This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json) Hash identifier: vbe7UyTKS9kSsETwpRGB3sZRimhbLdc9dpnga3unSPM= Subject key identifier: 62:2C:8C:88:25:46:F0:E7:57:AE:89:1D:25:47:40:CA:7A:99:5A:40 Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd Certificate serial: 019B24ACC20D794DE7D03BE1797B7D010798 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft Manifest number: 179D Signing time: Tue 16 Dec 2025 01:01:00 +0000 Manifest this update: Tue 16 Dec 2025 01:01:00 +0000 Manifest next update: Wed 17 Dec 2025 01:01:00 +0000 Files and hashes: 1: 1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa (hash: B3C32+APojLLpoq0P/3+v4OioF2SbZXBsRXy/mWXSxY=) 2: AqjmEKa_KPT9IwoGnFjP0jiJ6oM.roa (hash: XfS/oUTMWeZlyIQCw2CHPz1Yz8M9tUiaYOFg7dyhr+A=) 3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: kqTFTTKz8n5jkcxZl/UPACaSmRoUDplbz+nHhgX9mGk=) 4: ecf817WnJwsGfmatFeQyUhb3Llc.roa (hash: OXDEPH7uN3GYyUlwskriOcVgXTD3tnLi2wfgN52n2YQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:c2:0d:79:4d:e7:d0:3b:e1:79:7b:7d:01:07:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd Validity Not Before: Dec 16 01:01:00 2025 GMT Not After : Dec 17 01:01:00 2025 GMT Subject: CN=622c8c882546f0e757ae891d254740ca7a995a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:1e:d1:a3:cd:a5:95:bc:d6:32:c2:06:95: 38:8b:1e:2f:90:50:88:66:1a:64:9d:3d:bc:d7:03: 45:50:de:f3:0d:c9:68:f6:78:aa:a6:3b:dc:f1:31: 1b:af:e2:ef:21:3f:10:42:d1:e2:88:70:bf:8d:3b: b1:98:8f:c3:1f:f9:37:76:38:f6:b5:47:76:8a:7a: c4:e5:73:04:a6:8e:d5:f2:bf:f9:ac:1c:a2:db:42: 44:5b:6a:94:eb:bb:62:12:7d:cd:97:d0:a8:19:74: a7:0b:41:c7:f4:1d:70:f0:cc:88:9d:2b:6a:ce:64: a9:d0:58:b3:e6:5f:d4:25:71:bc:ca:a2:33:67:79: 71:14:cb:4b:c5:16:44:d8:07:a8:94:05:95:46:61: c7:0d:ff:f9:70:9f:bc:93:44:5e:5b:67:60:cd:f0: 66:f4:e8:a9:b0:1d:48:5a:b2:74:5a:67:3a:ec:d4: f4:c7:be:b0:14:14:72:ed:bc:8c:c2:5c:b0:0c:30: 65:d9:64:2c:29:2e:38:27:d9:e8:c2:ce:69:b6:a0: 7c:78:d8:1d:81:c0:c7:e7:da:57:b7:d7:da:ce:1f: d6:23:70:52:57:c4:c7:bf:bc:70:2f:c4:f4:88:47: 65:4c:87:5a:7f:02:a5:1c:1a:06:42:70:44:b4:c5: e2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2C:8C:88:25:46:F0:E7:57:AE:89:1D:25:47:40:CA:7A:99:5A:40 X509v3 Authority Key Identifier: keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:79:1f:5b:23:14:0d:fb:0d:1c:66:88:0e:d7:df:de:17:4b: 46:92:aa:5d:0b:47:b9:ba:45:b3:5a:c5:94:97:69:c4:d3:14: 1f:86:9b:b1:32:b8:05:2a:02:82:ce:e7:cb:c5:5e:42:e3:be: 77:2a:b3:0d:79:f7:09:c8:c9:17:c6:42:1d:4a:ef:5d:a7:92: 53:3e:2a:f0:a0:86:c0:15:37:c0:44:60:7a:d7:9d:e3:71:ef: 15:ad:3b:15:cb:b0:26:6a:60:b6:fe:0b:ba:bc:63:91:5e:69: fb:a1:64:2b:c5:84:42:a3:76:85:3b:6d:fa:bd:70:35:ba:df: e1:34:6f:9c:c6:85:fb:06:f8:25:d4:80:27:07:7f:fc:a6:b1: 2d:93:8c:c8:9c:83:6a:f7:32:b4:d5:26:f8:d9:eb:7f:88:5b: e6:ba:36:77:8c:0a:d0:30:28:d8:dc:c8:53:57:63:d5:a1:34: 69:f2:9b:01:5d:43:67:82:d0:10:e8:7e:e4:f3:8d:1c:25:15: 1d:01:77:08:57:0f:33:5e:59:b8:17:a2:88:31:e0:c1:b4:57: 92:20:8b:32:f1:67:9d:b6:94:68:db:02:1b:8c:4b:e1:88:cb: 27:87:3d:90:fa:e0:a1:0e:a1:60:e3:5b:0e:45:4c:72:09:ad: d0:d2:fc:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrMINeU3n0DvheXt9AQeYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOTQ5YjQ3ZGYzMTNjYmFiOTQ1MmRhOThmY2M2Mzc2MDhh OTA5YmQwHhcNMjUxMjE2MDEwMTAwWhcNMjUxMjE3MDEwMTAwWjAzMTEwLwYDVQQD Eyg2MjJjOGM4ODI1NDZmMGU3NTdhZTg5MWQyNTQ3NDBjYTdhOTk1YTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9Qe0aPNpZW81jLCBpU4ix4vkFCI ZhpknT281wNFUN7zDclo9niqpjvc8TEbr+LvIT8QQtHiiHC/jTuxmI/DH/k3djj2 tUd2inrE5XMEpo7V8r/5rByi20JEW2qU67tiEn3Nl9CoGXSnC0HH9B1w8MyInStq zmSp0Fiz5l/UJXG8yqIzZ3lxFMtLxRZE2AeolAWVRmHHDf/5cJ+8k0ReW2dgzfBm 9OipsB1IWrJ0Wmc67NT0x76wFBRy7byMwlywDDBl2WQsKS44J9nows5ptqB8eNgd gcDH59pXt9fazh/WI3BSV8THv7xwL8T0iEdlTIdafwKlHBoGQnBEtMXi6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIsjIglRvDnV66JHSVHQMp6mVpAMB8GA1UdIwQY MBaAFHGUm0ffMTy6uUUtqY/MY3YIqQm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgt MDA2NmY1NDFmYWVhLzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgtMDA2NmY1NDFmYWVh LzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHkfWyMU DfsNHGaIDtff3hdLRpKqXQtHubpFs1rFlJdpxNMUH4absTK4BSoCgs7ny8VeQuO+ dyqzDXn3CcjJF8ZCHUrvXaeSUz4q8KCGwBU3wERgeted43HvFa07FcuwJmpgtv4L urxjkV5p+6FkK8WEQqN2hTtt+r1wNbrf4TRvnMaF+wb4JdSAJwd//KaxLZOMyJyD avcytNUm+Nnrf4hb5ro2d4wK0DAo2NzIU1dj1aE0afKbAV1DZ4LQEOh+5PONHCUV HQF3CFcPM15ZuBeiiDHgwbRXkiCLMvFnnbaUaNsCG4xL4YjLJ4c9kPrgoQ6hYONb DkVMcgmt0NL8GA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:40:14 2025 by rpki-client