This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json) Hash identifier: agt6L2SIeWeuAhNH7VnNtc6LzWUmIj020AlYUlw/ijQ= Subject key identifier: 88:BA:0C:9C:11:60:C0:B4:B9:CD:77:F4:B3:A6:4C:0B:6E:59:D5:F4 Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd Certificate serial: 019B22BE3F3CD4F3CBADDE6B8B1AFC8F694A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft Manifest number: 179C Signing time: Mon 15 Dec 2025 16:00:51 +0000 Manifest this update: Mon 15 Dec 2025 16:00:51 +0000 Manifest next update: Tue 16 Dec 2025 16:00:51 +0000 Files and hashes: 1: 1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa (hash: B3C32+APojLLpoq0P/3+v4OioF2SbZXBsRXy/mWXSxY=) 2: AqjmEKa_KPT9IwoGnFjP0jiJ6oM.roa (hash: XfS/oUTMWeZlyIQCw2CHPz1Yz8M9tUiaYOFg7dyhr+A=) 3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: BEZkgJZTFSlMh6Hpqs7jWPrTMhHyN3SaTvFst/HTaCs=) 4: ecf817WnJwsGfmatFeQyUhb3Llc.roa (hash: OXDEPH7uN3GYyUlwskriOcVgXTD3tnLi2wfgN52n2YQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:3f:3c:d4:f3:cb:ad:de:6b:8b:1a:fc:8f:69:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd Validity Not Before: Dec 15 16:00:51 2025 GMT Not After : Dec 16 16:00:51 2025 GMT Subject: CN=88ba0c9c1160c0b4b9cd77f4b3a64c0b6e59d5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:24:e3:34:ff:21:fd:83:85:2c:b2:be:b4:1b: 9c:fe:dc:0e:a6:a4:4e:c0:db:1c:71:15:fc:f7:79: 1e:f5:75:ec:90:28:43:ae:65:70:5b:94:57:4e:e4: cc:a3:38:dd:41:05:ef:ee:7f:cd:2b:9a:a5:df:7e: ef:31:3f:ae:26:01:cd:db:e8:ce:0b:82:09:0b:39: 97:61:0f:df:18:ca:d2:0c:cd:a8:5d:b1:79:14:4a: c7:be:bc:34:ff:11:6b:23:79:6e:ef:e8:f5:80:96: 6a:bb:54:91:1a:5b:97:5c:a6:08:a6:19:89:4f:23: 65:77:91:4e:50:2d:96:da:f7:5f:96:84:21:47:11: 57:80:05:9a:8b:bb:4e:de:7b:99:ad:8f:16:2d:b9: 08:29:cd:6c:9e:16:99:0b:09:7c:3e:52:d9:59:70: ee:28:bf:df:61:21:fb:17:86:26:da:bb:e9:97:af: 2d:87:ae:34:7e:c5:8a:b8:e2:d7:1f:b3:6c:b7:e1: 61:d9:26:39:f4:e7:4a:f9:37:2f:10:08:e2:92:d6: 39:a4:06:b6:39:2f:a1:f2:68:a3:86:78:b1:c8:ff: 17:13:07:41:67:cd:98:04:b5:0e:c3:f9:f1:cf:76: 2f:a4:2f:41:1e:c3:0c:36:67:17:30:cd:ee:0d:87: 25:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:BA:0C:9C:11:60:C0:B4:B9:CD:77:F4:B3:A6:4C:0B:6E:59:D5:F4 X509v3 Authority Key Identifier: keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:43:4f:2a:70:fd:e5:24:f5:ad:c2:48:0d:57:57:3b:0e:0e: 4f:f3:41:cd:92:e1:be:a5:b0:98:6a:a7:cf:7a:cd:23:84:c2: 24:79:ec:be:8e:79:39:f0:7e:e4:2d:fa:8d:27:9e:7f:01:2b: 5f:d3:76:f7:cc:9f:66:65:b9:49:67:02:9b:9f:11:da:56:a2: 22:35:97:c7:72:ca:47:45:6e:ea:c3:a5:bf:41:4f:a8:88:c0: 20:9f:82:b4:6d:99:26:a9:71:d5:94:5b:40:14:e3:c8:fb:24: 13:44:a5:ad:1e:db:1a:7b:9c:83:81:d8:23:b9:3e:99:18:81: 8f:1d:38:f9:7c:ef:9d:96:1b:00:86:06:79:aa:aa:0f:6e:cf: 1b:9e:2c:33:49:6d:28:1b:94:2e:8b:60:a6:26:ab:9e:e4:84: 27:9a:e5:ba:d3:31:f3:94:fb:37:77:7d:79:99:4a:0c:cd:51: 6d:88:42:e6:dd:41:d4:ad:96:25:c6:38:04:a1:41:da:77:bd: 13:7a:cc:04:d5:80:f3:40:53:76:d5:a3:67:ee:ea:39:13:b3: 88:7f:96:a6:cb:58:97:de:18:78:89:36:a4:42:95:70:9e:eb: 58:b6:73:b2:9a:02:ec:af:57:84:15:98:9b:0d:d7:b2:e9:d8: fa:72:cf:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivj881PPLrd5rixr8j2lKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOTQ5YjQ3ZGYzMTNjYmFiOTQ1MmRhOThmY2M2Mzc2MDhh OTA5YmQwHhcNMjUxMjE1MTYwMDUxWhcNMjUxMjE2MTYwMDUxWjAzMTEwLwYDVQQD Eyg4OGJhMGM5YzExNjBjMGI0YjljZDc3ZjRiM2E2NGMwYjZlNTlkNWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSTjNP8h/YOFLLK+tBuc/twOpqRO wNsccRX893ke9XXskChDrmVwW5RXTuTMozjdQQXv7n/NK5ql337vMT+uJgHN2+jO C4IJCzmXYQ/fGMrSDM2oXbF5FErHvrw0/xFrI3lu7+j1gJZqu1SRGluXXKYIphmJ TyNld5FOUC2W2vdfloQhRxFXgAWai7tO3nuZrY8WLbkIKc1snhaZCwl8PlLZWXDu KL/fYSH7F4Ym2rvpl68th640fsWKuOLXH7Nst+Fh2SY59OdK+TcvEAjiktY5pAa2 OS+h8mijhnixyP8XEwdBZ82YBLUOw/nxz3YvpC9BHsMMNmcXMM3uDYcllQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIi6DJwRYMC0uc139LOmTAtuWdX0MB8GA1UdIwQY MBaAFHGUm0ffMTy6uUUtqY/MY3YIqQm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgt MDA2NmY1NDFmYWVhLzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgtMDA2NmY1NDFmYWVh LzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUNPKnD9 5ST1rcJIDVdXOw4OT/NBzZLhvqWwmGqnz3rNI4TCJHnsvo55OfB+5C36jSeefwEr X9N298yfZmW5SWcCm58R2laiIjWXx3LKR0Vu6sOlv0FPqIjAIJ+CtG2ZJqlx1ZRb QBTjyPskE0SlrR7bGnucg4HYI7k+mRiBjx04+XzvnZYbAIYGeaqqD27PG54sM0lt KBuULotgpiarnuSEJ5rlutMx85T7N3d9eZlKDM1RbYhC5t1B1K2WJcY4BKFB2ne9 E3rMBNWA80BTdtWjZ+7qOROziH+WpstYl94YeIk2pEKVcJ7rWLZzspoC7K9XhBWY mw3XsunY+nLPpA== -----END CERTIFICATE-----Generated at Mon Dec 15 19:38:25 2025 by rpki-client