This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft File: cZLyKnioBxsCo2Ko2zPo8_ct00g.mft (raw, json) Hash identifier: 5dbzyAjdUXAHlkBT/eYcHvYKcGXgYzwmyi51TDYhEtQ= Subject key identifier: 4C:80:F8:69:6E:90:F3:11:8C:68:70:3F:4B:74:7B:56:C7:92:E6:39 Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48 Certificate issuer: /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348 Certificate serial: 019B21ABFA50893B9F319CD2DDE1DE32D22F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 11:01:17 +0000 Manifest this update: Mon 15 Dec 2025 11:01:17 +0000 Manifest next update: Tue 16 Dec 2025 11:01:17 +0000 Files and hashes: 1: cZLyKnioBxsCo2Ko2zPo8_ct00g.crl (hash: /RMTrftVvrNV8c+cee57STF2LIj7APurdwbmNDZ8L+Q=) 2: iySxd4tMbCEPkoMPKxUDu_5FR6M.roa (hash: aI0T28ewsgkic6wSWjP7Zq6jLamL49Y0wJiPkH5nxZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:fa:50:89:3b:9f:31:9c:d2:dd:e1:de:32:d2:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348 Validity Not Before: Dec 15 11:01:17 2025 GMT Not After : Dec 16 11:01:17 2025 GMT Subject: CN=4c80f8696e90f3118c68703f4b747b56c792e639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5a:29:56:b3:7e:56:4b:1e:37:f6:f2:21:85: 67:53:bc:a5:fe:85:93:19:3c:bd:95:05:e3:48:dd: 4d:f8:f4:ad:f3:11:90:ec:3e:00:5e:86:87:2d:24: d9:fe:36:c5:41:09:38:2c:36:05:90:2f:fc:44:f4: f0:02:ae:fc:ed:8f:87:6f:4a:b8:0a:48:fd:b9:68: a0:56:4b:a1:7f:3e:86:76:33:0a:ff:e3:9d:b9:c9: ba:74:a7:e8:bc:4e:32:18:1a:b3:2e:06:00:c7:71: e0:c0:bd:46:88:b6:54:87:15:66:90:8e:82:63:78: 2c:bc:87:5a:bc:5b:0f:1c:e6:5a:32:f4:d1:04:cd: 1c:9b:8d:6e:6c:c9:55:22:ab:38:1e:50:00:a6:fc: 34:90:f7:45:42:a7:d4:af:a5:4e:3a:74:eb:5f:ce: d0:51:be:94:80:da:35:b2:48:91:72:a8:bd:ed:af: 4e:3d:41:3f:d4:ba:23:a8:4e:d8:4c:71:98:7b:ff: 5f:8d:f4:26:78:b2:ee:57:4e:0c:5f:00:e1:78:52: 09:a2:46:ec:c0:25:59:1b:e7:a4:d8:f0:df:61:3d: 59:76:1d:91:90:05:36:d9:fc:52:69:02:a6:36:38: 88:8c:b8:ef:96:c9:77:e5:14:a0:d3:23:ca:72:3c: c8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:80:F8:69:6E:90:F3:11:8C:68:70:3F:4B:74:7B:56:C7:92:E6:39 X509v3 Authority Key Identifier: keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c4:ea:58:45:c6:9e:77:92:f5:38:4e:bd:db:e3:8a:93:be: d3:fa:ea:32:48:01:54:fa:4e:b5:74:07:6e:7e:5a:9a:75:94: d6:cc:07:c1:71:55:2c:6a:78:a9:99:09:1d:9b:29:b4:20:0d: