This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft File: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft (raw, json) Hash identifier: qlmkwcYZ2wnajjhL1WBd40DzPvtUmrB4Z+HQyoXAlNo= Subject key identifier: F0:F1:5B:F6:42:DD:A0:22:34:C9:A8:CA:B2:0F:AB:AE:7E:FD:9F:EF Authority key identifier: A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04 Certificate issuer: /CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704 Certificate serial: 019AF19B00B1D6AF37E6E7752E24F6C691CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft Manifest number: 0CD5 Signing time: Sat 06 Dec 2025 03:00:58 +0000 Manifest this update: Sat 06 Dec 2025 03:00:58 +0000 Manifest next update: Sun 07 Dec 2025 03:00:58 +0000 Files and hashes: 1: ehG-SCGwvd8yBJatadELhp3bH6w.roa (hash: YkiZ4YuzwJ9yzU2pKOGO15cIT4PrhxRCvMLtPrdtwoE=) 2: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl (hash: GcrZgpJGlTNOGdFlWooq3ZYRt+TaiRM0gO5eQocdOkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:00:b1:d6:af:37:e6:e7:75:2e:24:f6:c6:91:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704 Validity Not Before: Dec 6 03:00:58 2025 GMT Not After : Dec 7 03:00:58 2025 GMT Subject: CN=f0f15bf642dda02234c9a8cab20fabae7efd9fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:90:75:e9:30:36:02:c4:a8:67:bd:9c:9c:70: ea:28:41:68:5f:2d:8d:73:64:7b:f0:ad:c9:a0:c3: 29:07:30:0c:7d:bc:c8:2e:86:40:d7:fb:14:2e:91: 49:b0:e4:c3:66:2d:b4:16:a6:86:9e:15:aa:43:f0: 62:cd:8f:ee:54:e7:75:a0:e1:df:ce:72:5a:23:3b: 73:ab:ca:80:66:bb:08:df:cb:c8:bd:db:7f:79:08: 53:1c:d2:70:a9:85:9e:44:ec:1b:4c:62:e4:db:5e: 4f:ea:8e:d8:1b:7b:4b:27:17:bd:a1:ef:72:33:1c: ef:f3:67:7d:22:9e:d9:44:ca:12:3d:b3:62:5f:d8: 89:e6:b3:fc:2b:50:c5:2a:f9:af:a2:5d:74:4f:78: e8:0f:be:3f:7f:6b:55:67:a0:a6:4a:a9:16:74:12: 82:df:c0:fb:25:d9:26:de:4c:a9:37:7e:9a:42:6c: 87:64:46:88:64:4c:66:d4:e2:b0:71:da:64:ef:e8: e0:2d:cc:cd:21:70:8c:37:7f:2e:30:07:1e:2c:02: 95:5c:47:b2:47:82:1e:43:99:29:01:a5:b9:5f:b2: da:57:0f:7b:6e:9b:0c:b7:66:e6:29:17:e7:04:b3: 11:93:a0:ba:bb:e7:9b:b7:b5:49:51:e8:6d:2e:3c: ef:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F1:5B:F6:42:DD:A0:22:34:C9:A8:CA:B2:0F:AB:AE:7E:FD:9F:EF X509v3 Authority Key Identifier: keyid:A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:4e:2d:d9:2e:7a:19:7f:74:6e:c4:8c:c0:4e:96:a5:1d:28: 01:70:b9:67:0f:7b:78:67:ff:ff:61:e7:1b:f6:e5:39:5a:47: 