This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft File: cAAC6c0sdKDvi1G0DUTRQaky0oM.mft (raw, json) Hash identifier: RP0O1BSryGO5bCv2GsMAcFPSTSqPWmOaZb1TsVRVCRQ= Subject key identifier: 43:87:90:2E:37:99:E2:13:7B:21:59:82:5F:E8:86:92:BB:A3:99:CB Authority key identifier: 70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83 Certificate issuer: /CN=700002e9cd2c74a0ef8b51b40d44d141a932d283 Certificate serial: 019AF19B14A1C3C312C50EDAF0D5F8AA40FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft Manifest number: 0EFC Signing time: Sat 06 Dec 2025 03:01:03 +0000 Manifest this update: Sat 06 Dec 2025 03:01:03 +0000 Manifest next update: Sun 07 Dec 2025 03:01:03 +0000 Files and hashes: 1: 7oIzidmPV5DMaJu71KEE7TN3jrE.roa (hash: kCtY+zZ5Nv1Tl34nUDS681Pc5/oW0aaVlayqB3KyvjU=) 2: cAAC6c0sdKDvi1G0DUTRQaky0oM.crl (hash: aUXIKNE3I5V4SvcQgo5856UjghXDuIyCIUQxEdqEcUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:14:a1:c3:c3:12:c5:0e:da:f0:d5:f8:aa:40:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700002e9cd2c74a0ef8b51b40d44d141a932d283 Validity Not Before: Dec 6 03:01:03 2025 GMT Not After : Dec 7 03:01:03 2025 GMT Subject: CN=4387902e3799e2137b2159825fe88692bba399cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:47:55:3e:1d:1d:a6:28:fe:c9:db:58:05: 9b:28:01:99:70:37:9d:81:dc:4f:53:13:64:3b:ba: ef:90:fb:c0:73:21:75:d6:42:ec:32:52:0a:2b:8c: 1b:5b:79:7d:90:63:d2:ca:50:ee:44:a7:93:00:40: 30:13:7e:4a:5a:15:e3:d3:71:28:83:3b:14:eb:a4: 71:0d:9a:e8:d2:9f:a1:6e:57:2a:27:57:7f:75:22: a8:84:6f:26:96:e7:3d:b2:e7:d3:3f:a0:d9:66:1a: 50:1f:58:f6:d7:18:b5:b7:a6:19:3a:34:ae:0f:e8: c0:eb:21:ec:9d:19:cf:41:fe:24:c7:fc:a2:97:ff: 20:52:7a:4f:24:b7:bd:22:01:5f:a4:bc:f0:8b:5e: fb:47:01:98:d0:9a:9c:4b:ca:24:f1:60:60:eb:57: 79:06:4d:ba:fa:20:c4:62:b6:93:da:29:bd:d4:1f: d8:21:1e:29:df:ea:5e:ac:20:ee:fe:84:a1:c3:0c: a4:b6:d1:cb:f1:0f:ca:17:30:2d:f7:ac:3f:0c:de: e7:86:bf:0a:b6:f3:73:44:6e:c8:32:5e:67:37:22: 6b:65:18:37:ed:a1:bb:4b:06:67:7b:ee:5b:5f:81: 81:4f:ed:f2:94:d9:de:b3:b3:76:bb:ca:59:d3:c1: 8e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:87:90:2E:37:99:E2:13:7B:21:59:82:5F:E8:86:92:BB:A3:99:CB X509v3 Authority Key Identifier: keyid:70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:39:d9:cf:b3:76:e1:cd:ad:7f:d1:3b:e7:e4:93:f6:f8:a1: a7:ce:9a:4d:f5:1e:92:1e:3d:88:bf:95:fe:de:e4:b3:d7:2b: