This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json) Hash identifier: U68oURt4NQO6Dd0ua2RvQPsJd+JxyRRT3O3XA6JK9MI= Subject key identifier: CD:E5:BA:DA:01:CA:82:DD:52:12:0A:43:15:B0:11:2E:08:82:35:63 Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81 Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481 Certificate serial: 019AF31BABA23CB5D52160FCA9F824995A1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft Manifest number: 05E3 Signing time: Sat 06 Dec 2025 10:01:07 +0000 Manifest this update: Sat 06 Dec 2025 10:01:07 +0000 Manifest next update: Sun 07 Dec 2025 10:01:07 +0000 Files and hashes: 1: AIqZOuJk6FdX-ARR52-tZ3pV5L8.roa (hash: UtG/CvZxoKdSqsgWu/Ntn0zvOecwyIkuE2hEquBOnL4=) 2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: 7UgyzgEjqVbFNbYJl/qqHWDD8z3H1Sb3hKXw7+/0/BM=) 3: xytDSya4p2EgaXuzXHLS_THUKdo.roa (hash: ZRTiRpSuhaqocQiQr7gHeK4/PUG2E2ZO09HQMf9siGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ab:a2:3c:b5:d5:21:60:fc:a9:f8:24:99:5a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481 Validity Not Before: Dec 6 10:01:07 2025 GMT Not After : Dec 7 10:01:07 2025 GMT Subject: CN=cde5bada01ca82dd52120a4315b0112e08823563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6d:d4:2e:6a:03:5b:57:30:e5:63:5f:00:16: 5a:44:be:c0:3b:a7:16:36:29:3e:ef:1d:a7:6f:09: cf:81:06:09:5c:66:ac:2a:fc:54:ba:03:4b:eb:fe: dd:f1:a7:24:76:d4:f3:20:7f:09:11:dd:20:6b:5c: 4f:93:ea:47:c9:7d:21:a4:5d:c7:7d:ec:64:86:36: a5:d9:4b:5c:e7:be:d8:a4:32:ab:f7:b7:81:34:52: 4e:a9:c2:83:e1:f6:2a:4c:66:74:08:c7:70:79:d4: ca:aa:f8:b5:10:7e:8b:b0:be:59:af:fc:d6:30:7d: b5:6f:0f:8a:3c:5d:0b:89:9b:3a:3b:d1:82:81:31: 72:e4:71:5f:72:3d:82:87:a0:2f:50:fd:86:03:05: 56:85:09:3b:75:8a:cc:ce:a3:f4:47:92:6b:94:c9: ae:79:b2:2f:0f:90:9f:6d:0d:71:1e:43:9c:aa:f2: ad:63:ba:a0:6e:96:88:e8:0d:df:24:b2:f9:52:a6: e7:f8:e4:13:2e:4c:d5:5e:ff:a1:30:33:90:29:63: 5b:2a:07:9c:60:2e:49:98:82:81:ab:2c:94:05:2b: ed:db:51:7e:64:78:ba:fc:2b:df:b6:ef:7e:78:10: 33:fb:68:2f:1d:89:a2:78:3c:28:57:76:38:b7:8d: dd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E5:BA:DA:01:CA:82:DD:52:12:0A:43:15:B0:11:2E:08:82:35:63 X509v3 Authority Key Identifier: keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:58:4a:02:1c:8a:7e:36:2f:69:58:42:4d:84:cb:18:8a:54: d8:8e:56:30:4d:8b:ab:10:09:69:b7:a8:77:e3:42:2c:67:eb: cb:b7:47:30:ad:f9:54:09:b9:6b:b4:73:78:5f:ad:86:54:60: bd:2e:55:56:5d:23:b1:64:40:05:f3:53:cc:98:2b:59:6c:8f: d4:39:11:6f:41:2b:d0:53:aa:85:40:b5:43:b3:57:ab:17:96: a4:22:3b:0b:d4:e3:c2:b7:b8:74:83:ac:ff:3e:3f:36:4b:0f: 42:66:43:f2:54:11:4b:8d:32:3c:fc:ed:b4:7f:e7:74:ea:e5: ba:02:1b:32:e0:e2:0e:93:55:8e:d7:67:e0:96:51:45:dd:8d: 99:a6:97:72:f7:6f:9f:75:a9:0b:94:4e:75:2f:fc:f5:63:d9: be:0c:bf:23:cc:4a:cf:4e:5a:cf:7d:fd:77:40:ae:b3:3f:02: e7:65:02:49:0e:87:42:39:b5:82:16:10:3d:f5:c5:d8:2f:65: 10:09:07:c9:48:01:c5:5a:a3:55:50:8e:6f:f6:b1:42:0c:d5: af:06:1c:4d:a8:a9:dc:cf:1e:84:60:c7:b2:3a:62:c5:25:b6: 6a:6c:da:43:43:e6:be:a3:20:4a:57:65:2b:e5:90:77:d3:1c: 9b:ca:2e:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6uiPLXVIWD8qfgkmVoeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyY2FlOTY1N2MyZDg0ZDEwMWFkODUwMGQ1ZDIzNmVhOGVi ODU0ODEwHhcNMjUxMjA2MTAwMTA3WhcNMjUxMjA3MTAwMTA3WjAzMTEwLwYDVQQD EyhjZGU1YmFkYTAxY2E4MmRkNTIxMjBhNDMxNWIwMTEyZTA4ODIzNTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs23ULmoDW1cw5WNfABZaRL7AO6cW Nik+7x2nbwnPgQYJXGasKvxUugNL6/7d8ackdtTzIH8JEd0ga1xPk+pHyX0hpF3H fexkhjal2Utc577YpDKr97eBNFJOqcKD4fYqTGZ0CMdwedTKqvi1EH6LsL5Zr/zW MH21bw+KPF0LiZs6O9GCgTFy5HFfcj2Ch6AvUP2GAwVWhQk7dYrMzqP0R5JrlMmu ebIvD5CfbQ1xHkOcqvKtY7qgbpaI6A3fJLL5Uqbn+OQTLkzVXv+hMDOQKWNbKgec YC5JmIKBqyyUBSvt21F+ZHi6/Cvftu9+eBAz+2gvHYmieDwoV3Y4t43d1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3lutoByoLdUhIKQxWwES4IgjVjMB8GA1UdIwQY MBaAFHLK6WV8LYTRAa2FANXSNuqOuFSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTkt NGFlNWZmOWY0ZmM2LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTktNGFlNWZmOWY0ZmM2 LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVhKAhyK fjYvaVhCTYTLGIpU2I5WME2LqxAJabeod+NCLGfry7dHMK35VAm5a7RzeF+thlRg vS5VVl0jsWRABfNTzJgrWWyP1DkRb0Er0FOqhUC1Q7NXqxeWpCI7C9Tjwre4dIOs /z4/NksPQmZD8lQRS40yPPzttH/ndOrlugIbMuDiDpNVjtdn4JZRRd2NmaaXcvdv n3WpC5ROdS/89WPZvgy/I8xKz05az339d0Cusz8C52UCSQ6HQjm1ghYQPfXF2C9l EAkHyUgBxVqjVVCOb/axQgzVrwYcTaip3M8ehGDHsjpixSW2amzaQ0PmvqMgSldl K+WQd9Mcm8ouDg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:45 2025 by rpki-client