This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json) Hash identifier: JdbHn4rRWzZXy5ZtP/FFki1529mljzggW3paJTJlhA8= Subject key identifier: 5A:2E:49:A1:F7:43:27:47:7B:DD:A8:42:14:1F:C7:FB:F9:8A:C0:0D Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11 Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211 Certificate serial: 019B077E42B775A55692DE8DF48207DB7987 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft Manifest number: 176E Signing time: Wed 10 Dec 2025 09:01:13 +0000 Manifest this update: Wed 10 Dec 2025 09:01:13 +0000 Manifest next update: Thu 11 Dec 2025 09:01:13 +0000 Files and hashes: 1: RZxjFWlo2i2aJOHKRic4Fv-bX9o.roa (hash: gz7c2rZX9EEeMlQK8oZvhSguZMORv69xoCYnqP22C6w=) 2: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: vLWepkseHyMVopIYDBWae8q4DKkkimIGR76HGiDgicQ=) 3: ecPozDTBiwtPhHsED0tZv93AzPY.roa (hash: VAqfrUatc4XqZvYROBfJJkH7/EgI7JEtqS/gigZEo5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7e:42:b7:75:a5:56:92:de:8d:f4:82:07:db:79:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211 Validity Not Before: Dec 10 09:01:13 2025 GMT Not After : Dec 11 09:01:13 2025 GMT Subject: CN=5a2e49a1f74327477bdda842141fc7fbf98ac00d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d0:07:24:7c:1b:41:06:3e:f1:74:e1:5f:45: e3:ab:05:b6:08:64:ed:8c:a3:e9:ba:0a:64:20:df: cf:26:a8:19:60:ad:70:ab:93:6d:1c:df:ea:0a:dd: a2:69:6e:02:fa:ba:eb:52:90:fa:f7:7f:fe:5b:be: 26:71:1d:97:4b:5e:76:ec:49:44:93:d4:f5:92:58: 34:57:c7:a0:e7:7c:5b:84:67:47:d5:17:03:3f:a3: c3:6b:68:6c:54:90:40:cd:6b:22:07:0a:b9:00:38: f4:c7:d3:d7:1d:3a:f6:f8:95:a5:01:dc:b2:11:31: 5b:a1:7e:84:81:89:78:8c:36:33:be:68:1e:92:f8: c7:c5:c8:a4:09:54:88:d5:8f:c0:de:31:ba:3e:e4: ba:1c:9f:ed:33:49:73:29:68:a3:68:45:d6:8f:70: 0c:7e:97:e4:b3:60:88:85:12:9a:56:13:53:dc:a2: 68:f9:de:cc:c7:6b:1c:aa:33:88:e6:3a:a3:4a:61: 8a:27:f3:6d:52:9e:1a:aa:60:21:14:fc:4c:95:64: 3c:1c:2f:09:a0:46:30:1d:d0:c9:88:3e:98:1d:a1: 35:80:0b:79:e7:ad:86:65:f4:d1:9c:db:93:90:b3: 50:cb:15:c7:e8:56:b4:46:79:da:83:52:9c:1e:2b: 15:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2E:49:A1:F7:43:27:47:7B:DD:A8:42:14:1F:C7:FB:F9:8A:C0:0D X509v3 Authority Key Identifier: keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f7:cb:20:7e:8e:33:0c:ee:1d:ab:0f:30:5e:f1:63:f4:46: 59:c6:9d:71:8e:54:40:7a:1f:51:b1:bc:c2:50:37:ee:fe:16: 68:dd:2e:0d:83:0c:b4:72:42:cc:5d:02:fc:8f:5b:7e:dc:4c: 1c:f6:94:2e:2b:81:62:72:77:1d:33:da:e6:1b:b6:5c:96:0d: c4:f6:18:66:54:7a:54:7d:ea:51:67:52:1f:a3:df:e9:1c:24: 99:bc:6b:59:c4:37:d1:48:f8:47:68:fc:2f:49:88:37:97:b2: 26:4e:41:9f:95:4e:b4:db:d6:5f:4b:78:09:d3:d1:a8:9b:1b: 6e:26:1d:14:64:d7:c0:c4:77:77:67:d5:71:00:7e:7c:40:e1: 8f:4d:8a:e8:39:88:bd:26:9c:f5:83:87:a4:ae:0f:23:ee:91: 39:27:b7:e6:8e:75:9e:1c:ee:74:9e:81:b9:dc:23:e9:17:56: 06:eb:55:82:ee:66:c8:98:aa:20:34:52:f9:b2:39:56:53:f1: e6:d9:a9:f5:58:fe:0b:a4:dc:2b:cb:c7:da:a3:49:42:df:b8: 92:e0:4c:46:f2:d6:6d:7b:8e:3f:5c:8f:f1:41:2f:86:69:33: de:4d:cb:95:89:6d:22:0f:a5:b1:e6:4f:20:4b:c7:fc:0b:d1: c1:d0:ea:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfkK3daVWkt6N9IIH23mHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOWIzM2RlNjA1MWQwNGQ3NWY2YmIxZjdlNTNiMWVmZDY2 NDYyMTEwHhcNMjUxMjEwMDkwMTEzWhcNMjUxMjExMDkwMTEzWjAzMTEwLwYDVQQD Eyg1YTJlNDlhMWY3NDMyNzQ3N2JkZGE4NDIxNDFmYzdmYmY5OGFjMDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19AHJHwbQQY+8XThX0XjqwW2CGTt jKPpugpkIN/PJqgZYK1wq5NtHN/qCt2iaW4C+rrrUpD693/+W74mcR2XS1527ElE k9T1klg0V8eg53xbhGdH1RcDP6PDa2hsVJBAzWsiBwq5ADj0x9PXHTr2+JWlAdyy ETFboX6EgYl4jDYzvmgekvjHxcikCVSI1Y/A3jG6PuS6HJ/tM0lzKWijaEXWj3AM fpfks2CIhRKaVhNT3KJo+d7Mx2scqjOI5jqjSmGKJ/NtUp4aqmAhFPxMlWQ8HC8J oEYwHdDJiD6YHaE1gAt5562GZfTRnNuTkLNQyxXH6Fa0Rnnag1KcHisVHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFouSaH3QydHe92oQhQfx/v5isANMB8GA1UdIwQY MBaAFHKbM95gUdBNdfa7H35Tse/WZGIRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZDk1NDEtZWI3ZS00YTFhLWI4NGIt NmVhMjc5YTJlNmNiLzEvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8yZDk1NDEtZWI3ZS00YTFhLWI4NGItNmVhMjc5YTJlNmNi LzEvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPfLIH6O MwzuHasPMF7xY/RGWcadcY5UQHofUbG8wlA37v4WaN0uDYMMtHJCzF0C/I9bftxM HPaULiuBYnJ3HTPa5hu2XJYNxPYYZlR6VH3qUWdSH6Pf6RwkmbxrWcQ30Uj4R2j8 L0mIN5eyJk5Bn5VOtNvWX0t4CdPRqJsbbiYdFGTXwMR3d2fVcQB+fEDhj02K6DmI vSac9YOHpK4PI+6ROSe35o51nhzudJ6Budwj6RdWButVgu5myJiqIDRS+bI5VlPx 5tmp9Vj+C6TcK8vH2qNJQt+4kuBMRvLWbXuOP1yP8UEvhmkz3k3LlYltIg+lseZP IEvH/AvRwdDqRw== -----END CERTIFICATE-----Generated at Wed Dec 10 12:51:55 2025 by rpki-client