b5:03:cb:e4:41:90:d1:a9:7d:f0:ef:0d:01:6b:11:ed:50:d7: 9c:7b:ef:61:e8:33:de:03:e3:13:4b:35:a2:bd:6e:b7:68:fe: aa:d3:c6:14:0e:07:84:34:20:cb:4b:62:12:b6:01:fb:41:77: 4c:ec:26:ca:92:c5:b5:57:84:fa:84:44:b0:18:f2:66:40:4c: 4c:69:a7:3c:2b:5c:c4:e1:09:48:70:dc:23:ae:97:95:a1:88: 32:45:fc:68:15:3c:b2:c1:11:dc:f3:2c:00:1c:de:17:ec:fd: 38:1d:53:41:5d:cb:b4:7a:2a:04:c3:27:9a:cb:ab:a1:8a:27: 72:f5:40:02:7d:b2:ff:e1:3b:6c:69:d6:c7:36:ed:db:df:5b: 14:07:86:f5:8c:f4:6f:f8:8e:b4:92:bc:13:d3:bb:bc:0d:22: c9:b3:ae:e5:d3:3f:87:72:d8:7c:97:81:34:27:58:97:1d:71: 2c:f1:56:2b:a4:13:90:60:1b:80:9a:8b:30:a9:5b:e4:1d:93: 5d:5e:15:1d:89:08:59:72:df:a9:b7:8c:44:b5:6a:98:01:23: 8c:22:2d:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxShw8MSxQ7a8NX4qkD7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMDAwMmU5Y2QyYzc0YTBlZjhiNTFiNDBkNDRkMTQxYTkz MmQyODMwHhcNMjUxMjA2MDMwMTAzWhcNMjUxMjA3MDMwMTAzWjAzMTEwLwYDVQQD Eyg0Mzg3OTAyZTM3OTllMjEzN2IyMTU5ODI1ZmU4ODY5MmJiYTM5OWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt89HVT4dHaYo/snbWAWbKAGZcDed gdxPUxNkO7rvkPvAcyF11kLsMlIKK4wbW3l9kGPSylDuRKeTAEAwE35KWhXj03Eo gzsU66RxDZro0p+hblcqJ1d/dSKohG8mluc9sufTP6DZZhpQH1j21xi1t6YZOjSu D+jA6yHsnRnPQf4kx/yil/8gUnpPJLe9IgFfpLzwi177RwGY0JqcS8ok8WBg61d5 Bk26+iDEYraT2im91B/YIR4p3+perCDu/oShwwykttHL8Q/KFzAt96w/DN7nhr8K tvNzRG7IMl5nNyJrZRg37aG7SwZne+5bX4GBT+3ylNnes7N2u8pZ08GOPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOHkC43meITeyFZgl/ohpK7o5nLMB8GA1UdIwQY MBaAFHAAAunNLHSg74tRtA1E0UGpMtKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FBQzZjMHNkS0R2aTFHMERVVFJRYWt5MG9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81MmUwYmMtOTYyOS00YTIwLWEwMDIt OTA5MjA5MzU2YjJmLzEvY0FBQzZjMHNkS0R2aTFHMERVVFJRYWt5MG9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81MmUwYmMtOTYyOS00YTIwLWEwMDItOTA5MjA5MzU2YjJm LzEvY0FBQzZjMHNkS0R2aTFHMERVVFJRYWt5MG9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiznZz7N2 4c2tf9E75+ST9vihp86aTfUekh49iL+V/t7ks9crtQPL5EGQ0al98O8NAWsR7VDX nHvvYegz3gPjE0s1or1ut2j+qtPGFA4HhDQgy0tiErYB+0F3TOwmypLFtVeE+oRE sBjyZkBMTGmnPCtcxOEJSHDcI66XlaGIMkX8aBU8ssER3PMsABzeF+z9OB1TQV3L tHoqBMMnmsuroYoncvVAAn2y/+E7bGnWxzbt299bFAeG9Yz0b/iOtJK8E9O7vA0i ybOu5dM/h3LYfJeBNCdYlx1xLPFWK6QTkGAbgJqLMKlb5B2TXV4VHYkIWXLfqbeM RLVqmAEjjCItbg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:15 2025 by rpki-client