This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json) Hash identifier: 6ddcdiy2QnmBSrUn7bRWZJRhtvsI9R78kWVPcDljXcI= Subject key identifier: 50:B6:4E:66:4F:6A:74:21:D4:BE:EC:FC:93:16:BD:A1:7A:F3:CF:4C Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e Certificate serial: 019AF2E43094E799B9F9E719142A182BB1AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 09:00:32 +0000 Manifest this update: Sat 06 Dec 2025 09:00:32 +0000 Manifest next update: Sun 07 Dec 2025 09:00:32 +0000 Files and hashes: 1: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: RmgtUF2J2PnBelV36hZIIyBfatnB9DgshOfVwDLkhz4=) 2: fDOjbGC7SXuBR1WvGEj8iP8Gi68.roa (hash: hI6uFXxiWou3BV634T4h3OJSDdh6qUObBj238tGqfTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:30:94:e7:99:b9:f9:e7:19:14:2a:18:2b:b1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e Validity Not Before: Dec 6 09:00:32 2025 GMT Not After : Dec 7 09:00:32 2025 GMT Subject: CN=50b64e664f6a7421d4beecfc9316bda17af3cf4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:55:eb:82:37:21:71:01:f4:01:66:0f:1f:67: 51:81:cd:22:82:cf:d9:76:14:80:07:9a:aa:66:d3: 4e:91:eb:22:0b:83:2b:c5:a9:c9:ff:5b:6d:17:ce: 71:6c:c5:70:22:b1:2e:71:dd:a4:f4:d2:e8:3b:2e: ec:6a:7e:7d:90:82:da:49:40:1a:77:b7:58:3a:c5: d3:40:c3:c5:5c:cc:5e:05:9d:a6:4e:55:75:c8:be: 40:c6:38:23:58:49:3b:62:07:dc:fc:f6:df:8f:29: 9d:2e:d1:7b:58:cb:87:4d:9c:9c:ae:2c:e0:74:66: fb:9b:61:3a:4b:ee:56:ff:91:7d:71:40:46:f7:9f: ed:f0:cd:e4:83:03:fe:a6:a7:38:ac:59:83:62:d4: 33:5b:35:57:bc:18:d3:0b:10:23:19:cf:c3:4a:f6: 56:54:3c:09:70:92:f5:0c:02:f7:c8:75:12:d1:36: 4c:14:ce:c7:ac:3d:78:a9:9e:b1:44:ba:2e:54:ec: a2:a3:a9:de:37:bf:92:76:d3:67:3c:00:5e:4b:04: 2f:c6:35:d1:52:7c:13:80:9e:8d:d6:ae:f9:db:5c: 79:85:c4:52:0d:c5:14:fe:98:75:aa:42:81:02:a1: d9:65:04:9c:ee:90:f8:68:5d:08:45:7d:82:4c:76: 5c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B6:4E:66:4F:6A:74:21:D4:BE:EC:FC:93:16:BD:A1:7A:F3:CF:4C X509v3 Authority Key Identifier: keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:2a:af:52:3a:60:c0:b3:81:c5:9d:bb:c8:85:ff:ec:4a:99: 9b:87:71:d4:71:f2:d7:e9:3a:26:cf:c5:51:6b:93:43:7e:14: e6:9d:cb:0e:37:a6:0c:5a:ed:d4:1c:bb:30:11:f4:80:37:3f: ee:5d:45:7d:68:fb:c1:70:85:69:96:6d:8d:cc:d2:7e:3e:4c: 6a:c4:36:5c:84:e4:b2:68:e4:c3:84:77:6b:c5:f3:ef:47:d0: fa:a4:4a:62:a1:c3:07:d8:f4:2b:f3:61:0e:ab:35:8c:7e:81: fd:fb:e8:ea:5e:e0:a0:35:26:2c:71:b5:63:67:cc:fc:96:7e: 84:ec:72:d7:6e:57:9c:8f:1a:2b:04:cf:a1:9f:42:d3:18:96: 29:41:85:c6:ad:ed:94:52:89:6a:35:ad:75:1d:d2:ca:9c:8c: f3:d9:66:1a:38:7d:00:be:05:74:59:fc:68:0f:00:0a:ae:b3: cb:ad:0d:27:d4:a0:73:2c:8c:dd:5d:9d:7e:df:18:29:d2:8e: 2b:93:42:ce:dc:e3:f2:e4:af:06:2e:a6:6a:ff:08:82:77:81: 68:b7:93:5a:b2:0f:5d:10:88:03:3a:aa:11:83:e1:ce:f7:8e: 34:f9:e5:be:94:65:67:7d:f2:01:8b:ae:31:fb:33:08:f4:19: a4:7f:b8:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DCU55m5+ecZFCoYK7GqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYzk4MjY3YTVkYjI2YzY1ZTQxZTY0NjY0OGYxMDE2NjM2 ZTU0NGUwHhcNMjUxMjA2MDkwMDMyWhcNMjUxMjA3MDkwMDMyWjAzMTEwLwYDVQQD Eyg1MGI2NGU2NjRmNmE3NDIxZDRiZWVjZmM5MzE2YmRhMTdhZjNjZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91XrgjchcQH0AWYPH2dRgc0igs/Z dhSAB5qqZtNOkesiC4MrxanJ/1ttF85xbMVwIrEucd2k9NLoOy7san59kILaSUAa d7dYOsXTQMPFXMxeBZ2mTlV1yL5AxjgjWEk7Ygfc/PbfjymdLtF7WMuHTZycrizg dGb7m2E6S+5W/5F9cUBG95/t8M3kgwP+pqc4rFmDYtQzWzVXvBjTCxAjGc/DSvZW VDwJcJL1DAL3yHUS0TZMFM7HrD14qZ6xRLouVOyio6neN7+SdtNnPABeSwQvxjXR UnwTgJ6N1q7521x5hcRSDcUU/ph1qkKBAqHZZQSc7pD4aF0IRX2CTHZcvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFC2TmZPanQh1L7s/JMWvaF6889MMB8GA1UdIwQY MBaAFArJgmel2ybGXkHmRmSPEBZjblROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zNzk5ZmEtOWRiOS00ZmM4LThmZDYt MmQ5ZTk5ZjQ3MjJjLzEvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zNzk5ZmEtOWRiOS00ZmM4LThmZDYtMmQ5ZTk5ZjQ3MjJj LzEvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCqvUjpg wLOBxZ27yIX/7EqZm4dx1HHy1+k6Js/FUWuTQ34U5p3LDjemDFrt1By7MBH0gDc/ 7l1FfWj7wXCFaZZtjczSfj5MasQ2XITksmjkw4R3a8Xz70fQ+qRKYqHDB9j0K/Nh Dqs1jH6B/fvo6l7goDUmLHG1Y2fM/JZ+hOxy125XnI8aKwTPoZ9C0xiWKUGFxq3t lFKJajWtdR3SypyM89lmGjh9AL4FdFn8aA8ACq6zy60NJ9SgcyyM3V2dft8YKdKO K5NCztzj8uSvBi6mav8IgneBaLeTWrIPXRCIAzqqEYPhzveONPnlvpRlZ33yAYuu MfszCPQZpH+4Kw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:48:48 2025 by rpki-client