This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft File: CZ05RkE90RFhtGx99q02Kpk41dQ.mft (raw, json) Hash identifier: vVZD+hHo5m2Bn2mUzV11/YbebAmV/Z60M5/NEeKdoCA= Subject key identifier: F1:23:CF:E8:A9:40:E6:5A:C7:A5:BF:84:10:D6:85:B3:BD:F7:54:8A Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4 Certificate issuer: /CN=099d3946413dd11161b46c7df6ad362a9938d5d4 Certificate serial: 019B21E2EA1CC3160B7899592D63E325E2AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft Manifest number: 054A Signing time: Mon 15 Dec 2025 12:01:17 +0000 Manifest this update: Mon 15 Dec 2025 12:01:17 +0000 Manifest next update: Tue 16 Dec 2025 12:01:17 +0000 Files and hashes: 1: 1-jvgd6RnvKghGloVJb1Iw3eDs48.roa (hash: B7s4SajlBd3EvNe+3zoLXiT8A5U0bChHVGW9zyQgNFY=) 2: CZ05RkE90RFhtGx99q02Kpk41dQ.crl (hash: 0ipMFX0+cTlHMllizg8tQcFVrFulersAgM11I1qmxcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:ea:1c:c3:16:0b:78:99:59:2d:63:e3:25:e2:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4 Validity Not Before: Dec 15 12:01:17 2025 GMT Not After : Dec 16 12:01:17 2025 GMT Subject: CN=f123cfe8a940e65ac7a5bf8410d685b3bdf7548a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:79:d9:60:1f:4e:62:02:da:88:91:f9:8c: 30:c7:14:d3:10:2f:09:63:25:51:d2:fb:88:35:4d: 73:09:7b:f6:dc:58:a3:ee:7c:49:70:8b:0b:d7:f2: 42:56:4b:ce:47:23:8b:12:ca:af:fb:37:b2:d5:c5: 84:c4:63:b8:a4:16:cd:5f:98:a4:c9:c0:2c:f0:b5: 3f:1c:86:42:49:73:e3:d4:18:ae:5e:cc:cd:60:20: 56:98:92:80:a8:c6:9c:b5:a3:db:88:ec:b0:0f:ad: e7:9c:af:95:2e:80:fa:27:dc:13:60:bd:5a:7d:ea: 91:d3:98:40:6a:25:82:b6:14:01:02:a5:f8:be:44: b9:c8:68:40:3a:23:58:b8:01:9e:3a:e7:ab:aa:df: a1:e2:64:a7:c5:ca:67:06:d1:3d:22:63:e7:03:0e: 12:2b:69:5c:c9:81:36:b2:97:3d:aa:4b:1b:18:7d: dd:a5:13:d5:34:f8:fb:0a:3d:10:21:85:2d:1a:0e: 0a:c4:c8:f8:01:9c:f3:56:c7:d6:ac:52:ad:97:62: d1:6c:53:48:58:bb:82:44:19:72:54:d8:bb:f8:a1: 45:56:f8:58:7a:6f:ee:e8:ab:f0:24:8f:2b:8e:05: 8e:53:6b:d3:73:6f:8f:1f:15:52:03:e0:2a:54:0c: 94:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:23:CF:E8:A9:40:E6:5A:C7:A5:BF:84:10:D6:85:B3:BD:F7:54:8A X509v3 Authority Key Identifier: keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:20:fe:a8:fa:61:b7:3c:1b:6c:66:bb:3b:e7:ad:fc:bc:28: 43:49:d9:36:ac:ff:14:be:de:55:dc:38:68:6a:ab:bb:33:49: ce:8f:19:d8:ea:46:70:b6:db:ad:e2:1e:1b:85:d2:7c:29:8c: f2:a8:aa:ce:47:23:fe:ee:dc:47:98:ed:1e:c2:4e:9e:a1:93: 73:8c:7b:03:e5:71:38:87:b2:ab:e7:c9:5b:b9:5a:79:7a:9e: d8:44:9f:31:83:cc:1c:bc:cc:d1:54:f1:6e:7b:40:45:d1:ea: dc:f7:75:d6:47:10:f7:bf:4b:28:f4:c2:f5:55:b9:62:f9:f9: 9d:5d:97:f2:71:03:99:9f:e8:6f:ee:1e:13:52:44:52:0f:69: af:60:55:92:e3:25:64:a8:90:89:43:2e:d7:1b:55:a3:4a:a4: 5b:37:81:e3:b5:d9:1e:78:a8:aa:49:0f:7e:69:a5:66:9d:53: 06:46:61:5c:4b:b9:0e:53:d6:5d:28:97:72:cd:21:6f:19:49: fe:dc:d0:b5:67:4a:d9:ea:22:88:75:71:46:4d:c9:95:bf:db: 36:b7:23:67:47:3e:7c:e5:02:da:79:20:21:1f:77:e4:18:85: 17:73:be:0b:38:8a:8e:47:c4:e8:90:9a:10:7d:f4:78:f9:2d: 06:51:80:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4uocwxYLeJlZLWPjJeKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWQzOTQ2NDEzZGQxMTE2MWI0NmM3ZGY2YWQzNjJhOTkz OGQ1ZDQwHhcNMjUxMjE1MTIwMTE3WhcNMjUxMjE2MTIwMTE3WjAzMTEwLwYDVQQD EyhmMTIzY2ZlOGE5NDBlNjVhYzdhNWJmODQxMGQ2ODViM2JkZjc1NDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLp52WAfTmIC2oiR+YwwxxTTEC8J YyVR0vuINU1zCXv23Fij7nxJcIsL1/JCVkvORyOLEsqv+zey1cWExGO4pBbNX5ik ycAs8LU/HIZCSXPj1BiuXszNYCBWmJKAqMactaPbiOywD63nnK+VLoD6J9wTYL1a feqR05hAaiWCthQBAqX4vkS5yGhAOiNYuAGeOuerqt+h4mSnxcpnBtE9ImPnAw4S K2lcyYE2spc9qksbGH3dpRPVNPj7Cj0QIYUtGg4KxMj4AZzzVsfWrFKtl2LRbFNI WLuCRBlyVNi7+KFFVvhYem/u6KvwJI8rjgWOU2vTc2+PHxVSA+AqVAyUoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEjz+ipQOZax6W/hBDWhbO991SKMB8GA1UdIwQY MBaAFAmdOUZBPdERYbRsffatNiqZONXUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84NTY0NDMtYjhmYi00NzhlLTg3Yzkt Y2Y1MmFhOWQ2Y2NjLzEvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC84NTY0NDMtYjhmYi00NzhlLTg3YzktY2Y1MmFhOWQ2Y2Nj LzEvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSD+qPph tzwbbGa7O+et/LwoQ0nZNqz/FL7eVdw4aGqruzNJzo8Z2OpGcLbbreIeG4XSfCmM 8qiqzkcj/u7cR5jtHsJOnqGTc4x7A+VxOIeyq+fJW7laeXqe2ESfMYPMHLzM0VTx bntARdHq3Pd11kcQ979LKPTC9VW5Yvn5nV2X8nEDmZ/ob+4eE1JEUg9pr2BVkuMl ZKiQiUMu1xtVo0qkWzeB47XZHnioqkkPfmmlZp1TBkZhXEu5DlPWXSiXcs0hbxlJ /tzQtWdK2eoiiHVxRk3Jlb/bNrcjZ0c+fOUC2nkgIR935BiFF3O+CziKjkfE6JCa EH30ePktBlGAVg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:47:43 2025 by rpki-client