This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft File: cA5JDhDqN72DSWKGM7WIVmHmegI.mft (raw, json) Hash identifier: xgfRlIauax8hV2BHumL5FLDUJMkbETd91UFCFOvMDho= Subject key identifier: 5B:26:FF:45:A6:93:CB:B6:EE:54:7D:3A:1E:66:41:D9:29:C7:55:FD Authority key identifier: 70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02 Certificate issuer: /CN=700e490e10ea37bd8349628633b5885661e67a02 Certificate serial: 019B2B1CB032D88775011F690CD0BE3E4A6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft Manifest number: 0289 Signing time: Wed 17 Dec 2025 07:00:58 +0000 Manifest this update: Wed 17 Dec 2025 07:00:58 +0000 Manifest next update: Thu 18 Dec 2025 07:00:58 +0000 Files and hashes: 1: cA5JDhDqN72DSWKGM7WIVmHmegI.crl (hash: Rn6ESO9PRLViugb0mxBYam/qllVFdJZmyZoGsuc7z/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:b0:32:d8:87:75:01:1f:69:0c:d0:be:3e:4a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700e490e10ea37bd8349628633b5885661e67a02 Validity Not Before: Dec 17 07:00:58 2025 GMT Not After : Dec 18 07:00:58 2025 GMT Subject: CN=5b26ff45a693cbb6ee547d3a1e6641d929c755fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:95:7c:c9:db:8a:87:9e:45:3b:07:5e:1b:0a: 09:14:29:b6:e0:16:a5:63:b9:ec:e0:76:85:40:79: 29:39:45:2b:91:ce:3f:94:2c:ce:13:10:4d:48:9c: 3b:07:c2:58:ac:53:3f:75:45:ce:2d:f7:41:ee:3b: e5:9e:6c:4b:cc:bf:13:9a:3f:40:8e:eb:53:76:81: e3:da:53:38:46:94:a8:08:17:63:9a:31:b7:0d:2b: 87:d6:05:82:9f:9b:f2:6c:6d:7a:6a:0b:08:6c:42: 22:25:5f:f7:b7:98:04:21:a7:e0:78:13:45:b9:a7: 12:c1:ac:67:6e:92:2b:86:04:e4:d8:2b:a4:13:fa: fe:c0:52:87:f8:9a:78:be:95:2c:83:d5:e3:65:5a: 86:7f:f5:f6:78:2c:7c:e8:e3:c4:65:7a:c2:a2:28: b2:79:ac:04:6d:64:7e:3d:69:5b:4c:41:11:06:19: b3:ee:e3:4e:cd:a5:91:24:72:8d:7a:50:66:d3:83: 58:f0:52:27:60:f9:6a:aa:e8:00:b2:2d:0f:f4:a8: 90:f0:62:4b:cf:55:a6:9e:d6:bc:6e:0a:ab:2b:64: ba:50:51:bf:27:11:e2:6c:83:ed:a7:e5:79:72:c8: f9:d2:7b:b9:4c:0a:6b:45:4b:aa:fe:d4:d5:27:a0: a0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:26:FF:45:A6:93:CB:B6:EE:54:7D:3A:1E:66:41:D9:29:C7:55:FD X509v3 Authority Key Identifier: keyid:70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:26:c9:19:49:7e:a6:d6:89:97:d8:d0:bd:cc:ed:a0:68:27: 95:3c:8c:94:e2:6a:0f:bf:49:df:4c:20:e7:94:98:df:42:2c: f4:39:d1:f9:6c:ca:19:07:6f:66:07:ff:22:81:f1:cf:fc:ed: 90:3f:b9:e4:6a:0f:eb:ff:8b:bf:c6:bd:52:0e:ac:21:7e:8e: 01:2b:1a:6b:5a:1c:20:a7:71:5b:e4:93:20:a0:17:77:d1:19: d9:e2:2a:9d:ab:f2:12:39:9b:89:37:8b:b0:29:6a:a2:b3:53: e9:6c:07:06:a8:7a:34:99:52:ef:2e:2f:ff:94:33:57:64:bb: 4b:51:86:55:1d:c1:aa:3f:28:ee:e1:99:fd:b8:9f:8e:8d:b0: d7:79:7c:6c:76:24:df:06:23:db:17:e8:8e:ae:51:cb:3f:3d: c9:48:f9:fc:b9:f4:ef:0a:3f:72:73:b2:00:1d:8d:74:3b:75: 09:59:77:0d:48:c3:84:aa:57:85:a1:ee:19:02:a7:9a:9f:cf: 1c:6b:61:cd:3f:6a:d1:eb:b1:a0:a5:48:7f:02:6f:66:22:ac: a0:88:3a:94:fb:ba:0b:8a:f1:46:97:f3:af:53:5a:ec:e8:59: bd:b6:93:b4:67:b7:b0:c6:c9:21:08:bc:f6:25:0e:0c:de:cc: 81:a5:2e:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHLAy2Id1AR9pDNC+PkptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMGU0OTBlMTBlYTM3YmQ4MzQ5NjI4NjMzYjU4ODU2NjFl NjdhMDIwHhcNMjUxMjE3MDcwMDU4WhcNMjUxMjE4MDcwMDU4WjAzMTEwLwYDVQQD Eyg1YjI2ZmY0NWE2OTNjYmI2ZWU1NDdkM2ExZTY2NDFkOTI5Yzc1NWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZV8yduKh55FOwdeGwoJFCm24Bal Y7ns4HaFQHkpOUUrkc4/lCzOExBNSJw7B8JYrFM/dUXOLfdB7jvlnmxLzL8Tmj9A jutTdoHj2lM4RpSoCBdjmjG3DSuH1gWCn5vybG16agsIbEIiJV/3t5gEIafgeBNF uacSwaxnbpIrhgTk2CukE/r+wFKH+Jp4vpUsg9XjZVqGf/X2eCx86OPEZXrCoiiy eawEbWR+PWlbTEERBhmz7uNOzaWRJHKNelBm04NY8FInYPlqqugAsi0P9KiQ8GJL z1Wmnta8bgqrK2S6UFG/JxHibIPtp+V5csj50nu5TAprRUuq/tTVJ6CgCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsm/0Wmk8u27lR9Oh5mQdkpx1X9MB8GA1UdIwQY MBaAFHAOSQ4Q6je9g0lihjO1iFZh5noCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hODBiNmQtY2NiNy00NGMyLWI0M2Yt ZWE2YjBiZTVjYWVlLzEvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9hODBiNmQtY2NiNy00NGMyLWI0M2YtZWE2YjBiZTVjYWVl LzEvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcibJGUl+ ptaJl9jQvcztoGgnlTyMlOJqD79J30wg55SY30Is9DnR+WzKGQdvZgf/IoHxz/zt kD+55GoP6/+Lv8a9Ug6sIX6OASsaa1ocIKdxW+STIKAXd9EZ2eIqnavyEjmbiTeL sClqorNT6WwHBqh6NJlS7y4v/5QzV2S7S1GGVR3Bqj8o7uGZ/bifjo2w13l8bHYk 3wYj2xfojq5Ryz89yUj5/Ln07wo/cnOyAB2NdDt1CVl3DUjDhKpXhaHuGQKnmp/P HGthzT9q0euxoKVIfwJvZiKsoIg6lPu6C4rxRpfzr1Na7OhZvbaTtGe3sMbJIQi8 9iUODN7MgaUueQ== -----END CERTIFICATE-----Generated at Wed Dec 17 16:38:37 2025 by rpki-client