This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft File: csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft (raw, json) Hash identifier: n12WA4+zVDXysS6ATcxSlV2A56YeZt7pnyy69e4b/u0= Subject key identifier: 52:8A:A8:40:AC:9D:E9:73:7E:0C:BB:EF:D7:E5:E5:EC:5C:38:71:38 Authority key identifier: 72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47 Certificate issuer: /CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47 Certificate serial: 019AF35231BEBB36688FAA13DEE516B58B89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 11:00:41 +0000 Manifest this update: Sat 06 Dec 2025 11:00:41 +0000 Manifest next update: Sun 07 Dec 2025 11:00:41 +0000 Files and hashes: 1: E21NAhDVeJIjhOGEeA7dZ6TV82c.roa (hash: 2Eo54WpqIcZduXMVnpn6V9sW+3m4FmzZ4Mra+/DmCe4=) 2: I-6QObHdYgADe1Ozhbza6rJImfo.roa (hash: lt1dj1yd1VcvHrBIs+csLY45AdfMJIDgVvzWdDc7ovE=) 3: WlRuTCJYddDH_ysVV5GnnWoYfEE.roa (hash: jZDPo73pyYZ9ohlhaHX22v8gbqxDIovMw2lLztIeSfo=) 4: csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl (hash: 3EF0mBIZcj/4GIjAJ80v4ne9veYLJnO3OtGtuSuS8hU=) 5: oVZun4DWgoF19ND4-_Dv0_qpKP8.roa (hash: SzuvbHmsUfKJvAq6jHLnp6Osyk3SkcVPJNGdOpKeUh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:31:be:bb:36:68:8f:aa:13:de:e5:16:b5:8b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47 Validity Not Before: Dec 6 11:00:41 2025 GMT Not After : Dec 7 11:00:41 2025 GMT Subject: CN=528aa840ac9de9737e0cbbefd7e5e5ec5c387138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cd:bf:d6:a7:03:98:7e:e4:52:31:da:88:b5: a3:6b:1a:be:7a:fb:e1:74:b8:a2:f8:5c:22:44:49: 37:96:2b:b1:aa:3d:3d:c0:9a:a7:cf:91:47:7f:cd: 38:70:13:a4:b0:04:b0:ac:a5:09:3e:2c:76:22:cc: 27:d3:92:94:72:78:f7:89:ad:3f:b3:b7:66:46:b6: 69:fd:23:15:2e:39:d2:46:c6:ac:03:ce:fb:6b:05: d8:e3:2e:7f:1c:f5:5b:1b:7f:68:02:68:fd:72:d8: d1:36:bb:3a:1d:21:1f:ee:82:ed:8d:cc:6c:c2:f0: f8:2e:bc:6c:76:da:3f:62:35:26:b2:ac:aa:47:3f: a6:cd:de:54:0a:78:65:f8:06:0c:7a:e1:8c:a5:62: 1c:0b:64:4c:58:90:9f:4e:5d:a0:c7:a3:e7:3d:6c: 2c:4c:06:33:d5:80:3b:b1:7a:da:3c:2d:60:90:1b: db:9c:74:8f:77:02:25:3c:d2:a0:7c:e5:90:0b:6f: d6:00:c1:62:55:b0:b2:8b:03:30:d2:bf:31:47:3b: 25:4c:4a:22:8e:bb:6c:f4:58:a1:78:b5:bf:93:0c: 9d:13:ed:83:e7:d8:9b:31:c9:8c:9f:39:bf:b0:84: 69:ae:3f:8c:11:c2:7e:30:cf:59:12:0e:a7:1e:24: 19:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8A:A8:40:AC:9D:E9:73:7E:0C:BB:EF:D7:E5:E5:EC:5C:38:71:38 X509v3 Authority Key Identifier: