This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft File: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json) Hash identifier: RnHEdZ+PeWh5FDaL745ga/eZRX9ACjK5L/VZxJm12IA= Subject key identifier: D5:92:98:C7:25:55:EC:C0:F0:4E:80:47:C3:40:7E:D5:B1:8E:93:D1 Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5 Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5 Certificate serial: 019B58D1CA2172E596B9DF4BD9D946E8131B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft Manifest number: 01F1 Signing time: Fri 26 Dec 2025 04:01:42 +0000 Manifest this update: Fri 26 Dec 2025 04:01:42 +0000 Manifest next update: Sat 27 Dec 2025 04:01:42 +0000 Files and hashes: 1: 0En_rM3ItFKYLhaLLd8WBZOTlpA.roa (hash: 152maO322NYmeUI+2QBI3Muc080/yMuLJaeicPAME94=) 2: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: ewUqRr1BswMhMkvRVFcngN1lnsJvVx/c3EWXJkSAGF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:ca:21:72:e5:96:b9:df:4b:d9:d9:46:e8:13:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5 Validity Not Before: Dec 26 04:01:42 2025 GMT Not After : Dec 27 04:01:42 2025 GMT Subject: CN=d59298c72555ecc0f04e8047c3407ed5b18e93d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:64:86:7c:70:cc:8a:ea:bd:cc:d6:de:71:5b: 30:89:49:64:df:66:fe:d5:84:26:48:f6:f8:b4:3b: 94:54:31:de:3c:9f:bb:62:37:aa:62:0e:cf:a5:53: 67:4c:78:7d:8d:dd:f9:c0:1b:3b:06:9e:b1:29:26: c2:20:67:c9:ab:1f:37:65:17:f7:d0:ec:06:8a:d7: ac:b8:a0:fb:b7:5b:47:d3:95:72:97:73:9a:f6:3b: 5a:58:b2:11:17:ca:b6:c0:4b:9f:65:0c:66:1c:68: 69:15:27:d1:7e:10:20:77:5a:c4:5f:7c:3e:17:71: f9:8e:55:d9:73:65:22:23:55:80:35:5f:c0:1d:ed: 15:e6:fb:ab:d9:b8:2f:83:cb:58:1a:60:35:a3:83: b1:6b:c2:1a:e0:00:d1:43:09:29:9e:29:0d:18:f8: d4:3c:60:44:f9:b7:ff:a1:b8:17:e3:aa:38:2d:4f: 42:eb:d7:96:c8:52:0c:12:c8:6d:a6:e4:c7:ff:f5: 5f:4e:64:e5:fa:d8:47:0e:42:9d:f1:64:16:b2:e5: 52:ff:91:f9:13:e3:3b:ab:15:16:60:1a:7a:59:1a: 64:9a:e5:76:77:90:ad:ce:7b:d1:f9:22:ff:77:a0: a6:aa:f9:1f:ea:4b:2a:02:66:4a:b9:9d:22:06:7c: 46:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:92:98:C7:25:55:EC:C0:F0:4E:80:47:C3:40:7E:D5:B1:8E:93:D1 X509v3 Authority Key Identifier: keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:3a:04:45:eb:48:05:67:52:b1:db:e9:06:a0:b9:6b:f4:b6: a0:0a:0a:98:31:07:37:47:6f:36:4a:6d:df:3c:24:51:8e:21: d4:33:57:fd:b9:21:a4:77:60:4d:41:59:b1:7b:09:5e:73:f9: 5d:f4:5e:c7:21:c6:d7:20:a4:03:e1:14:8b:b0:a9:8d:7d:df: 97:30:8c:e0:a0:6f:d2:4d:0f:30:07:df:22:da:92:72:f3:9b: 91:f5:e3:b3:5e:ff:f8:ab:d9:1f:4b:95:42:16:b0:cb:95:c4: 5b:3b:00:e8:be:92:72:c3:d6:90:c6:50:4b:9f:04:43:17:90: 5a:78:34:f5:09:fb:18:b5:d4:f4:c6:2d:06:ab:e4:8f:15:f8: 83:1b:c1:6c:b3:a4:71:73:88:1d:68:81:dd:d6:93:a4:0e:d8: 2f:4e:18:37:e4:fe:6e:75:e2:48:f1:81:ba:65:19:fb:4b:d3: 50:1e:44:01:b9:f9:77:3c:38:63:c7:6b:7d:6a:dd:9a:ae:34: 37:dc:33:ec:ea:7a:56:d1:44:c9:51:97:ba:16:e5:59:2c:65: b6:3b:41:44:d1:94:93:17:a7:19:4b:e5:e7:33:63:bc:bb:4a: 8a:de:76:21:b1:23:41:f4:f3:7e:38:cf:d9:6b:a7:34:bc:a8: 60:3a:4b:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0cohcuWWud9L2dlG6BMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MmJlNzYyZmJiMTBmZWU0MmQ2ZGU1NTY3OTM2ZWNkMWY4 M2RlZDUwHhcNMjUxMjI2MDQwMTQyWhcNMjUxMjI3MDQwMTQyWjAzMTEwLwYDVQQD EyhkNTkyOThjNzI1NTVlY2MwZjA0ZTgwNDdjMzQwN2VkNWIxOGU5M2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGSGfHDMiuq9zNbecVswiUlk32b+ 1YQmSPb4tDuUVDHePJ+7YjeqYg7PpVNnTHh9jd35wBs7Bp6xKSbCIGfJqx83ZRf3 0OwGitesuKD7t1tH05Vyl3Oa9jtaWLIRF8q2wEufZQxmHGhpFSfRfhAgd1rEX3w+ F3H5jlXZc2UiI1WANV/AHe0V5vur2bgvg8tYGmA1o4Oxa8Ia4ADRQwkpnikNGPjU PGBE+bf/obgX46o4LU9C69eWyFIMEshtpuTH//VfTmTl+thHDkKd8WQWsuVS/5H5 E+M7qxUWYBp6WRpkmuV2d5CtznvR+SL/d6Cmqvkf6ksqAmZKuZ0iBnxGNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWSmMclVezA8E6AR8NAftWxjpPRMB8GA1UdIwQY MBaAFAkr52L7sQ/uQtbeVWeTbs0fg97VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1N2bll2dXhELTVDMXQ1Vlo1TnV6Ui1EM3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hYWMzZWItMGNiNC00ZTIzLTlmNzAt Yzk0MGFkM2MwMDhhLzEvQ1N2bll2dXhELTVDMXQ1Vlo1TnV6Ui1EM3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hYWMzZWItMGNiNC00ZTIzLTlmNzAtYzk0MGFkM2MwMDhh LzEvQ1N2bll2dXhELTVDMXQ1Vlo1TnV6Ui1EM3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOToERetI BWdSsdvpBqC5a/S2oAoKmDEHN0dvNkpt3zwkUY4h1DNX/bkhpHdgTUFZsXsJXnP5 XfRexyHG1yCkA+EUi7CpjX3flzCM4KBv0k0PMAffItqScvObkfXjs17/+KvZH0uV Qhawy5XEWzsA6L6ScsPWkMZQS58EQxeQWng09Qn7GLXU9MYtBqvkjxX4gxvBbLOk cXOIHWiB3daTpA7YL04YN+T+bnXiSPGBumUZ+0vTUB5EAbn5dzw4Y8drfWrdmq40 N9wz7Op6VtFEyVGXuhblWSxltjtBRNGUkxenGUvl5zNjvLtKit52IbEjQfTzfjjP 2WunNLyoYDpL1Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:51 2025 by rpki-client