This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json) Hash identifier: Gbdo3gU+VCUP1VbiQMVU/G+wUVo386HD3NsTybcQgtM= Subject key identifier: 64:FF:91:A2:D5:95:75:3F:1D:96:A5:16:A0:CC:1C:A4:43:73:9D:F6 Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c Certificate serial: 019AF1D244AACB2AAF2BDFFCF034BF615E19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft Manifest number: 04D7 Signing time: Sat 06 Dec 2025 04:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:01:20 +0000 Manifest next update: Sun 07 Dec 2025 04:01:20 +0000 Files and hashes: 1: B3Ys6xmlqC9wLcdB3cpexOusdU8.roa (hash: KigHTwHmCj6upextpp39A2hT194k5nIpvq7I4qZjAqg=) 2: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: Y5cymg9QDh8ZBSDqZw70c7JDtN7ULJ9ZYVN3jG6vekA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:44:aa:cb:2a:af:2b:df:fc:f0:34:bf:61:5e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c Validity Not Before: Dec 6 04:01:20 2025 GMT Not After : Dec 7 04:01:20 2025 GMT Subject: CN=64ff91a2d595753f1d96a516a0cc1ca443739df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:06:99:ac:ca:71:fc:d3:d1:67:82:9b:e9:b1: c4:bb:d0:8b:07:57:b8:7f:bd:7d:00:cf:cc:76:ab: a0:52:e7:d8:92:98:62:52:b0:c4:50:4f:34:5a:ea: e1:33:01:13:b2:8c:89:1c:3e:83:2b:12:cd:a5:91: 0e:47:97:14:07:48:05:6a:c3:13:fe:6d:bb:9f:03: d1:74:ad:b4:d3:d0:84:82:69:90:d8:61:77:4f:d2: 5a:f5:3b:27:cf:f2:e5:8f:d1:c3:77:95:db:9d:e6: de:12:d9:64:29:7c:9c:76:c6:f1:7e:e2:63:0f:8a: 36:b3:33:92:67:39:97:68:f8:d8:07:cb:ee:c1:17: d9:b4:72:1c:11:f1:ff:14:69:28:38:7e:7d:84:59: 51:5e:5f:5d:53:e4:cd:44:eb:2d:e7:67:bd:0a:5f: da:8f:b0:fa:04:aa:b9:f8:87:54:cb:55:d9:f0:b0: 71:4e:da:e3:10:2b:b1:03:89:00:24:f4:58:57:7f: b5:5c:bb:43:46:a4:bd:51:ba:c2:20:76:c5:48:23: 39:d7:8e:99:bc:81:45:0e:d0:d6:5e:1f:0a:62:a9: 33:7d:e4:71:5a:b7:d0:26:14:49:8c:ab:67:86:d2: 84:04:d3:0d:f1:30:5d:ea:ab:3b:b2:af:a7:5c:2f: 00:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FF:91:A2:D5:95:75:3F:1D:96:A5:16:A0:CC:1C:A4:43:73:9D:F6 X509v3 Authority Key Identifier: keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:11:78:35:94:1a:66:d0:31:3b:8b:a7:9d:5f:b5:39:06:34: db:21:16:33:9a:74:4e:9f:99:8c:75:6f:80:b6:5c:45:cc:f1: ca:ee:2c:e5:b5:3c:62:c8:74:e9:32:5d:69:ad:4b:fe:06:4c: ee:3a:12:6d:28:de:03:03:4f:be:7c:68:e9:bb:b2:0d:34:ac: d3:dd:44:2f:aa:d8:e9:70:22:c4:11:73:f2:ae:90:12:c8:d4: 6f:0f:fc:3b:a2:b8:68:48:b1:bc:37:79:7a:d2:03:b5:c9:1b: 6d:ec:0d:c9:9f:bb:28:a7:7a:05:49:43:67:c9:cc:4f:dd:eb: 74:c9:eb:36:3c:b2:05:0f:51:38:9a:df:1d:48:09:d6:bf:f5: 44:4b:85:e7:ad:92:5b:de:2d:87:b2:b8:9a:19:7c:00:59:69: e0:43:cd:65:21:59:8e:53:45:56:7c:ec:57:66:d8:5d:de:bf: aa:83:b7:c0:f9:35:0d:7b:03:ce:2d:68:ad:85:e5:5c:0a:e1: 55:de:8f:4f:b4:a3:cf:06:c5:a0:86:60:c3:30:18:96:bc:9c: 3d:b8:34:f5:a7:f2:26:67:74:ab:5d:40:86:8b:d6:39:45:e0: 35:1a:21:31:ab:71:44:b0:ff:c8:9d:01:91:55:70:90:46:e0: 3f:02:09:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kSqyyqvK9/88DS/YV4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzZiOTc3MzY3NjJkNjkwODBiNDNkOWIwMGM2MWFmMWQz MTFkOGMwHhcNMjUxMjA2MDQwMTIwWhcNMjUxMjA3MDQwMTIwWjAzMTEwLwYDVQQD Eyg2NGZmOTFhMmQ1OTU3NTNmMWQ5NmE1MTZhMGNjMWNhNDQzNzM5ZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAaZrMpx/NPRZ4Kb6bHEu9CLB1e4 f719AM/MdqugUufYkphiUrDEUE80WurhMwETsoyJHD6DKxLNpZEOR5cUB0gFasMT /m27nwPRdK2009CEgmmQ2GF3T9Ja9Tsnz/Llj9HDd5XbnebeEtlkKXycdsbxfuJj D4o2szOSZzmXaPjYB8vuwRfZtHIcEfH/FGkoOH59hFlRXl9dU+TNROst52e9Cl/a j7D6BKq5+IdUy1XZ8LBxTtrjECuxA4kAJPRYV3+1XLtDRqS9UbrCIHbFSCM5146Z vIFFDtDWXh8KYqkzfeRxWrfQJhRJjKtnhtKEBNMN8TBd6qs7sq+nXC8A4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGT/kaLVlXU/HZalFqDMHKRDc532MB8GA1UdIwQY MBaAFAo2uXc2di1pCAtD2bAMYa8dMR2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjIt MWEzMjI2ODMyYzkxLzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjItMWEzMjI2ODMyYzkx LzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhF4NZQa ZtAxO4unnV+1OQY02yEWM5p0Tp+ZjHVvgLZcRczxyu4s5bU8Ysh06TJdaa1L/gZM 7joSbSjeAwNPvnxo6buyDTSs091EL6rY6XAixBFz8q6QEsjUbw/8O6K4aEixvDd5 etIDtckbbewNyZ+7KKd6BUlDZ8nMT93rdMnrNjyyBQ9ROJrfHUgJ1r/1REuF562S W94th7K4mhl8AFlp4EPNZSFZjlNFVnzsV2bYXd6/qoO3wPk1DXsDzi1orYXlXArh Vd6PT7SjzwbFoIZgwzAYlrycPbg09afyJmd0q11AhovWOUXgNRohMatxRLD/yJ0B kVVwkEbgPwIJZw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:07 2025 by rpki-client