keyid:72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ae:ee:20:93:7d:85:34:3a:b7:ec:e8:ab:97:82:65:60:06: 06:8e:0a:97:83:a4:34:1f:37:91:8f:09:62:22:5f:1f:2d:8c: 33:5d:f5:89:45:89:37:df:9e:fc:5c:a2:20:7b:13:af:a9:cd: 57:33:0c:8d:fe:93:59:56:c6:14:81:19:74:a2:49:fd:aa:8a: a5:1e:c7:05:6a:6f:db:c1:24:de:05:1c:b9:7c:2f:cf:9d:c1: c3:11:24:d7:ea:b8:24:67:b7:c0:33:06:8b:86:55:79:d8:46: 7b:ab:21:32:33:24:fd:2a:f8:c1:6a:e9:86:d5:ce:fc:69:97: 95:46:ff:06:7d:45:28:f4:c2:5f:25:cd:9b:06:f5:f0:f5:96: 19:be:bf:a5:47:50:af:ad:51:b3:41:c7:e2:d9:21:bb:9b:7d: 63:b1:a3:8d:e7:20:50:db:e2:bf:00:15:68:c7:67:74:65:44: b3:df:a2:82:df:3b:8a:c9:ec:73:8b:ca:27:73:8f:1a:8e:b5: 62:9a:d8:27:72:b8:00:de:ca:23:75:35:45:db:06:2a:a3:8e: f9:6f:73:a3:54:f6:dc:cd:64:54:cb:bf:8e:6d:4d:c7:85:f1: a0:39:b6:f2:b6:0b:bf:63:49:0b:d7:14:3b:68:99:e3:b5:57: 88:9d:60:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjG+uzZoj6oT3uUWtYuJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYzI2YWJjOWUwNmMxYWZlZjliNWZkMmRhNDA0MTJlN2Fl ZTZiNDcwHhcNMjUxMjA2MTEwMDQxWhcNMjUxMjA3MTEwMDQxWjAzMTEwLwYDVQQD Eyg1MjhhYTg0MGFjOWRlOTczN2UwY2JiZWZkN2U1ZTVlYzVjMzg3MTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc2/1qcDmH7kUjHaiLWjaxq+evvh dLii+FwiREk3liuxqj09wJqnz5FHf804cBOksASwrKUJPix2Iswn05KUcnj3ia0/ s7dmRrZp/SMVLjnSRsasA877awXY4y5/HPVbG39oAmj9ctjRNrs6HSEf7oLtjcxs wvD4Lrxsdto/YjUmsqyqRz+mzd5UCnhl+AYMeuGMpWIcC2RMWJCfTl2gx6PnPWws TAYz1YA7sXraPC1gkBvbnHSPdwIlPNKgfOWQC2/WAMFiVbCyiwMw0r8xRzslTEoi jrts9FiheLW/kwydE+2D59ibMcmMnzm/sIRprj+MEcJ+MM9ZEg6nHiQZfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKKqECsnelzfgy779fl5excOHE4MB8GA1UdIwQY MBaAFHLCaryeBsGv75tf0tpAQS567mtHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NKcXZKNEd3YV92bTFfUzJrQkJMbnJ1YTBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82YzA1MzAtMTA3NC00YjM1LWJlMGMt Y2Q3ZDYxOTEzMjg4LzEvY3NKcXZKNEd3YV92bTFfUzJrQkJMbnJ1YTBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny82YzA1MzAtMTA3NC00YjM1LWJlMGMtY2Q3ZDYxOTEzMjg4 LzEvY3NKcXZKNEd3YV92bTFfUzJrQkJMbnJ1YTBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAa7uIJN9 hTQ6t+zoq5eCZWAGBo4Kl4OkNB83kY8JYiJfHy2MM131iUWJN9+e/FyiIHsTr6nN VzMMjf6TWVbGFIEZdKJJ/aqKpR7HBWpv28Ek3gUcuXwvz53BwxEk1+q4JGe3wDMG i4ZVedhGe6shMjMk/Sr4wWrphtXO/GmXlUb/Bn1FKPTCXyXNmwb18PWWGb6/pUdQ r61Rs0HH4tkhu5t9Y7GjjecgUNvivwAVaMdndGVEs9+igt87isnsc4vKJ3OPGo61 YprYJ3K4AN7KI3U1RdsGKqOO+W9zo1T23M1kVMu/jm1Nx4XxoDm28rYLv2NJC9cU O2iZ47VXiJ1gVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:23:53 2025 by rpki-client