This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json) Hash identifier: leK196ElolH4ccvXkPqhm2ANyVKTH+DiMV8sPou9qiU= Subject key identifier: 23:46:BF:75:6A:FB:53:94:1E:F6:35:B2:B0:7A:1E:68:86:31:CC:30 Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c Certificate serial: 019AF1648B8D68D7C0EAAEA07AE0C9D57451 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft Manifest number: 04BA Signing time: Sat 06 Dec 2025 02:01:29 +0000 Manifest this update: Sat 06 Dec 2025 02:01:29 +0000 Manifest next update: Sun 07 Dec 2025 02:01:29 +0000 Files and hashes: 1: 5TxBRMul-Sk6vrxAy-O3Gig1UHg.roa (hash: eQW3KPMxFJcTn3nfO5KDUYdR77aYysAZcOPu9j2QK1w=) 2: NnS9tE0Wd3GJX8d4rDN6hefth0k.roa (hash: iMULd1rU9nLxXdG6/iod6VTsBhibbUWJ3DwkFA8v85s=) 3: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: barB+bRDEBIYS7n2s2ry85G22H3ELU+mYborZA/qkYc=) 4: yI_sQi09bI0wEcczv9p69pOMi4I.roa (hash: eG5dij8lJvkaSq+tZToxmG67gJ6Yw6xpufVtIpPZnsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:8b:8d:68:d7:c0:ea:ae:a0:7a:e0:c9:d5:74:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c Validity Not Before: Dec 6 02:01:29 2025 GMT Not After : Dec 7 02:01:29 2025 GMT Subject: CN=2346bf756afb53941ef635b2b07a1e688631cc30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dd:ad:28:47:c2:5b:21:9e:d7:2f:10:e3:a4: 36:42:fb:a0:77:7f:a9:42:ad:22:7b:3a:8d:1d:42: 92:a3:34:ed:44:87:0e:d8:4b:ed:10:15:a4:d7:82: de:0e:1a:e1:eb:0e:cc:1b:44:1e:b5:25:88:86:e0: 6f:9f:76:67:e0:cb:e2:6c:0e:01:b7:34:9d:27:b1: f5:49:a2:5e:d2:70:2f:a5:91:c5:fe:5f:7f:11:1d: 9e:c4:cb:b3:64:98:6a:2d:fc:82:a2:95:9e:c2:d9: 14:66:28:e3:87:fe:28:6e:99:a3:4a:01:4b:e2:53: 38:d6:b0:56:db:40:6d:be:28:44:01:c5:91:b4:68: c7:9f:39:a6:47:c7:76:75:12:42:d0:2c:c1:f4:25: e8:04:ff:1e:fd:b4:5b:32:5b:3f:41:a9:a7:4c:07: 1b:d3:67:75:b0:ac:63:e0:65:26:40:0c:1a:d6:37: 0c:05:d8:f2:cb:bd:5e:b0:a0:c2:e4:4e:dd:2e:76: b8:af:d1:1f:5a:f8:36:ff:a8:bd:18:e2:80:8d:13: c9:89:e6:6b:3f:95:2d:ed:2d:6e:02:69:69:58:a9: 3f:8e:70:b7:ca:e7:42:04:66:74:a5:a6:40:df:53: 8d:b4:2a:8a:1f:e9:f3:35:e7:63:fa:e5:a9:86:a3: 01:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:46:BF:75:6A:FB:53:94:1E:F6:35:B2:B0:7A:1E:68:86:31:CC:30 X509v3 Authority Key Identifier: keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f0:91:db:8f:4b:dd:66:82:30:97:c4:c8:4f:c9:af:e9:29: 9d:f7:aa:94:c1:da:23:ef:ca:62:97:94:d5:6b:1a:83:b1:5d: 41:92:5d:01:a6:98:ea:a9:9a:b1:32:4b:72:49:3d:70:00:e1: ed:44:c4:c4:c7:7d:cd:a2:e7:2a:3f:90:ab:7b:19:54:e5:51: 2e:35:d1:cd:a5:b7:41:a6:49:72:a6:36:5b:ef:83:e2:e9:8c: 84:16:58:f6:d3:7e:1b:c0:35:db:43:8d:8a:33:50:14:b0:07: 58:72:2b:e3:01:0c:40:33:b0:fd:ad:02:6a:c8:1b:8c:a7:87: 5f:e7:8c:ba:43:f5:5f:61:da:79:ad:9f:fd:c4:20:99:25:68: d7:3a:30:d0:40:47:53:30:18:c9:c2:21:b7:58:c2:ef:98:01: 3b:c4:58:87:40:fb:c1:0c:08:5f:f8:14:97:df:36:f9:96:e6: dc:06:34:48:52:f8:79:22:c7:24:28:42:49:44:08:16:81:6e: e8:2b:b8:cc:d8:4b:56:ba:b7:1f:09:51:38:47:3b:89:21:b4: ef:2d:53:67:7c:95:5c:23:5a:e3:56:8c:d3:cd:0b:0b:03:85: 99:af:c0:5b:52:24:2e:cc:bf:ed:dd:be:9c:32:ba:24:34:21: b6:ef:66:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIuNaNfA6q6geuDJ1XRRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYTI3MzliMjBjMjU5YzVkMWIzODhkMTQ1M2Y2ZjE3OTlm MjhmNmMwHhcNMjUxMjA2MDIwMTI5WhcNMjUxMjA3MDIwMTI5WjAzMTEwLwYDVQQD EygyMzQ2YmY3NTZhZmI1Mzk0MWVmNjM1YjJiMDdhMWU2ODg2MzFjYzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA392tKEfCWyGe1y8Q46Q2Qvugd3+p Qq0iezqNHUKSozTtRIcO2EvtEBWk14LeDhrh6w7MG0QetSWIhuBvn3Zn4MvibA4B tzSdJ7H1SaJe0nAvpZHF/l9/ER2exMuzZJhqLfyCopWewtkUZijjh/4obpmjSgFL 4lM41rBW20BtvihEAcWRtGjHnzmmR8d2dRJC0CzB9CXoBP8e/bRbMls/QamnTAcb 02d1sKxj4GUmQAwa1jcMBdjyy71esKDC5E7dLna4r9EfWvg2/6i9GOKAjRPJieZr P5Ut7S1uAmlpWKk/jnC3yudCBGZ0paZA31ONtCqKH+nzNedj+uWphqMBhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNGv3Vq+1OUHvY1srB6HmiGMcwwMB8GA1UdIwQY MBaAFHGic5sgwlnF0bOI0UU/bxeZ8o9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODIt YTM4NTU1MDVlYTJlLzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODItYTM4NTU1MDVlYTJl LzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvCR249L 3WaCMJfEyE/Jr+kpnfeqlMHaI+/KYpeU1Wsag7FdQZJdAaaY6qmasTJLckk9cADh 7UTExMd9zaLnKj+Qq3sZVOVRLjXRzaW3QaZJcqY2W++D4umMhBZY9tN+G8A120ON ijNQFLAHWHIr4wEMQDOw/a0CasgbjKeHX+eMukP1X2Haea2f/cQgmSVo1zow0EBH UzAYycIht1jC75gBO8RYh0D7wQwIX/gUl982+Zbm3AY0SFL4eSLHJChCSUQIFoFu 6Cu4zNhLVrq3HwlROEc7iSG07y1TZ3yVXCNa41aM080LCwOFma/AW1IkLsy/7d2+ nDK6JDQhtu9mQw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:25 2025 by rpki-client