This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json) Hash identifier: X3P40lLvVVZF0cuO57GoTU+Oi4Dz2Raw2+zGT/9rcxs= Subject key identifier: 2A:94:22:87:81:D5:EE:CC:8A:E9:72:FB:3C:56:08:60:17:3D:D3:BF Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05 Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05 Certificate serial: 019B37FC70AC1BE1247FABD158A56C4BD341 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft Manifest number: 0B35 Signing time: Fri 19 Dec 2025 19:00:49 +0000 Manifest this update: Fri 19 Dec 2025 19:00:49 +0000 Manifest next update: Sat 20 Dec 2025 19:00:49 +0000 Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: UpPmB7F6UZ+nf3MPUoxmnIhS1+dnnDBWxjf0dksbQeo=) 2: JFMyA-XTfzJ98LwUaDo6uCal6eE.roa (hash: 53iyOJ7/FikpZ4x6oYvSunvmMxLDuiMuvaZO1jcps9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:70:ac:1b:e1:24:7f:ab:d1:58:a5:6c:4b:d3:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05 Validity Not Before: Dec 19 19:00:49 2025 GMT Not After : Dec 20 19:00:49 2025 GMT Subject: CN=2a94228781d5eecc8ae972fb3c560860173dd3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:d4:35:f2:34:15:3a:60:fa:91:be:a9:7a: 67:9c:2b:9b:d1:34:53:7c:47:17:61:8a:a5:fa:fa: 6c:f6:dc:12:d7:80:89:ce:e6:3f:f1:b9:2a:a7:07: 75:bb:22:f0:fc:79:5f:9f:32:b1:42:8f:d9:88:dd: 0c:1f:9e:b6:0e:60:30:4d:09:6f:c3:d1:c5:72:16: c4:cd:1a:9a:a9:6d:fd:dc:d2:02:b2:53:45:83:c7: 54:ff:4f:60:ec:8e:7e:bd:bb:44:1d:08:23:25:49: d3:e3:3d:7a:e9:6a:a8:92:49:3b:fb:59:3a:a5:99: ff:a1:22:6b:50:1f:69:2e:a6:1b:f5:a3:50:2c:d4: 35:29:f0:de:2a:f0:43:4d:a5:26:46:46:72:5a:d2: 3f:6f:14:a9:fd:1d:f9:00:cd:41:82:29:cc:9f:0e: a6:0d:cb:5d:ab:a6:00:6d:bf:ea:f2:32:b6:53:3c: 74:90:b8:29:15:4f:c9:a4:9c:1d:55:b5:fe:f8:57: df:96:fc:51:1f:c1:00:ca:26:23:1d:a5:15:2f:1c: c5:07:1d:32:a9:64:d3:e8:66:03:32:27:b7:38:25: d1:c5:94:69:ff:b4:ab:0f:35:82:d2:11:8d:99:03: eb:33:8c:3f:53:f0:33:d8:6b:d5:e5:fa:98:87:89: 4d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:94:22:87:81:D5:EE:CC:8A:E9:72:FB:3C:56:08:60:17:3D:D3:BF X509v3 Authority Key Identifier: keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:eb:cf:43:8f:1c:2d:77:68:a8:10:a4:65:8a:bd:43:88:a3: b1:c8:e1:02:f3:bc:95:51:72:eb:2d:21:98:1d:bb:ca:dd:bc: 26:ea:ef:5b:f8:0a:ff:d8:99:4d:55:cb:a5:c8:83:a2:76:54: 15:e0:88:bf:12:9c:97:0a:a9:73:b9:4b:0b:04:36:29:28:28: 75:21:31:81:56:3b:dd:0c:86:91:cf:e0:03:19:79:a0:dd:25: 2a:ed:d6:14:ad:0d:e5:ef:cd:c7:16:06:d7:c7:07:b0:48:e2: 6e:b3:d2:d4:31:d7:c1:aa:66:a5:e4:37:86:b9:51:2c:4d:37: 7f:31:8d:7e:51:6c:bb:36:ea:e1:7e:68:9f:2c:b4:7a:2b:79: 00:b7:15:43:76:1c:8b:22:d5:9d:3b:2a:0a:71:c7:84:3a:f1: 5a:a0:a7:cc:f7:7c:43:77:f5:60:9c:f2:90:71:eb:d4:22:8a: a7:97:59:fa:52:e8:be:b0:c7:59:5d:9e:09:f2:de:8f:26:2e: e4:38:5b:90:e9:7a:e4:f6:a9:b0:2f:a2:c4:02:40:94:88:c3: 58:7b:6a:9d:f1:09:10:8c:29:94:ea:83:f1:3a:c7:fe:f0:b1: 44:b7:4c:73:69:76:53:9c:10:c0:e1:de:da:a2:f2:a3:01:56: b2:48:dc:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/HCsG+Ekf6vRWKVsS9NBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWNjNWQ5MGM5YjY4MWE2Y2I0ZTc3MmNjYWViZWMzNDJm YjliMDUwHhcNMjUxMjE5MTkwMDQ5WhcNMjUxMjIwMTkwMDQ5WjAzMTEwLwYDVQQD EygyYTk0MjI4NzgxZDVlZWNjOGFlOTcyZmIzYzU2MDg2MDE3M2RkM2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuonUNfI0FTpg+pG+qXpnnCub0TRT fEcXYYql+vps9twS14CJzuY/8bkqpwd1uyLw/HlfnzKxQo/ZiN0MH562DmAwTQlv w9HFchbEzRqaqW393NICslNFg8dU/09g7I5+vbtEHQgjJUnT4z166Wqokkk7+1k6 pZn/oSJrUB9pLqYb9aNQLNQ1KfDeKvBDTaUmRkZyWtI/bxSp/R35AM1BginMnw6m Dctdq6YAbb/q8jK2Uzx0kLgpFU/JpJwdVbX++FfflvxRH8EAyiYjHaUVLxzFBx0y qWTT6GYDMie3OCXRxZRp/7SrDzWC0hGNmQPrM4w/U/Az2GvV5fqYh4lNoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqUIoeB1e7Miuly+zxWCGAXPdO/MB8GA1UdIwQY MBaAFAkcxdkMm2gabLTncsyuvsNC+5sFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83MzhmNzgtNDM4Yy00YmZkLTgwNmIt NzNiZmFkODMyZDJkLzEvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny83MzhmNzgtNDM4Yy00YmZkLTgwNmItNzNiZmFkODMyZDJk LzEvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOvPQ48c LXdoqBCkZYq9Q4ijscjhAvO8lVFy6y0hmB27yt28JurvW/gK/9iZTVXLpciDonZU FeCIvxKclwqpc7lLCwQ2KSgodSExgVY73QyGkc/gAxl5oN0lKu3WFK0N5e/NxxYG 18cHsEjibrPS1DHXwapmpeQ3hrlRLE03fzGNflFsuzbq4X5onyy0eit5ALcVQ3Yc iyLVnTsqCnHHhDrxWqCnzPd8Q3f1YJzykHHr1CKKp5dZ+lLovrDHWV2eCfLejyYu 5DhbkOl65PapsC+ixAJAlIjDWHtqnfEJEIwplOqD8TrH/vCxRLdMc2l2U5wQwOHe 2qLyowFWskjcuA== -----END CERTIFICATE-----Generated at Fri Dec 19 22:53:04 2025 by rpki-client