:61: b6:fa:57:be:26:ed:57:f6:16:18:ad:89:8d:1f:0b:fe:be:8a: 7e:cb:a5:7e:a8:24:f8:4f:e2:63:8e:e2:0f:c4:a4:12:b4:95: 02:7e:3d:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsritYhbCFkPnyDSEUc4l6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDRhY2U2OTQ2ZmI3MDFiYjJjNDVlMzBhY2FmZWE2NmRh YzJmN2EwHhcNMjUxMjE3MDkwMTE3WhcNMjUxMjE4MDkwMTE3WjAzMTEwLwYDVQQD EyhhOWMyMTk5MGQxNjZkNzljZGY3ZTY2Y2FmMDEwMmU1Y2FjYzA4OWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCXOG3EYvbCNZ1ogER/hu2Bl9+an FcAnu6+ixB+QdrNqDnQks975f6/w4LoZMrx9UFEvYoUivHM3gEDADB2bwaMtraP4 unF8i+7onjHrGrrefkKPGAn6BVGJe1FJq8FVvYZMQhSb+rKchU46BNxNIIhrlyKZ yDD/U0a4UmfXxaEOmzzGZPXb2VrvBgyTQ2doEey5c1wnqnUf9jLGCsHCRbvwdNBM 2+a2fCmGe18VczuvQZsl+tl0oFHmad0jbmm6MG4RzZ2Pan1e6C8qvJ3gJJIC8Eo/ XZyirrbMiiBpqUmGwKh4KNXxl3Rko/O7f1WkFRIQERwtkH8hw2okZ9WMrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnCGZDRZtec335myvAQLlyswIm0MB8GA1UdIwQY MBaAFAgErOaUb7cBuyxF4wrK/qZtrC96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81YmNlZTAtNTEyZS00MWY0LThkNmIt OTVkMTYzNjRkYmI5LzEvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81YmNlZTAtNTEyZS00MWY0LThkNmItOTVkMTYzNjRkYmI5 LzEvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9F/cXV3 WFKPf5pEizQ1qhQqjE3jRTyjKIUjJW3Dg5dknqZZo62/Tu6PYxUfEFX+tlQ0X59V OQeQo+VNE4WUj36jhUIdh4eKtlDXOabjOuY5OfkJaMf/wKK2e4ytLEl3V1Rpo+xy WR4zaShfW81n3N0G8HcJtEJeolxQHoI1k/aCJxy9rOF+o5byMw0wVpfZvULVCNLd TjoyBCsAHp9ZJ2eily/DxBg8OA5u9w8BwFTj7NwgmTbvkM+shNjvK1+6yXzF4gtL MjHuq85xxD8QQvyUF8PNBK5htvpXvibtV/YWGK2JjR8L/r6Kfsulfqgk+E/iY47i D8SkErSVAn499g== -----END CERTIFICATE-----Generated at Wed Dec 17 18:35:12 2025 by rpki-client