This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json) Hash identifier: UKunmtLbJqKdRgd5c9onIjNT23taRL1JeFiPkXIPCIg= Subject key identifier: 8E:FE:CA:E4:65:F7:98:C5:CB:FA:49:A7:9C:CC:9B:D0:F5:F4:5B:52 Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e Certificate serial: 019B329EEF1D377957635EA79E2F12512ABD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 18:00:35 +0000 Manifest this update: Thu 18 Dec 2025 18:00:35 +0000 Manifest next update: Fri 19 Dec 2025 18:00:35 +0000 Files and hashes: 1: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: zZEO9ZmLGfSbMK/+wzGAqFBVkmFnydOD4BWmMDW0a7A=) 2: fDOjbGC7SXuBR1WvGEj8iP8Gi68.roa (hash: hI6uFXxiWou3BV634T4h3OJSDdh6qUObBj238tGqfTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:9e:ef:1d:37:79:57:63:5e:a7:9e:2f:12:51:2a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e Validity Not Before: Dec 18 18:00:35 2025 GMT Not After : Dec 19 18:00:35 2025 GMT Subject: CN=8efecae465f798c5cbfa49a79ccc9bd0f5f45b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:d3:4f:3d:ed:4b:2d:c9:8b:59:fb:ab:c7: 91:3d:81:1f:c5:d8:11:22:83:9a:71:d4:90:09:05: d2:98:56:c7:d0:c0:ca:0a:6d:93:5a:57:75:c0:4c: c9:ba:b3:92:e7:28:c4:5d:64:69:cf:02:d6:48:ee: 23:58:d7:02:e0:85:85:71:96:e1:5a:c5:be:91:bf: dd:c7:c9:58:6a:47:69:35:d2:3e:45:a8:a4:39:4b: 4d:2d:85:60:93:29:87:0d:03:ea:dc:95:af:80:66: d8:3a:c7:11:b0:1e:91:e2:cf:0e:af:22:dd:6c:f8: 37:07:49:f9:54:aa:7e:bd:e1:0d:ba:c6:37:fd:bd: 62:91:70:72:d7:f7:4a:ad:48:50:47:0e:37:39:05: c9:76:24:3b:39:be:03:8a:b0:00:75:38:d3:58:1e: 0e:b4:46:c3:02:b4:94:51:ee:d4:ce:53:66:9f:c2: 87:45:76:66:bf:d1:39:0e:63:6e:61:1a:95:2b:4d: bc:ba:bc:a1:47:18:b0:f8:21:a7:34:64:51:5d:ce: 56:12:58:2e:1e:88:c6:c5:3b:6b:6f:5a:ec:60:aa: 0b:70:c0:ca:4c:ca:7b:e1:70:2d:5b:cb:2d:3c:67: 30:35:a1:43:4a:7b:fc:02:c4:52:b6:c9:4b:bc:f6: 99:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FE:CA:E4:65:F7:98:C5:CB:FA:49:A7:9C:CC:9B:D0:F5:F4:5B:52 X509v3 Authority Key Identifier: keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:0d:d8:f1:79:d9:fb:88:20:fc:2f:44:c0:e6:0a:11:cd:64: b1:c3:92:e8:40:62:aa:55:2f:4a:a9:7f:97:f2:7c:26:46:37: c9:d7:c4:44:a3:f1:c1:53:0d:56:14:42:a0:24:e5:d0:5b:5a: 70:fa:ee:33:87:b9:b4:0e:a4:8a:d5:b4:75:5e:c8:a1:94:d8: c0:96:9a:b1:95:0d:ec:e9:d1:3e:c8:4b:68:23:ff:c4:91:56: f2:02:6b:2b:c3:3e:83:c9:13:ac:15:b8:bf:0d:f3:59:13:e9: 23:fc:bd:42:02:66:a2:8c:c3:0c:e5:2b:f0:a8:08:6e:cf:33: ff:eb:0e:2c:9b:af:2e:c4:83:1b:28:1d:02:50:d6:e3:09:19: 48:1d:27:8c:bc:99:10:d7:b0:cd:bb:ba:74:46:56:3d:97:b8: a3:07:50:6b:cf:07:47:7c:21:60:e6:df:99:0e:2b:f1:a5:1e: a8:88:84:06:5b:b8:5d:db:4c:6b:c0:4d:2c:ae:2e:30:a6:a1: 47:cc:46:b4:22:55:37:81:04:98:b0:fa:05:db:6a:10:3f:76: 86:4c:43:f3:5e:c9:48:0e:73:cb:e0:9a:c6:01:b0:10:76:0e: e9:9d:4e:3c:4d:11:ea:de:87:aa:33:22:a3:dc:08:39:5e:42: 00:9e:23:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsynu8dN3lXY16nni8SUSq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYzk4MjY3YTVkYjI2YzY1ZTQxZTY0NjY0OGYxMDE2NjM2 ZTU0NGUwHhcNMjUxMjE4MTgwMDM1WhcNMjUxMjE5MTgwMDM1WjAzMTEwLwYDVQQD Eyg4ZWZlY2FlNDY1Zjc5OGM1Y2JmYTQ5YTc5Y2NjOWJkMGY1ZjQ1YjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOXTTz3tSy3Ji1n7q8eRPYEfxdgR IoOacdSQCQXSmFbH0MDKCm2TWld1wEzJurOS5yjEXWRpzwLWSO4jWNcC4IWFcZbh WsW+kb/dx8lYakdpNdI+RaikOUtNLYVgkymHDQPq3JWvgGbYOscRsB6R4s8OryLd bPg3B0n5VKp+veENusY3/b1ikXBy1/dKrUhQRw43OQXJdiQ7Ob4DirAAdTjTWB4O tEbDArSUUe7UzlNmn8KHRXZmv9E5DmNuYRqVK028uryhRxiw+CGnNGRRXc5WElgu HojGxTtrb1rsYKoLcMDKTMp74XAtW8stPGcwNaFDSnv8AsRStslLvPaZjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7+yuRl95jFy/pJp5zMm9D19FtSMB8GA1UdIwQY MBaAFArJgmel2ybGXkHmRmSPEBZjblROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zNzk5ZmEtOWRiOS00ZmM4LThmZDYt MmQ5ZTk5ZjQ3MjJjLzEvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zNzk5ZmEtOWRiOS00ZmM4LThmZDYtMmQ5ZTk5ZjQ3MjJj LzEvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQ3Y8XnZ +4gg/C9EwOYKEc1kscOS6EBiqlUvSql/l/J8JkY3ydfERKPxwVMNVhRCoCTl0Fta cPruM4e5tA6kitW0dV7IoZTYwJaasZUN7OnRPshLaCP/xJFW8gJrK8M+g8kTrBW4 vw3zWRPpI/y9QgJmoozDDOUr8KgIbs8z/+sOLJuvLsSDGygdAlDW4wkZSB0njLyZ ENewzbu6dEZWPZe4owdQa88HR3whYObfmQ4r8aUeqIiEBlu4XdtMa8BNLK4uMKah R8xGtCJVN4EEmLD6BdtqED92hkxD817JSA5zy+CaxgGwEHYO6Z1OPE0R6t6HqjMi o9wIOV5CAJ4j1A== -----END CERTIFICATE-----Generated at Fri Dec 19 01:57:49 2025 by rpki-client