This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json) Hash identifier: YsfThjUEyNguSZn4pFsKlpSGULmk+oKGgapzSzwyt90= Subject key identifier: 1F:77:2E:45:8C:09:3E:D9:F5:51:E2:12:57:54:6E:9F:98:04:7A:28 Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86 Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786 Certificate serial: 019B47390E33798DCA80E060DD74FC9E627B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft Manifest number: 05A8 Signing time: Mon 22 Dec 2025 18:01:19 +0000 Manifest this update: Mon 22 Dec 2025 18:01:19 +0000 Manifest next update: Tue 23 Dec 2025 18:01:19 +0000 Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: NYAJ6hC2SYUf3Ych9aJQAmOMgz816tTHs42gkhMEsFQ=) 2: ayUSDw8mdGoHelr_2bHuT_Ht97M.roa (hash: gvA+DDKSQOPFRf0cxBqKQel7xs/RAWw3rOxPxkz9/ZY=) 3: i3ThCtdNGW1cjUxQLhhdn5p0rJI.roa (hash: GXqzqfOOBrl4UZP/OkbdiBzFUWkoVhn5KODt99i+lAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:39:0e:33:79:8d:ca:80:e0:60:dd:74:fc:9e:62:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099da06b80fa749068028b597be3e50e8b118786 Validity Not Before: Dec 22 18:01:19 2025 GMT Not After : Dec 23 18:01:19 2025 GMT Subject: CN=1f772e458c093ed9f551e21257546e9f98047a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:80:78:c5:59:6d:c2:87:b1:5a:95:1e:38:a8: 03:24:90:61:b2:29:13:5e:d0:76:de:69:08:8e:14: 2b:b8:54:5d:ed:fc:d1:0b:69:fe:a6:fd:b4:a7:8e: d7:9d:45:e6:b0:56:ce:e3:e2:92:b9:82:68:4c:d1: 93:79:eb:6a:c8:07:67:8a:01:55:84:f6:13:4a:87: de:24:77:fe:0e:d7:3a:d3:cc:03:a0:23:64:cf:aa: 12:cd:46:66:e4:7f:b7:fe:9f:c5:7c:f6:46:c1:77: d7:68:95:88:34:05:e3:ba:f9:a4:92:fd:f0:3a:8b: bf:dd:d2:a2:74:b0:5d:9a:f1:78:65:8b:e9:7e:0b: cb:dd:db:2b:14:e9:7d:5b:87:ac:b1:df:ed:d9:f1: f4:3a:3e:61:7e:3e:36:86:5d:73:d8:d9:56:81:5d: 6c:26:a2:6f:13:c3:88:45:64:4a:13:74:dd:79:10: 76:79:ea:c5:95:43:35:f9:bf:43:bb:dc:12:0a:da: af:0d:09:15:0a:c2:78:7f:c6:6d:23:72:30:fa:8c: 0e:64:61:a8:d8:05:1d:e0:f6:72:f2:d2:54:08:38: 59:10:0c:8c:0f:51:cc:a6:a4:4e:45:06:36:ac:0a: e3:c0:50:d4:77:2a:0d:51:f7:4b:2e:b2:41:5c:82: 61:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:77:2E:45:8C:09:3E:D9:F5:51:E2:12:57:54:6E:9F:98:04:7A:28 X509v3 Authority Key Identifier: keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:29:60:7b:17:41:6c:d5:64:1b:e6:89:5e:35:d1:d7:ae:ff: bf:c5:36:69:1c:d3:d4:0b:7d:92:15:ac:78:86:57:2b:54:b1: 92:9c:ce:f7:15:5d:10:93:2a:d5:d8:a3:a2:a6:0b:3e:c8:16: e4:33:47:20:02:a7:35:12:59:87:41:b9:20:fe:ee:d3:88:de: 14:f8:9e:f6:3c:cb:a5:f1:90:7b:a8:ae:f5:6c:d5:94:d6:c4: d7:92:ca:3f:50:51:14:35:60:dd:94:2a:30:4e:09:ec:54:37: bd:74:d1:a0:aa:55:08:05:c3:d3:db:19:90:4f:9a:51:6e:9d: 73:b5:c7:fe:0d:03:ea:fe:21:3a:88:38:47:e2:b3:04:26:05: 05:e0:f6:2e:a4:1c:34:89:94:34:29:3a:ea:d5:53:bd:85:52: 38:ef:91:de:13:34:c7:24:39:f6:86:87:33:0a:f6:56:62:be: 3b:bf:5e:98:e1:16:5a:b9:e6:f9:da:b7:27:33:60:31:25:9b: 6b:e4:66:99:58:88:88:0c:6c:43:14:8b:ef:db:71:7c:78:ad: 42:e4:ed:7a:b0:58:dd:92:fa:5e:67:22:f4:d1:dd:8d:4b:e9: 8d:0d:8d:09:d0:35:5f:7d:4f:38:c8:53:47:72:fc:e4:be:21: 1f:87:91:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHOQ4zeY3KgOBg3XT8nmJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWRhMDZiODBmYTc0OTA2ODAyOGI1OTdiZTNlNTBlOGIx MTg3ODYwHhcNMjUxMjIyMTgwMTE5WhcNMjUxMjIzMTgwMTE5WjAzMTEwLwYDVQQD EygxZjc3MmU0NThjMDkzZWQ5ZjU1MWUyMTI1NzU0NmU5Zjk4MDQ3YTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84B4xVltwoexWpUeOKgDJJBhsikT XtB23mkIjhQruFRd7fzRC2n+pv20p47XnUXmsFbO4+KSuYJoTNGTeetqyAdnigFV hPYTSofeJHf+Dtc608wDoCNkz6oSzUZm5H+3/p/FfPZGwXfXaJWINAXjuvmkkv3w Oou/3dKidLBdmvF4ZYvpfgvL3dsrFOl9W4essd/t2fH0Oj5hfj42hl1z2NlWgV1s JqJvE8OIRWRKE3TdeRB2eerFlUM1+b9Du9wSCtqvDQkVCsJ4f8ZtI3Iw+owOZGGo 2AUd4PZy8tJUCDhZEAyMD1HMpqRORQY2rArjwFDUdyoNUfdLLrJBXIJh/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB93LkWMCT7Z9VHiEldUbp+YBHooMB8GA1UdIwQY MBaAFAmdoGuA+nSQaAKLWXvj5Q6LEYeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUt MzFmY2M0NTU1NzVlLzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUtMzFmY2M0NTU1NzVl LzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2ClgexdB bNVkG+aJXjXR167/v8U2aRzT1At9khWseIZXK1SxkpzO9xVdEJMq1dijoqYLPsgW 5DNHIAKnNRJZh0G5IP7u04jeFPie9jzLpfGQe6iu9WzVlNbE15LKP1BRFDVg3ZQq ME4J7FQ3vXTRoKpVCAXD09sZkE+aUW6dc7XH/g0D6v4hOog4R+KzBCYFBeD2LqQc NImUNCk66tVTvYVSOO+R3hM0xyQ59oaHMwr2VmK+O79emOEWWrnm+dq3JzNgMSWb a+RmmViIiAxsQxSL79txfHitQuTterBY3ZL6Xmci9NHdjUvpjQ2NCdA1X31POMhT R3L85L4hH4eRtw== -----END CERTIFICATE-----Generated at Tue Dec 23 01:00:42 2025 by rpki-client