cb:1f:0b:45:75:25:8b:4a:db:28:03:e0:18:b1:8f:44:e7:67: 46:8b:73:58:ac:fc:81:f8:18:2d:c9:e7:1f:c5:b4:78:4b:08: 90:de:fd:d7:e9:d6:f5:e7:1c:96:92:a3:fb:67:75:da:e9:f3: 4e:eb:3d:1c:41:b8:23:89:12:d6:eb:e6:0a:6c:22:74:64:a9: b6:e3:0d:a9:25:3a:e3:35:bb:d6:01:bd:89:12:f4:10:ab:8c: 9e:23:fc:2f:35:94:99:e5:a2:3b:c8:bc:b7:8c:44:5b:e8:f5: ef:a1:65:fb:71:dc:c0:b8:98:8c:06:01:fd:c8:29:70:4b:4b: dd:7f:8c:79:f0:83:5e:d4:a8:27:58:d6:b0:95:84:13:41:ef: 9d:b7:78:77:45:04:19:c9:4c:bf:a9:9b:4a:f8:1e:40:a6:73: c7:6b:fe:1a:58:20:a3:5a:71:f4:c1:ae:19:e0:1e:3c:da:dc: 7f:34:59:86:39:a0:9a:70:3e:f9:65:22:b1:4f:da:d1:67:3f: 49:c8:5a:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq/pQiTufMZzS3eHeMtIvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOTJmMjJhNzhhODA3MWIwMmEzNjJhOGRiMzNlOGYzZjcy ZGQzNDgwHhcNMjUxMjE1MTEwMTE3WhcNMjUxMjE2MTEwMTE3WjAzMTEwLwYDVQQD Eyg0YzgwZjg2OTZlOTBmMzExOGM2ODcwM2Y0Yjc0N2I1NmM3OTJlNjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlopVrN+VkseN/byIYVnU7yl/oWT GTy9lQXjSN1N+PSt8xGQ7D4AXoaHLSTZ/jbFQQk4LDYFkC/8RPTwAq787Y+Hb0q4 Ckj9uWigVkuhfz6GdjMK/+Oducm6dKfovE4yGBqzLgYAx3HgwL1GiLZUhxVmkI6C Y3gsvIdavFsPHOZaMvTRBM0cm41ubMlVIqs4HlAApvw0kPdFQqfUr6VOOnTrX87Q Ub6UgNo1skiRcqi97a9OPUE/1LojqE7YTHGYe/9fjfQmeLLuV04MXwDheFIJokbs wCVZG+ek2PDfYT1Zdh2RkAU22fxSaQKmNjiIjLjvlsl35RSg0yPKcjzI5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyA+GlukPMRjGhwP0t0e1bHkuY5MB8GA1UdIwQY MBaAFHGS8ip4qAcbAqNiqNsz6PP3LdNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1pMeUtuaW9CeHNDbzJLbzJ6UG84X2N0MDBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNzQ1M2QtOTZlYy00ZDRlLTlmM2Ut MGU4YmM4ZTgxMmVlLzEvY1pMeUtuaW9CeHNDbzJLbzJ6UG84X2N0MDBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mNzQ1M2QtOTZlYy00ZDRlLTlmM2UtMGU4YmM4ZTgxMmVl LzEvY1pMeUtuaW9CeHNDbzJLbzJ6UG84X2N0MDBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8TqWEXG nneS9ThOvdvjipO+0/rqMkgBVPpOtXQHbn5amnWU1swHwXFVLGp4qZkJHZsptCAN yx8LRXUli0rbKAPgGLGPROdnRotzWKz8gfgYLcnnH8W0eEsIkN791+nW9ecclpKj +2d12unzTus9HEG4I4kS1uvmCmwidGSptuMNqSU64zW71gG9iRL0EKuMniP8LzWU meWiO8i8t4xEW+j176Fl+3HcwLiYjAYB/cgpcEtL3X+MefCDXtSoJ1jWsJWEE0Hv nbd4d0UEGclMv6mbSvgeQKZzx2v+Glggo1px9MGuGeAePNrcfzRZhjmgmnA++WUi sU/a0Wc/SchawA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:18:55 2025 by rpki-client