This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft File: 1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft (raw, json) Hash identifier: mZpafQlOkj54z74DWwRgjw1yiXd3IEYtui6eybPakP0= Subject key identifier: DD:33:FD:21:FD:8B:2A:F9:6C:A5:8A:52:B8:43:15:5A:16:9D:B1:08 Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7 Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7 Certificate serial: 019AF465C535B0934C50E546F6C10FD285BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft Manifest number: 176E Signing time: Sat 06 Dec 2025 16:01:41 +0000 Manifest this update: Sat 06 Dec 2025 16:01:41 +0000 Manifest next update: Sun 07 Dec 2025 16:01:41 +0000 Files and hashes: 1: 1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl (hash: 2f3KEl2k6LG+h8qEHH3ntsQ0IWG91IpfxQhOSlOiERs=) 2: SVu_Rhlf-7B0-LrZBWZ_lATeixo.roa (hash: z3DEUmnDk72CZ2z3i1AK8FkYVNV6rEs5/0h0eR+TClE=) 3: USACkltJE4QqwVVNlMM3MAOHbI4.roa (hash: JKLOLgv3d9BtTTCj6wlSjdzlBfme6YgxxZZXaxE+z9Y=) 4: dbrSfqG4yJ8e6RjT1uN9s6dEGrQ.roa (hash: o+ewDMF8kuHL4BLfo2Z0qsDG7FEYFuX7LdWzLtyg2Y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:c5:35:b0:93:4c:50:e5:46:f6:c1:0f:d2:85:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7 Validity Not Before: Dec 6 16:01:41 2025 GMT Not After : Dec 7 16:01:41 2025 GMT Subject: CN=dd33fd21fd8b2af96ca58a52b843155a169db108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ff:7b:6d:f0:9f:d4:44:c7:3a:10:5d:ba:d5: c0:56:c8:09:a2:df:10:ac:39:3e:da:29:1b:b2:21: a3:c2:a4:17:9c:cc:fa:4a:83:4e:db:b1:f4:01:ff: 2c:78:b0:8f:a0:82:e8:09:b1:e0:41:95:5b:3d:6c: 0e:71:23:5c:74:fb:65:cd:cb:c7:1c:b7:89:b9:6a: 0d:13:f1:54:fa:b9:91:24:f7:9c:d9:3d:36:7d:f5: 88:6b:48:f3:55:a3:e5:c0:83:16:2e:a7:58:35:82: 8f:98:21:00:ba:54:d1:cc:29:13:36:e8:74:2a:1d: 8c:fa:5a:fe:d9:a5:dd:64:09:22:01:63:a9:7d:aa: 98:19:5a:9e:62:21:3a:49:1f:a5:a6:0b:d9:54:35: 48:40:67:97:5c:45:8f:75:48:a0:22:84:43:54:dd: bb:83:9d:d1:81:ed:f4:e0:86:c7:a0:d3:b4:da:4f: b6:3d:3f:0a:54:d5:6f:b4:30:45:50:7d:0c:07:1e: c7:ee:f4:e8:aa:15:50:19:5c:a8:53:01:3e:09:61: d6:c4:e7:f5:58:c9:5a:0c:a2:68:77:7a:4d:ea:e2: b4:dd:60:7d:49:80:87:58:2c:b3:34:5d:08:ee:dc: 0b:ca:fe:a6:b5:fd:fb:4a:3d:de:ad:bd:3e:a5:ce: ae:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:33:FD:21:FD:8B:2A:F9:6C:A5:8A:52:B8:43:15:5A:16:9D:B1:08 X509v3 Authority Key Identifier: keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:f0:92:80:19:38:bb:04:af:0e:0c:6d:d9:a4:d2:44:03:e1: 