This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json) Hash identifier: nGyCimPIPQrT0RcBOT4FiKFHfqMNXXSeMGQckfJjALo= Subject key identifier: 73:81:55:55:A0:DE:30:B9:F4:A2:29:BD:B0:D8:3F:37:97:31:B4:CE Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81 Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481 Certificate serial: 019AF6F8748F3317A4E5A25F550778A97363 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft Manifest number: 05E5 Signing time: Sun 07 Dec 2025 04:01:08 +0000 Manifest this update: Sun 07 Dec 2025 04:01:08 +0000 Manifest next update: Mon 08 Dec 2025 04:01:08 +0000 Files and hashes: 1: AIqZOuJk6FdX-ARR52-tZ3pV5L8.roa (hash: UtG/CvZxoKdSqsgWu/Ntn0zvOecwyIkuE2hEquBOnL4=) 2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: Dc/FZQ26F/7G2BxS7o9Vto9KP4CIP2VvYg1Ep9mWMag=) 3: xytDSya4p2EgaXuzXHLS_THUKdo.roa (hash: ZRTiRpSuhaqocQiQr7gHeK4/PUG2E2ZO09HQMf9siGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:74:8f:33:17:a4:e5:a2:5f:55:07:78:a9:73:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481 Validity Not Before: Dec 7 04:01:08 2025 GMT Not After : Dec 8 04:01:08 2025 GMT Subject: CN=73815555a0de30b9f4a229bdb0d83f379731b4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3c:fa:c3:a2:f9:bb:57:0a:b7:08:38:a6:e0: 4c:05:4c:c5:89:bb:e0:06:d5:a1:88:2d:23:3c:97: ba:2b:5c:66:9e:6a:bc:bc:ca:c9:c4:f3:c1:94:ea: 88:18:0a:18:8e:38:e8:0a:e3:27:dd:96:7e:16:45: ea:77:1a:bf:a6:23:e6:7f:23:6c:fc:5e:8c:55:41: 3a:a6:7a:71:57:fd:dd:f5:a8:0c:ef:41:36:10:89: 38:69:d9:7a:3c:00:ad:a7:e5:df:67:ce:b4:db:71: 70:74:0f:d2:5d:80:4f:5a:bc:09:77:ac:db:aa:39: cb:5c:1c:43:58:42:74:b9:9d:6e:6d:86:88:4f:7c: c2:ab:b1:9f:4c:fb:29:12:7d:8b:a3:91:89:a2:5a: 01:93:49:e4:08:f2:4e:f1:0b:cb:3e:66:86:23:4b: ff:a2:2d:ef:e0:4f:41:d1:55:48:fa:26:49:a4:a7: 4b:41:d0:f1:66:3c:7f:cb:9f:51:48:ec:f6:b1:e5: 25:c4:f1:34:d3:82:36:c1:ff:87:fb:58:14:22:77: e9:13:82:8c:eb:a9:78:cd:fa:ed:38:75:68:c9:d1: a7:29:18:dd:5e:98:c3:48:fb:85:6b:b4:4e:9e:86: e1:f1:27:1f:13:2b:44:9e:81:0f:cf:41:0d:36:c4: a9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:81:55:55:A0:DE:30:B9:F4:A2:29:BD:B0:D8:3F:37:97:31:B4:CE X509v3 Authority Key Identifier: keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:91:80:ca:e8:1d:23:0e:56:2d:82:ab:f5:5e:5e:bf:8c:ea: db:d6:c7:15:7d:22:ec:c6:60:50:1a:f9:3f:09:0d:c0:bd:54: 44:c3:76:70:8a:64:c9:5c:9b:6d:34:8a:98:3a:79:3f:4f:06: 4f:42:be:bd:97:da:54:66:d8:72:58:5a:0e:0e:8d:b5:f4:60: ba:5c:f4:60:ac:04:dc:0f:dc:6e:4b:b9:ab:e1:95:03:88:aa: cc:96:24:ec:9b:0e:a5:b9:97:7b:70:90:f8:74:d9:a2:75:63: f9:6d:3d:c3:ec:c5:6c:d6:d4:f0:cd:cd:37:85:c6:26:8d:0f: 46:f3:a7:95:74:a1:7c:2d:b3:79:29:e5:9e:a6:3d:95:92:a7: 0e:2b:13:f2:aa:45:f6:72:ee:6d:05:e4:3b:f8:9d:68:c9:10: 19:65:e6:ae:3a:81:7a:2e:72:36:92:31:ba:09:9c:b7:b5:50: 51:7e:5b:f2:cd:43:ba:0f:bc:8f:29:fc:d3:1d:b1:69:75:59: 50:50:b0:13:23:64:3e:47:f7:48:f1:f5:a4:ee:44:9e:59:12: 9f:6c:3a:ba:23:cf:00:74:aa:18:30:9c:92:a9:3a:e2:e7:f4: 26:9b:8e:91:f4:c0:e0:ad:5a:f4:66:3e:ba:f1:65:62:ac:1d: 63:a5:b1:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+HSPMxek5aJfVQd4qXNjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyY2FlOTY1N2MyZDg0ZDEwMWFkODUwMGQ1ZDIzNmVhOGVi ODU0ODEwHhcNMjUxMjA3MDQwMTA4WhcNMjUxMjA4MDQwMTA4WjAzMTEwLwYDVQQD Eyg3MzgxNTU1NWEwZGUzMGI5ZjRhMjI5YmRiMGQ4M2YzNzk3MzFiNGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zz6w6L5u1cKtwg4puBMBUzFibvg BtWhiC0jPJe6K1xmnmq8vMrJxPPBlOqIGAoYjjjoCuMn3ZZ+FkXqdxq/piPmfyNs /F6MVUE6pnpxV/3d9agM70E2EIk4adl6PACtp+XfZ86023FwdA/SXYBPWrwJd6zb qjnLXBxDWEJ0uZ1ubYaIT3zCq7GfTPspEn2Lo5GJoloBk0nkCPJO8QvLPmaGI0v/ oi3v4E9B0VVI+iZJpKdLQdDxZjx/y59RSOz2seUlxPE004I2wf+H+1gUInfpE4KM 66l4zfrtOHVoydGnKRjdXpjDSPuFa7ROnobh8ScfEytEnoEPz0ENNsSpXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOBVVWg3jC59KIpvbDYPzeXMbTOMB8GA1UdIwQY MBaAFHLK6WV8LYTRAa2FANXSNuqOuFSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTkt NGFlNWZmOWY0ZmM2LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTktNGFlNWZmOWY0ZmM2 LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJGAyugd Iw5WLYKr9V5ev4zq29bHFX0i7MZgUBr5PwkNwL1URMN2cIpkyVybbTSKmDp5P08G T0K+vZfaVGbYclhaDg6NtfRgulz0YKwE3A/cbku5q+GVA4iqzJYk7JsOpbmXe3CQ +HTZonVj+W09w+zFbNbU8M3NN4XGJo0PRvOnlXShfC2zeSnlnqY9lZKnDisT8qpF 9nLubQXkO/idaMkQGWXmrjqBei5yNpIxugmct7VQUX5b8s1Dug+8jyn80x2xaXVZ UFCwEyNkPkf3SPH1pO5EnlkSn2w6uiPPAHSqGDCckqk64uf0JpuOkfTA4K1a9GY+ uvFlYqwdY6Wxsw== -----END CERTIFICATE-----Generated at Sun Dec 7 11:36:03 2025 by rpki-client