This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json) Hash identifier: 76IVUiGufvXRjSPWGsfhGFQbvuZErN8a2c+HpMKVPds= Subject key identifier: C8:C0:E4:1D:2A:55:BA:0D:60:99:61:5D:AF:49:01:A3:1B:80:3D:88 Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd Certificate serial: 019B115CB0700AB4AC04C8370072AED55A1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft Manifest number: 1793 Signing time: Fri 12 Dec 2025 07:00:45 +0000 Manifest this update: Fri 12 Dec 2025 07:00:45 +0000 Manifest next update: Sat 13 Dec 2025 07:00:45 +0000 Files and hashes: 1: 1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa (hash: B3C32+APojLLpoq0P/3+v4OioF2SbZXBsRXy/mWXSxY=) 2: AqjmEKa_KPT9IwoGnFjP0jiJ6oM.roa (hash: XfS/oUTMWeZlyIQCw2CHPz1Yz8M9tUiaYOFg7dyhr+A=) 3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: fKdol1qWBBezNvxkw2xkpm8qYv/BXlGTEEU/8LNFhsU=) 4: ecf817WnJwsGfmatFeQyUhb3Llc.roa (hash: OXDEPH7uN3GYyUlwskriOcVgXTD3tnLi2wfgN52n2YQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:b0:70:0a:b4:ac:04:c8:37:00:72:ae:d5:5a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd Validity Not Before: Dec 12 07:00:45 2025 GMT Not After : Dec 13 07:00:45 2025 GMT Subject: CN=c8c0e41d2a55ba0d6099615daf4901a31b803d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:2c:c7:85:94:19:ed:c1:da:be:25:38:96: 08:95:61:33:9e:1f:7c:5e:40:21:68:d6:a3:90:57: 47:67:3b:84:8b:c5:2e:09:2d:ba:41:d9:57:7c:47: 1a:9b:cf:41:04:3c:d2:98:cc:63:12:1f:9f:33:b4: 58:78:f2:7d:97:24:ab:4a:c3:c6:75:d7:c0:c5:4f: 07:db:43:fe:3e:1a:29:68:84:7a:62:19:ed:ec:55: 71:a6:2b:bd:b3:cf:24:07:27:a1:90:59:3c:14:6d: d6:ad:19:df:fa:21:c9:fc:9e:79:73:7f:09:57:e4: 60:28:c8:6e:02:6f:36:95:3d:b7:cc:9a:d5:47:db: c9:0c:12:29:ca:91:d0:3d:e0:e3:2a:47:9e:00:ba: 72:33:aa:b9:c8:06:6d:33:e0:6b:9f:0b:e4:fe:4d: f5:4a:c5:46:9c:34:1a:b2:ef:ff:cf:9e:78:e5:84: 8c:5e:be:ca:b3:65:80:6d:d9:bf:34:7e:9f:46:a6: 7d:d2:1c:90:34:bd:b0:65:b6:56:34:87:a3:7c:2e: 2a:d9:54:ff:e8:b0:88:25:55:12:99:c5:e3:9c:b3: 44:43:5e:d1:76:f1:07:f2:57:f6:85:d8:7e:a1:c6: e0:10:ae:99:f8:99:ad:35:42:a5:67:8e:19:f3:1f: 39:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C0:E4:1D:2A:55:BA:0D:60:99:61:5D:AF:49:01:A3:1B:80:3D:88 X509v3 Authority Key Identifier: keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f8:01:05:46:7c:a6:f3:8c:20:3f:15:3a:76:3c:1a:60:45: c6:92:0b:46:e1:6b:3c:fe:cb:32:3f:29:e5:c3:79:45:47:34: dc:17:ff:c6:f7:12:ef:1e:2a:6b:79:b8:4c:c3:c4:6a:89:ed: f5:cf:7b:94:39:4c:41:c1:1e:1c:0b:a4:bd:eb:ce:27:7b:57: 27:47:a6:e0:a0:26:e8:2a:9d:f5:f5:9c:a3:3b:b1:45:36:51: 1f:a5:48:22:df:4a:fd:c6:d5:32:32:c1:42:79:a2:0d:63:99: 44:ae:46:a1:ce:65:4c:fa:62:7e:74:ca:3d:9c:87:3c:d8:5a: 71:78:3b:5a:d2:33:d5:70:b3:d0:0e:51:bd:f4:12:13:80:02: fd:5e:85:27:86:ae:01:2f:ee:94:2f:85:78:1d:9a:ce:1f:aa: 0b:4b:c0:51:91:f1:3b:cd:e1:0e:ce:53:74:ce:22:6d:6c:73: 97:43:fa:15:67:6f:43:20:85:c3:10:5a:02:21:91:55:66:be: c5:bf:50:fb:ac:e5:c2:7b:55:43:16:0e:15:d8:ba:78:39:26: 6f:f4:48:81:d7:95:e1:e3:a0:7d:c0:7e:b1:b9:1a:6a:06:bf: 43:b1:bb:8b:2a:a2:1b:93:bf:9a:48:be:df:e4:51:b6:38:b0: 87:33:d3:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXLBwCrSsBMg3AHKu1VoaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOTQ5YjQ3ZGYzMTNjYmFiOTQ1MmRhOThmY2M2Mzc2MDhh OTA5YmQwHhcNMjUxMjEyMDcwMDQ1WhcNMjUxMjEzMDcwMDQ1WjAzMTEwLwYDVQQD EyhjOGMwZTQxZDJhNTViYTBkNjA5OTYxNWRhZjQ5MDFhMzFiODAzZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4Asx4WUGe3B2r4lOJYIlWEznh98 XkAhaNajkFdHZzuEi8UuCS26QdlXfEcam89BBDzSmMxjEh+fM7RYePJ9lySrSsPG ddfAxU8H20P+PhopaIR6Yhnt7FVxpiu9s88kByehkFk8FG3WrRnf+iHJ/J55c38J V+RgKMhuAm82lT23zJrVR9vJDBIpypHQPeDjKkeeALpyM6q5yAZtM+Brnwvk/k31 SsVGnDQasu//z5545YSMXr7Ks2WAbdm/NH6fRqZ90hyQNL2wZbZWNIejfC4q2VT/ 6LCIJVUSmcXjnLNEQ17RdvEH8lf2hdh+ocbgEK6Z+JmtNUKlZ44Z8x85KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjA5B0qVboNYJlhXa9JAaMbgD2IMB8GA1UdIwQY MBaAFHGUm0ffMTy6uUUtqY/MY3YIqQm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgt MDA2NmY1NDFmYWVhLzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgtMDA2NmY1NDFmYWVh LzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPgBBUZ8 pvOMID8VOnY8GmBFxpILRuFrPP7LMj8p5cN5RUc03Bf/xvcS7x4qa3m4TMPEaont 9c97lDlMQcEeHAukvevOJ3tXJ0em4KAm6Cqd9fWcozuxRTZRH6VIIt9K/cbVMjLB QnmiDWOZRK5Goc5lTPpifnTKPZyHPNhacXg7WtIz1XCz0A5RvfQSE4AC/V6FJ4au AS/ulC+FeB2azh+qC0vAUZHxO83hDs5TdM4ibWxzl0P6FWdvQyCFwxBaAiGRVWa+ xb9Q+6zlwntVQxYOFdi6eDkmb/RIgdeV4eOgfcB+sbkaaga/Q7G7iyqiG5O/mki+ 3+RRtjiwhzPTgw== -----END CERTIFICATE-----Generated at Fri Dec 12 08:42:45 2025 by rpki-client