This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json) Hash identifier: Vgafti5hLPPkp7oAOvozwsgtd9x0uOirvKg7FOpTxtc= Subject key identifier: 62:FA:34:91:F5:B5:FD:73:86:1B:E9:F2:AA:04:CF:8B:57:23:9D:61 Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7 Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7 Certificate serial: 019B2DE749FA1E70EDCE6F3ADC14B6D3A8A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft Manifest number: 13C1 Signing time: Wed 17 Dec 2025 20:01:30 +0000 Manifest this update: Wed 17 Dec 2025 20:01:30 +0000 Manifest next update: Thu 18 Dec 2025 20:01:30 +0000 Files and hashes: 1: 4c8--QgXbx8QC_JFp2ao9vSi3cQ.roa (hash: 9rzljFXZsljfliBgRYCkXTC5VYqcqhOIMYMb68KvfKw=) 2: 8fw-hYkolDEKJ1ctrBbs1PHS39s.roa (hash: XMuARJljMXs1kizk5ea5ttatqj4ZMgxKjO1p6vsjrO8=) 3: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: 7izEnqcREbP6gm5nYiqMJUXJFr//uJlFZVMpDD2kzO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 20:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e7:49:fa:1e:70:ed:ce:6f:3a:dc:14:b6:d3:a8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7 Validity Not Before: Dec 17 20:01:30 2025 GMT Not After : Dec 18 20:01:30 2025 GMT Subject: CN=62fa3491f5b5fd73861be9f2aa04cf8b57239d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:37:d5:57:d3:8b:be:c2:17:7e:fe:2e:ef:68: a5:1b:06:21:f7:84:9e:51:3d:0e:1a:d6:25:0b:aa: a6:9c:c0:40:34:fe:c7:0f:58:aa:64:ec:a7:72:8b: 21:73:78:63:37:17:d5:82:aa:0e:75:17:a2:ea:a1: e9:af:8d:d4:24:28:2b:dd:c7:e5:91:fd:c1:60:89: e8:f4:50:c6:75:36:a8:8b:bf:a7:b6:a1:4c:08:2a: 54:77:cd:d8:af:75:2e:37:87:a5:89:d0:2e:fd:f2: 93:a3:90:f6:68:57:9a:fd:d9:8b:45:40:60:e9:c3: be:ca:e1:43:b0:21:a3:93:ae:58:38:c4:34:aa:28: ea:0f:8b:56:8b:71:22:12:a9:48:6d:80:49:c0:53: 45:6e:ca:5c:dd:1d:01:81:91:5b:e5:09:8a:a5:6d: d0:8c:4d:e8:0c:22:f9:4e:ea:02:fb:8d:62:cd:e1: ff:f2:71:5b:06:09:d8:17:85:bd:60:6b:80:39:7b: 49:58:b3:55:86:91:35:ee:e0:78:7e:14:cc:ee:53: 68:cc:ab:5a:65:c2:ab:ed:70:17:91:db:f1:76:51: 7c:e3:dc:bf:55:c3:30:39:19:fb:02:a5:f7:ce:dd: 6f:4a:f1:8b:8c:c3:4f:69:33:88:a2:a9:19:d2:f2: a9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FA:34:91:F5:B5:FD:73:86:1B:E9:F2:AA:04:CF:8B:57:23:9D:61 X509v3 Authority Key Identifier: keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:30:54:33:29:08:1f:c2:1a:cd:bf:0e:d3:5e:b3:49:4e:e0: c8:bb:fa:1e:d4:5d:3d:66:4c:fe:5b:89:3f:17:ae:57:78:99: d1:4e:e9:c5:b6:e8:b4:41:d5:1d:ce:42:ad:ec:7a:65:b0:3a: 51:90:bb:e4:4b:d5:4f:8d:cf:ca:fd:65:e1:a0:50:32:01:e4: 92:ea:b0:d4:85:21:e1:a4:0d:4a:21:a4:46:0b:65:b8:fe:ff: 34:0b:c6:70:01:15:32:ca:d5:d2:d8:ee:c1:09:e9:bb:d7:89: 70:33:ee:1b:7d:c5:2f:57:91:72:79:05:99:b2:5a:8c:0d:23: be:bc:7a:10:83:df:c1:9a:ef:35:41:03:e9:80:53:76:42:0f: 37:bd:a8:7e:21:e3:bc:bc:1e:4b:ad:20:54:5a:18:47:94:d5: 17:13:94:af:8d:07:54:93:57:0b:43:eb:1c:b8:cb:f8:d5:2f: 96:93:71:9c:7f:f4:ed:7a:5f:e6:3b:03:5d:f0:04:94:5d:da: bf:ee:6c:26:a6:69:69:45:18:1f:cf:e1:70:a6:c0:3d:f1:a9: 93:d8:2a:01:c9:94:94:38:54:90:73:cc:cb:b8:ef:03:30:2b: ff:a3:62:80:a3:b2:72:76:0e:90:36:aa:a7:b3:37:5a:02:bc: 3e:07:bb:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst50n6HnDtzm863BS206ijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzk2OWNkYzBiNWZmMDlkMTk5YmNhNWRhZGRiOWFhYjUx MDQwZTcwHhcNMjUxMjE3MjAwMTMwWhcNMjUxMjE4MjAwMTMwWjAzMTEwLwYDVQQD Eyg2MmZhMzQ5MWY1YjVmZDczODYxYmU5ZjJhYTA0Y2Y4YjU3MjM5ZDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDfVV9OLvsIXfv4u72ilGwYh94Se UT0OGtYlC6qmnMBANP7HD1iqZOyncoshc3hjNxfVgqoOdRei6qHpr43UJCgr3cfl kf3BYIno9FDGdTaoi7+ntqFMCCpUd83Yr3UuN4elidAu/fKTo5D2aFea/dmLRUBg 6cO+yuFDsCGjk65YOMQ0qijqD4tWi3EiEqlIbYBJwFNFbspc3R0BgZFb5QmKpW3Q jE3oDCL5TuoC+41izeH/8nFbBgnYF4W9YGuAOXtJWLNVhpE17uB4fhTM7lNozKta ZcKr7XAXkdvxdlF849y/VcMwORn7AqX3zt1vSvGLjMNPaTOIoqkZ0vKpewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGL6NJH1tf1zhhvp8qoEz4tXI51hMB8GA1UdIwQY MBaAFAs5ac3Atf8J0Zm8pdrduaq1EEDnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYt NmJiNGZlZTg1NzM1LzEvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYtNmJiNGZlZTg1NzM1 LzEvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDBUMykI H8Iazb8O016zSU7gyLv6HtRdPWZM/luJPxeuV3iZ0U7pxbbotEHVHc5Crex6ZbA6 UZC75EvVT43Pyv1l4aBQMgHkkuqw1IUh4aQNSiGkRgtluP7/NAvGcAEVMsrV0tju wQnpu9eJcDPuG33FL1eRcnkFmbJajA0jvrx6EIPfwZrvNUED6YBTdkIPN72ofiHj vLweS60gVFoYR5TVFxOUr40HVJNXC0PrHLjL+NUvlpNxnH/07Xpf5jsDXfAElF3a v+5sJqZpaUUYH8/hcKbAPfGpk9gqAcmUlDhUkHPMy7jvAzAr/6NigKOycnYOkDaq p7M3WgK8Pge7CA== -----END CERTIFICATE-----Generated at Thu Dec 18 06:02:02 2025 by rpki-client