This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft File: cspFbK0jiDCzjs1NJnys-lzV8fE.mft (raw, json) Hash identifier: xu+I0Uoi+N1U8VcJAC5uZtOY4BtqxxoIWofqNoPY2NE= Subject key identifier: 0A:4A:8C:46:34:1D:83:D3:8D:FC:97:5D:A4:14:5E:08:83:73:96:DB Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1 Certificate issuer: /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1 Certificate serial: 019B36B4A2F571A61796182B001A4C4F8204 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 13:02:46 +0000 Manifest this update: Fri 19 Dec 2025 13:02:46 +0000 Manifest next update: Sat 20 Dec 2025 13:02:46 +0000 Files and hashes: 1: 9qsPYE67U8LKJS5RPyzpaJjKAjw.roa (hash: ate2+ga4mYDOeR+5DaCdTzRa6tHIKsrgVcrNBTn+5LQ=) 2: cspFbK0jiDCzjs1NJnys-lzV8fE.crl (hash: kxmbcfL2Zs1BSAEYH7ND0MrZfkMqVEPJkyKR5mx648w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:a2:f5:71:a6:17:96:18:2b:00:1a:4c:4f:82:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1 Validity Not Before: Dec 19 13:02:46 2025 GMT Not After : Dec 20 13:02:46 2025 GMT Subject: CN=0a4a8c46341d83d38dfc975da4145e08837396db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:19:e8:e6:61:4f:4c:d8:5d:97:b5:39:fb:31: 70:96:39:7f:06:0e:3b:ca:61:1d:25:4f:0f:64:6d: e2:e6:6f:be:04:43:36:3f:0b:6f:e4:3f:54:11:78: ee:ab:07:a4:f2:a2:d0:b1:f8:3f:43:af:51:0a:f9: 43:89:ee:9a:a1:3a:eb:24:9d:0b:8f:40:8f:e7:8c: d5:76:f2:f5:25:e1:26:d3:ee:8e:da:6e:b5:3f:03: f5:26:09:14:88:3a:67:a8:2c:be:16:44:ae:ac:88: dc:4b:71:ce:39:2d:32:73:4f:fd:85:08:0b:d3:e0: 8c:50:bf:6b:f2:ad:fd:4e:19:03:39:97:51:cd:38: 39:35:ab:c2:4c:ae:73:45:e1:c6:c8:90:45:7c:dc: da:ec:3e:29:74:c0:df:8b:16:c8:10:31:79:91:28: 76:96:39:56:cd:69:5a:5a:ed:a5:ae:f4:fc:c9:4d: 71:8f:63:70:5c:66:ba:bb:ba:d9:8d:65:a1:10:66: 22:8b:2c:28:7f:fc:3e:b3:62:1c:7e:0c:75:da:85: d6:ac:2c:a6:be:0a:4d:43:72:4d:9e:9e:75:57:ff: 0a:72:43:15:81:50:9c:30:5e:93:f5:b4:8f:1c:0a: 74:37:80:ba:a2:bb:3c:cb:7c:11:20:bc:d5:12:a2: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4A:8C:46:34:1D:83:D3:8D:FC:97:5D:A4:14:5E:08:83:73:96:DB X509v3 Authority Key Identifier: keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:9a:a6:2d:03:6b:cc:73:d2:9c:b1:9e:19:1e:33:97:c5:98: 19:23:6e:23:bd:c8:54:bf:07:dd:6c:cf:6f:b8:1d:a0:cf:43: 39:f7:4f:22:25:b8:c0:00:4f:de:b7:37:ac:4d:21:7d:fe:16: 07:3d:2e:4f:6e:62:9e:f0:fd:c6:01:22:9d:11:53:22:b5:36: 30:bb:50:c7:d9:c7:3e:7c:e8:97:36:4a:3d:18:e5:4b:bd:7a: d5:37:3a:27:e3:5d:c7:d5:a5:80:e4:bd:69:f3:7c:f7:e2:a8: a5:77:eb:f8:08:bc:3b:47:2c:ad:30:f0:80:b5:a7:a5:0f:d6: 9e:06:e0:90:94:18:81:e1:be:c9:a1:ae:1b:2a:54:83:6e:fd: a8:62:96:54:3b:ee:90:38:aa:dc:08:4d:11:50:63:2e:62:d9: 0c:9f:4c:9b:c6:07:76:81:b9:8d:ac:38:be:7f:70:6b:a2:24: c3:8e:2e:4b:a6:d3:85:ef:7c:4c:dd:45:81:aa:99:e4:c0:46: 80:ca:7e:20:5b:97:c3:c4:6b:a4:c5:e4:86:81:79:85:4e:af: 6f:b5:2f:65:14:74:3d:92:35:1d:b3:fc:01:98:0e:58:8a:de: 7c:bf:ed:c2:b4:89:c8:e6:9e:5c:d4:b9:61:ec:99:ce:f6:02: c2:84:b9:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tKL1caYXlhgrABpMT4IEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyY2E0NTZjYWQyMzg4MzBiMzhlY2Q0ZDI2N2NhY2ZhNWNk NWYxZjEwHhcNMjUxMjE5MTMwMjQ2WhcNMjUxMjIwMTMwMjQ2WjAzMTEwLwYDVQQD EygwYTRhOGM0NjM0MWQ4M2QzOGRmYzk3NWRhNDE0NWUwODgzNzM5NmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRno5mFPTNhdl7U5+zFwljl/Bg47 ymEdJU8PZG3i5m++BEM2Pwtv5D9UEXjuqwek8qLQsfg/Q69RCvlDie6aoTrrJJ0L j0CP54zVdvL1JeEm0+6O2m61PwP1JgkUiDpnqCy+FkSurIjcS3HOOS0yc0/9hQgL 0+CMUL9r8q39ThkDOZdRzTg5NavCTK5zReHGyJBFfNza7D4pdMDfixbIEDF5kSh2 ljlWzWlaWu2lrvT8yU1xj2NwXGa6u7rZjWWhEGYiiywof/w+s2Icfgx12oXWrCym vgpNQ3JNnp51V/8KckMVgVCcMF6T9bSPHAp0N4C6ors8y3wRILzVEqLGIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApKjEY0HYPTjfyXXaQUXgiDc5bbMB8GA1UdIwQY MBaAFHLKRWytI4gws47NTSZ8rPpc1fHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81NzMxZjMtYjE4MC00MDU0LThhY2It MmNhMTNkZDFkYjYzLzEvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81NzMxZjMtYjE4MC00MDU0LThhY2ItMmNhMTNkZDFkYjYz LzEvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJqmLQNr zHPSnLGeGR4zl8WYGSNuI73IVL8H3WzPb7gdoM9DOfdPIiW4wABP3rc3rE0hff4W Bz0uT25invD9xgEinRFTIrU2MLtQx9nHPnzolzZKPRjlS7161Tc6J+Ndx9WlgOS9 afN89+KopXfr+Ai8O0csrTDwgLWnpQ/WngbgkJQYgeG+yaGuGypUg279qGKWVDvu kDiq3AhNEVBjLmLZDJ9Mm8YHdoG5jaw4vn9wa6Ikw44uS6bThe98TN1FgaqZ5MBG gMp+IFuXw8RrpMXkhoF5hU6vb7UvZRR0PZI1HbP8AZgOWIrefL/twrSJyOaeXNS5 YeyZzvYCwoS5Jw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:49:53 2025 by rpki-client