This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft File: CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft (raw, json) Hash identifier: vVzpygPlmn+xF/Ptar4xYN3pFmaILROZdixaKMPnrLI= Subject key identifier: 30:07:29:93:6E:FA:48:70:D4:FD:DA:B6:A4:53:CE:77:DA:46:7B:8D Authority key identifier: 09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6 Certificate issuer: /CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6 Certificate serial: 019B31554365EBE08755CEE5DC7B12AECC07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft Manifest number: 141D Signing time: Thu 18 Dec 2025 12:00:29 +0000 Manifest this update: Thu 18 Dec 2025 12:00:29 +0000 Manifest next update: Fri 19 Dec 2025 12:00:29 +0000 Files and hashes: 1: 5gxr50rRC6q1xmQ2obCCI3UU8XE.roa (hash: 788tIYHaxcKJti3OU2hmplvQGAFcsSM5lvHfjYsQU8M=) 2: CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl (hash: Ux7okQlRmWVss/7Nk+cYMKolzahed0b2B2dqAoo0wIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:43:65:eb:e0:87:55:ce:e5:dc:7b:12:ae:cc:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6 Validity Not Before: Dec 18 12:00:29 2025 GMT Not After : Dec 19 12:00:29 2025 GMT Subject: CN=300729936efa4870d4fddab6a453ce77da467b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:74:5e:2f:00:0f:9c:8c:15:96:9d:f6:b0:75: e8:87:cc:9e:96:a1:88:25:a8:6d:da:6b:fe:a9:e7: 1c:06:f3:cf:1f:25:d1:ae:5a:37:cc:e3:6c:e1:d6: 8d:00:99:2a:4b:f9:d2:ab:9f:6d:20:01:40:2d:55: bc:f5:91:d5:a1:69:e2:dc:32:96:87:81:f4:70:f2: b1:f1:ab:58:9f:28:d6:aa:db:da:aa:6d:2d:73:e0: a9:65:7f:73:9e:5d:51:66:7e:a8:7d:cb:74:3d:98: 58:0b:e1:71:00:68:ab:5f:05:b7:01:db:c8:0d:9c: 46:f0:52:63:f7:b5:92:3e:f1:ab:05:03:70:11:64: e9:f1:79:ac:70:a2:7f:53:6e:67:6c:61:c3:60:3e: ec:71:a3:11:f1:ee:c9:9d:f5:70:b9:af:b5:84:cf: 65:72:9c:2e:e9:08:01:54:11:93:cf:5b:d0:ad:4e: 13:79:be:7e:2c:cf:e2:76:a5:e2:f4:f7:16:4c:5b: dc:29:6b:6c:fa:cb:79:d8:03:1b:b5:c5:4c:97:08: 26:d0:be:cc:b3:ec:87:2f:c0:6b:3f:a3:89:7c:de: 19:3b:84:ca:16:c3:74:a2:84:dc:39:18:63:1a:5f: 1b:e9:dc:33:25:24:ab:75:ef:07:9d:c5:2d:1d:c9: b6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:07:29:93:6E:FA:48:70:D4:FD:DA:B6:A4:53:CE:77:DA:46:7B:8D X509v3 Authority Key Identifier: keyid:09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:84:7c:a8:39:91:3d:cb:1b:85:db:f2:ec:72:99:66:4d:a3: de:ee:71:2a:e2:fc:4b:97:9b:23:f7:0b:5c:71:f5:db:b7:af: ea:6c:25:c2:20:c6:37:0d:24:61:65:bb:c3:d7:dd:de:4a:c5: 7a:4b:19:65:2b:0c:ed:38:c2:ae:db:01:a5:a4:1a:a5:39:d3: 71:61:a7:55:f4:a0:75:0b:dc:74:37:56:11:cf:2c:69:67:16: 61:dd:c4:c2:a3:46:9a:03:80:32:d9:d4:26:2a:88:86:da:4d: 82:02:fb:9f:24:41:ce:02:04:b8:71:13:57:c7:aa:15:e5:8a: 94:5e:aa:9c:98:f0:93:6e:37:65:7f:c0:34:3e:1c:3b:24:ec: 46:77:4f:d4:8c:e6:f6:72:8e:c9:e4:c5:74:98:a1:6e:3a:b6: 7b:e6:a6:08:42:1a:61:6f:cb:cc:17:b8:48:c2:0a:c3:3c:80: 3c:5b:8f:57:09:00:ca:ca:7e:7d:a4:93:72:52:96:dc:01:cb: 8f:2e:52:97:1d:a7:a8:55:0d:88:7c:af:3a:46:c4:88:55:de: ff:bb:f1:8e:91:2f:e9:16:e4:76:10:85:9c:7a:bc:eb:91:5b: 91:b1:16:39:af:46:06:d3:01:e5:d6:f8:03:5a:82:15:92:be: 31:8c:64:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVUNl6+CHVc7l3HsSrswHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MmNjNGUzZjExYTBmNWVlN2M1NmY2N2NlMDk5NjAxYTRj ZmJiYjYwHhcNMjUxMjE4MTIwMDI5WhcNMjUxMjE5MTIwMDI5WjAzMTEwLwYDVQQD EygzMDA3Mjk5MzZlZmE0ODcwZDRmZGRhYjZhNDUzY2U3N2RhNDY3YjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHReLwAPnIwVlp32sHXoh8yelqGI Jaht2mv+qeccBvPPHyXRrlo3zONs4daNAJkqS/nSq59tIAFALVW89ZHVoWni3DKW h4H0cPKx8atYnyjWqtvaqm0tc+CpZX9znl1RZn6ofct0PZhYC+FxAGirXwW3AdvI DZxG8FJj97WSPvGrBQNwEWTp8XmscKJ/U25nbGHDYD7scaMR8e7JnfVwua+1hM9l cpwu6QgBVBGTz1vQrU4Teb5+LM/idqXi9PcWTFvcKWts+st52AMbtcVMlwgm0L7M s+yHL8BrP6OJfN4ZO4TKFsN0ooTcORhjGl8b6dwzJSSrde8HncUtHcm21wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAHKZNu+khw1P3atqRTznfaRnuNMB8GA1UdIwQY MBaAFAksxOPxGg9e58VvZ84JlgGkz7u2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1N6RTRfRWFEMTdueFc5bnpnbVdBYVRQdTdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hYzdmYTMtZGJlOC00OTNiLWI4YTct M2JlMDMxM2VjNTkwLzEvQ1N6RTRfRWFEMTdueFc5bnpnbVdBYVRQdTdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9hYzdmYTMtZGJlOC00OTNiLWI4YTctM2JlMDMxM2VjNTkw LzEvQ1N6RTRfRWFEMTdueFc5bnpnbVdBYVRQdTdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYR8qDmR Pcsbhdvy7HKZZk2j3u5xKuL8S5ebI/cLXHH127ev6mwlwiDGNw0kYWW7w9fd3krF eksZZSsM7TjCrtsBpaQapTnTcWGnVfSgdQvcdDdWEc8saWcWYd3EwqNGmgOAMtnU JiqIhtpNggL7nyRBzgIEuHETV8eqFeWKlF6qnJjwk243ZX/AND4cOyTsRndP1Izm 9nKOyeTFdJihbjq2e+amCEIaYW/LzBe4SMIKwzyAPFuPVwkAysp+faSTclKW3AHL jy5Slx2nqFUNiHyvOkbEiFXe/7vxjpEv6RbkdhCFnHq865FbkbEWOa9GBtMB5db4 A1qCFZK+MYxkAg== -----END CERTIFICATE-----Generated at Thu Dec 18 17:33:29 2025 by rpki-client