35:6f:34:25:a6:58:1c:d1:e6:44:bc:0d:37:57:0e:1d:41:fe: 6b:f1:d5:55:e2:33:3c:10:86:95:34:c4:dd:ad:14:b1:26:e3: cb:fe:58:c8:8f:be:bc:35:f2:75:2a:73:6b:f3:90:d7:3a:77: 24:a6:90:01:e8:f3:4d:40:d0:27:45:73:69:c0:af:0c:61:6f: a5:38:b1:d9:57:70:9a:32:a1:02:98:c6:f8:94:2a:13:a0:be: ff:8a:0e:2b:a4:d7:c0:da:20:1a:39:89:17:20:47:e5:92:a9: 44:c9:1e:73:97:14:05:1d:ee:f3:fa:bb:59:b9:3a:a2:41:f2: be:db:7e:0f:47:21:4e:bc:54:c1:4e:db:f8:72:10:72:31:74: fa:33:dd:6e:cd:0b:62:00:3a:48:e1:27:0e:08:9d:d5:5a:dd: 3f:c6:6d:a4:f6:eb:36:b7:0f:53:74:89:e4:2c:10:65:21:cc: 82:5c:f2:a2:2a:ad:aa:8f:1f:95:a5:06:76:99:6f:8d:2d:77: 2c:ad:24:48:68:ef:d6:7f:3c:66:5c:52:f3:fd:27:d8:43:3d: 37:cd:eb:31:3c:5c:4a:f5:f4:f8:99:f1:77:8b:54:cb:a4:45: 45:1b:25:ac -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr0ZcU1sJNMUOVG9sEP0oW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjAzYTBjMDRiODFmZTE3NjZmYTQxYmQzMWI3M2I1ODgx ODhhYzcwHhcNMjUxMjA2MTYwMTQxWhcNMjUxMjA3MTYwMTQxWjAzMTEwLwYDVQQD EyhkZDMzZmQyMWZkOGIyYWY5NmNhNThhNTJiODQzMTU1YTE2OWRiMTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv97bfCf1ETHOhBdutXAVsgJot8Q rDk+2ikbsiGjwqQXnMz6SoNO27H0Af8seLCPoILoCbHgQZVbPWwOcSNcdPtlzcvH HLeJuWoNE/FU+rmRJPec2T02ffWIa0jzVaPlwIMWLqdYNYKPmCEAulTRzCkTNuh0 Kh2M+lr+2aXdZAkiAWOpfaqYGVqeYiE6SR+lpgvZVDVIQGeXXEWPdUigIoRDVN27 g53Rge304IbHoNO02k+2PT8KVNVvtDBFUH0MBx7H7vToqhVQGVyoUwE+CWHWxOf1 WMlaDKJod3pN6uK03WB9SYCHWCyzNF0I7twLyv6mtf37Sj3erb0+pc6uvwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN0z/SH9iyr5bKWKUrhDFVoWnbEIMB8GA1UdIwQY MBaAFPggOgwEuB/hdm+kG9Mbc7WIGIrHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DQTZEQVM0SC1GMmI2UWIweHR6dFlnWWlzYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvZTE0Y2EzLWRhOGUtNGI1OC04NjNh LTMzODk2MjBjMWJkNy8xLzEtQ0E2REFTNEgtRjJiNlFiMHh0enRZZ1lpc2MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzViL2UxNGNhMy1kYThlLTRiNTgtODYzYS0zMzg5NjIwYzFi ZDcvMS8xLUNBNkRBUzRILUYyYjZRYjB4dHp0WWdZaXNjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuPCS gBk4uwSvDgxt2aTSRAPhNW80JaZYHNHmRLwNN1cOHUH+a/HVVeIzPBCGlTTE3a0U sSbjy/5YyI++vDXydSpza/OQ1zp3JKaQAejzTUDQJ0VzacCvDGFvpTix2VdwmjKh ApjG+JQqE6C+/4oOK6TXwNogGjmJFyBH5ZKpRMkec5cUBR3u8/q7Wbk6okHyvtt+ D0chTrxUwU7b+HIQcjF0+jPdbs0LYgA6SOEnDgid1VrdP8ZtpPbrNrcPU3SJ5CwQ ZSHMglzyoiqtqo8flaUGdplvjS13LK0kSGjv1n88ZlxS8/0n2EM9N83rMTxcSvX0 +Jnxd4tUy6RFRRslrA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:18 2025 by rpki-client