This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft File: csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json) Hash identifier: WDp5QkV18k457GZFNUlyQvl7i21KxclZOnW4SmhS9Wg= Subject key identifier: B1:EA:C2:74:C9:4F:12:C3:E2:75:E0:4B:9C:C7:B3:59:09:FF:AF:1A Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c Certificate serial: 019B0EC990FC764EB52CC9158F6088B7936E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft Manifest number: 16D8 Signing time: Thu 11 Dec 2025 19:00:49 +0000 Manifest this update: Thu 11 Dec 2025 19:00:49 +0000 Manifest next update: Fri 12 Dec 2025 19:00:49 +0000 Files and hashes: 1: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: O6Tw3Gg1yBUkwQKTib0fS3mDMqQgiAolxImGdGkFASo=) 2: rH_6QZmVa4_yNlZ_JVuN0_Vk3Xs.roa (hash: Z/fYNuFHcmnLVDSA1WLLI385MQXDkqW9Tw7vDgNOnAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:90:fc:76:4e:b5:2c:c9:15:8f:60:88:b7:93:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c Validity Not Before: Dec 11 19:00:49 2025 GMT Not After : Dec 12 19:00:49 2025 GMT Subject: CN=b1eac274c94f12c3e275e04b9cc7b35909ffaf1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ca:fc:d8:50:c6:79:ad:27:0a:c9:00:58:8e: a2:62:1c:18:31:88:89:89:f2:a0:66:fa:86:7f:32: 53:05:30:a4:31:2f:b2:a2:bd:9b:5b:12:13:c3:bf: ae:40:ad:76:40:df:37:dc:e2:85:7a:5c:80:17:71: 72:6c:1e:45:d3:b6:b3:93:b1:bb:13:4a:43:e1:46: b6:4e:dd:0d:34:f1:36:f8:14:ac:0f:05:00:68:b2: ef:57:5e:76:37:00:61:a4:bd:6d:bf:ea:10:ba:69: 62:7b:9f:7f:2a:e0:97:9d:9e:3e:78:f6:04:12:8d: 5e:de:b0:2f:b0:d6:5c:97:a1:d3:2f:b9:3d:e6:4c: bf:1d:ff:af:7e:ec:44:9e:15:cb:44:86:a3:52:c8: bb:cd:dc:1c:50:f7:1c:23:7a:ca:a5:4e:77:fb:ae: aa:a8:0d:18:76:36:03:9b:ed:64:88:52:d3:62:81: 97:58:c3:16:17:1a:f0:2f:9e:d9:55:cb:54:8c:df: 02:1f:f3:79:f3:f5:fd:0b:41:99:19:3f:35:80:6b: b6:55:27:fb:d8:cb:60:70:a7:1e:20:a7:62:b3:4a: 1c:a4:cb:f8:5d:43:05:82:26:f1:9a:a2:ea:70:6b: 5f:96:2c:d6:09:ac:70:78:b5:a6:a2:d4:8e:22:9e: 53:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EA:C2:74:C9:4F:12:C3:E2:75:E0:4B:9C:C7:B3:59:09:FF:AF:1A X509v3 Authority Key Identifier: keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:a3:0a:46:88:79:c4:22:f7:7b:a5:c6:43:f2:1b:f9:c2:b3: 2a:8d:c5:0e:ed:90:9d:5a:bb:ad:1b:b9:92:31:07:f4:17:58: dc:15:c6:15:4c:53:7f:fa:69:1c:3e:b5:09:c7:f4:14:7d:43: f5:a1:e3:6f:14:2a:0a:11:e8:65:fd:cd:3b:db:14:ef:c4:88: 4f:36:f6:59:77:0a:c2:b4:86:7b:da:10:2d:77:19:f3:80:07: 31:42:06:fd:04:50:71:e8:e2:77:6c:7f:52:3a:ed:ae:64:70: f2:c0:c8:d1:6a:19:36:b2:e6:aa:e7:f1:4b:f9:4d:a1:15:33: 57:19:78:01:e7:b4:23:f8:79:06:5f:88:c8:16:f4:51:2e:7e: 5a:df:82:0d:48:36:96:3d:46:9b:48:70:5b:f4:10:22:bc:dd: 3f:5b:70:7b:a8:10:3d:8f:88:db:13:94:9f:d3:04:8e:c7:8b: c7:3a:25:5b:98:06:23:43:99:23:e2:d2:2d:a2:f0:6a:20:3a: df:01:d8:82:e5:a8:1e:1b:14:37:87:a9:7c:c6:46:c9:cc:f1: 67:97:0f:70:1c:86:21:5b:50:bf:c8:2f:53:19:b3:8d:19:42: 37:37:1c:cb:7a:03:27:41:05:45:bb:b4:a5:ba:f2:aa:2e:f5: 36:95:2a:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyZD8dk61LMkVj2CIt5NuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyY2ExYTVjZmY1MmViZTJmMjJiNjY5ZGNjMmM5MDI3Y2Vh MGI4MWMwHhcNMjUxMjExMTkwMDQ5WhcNMjUxMjEyMTkwMDQ5WjAzMTEwLwYDVQQD EyhiMWVhYzI3NGM5NGYxMmMzZTI3NWUwNGI5Y2M3YjM1OTA5ZmZhZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMr82FDGea0nCskAWI6iYhwYMYiJ ifKgZvqGfzJTBTCkMS+yor2bWxITw7+uQK12QN833OKFelyAF3FybB5F07azk7G7 E0pD4Ua2Tt0NNPE2+BSsDwUAaLLvV152NwBhpL1tv+oQumlie59/KuCXnZ4+ePYE Eo1e3rAvsNZcl6HTL7k95ky/Hf+vfuxEnhXLRIajUsi7zdwcUPccI3rKpU53+66q qA0YdjYDm+1kiFLTYoGXWMMWFxrwL57ZVctUjN8CH/N58/X9C0GZGT81gGu2VSf7 2MtgcKceIKdis0ocpMv4XUMFgibxmqLqcGtflizWCaxweLWmotSOIp5TVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHqwnTJTxLD4nXgS5zHs1kJ/68aMB8GA1UdIwQY MBaAFHLKGlz/Uuvi8itmncwskCfOoLgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NvYVhQOVM2LUx5SzJhZHpDeVFKODZndUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xMmFjMGUtNTQ3NC00NWQ1LThkZWYt NmE0MTRmMTg0NzA2LzEvY3NvYVhQOVM2LUx5SzJhZHpDeVFKODZndUJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8xMmFjMGUtNTQ3NC00NWQ1LThkZWYtNmE0MTRmMTg0NzA2 LzEvY3NvYVhQOVM2LUx5SzJhZHpDeVFKODZndUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaMKRoh5 xCL3e6XGQ/Ib+cKzKo3FDu2QnVq7rRu5kjEH9BdY3BXGFUxTf/ppHD61Ccf0FH1D 9aHjbxQqChHoZf3NO9sU78SITzb2WXcKwrSGe9oQLXcZ84AHMUIG/QRQcejid2x/ UjrtrmRw8sDI0WoZNrLmqufxS/lNoRUzVxl4Aee0I/h5Bl+IyBb0US5+Wt+CDUg2 lj1Gm0hwW/QQIrzdP1twe6gQPY+I2xOUn9MEjseLxzolW5gGI0OZI+LSLaLwaiA6 3wHYguWoHhsUN4epfMZGyczxZ5cPcByGIVtQv8gvUxmzjRlCNzccy3oDJ0EFRbu0 pbryqi71NpUqig== -----END CERTIFICATE-----Generated at Fri Dec 12 01:13:19 2025 by rpki-client