7a:e2:b5:36:85:7d:bc:21:64:68:26:67:e1:29:37:06:b5:6e: 18:1c:8c:2b:a9:de:ab:00:93:cd:84:38:81:3d:06:a0:12:cf: 42:64:5e:b2:d4:60:0f:bb:f7:53:6c:8e:a8:f8:89:f6:45:9b: c3:1b:d5:19:af:30:1c:2e:3c:39:3d:d9:44:55:10:f8:9a:ff: 96:24:7f:88:fc:cf:ce:98:b4:2a:a2:19:40:24:55:fd:45:fc: c5:39:94:28:f3:d6:b0:2b:6d:12:cc:4e:e8:ed:48:61:fd:7d: e3:71:15:be:dc:55:64:2a:d9:8a:d6:19:c7:1b:af:4d:5b:78: 4d:85:fa:94:03:5a:3d:13:fe:9c:cb:3d:00:aa:04:f1:88:2c: d9:41:63:f2:20:e1:4a:9f:7a:fc:1b:aa:7f:c8:ec:26:0e:54: fd:88:9a:76:23:0b:5b:08:c3:93:77:60:c0:f3:9a:72:e1:c5: 3f:19:00:dc:4f:26:75:a8:69:b6:f1:b1:9d:25:1b:bd:2e:4b: d6:68:54:06:a5:7c:bf:db:84:6e:f0:1b:da:9f:04:f1:c8:e8: 0d:08:cd:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwCx1q835ud1LiT2xpHNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZjA5YWQ4YWFkM2IzMzU0ODc1YmJlYWVkMDViNjFhNTRh MDM3MDQwHhcNMjUxMjA2MDMwMDU4WhcNMjUxMjA3MDMwMDU4WjAzMTEwLwYDVQQD EyhmMGYxNWJmNjQyZGRhMDIyMzRjOWE4Y2FiMjBmYWJhZTdlZmQ5ZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5B16TA2AsSoZ72cnHDqKEFoXy2N c2R78K3JoMMpBzAMfbzILoZA1/sULpFJsOTDZi20FqaGnhWqQ/BizY/uVOd1oOHf znJaIztzq8qAZrsI38vIvdt/eQhTHNJwqYWeROwbTGLk215P6o7YG3tLJxe9oe9y Mxzv82d9Ip7ZRMoSPbNiX9iJ5rP8K1DFKvmvol10T3joD74/f2tVZ6CmSqkWdBKC 38D7Jdkm3kypN36aQmyHZEaIZExm1OKwcdpk7+jgLczNIXCMN38uMAceLAKVXEey R4IeQ5kpAaW5X7LaVw97bpsMt2bmKRfnBLMRk6C6u+ebt7VJUehtLjzv5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDxW/ZC3aAiNMmoyrIPq65+/Z/vMB8GA1UdIwQY MBaAFKfwmtiq07M1SHW76u0FthpUoDcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF9DYTJLclRzelZJZGJ2cTdRVzJHbFNnTndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kNTZjMmYtYjk5OS00MGQxLWFkYmYt OWViZDJmMWFiMzYyLzEvcF9DYTJLclRzelZJZGJ2cTdRVzJHbFNnTndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9kNTZjMmYtYjk5OS00MGQxLWFkYmYtOWViZDJmMWFiMzYy LzEvcF9DYTJLclRzelZJZGJ2cTdRVzJHbFNnTndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALE4t2S56 GX90bsSMwE6WpR0oAXC5Zw97eGf//2HnG/blOVpHeuK1NoV9vCFkaCZn4Sk3BrVu GByMK6neqwCTzYQ4gT0GoBLPQmRestRgD7v3U2yOqPiJ9kWbwxvVGa8wHC48OT3Z RFUQ+Jr/liR/iPzPzpi0KqIZQCRV/UX8xTmUKPPWsCttEsxO6O1IYf1943EVvtxV ZCrZitYZxxuvTVt4TYX6lANaPRP+nMs9AKoE8Ygs2UFj8iDhSp96/Buqf8jsJg5U /YiadiMLWwjDk3dgwPOacuHFPxkA3E8mdahptvGxnSUbvS5L1mhUBqV8v9uEbvAb 2p8E8cjoDQjN8g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:50 2025 by rpki-client