This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft File: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json) Hash identifier: r0tCzzH1UQfbEQdHBT9N+MhZerMWV1kVsrAzNd7D8Jk= Subject key identifier: D3:0A:A1:2E:42:FA:41:E2:63:94:F5:B4:D9:44:61:B1:14:C1:E5:E0 Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5 Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5 Certificate serial: 019AF276A0AA14C5CEF37CD839AA5CF14E1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft Manifest number: 01BC Signing time: Sat 06 Dec 2025 07:00:51 +0000 Manifest this update: Sat 06 Dec 2025 07:00:51 +0000 Manifest next update: Sun 07 Dec 2025 07:00:51 +0000 Files and hashes: 1: 0En_rM3ItFKYLhaLLd8WBZOTlpA.roa (hash: 152maO322NYmeUI+2QBI3Muc080/yMuLJaeicPAME94=) 2: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: SE0b+xidflsdMvtE+VwYo5k7JUtXqzY74kr3rxuzFfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a0:aa:14:c5:ce:f3:7c:d8:39:aa:5c:f1:4e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5 Validity Not Before: Dec 6 07:00:51 2025 GMT Not After : Dec 7 07:00:51 2025 GMT Subject: CN=d30aa12e42fa41e26394f5b4d94461b114c1e5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:7d:c0:0a:57:39:77:e2:8e:f7:4d:f9:d2: 86:51:c0:de:5f:9c:23:11:9d:b7:e4:d4:e0:43:77: 3b:a3:31:33:d1:52:e4:35:6e:7d:43:b1:98:b6:28: 8d:26:fa:a7:0b:58:91:02:8e:60:16:f3:dd:8f:ea: b7:33:78:d5:6c:87:42:0f:bb:05:0b:45:d6:52:21: 65:0c:56:1f:3e:bd:8b:d6:e2:70:e1:64:10:29:35: 44:fa:5c:98:17:79:55:bb:56:41:b7:43:10:54:60: c0:c3:03:46:2a:6c:b1:a5:29:57:1b:64:0b:bc:42: f2:16:a8:b2:d4:48:c4:20:99:2d:46:f3:e2:ec:5a: a4:da:ed:cf:4e:8d:af:9f:0e:a8:2a:26:ac:b9:8b: 60:92:e5:82:92:b7:6f:e2:44:95:e0:60:d0:5c:38: 36:6d:45:eb:a1:72:5d:86:bc:8e:bd:91:ba:02:60: a2:a3:14:0d:19:36:83:ff:1c:0d:47:64:37:72:69: 24:4e:2c:8d:ab:28:f3:94:8b:6d:ec:67:84:b2:08: b0:4a:d4:c1:22:7a:62:0e:ed:fa:ff:3b:e8:75:50: b2:5a:35:f9:31:c6:23:46:56:36:b7:11:5f:67:bf: bc:50:e5:c4:6b:39:ce:80:c2:f7:fb:50:84:43:6a: fa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0A:A1:2E:42:FA:41:E2:63:94:F5:B4:D9:44:61:B1:14:C1:E5:E0 X509v3 Authority Key Identifier: keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:60:30:bd:c5:92:34:93:41:5c:fc:69:91:e4:a5:86:2d:f1: 9a:b3:6e:70:02:02:fb:14:ad:83:c1:93:ba:70:88:03:94:b3: 64:c7:52:53:ce:4b:44:9a:ad:54:8b:8a:8e:c5:d6:6f:d0:86: 9b:a8:3b:76:d2:27:00:8d:4a:9b:42:5c:f6:61:2e:3c:68:d0: 75:b7:05:a3:11:8f:62:e6:3e:98:23:77:33:b5:1b:8d:98:22: ed:b2:9a:3a:ec:14:5a:a5:a3:80:21:c5:4a:76:5e:da:4a:b9: 91:9b:76:bc:b7:b9:d1:73:11:0a:eb:33:3d:13:ff:85:98:16: 39:8d:8e:89:28:a3:16:45:2b:2f:bb:a0:e8:56:62:ac:a0:ad: 98:ed:be:0a:87:22:91:ef:7b:cb:70:34:de:3b:f0:16:79:4a: a2:5b:c9:c5:81:d1:bd:a0:0a:9b:50:f2:ae:21:8e:23:52:ec: 70:4c:82:07:ae:d0:ed:f7:c4:db:7b:e0:50:b2:fe:63:52:2f: 65:5b:c3:c9:3b:34:31:46:a4:be:ab:57:e6:c0:ed:fe:6e:3a: b7:e7:91:69:96:40:4e:a0:c3:4e:b8:dd:2e:b6:4f:ce:72:67: 6c:37:3b:0b:a8:a6:63:a8:0b:8a:f1:76:4b:69:c8:03:da:77: 6c:4d:a9:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqCqFMXO83zYOapc8U4fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MmJlNzYyZmJiMTBmZWU0MmQ2ZGU1NTY3OTM2ZWNkMWY4 M2RlZDUwHhcNMjUxMjA2MDcwMDUxWhcNMjUxMjA3MDcwMDUxWjAzMTEwLwYDVQQD EyhkMzBhYTEyZTQyZmE0MWUyNjM5NGY1YjRkOTQ0NjFiMTE0YzFlNWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgd9wApXOXfijvdN+dKGUcDeX5wj EZ235NTgQ3c7ozEz0VLkNW59Q7GYtiiNJvqnC1iRAo5gFvPdj+q3M3jVbIdCD7sF C0XWUiFlDFYfPr2L1uJw4WQQKTVE+lyYF3lVu1ZBt0MQVGDAwwNGKmyxpSlXG2QL vELyFqiy1EjEIJktRvPi7Fqk2u3PTo2vnw6oKiasuYtgkuWCkrdv4kSV4GDQXDg2 bUXroXJdhryOvZG6AmCioxQNGTaD/xwNR2Q3cmkkTiyNqyjzlItt7GeEsgiwStTB InpiDu36/zvodVCyWjX5McYjRlY2txFfZ7+8UOXEaznOgML3+1CEQ2r65QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMKoS5C+kHiY5T1tNlEYbEUweXgMB8GA1UdIwQY MBaAFAkr52L7sQ/uQtbeVWeTbs0fg97VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1N2bll2dXhELTVDMXQ1Vlo1TnV6Ui1EM3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hYWMzZWItMGNiNC00ZTIzLTlmNzAt Yzk0MGFkM2MwMDhhLzEvQ1N2bll2dXhELTVDMXQ1Vlo1TnV6Ui1EM3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hYWMzZWItMGNiNC00ZTIzLTlmNzAtYzk0MGFkM2MwMDhh LzEvQ1N2bll2dXhELTVDMXQ1Vlo1TnV6Ui1EM3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGAwvcWS NJNBXPxpkeSlhi3xmrNucAIC+xStg8GTunCIA5SzZMdSU85LRJqtVIuKjsXWb9CG m6g7dtInAI1Km0Jc9mEuPGjQdbcFoxGPYuY+mCN3M7UbjZgi7bKaOuwUWqWjgCHF SnZe2kq5kZt2vLe50XMRCuszPRP/hZgWOY2OiSijFkUrL7ug6FZirKCtmO2+Coci ke97y3A03jvwFnlKolvJxYHRvaAKm1DyriGOI1LscEyCB67Q7ffE23vgULL+Y1Iv ZVvDyTs0MUakvqtX5sDt/m46t+eRaZZATqDDTrjdLrZPznJnbDc7C6imY6gLivF2 S2nIA9p3bE2p4g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:11 2025 by rpki-client