This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json) Hash identifier: Dw5kg9QLr1dLnpZIo0lOo//cm97L5sOYRCiaIAKUy2Q= Subject key identifier: 34:DC:89:61:B4:6F:E4:2F:BD:70:42:8B:85:8C:57:F5:AB:BC:A5:4F Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81 Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481 Certificate serial: 019B2EFA57851F0DFA4AE66B468ECA452450 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft Manifest number: 0602 Signing time: Thu 18 Dec 2025 01:01:56 +0000 Manifest this update: Thu 18 Dec 2025 01:01:56 +0000 Manifest next update: Fri 19 Dec 2025 01:01:56 +0000 Files and hashes: 1: AIqZOuJk6FdX-ARR52-tZ3pV5L8.roa (hash: UtG/CvZxoKdSqsgWu/Ntn0zvOecwyIkuE2hEquBOnL4=) 2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: kRaVTWsQ/HStldt2kFGjpZyzgbuxP6D45PqkHalPMoA=) 3: xytDSya4p2EgaXuzXHLS_THUKdo.roa (hash: ZRTiRpSuhaqocQiQr7gHeK4/PUG2E2ZO09HQMf9siGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:57:85:1f:0d:fa:4a:e6:6b:46:8e:ca:45:24:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481 Validity Not Before: Dec 18 01:01:56 2025 GMT Not After : Dec 19 01:01:56 2025 GMT Subject: CN=34dc8961b46fe42fbd70428b858c57f5abbca54f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:5d:9f:d4:8f:91:c8:87:60:11:0f:95:89: 30:2c:3f:69:14:65:6d:44:20:f5:9a:70:f9:90:d7: 96:27:96:25:65:71:98:50:40:51:b3:39:51:54:65: 62:7c:be:99:da:8c:2e:7b:1b:f2:ae:2a:0b:79:54: 55:61:02:94:ff:89:05:69:7e:ab:39:40:d7:25:8d: 59:2d:eb:e6:4f:ba:ab:b4:cf:6b:60:69:7e:39:35: e4:83:ad:1c:5b:d3:65:33:5e:01:15:1b:a9:77:5d: 12:5a:2f:1f:0e:d0:79:a0:0a:5e:39:74:7b:8a:2e: 8a:d5:1d:ec:1c:1b:1e:14:03:4c:68:e7:ab:5a:23: a0:6a:4b:2c:b8:64:2f:ca:d3:02:0a:0b:80:c8:59: 38:1e:7b:ba:e4:9a:86:c4:ff:b4:0e:0c:6d:ca:2b: 13:ca:77:cc:a4:8e:6b:ca:8d:cf:84:a4:b1:6d:ce: 5c:74:d2:d4:0a:a2:34:68:5a:22:2f:29:cb:a8:94: d2:58:78:67:c8:af:4e:c5:8f:ed:89:fc:af:a3:f4: 23:0c:09:5e:30:f4:88:af:f9:49:db:57:3d:bc:e7: e0:3c:5e:d5:55:92:83:ca:5f:37:cd:30:fa:32:f1: e6:b9:3f:9f:1c:ef:ba:4f:a7:61:8a:0a:fb:6c:49: d0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DC:89:61:B4:6F:E4:2F:BD:70:42:8B:85:8C:57:F5:AB:BC:A5:4F X509v3 Authority Key Identifier: keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:da:82:e7:32:e8:09:50:f9:ba:07:3e:54:04:50:62:74:12: 4c:98:06:d8:7e:27:0f:79:8f:79:b1:dc:b4:96:33:07:a0:20: 8b:b5:d7:3e:6e:fd:08:bb:57:b7:15:f6:b1:d7:00:51:bb:dd: b9:ec:95:19:1c:2a:93:b9:83:23:51:83:9a:92:77:9c:20:ca: f0:95:45:df:a3:3a:5e:e1:ed:3c:26:75:a2:32:7f:43:9e:cc: 40:02:4b:ac:d3:80:28:ee:9b:d0:e5:47:c8:38:ec:cb:16:81: 66:fe:f7:3b:28:e1:f4:9a:a3:a1:a0:46:ee:1c:b5:87:02:43: 32:7a:27:ae:4b:2b:b1:2c:e3:10:a7:e0:b4:a9:fd:a3:aa:cf: 41:ed:a6:ab:45:20:6e:50:75:05:e6:87:21:46:fd:04:48:e3: 2b:a0:9d:68:56:59:b4:e2:ef:3f:1c:8c:ed:5f:4a:10:b8:3a: 1a:3c:e4:0d:da:c5:49:55:49:de:75:f4:9a:bb:2e:0b:74:d1: d9:d2:c9:08:22:b6:4b:6f:ea:b3:20:2a:fe:77:95:26:26:19: 18:67:b6:b3:fc:df:57:5e:7f:62:bf:8a:42:91:e1:1c:57:ab: 8d:f4:05:5e:e6:d9:92:c5:0c:34:3c:9c:04:55:63:49:c9:be: a7:85:07:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+leFHw36SuZrRo7KRSRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyY2FlOTY1N2MyZDg0ZDEwMWFkODUwMGQ1ZDIzNmVhOGVi ODU0ODEwHhcNMjUxMjE4MDEwMTU2WhcNMjUxMjE5MDEwMTU2WjAzMTEwLwYDVQQD EygzNGRjODk2MWI0NmZlNDJmYmQ3MDQyOGI4NThjNTdmNWFiYmNhNTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/ddn9SPkciHYBEPlYkwLD9pFGVt RCD1mnD5kNeWJ5YlZXGYUEBRszlRVGVifL6Z2owuexvyrioLeVRVYQKU/4kFaX6r OUDXJY1ZLevmT7qrtM9rYGl+OTXkg60cW9NlM14BFRupd10SWi8fDtB5oApeOXR7 ii6K1R3sHBseFANMaOerWiOgakssuGQvytMCCguAyFk4Hnu65JqGxP+0DgxtyisT ynfMpI5ryo3PhKSxbc5cdNLUCqI0aFoiLynLqJTSWHhnyK9OxY/tifyvo/QjDAle MPSIr/lJ21c9vOfgPF7VVZKDyl83zTD6MvHmuT+fHO+6T6dhigr7bEnQswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTciWG0b+QvvXBCi4WMV/WrvKVPMB8GA1UdIwQY MBaAFHLK6WV8LYTRAa2FANXSNuqOuFSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTkt NGFlNWZmOWY0ZmM2LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTktNGFlNWZmOWY0ZmM2 LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdqC5zLo CVD5ugc+VARQYnQSTJgG2H4nD3mPebHctJYzB6Agi7XXPm79CLtXtxX2sdcAUbvd ueyVGRwqk7mDI1GDmpJ3nCDK8JVF36M6XuHtPCZ1ojJ/Q57MQAJLrNOAKO6b0OVH yDjsyxaBZv73Oyjh9JqjoaBG7hy1hwJDMnonrksrsSzjEKfgtKn9o6rPQe2mq0Ug blB1BeaHIUb9BEjjK6CdaFZZtOLvPxyM7V9KELg6GjzkDdrFSVVJ3nX0mrsuC3TR 2dLJCCK2S2/qsyAq/neVJiYZGGe2s/zfV15/Yr+KQpHhHFerjfQFXubZksUMNDyc BFVjScm+p4UHJg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:12:52 2025 by rpki-client