This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft File: CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft (raw, json) Hash identifier: HujwBBRHuDini3oIusDuUxzmYypvYlAFSk3qAq8wUwc= Subject key identifier: 25:01:53:8C:81:0B:79:97:4E:69:86:FD:B7:D4:06:02:E0:C3:EA:95 Authority key identifier: 09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6 Certificate issuer: /CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6 Certificate serial: 019AF19BACC6FB0BC0E8A474ADF1C4276DE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft Manifest number: 13FC Signing time: Sat 06 Dec 2025 03:01:42 +0000 Manifest this update: Sat 06 Dec 2025 03:01:42 +0000 Manifest next update: Sun 07 Dec 2025 03:01:42 +0000 Files and hashes: 1: 5gxr50rRC6q1xmQ2obCCI3UU8XE.roa (hash: 788tIYHaxcKJti3OU2hmplvQGAFcsSM5lvHfjYsQU8M=) 2: CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl (hash: D8j74d5+4LyZ7Q3mJrBMhk9vLWq+ifJ6fyjJTx/EO0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:ac:c6:fb:0b:c0:e8:a4:74:ad:f1:c4:27:6d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6 Validity Not Before: Dec 6 03:01:42 2025 GMT Not After : Dec 7 03:01:42 2025 GMT Subject: CN=2501538c810b79974e6986fdb7d40602e0c3ea95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:af:9a:0a:d9:2f:23:48:3d:81:da:17:dd: ce:e2:95:4e:58:9a:4e:72:e6:a9:72:0f:06:b2:70: 91:bd:e4:4d:d8:c4:be:c0:2e:09:ad:60:13:b6:72: 51:2a:51:4c:9d:f6:84:7b:bf:ad:55:c4:4d:ac:22: d1:45:48:83:67:12:5b:6e:83:22:b0:a2:36:bf:28: c2:f6:70:6a:ff:64:08:7b:b7:84:f8:e2:54:0a:f8: fe:f5:72:9f:30:45:5f:0a:a8:d1:e7:fd:82:a0:b1: f2:fa:29:3b:ca:54:05:8b:29:f3:ac:6f:6c:a3:28: ba:e6:c0:44:40:1e:d6:21:77:29:74:ae:56:42:07: 24:fa:fe:06:e6:31:3a:01:fe:e5:93:8d:5a:84:7a: 28:56:fd:89:bd:19:6d:7b:18:e2:7a:e0:98:40:a2: 10:65:a0:83:b1:78:0c:10:7e:f7:b2:3c:e0:02:9f: 71:18:df:1a:0e:c4:87:1f:aa:b5:a4:0e:dc:f5:8c: 33:07:46:be:a9:25:e1:d7:1f:01:b9:69:c7:ec:7f: 05:e6:70:df:26:78:4b:8a:eb:d5:db:78:25:da:98: bb:a4:5e:83:46:66:48:0e:25:3d:77:a3:ca:47:5e: 33:7f:f5:21:55:c5:38:a2:ab:a6:6f:ee:a2:76:13: 6a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:01:53:8C:81:0B:79:97:4E:69:86:FD:B7:D4:06:02:E0:C3:EA:95 X509v3 Authority Key Identifier: keyid:09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:19:b3:db:ad:fa:63:cd:45:e5:ab:f7:e8:33:5e:4d:96:40: fb:ee:39:e7:4c:fa:6e:5b:83:4a:f6:4f:3f:d9:4f:3e:6f:41: 30:fa:02:6d:5f:a7:78:bf:e1:cc:3b:ba:c5:d9:9b:16:23:4c: fc:93:9a:b5:d1:56:66:21:61:5b:fd:e3:d4:7a:c7:06:f0:cf: f6:a8:8c:a5:8c:89:cf:0a:12:6c:60:46:7e:3f:2e:59:4c:28: 2d:6a:98:0b:9e:f5:62:97:72:59:dd:d6:79:46:42:9f:40:81: a2:5e:12:2f:0b:b2:91:e3:ee:45:7c:be:82:53:c7:92:f2:d1: 05:d4:42:e8:04:bf:ad:f0:4e:4c:50:e7:df:07:04:05:d1:72: b7:66:8f:c3:96:3e:9d:5a:1c:b3:71:00:2a:8e:00:00:c4:b6: 35:6a:ff:b3:5a:69:dc:5f:32:cc:0f:42:e2:10:21:53:39:88: e7:4d:d3:46:11:46:5c:4d:9c:d1:81:97:11:93:75:7e:7a:56: a8:52:ea:ae:fc:02:e1:b9:17:24:ec:40:44:5b:2b:e4:78:42: bd:1f:c2:bf:6a:aa:f8:a6:85:14:0e:47:03:f8:ad:24:a5:91: 16:ab:f4:6f:0f:ed:bd:a2:8b:74:47:ce:8e:3b:0b:17:0f:80: 30:84:0a:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6zG+wvA6KR0rfHEJ23pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MmNjNGUzZjExYTBmNWVlN2M1NmY2N2NlMDk5NjAxYTRj ZmJiYjYwHhcNMjUxMjA2MDMwMTQyWhcNMjUxMjA3MDMwMTQyWjAzMTEwLwYDVQQD EygyNTAxNTM4YzgxMGI3OTk3NGU2OTg2ZmRiN2Q0MDYwMmUwYzNlYTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEmvmgrZLyNIPYHaF93O4pVOWJpO cuapcg8GsnCRveRN2MS+wC4JrWATtnJRKlFMnfaEe7+tVcRNrCLRRUiDZxJbboMi sKI2vyjC9nBq/2QIe7eE+OJUCvj+9XKfMEVfCqjR5/2CoLHy+ik7ylQFiynzrG9s oyi65sBEQB7WIXcpdK5WQgck+v4G5jE6Af7lk41ahHooVv2JvRltexjieuCYQKIQ ZaCDsXgMEH73sjzgAp9xGN8aDsSHH6q1pA7c9YwzB0a+qSXh1x8BuWnH7H8F5nDf JnhLiuvV23gl2pi7pF6DRmZIDiU9d6PKR14zf/UhVcU4oqumb+6idhNq/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUBU4yBC3mXTmmG/bfUBgLgw+qVMB8GA1UdIwQY MBaAFAksxOPxGg9e58VvZ84JlgGkz7u2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1N6RTRfRWFEMTdueFc5bnpnbVdBYVRQdTdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hYzdmYTMtZGJlOC00OTNiLWI4YTct M2JlMDMxM2VjNTkwLzEvQ1N6RTRfRWFEMTdueFc5bnpnbVdBYVRQdTdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9hYzdmYTMtZGJlOC00OTNiLWI4YTctM2JlMDMxM2VjNTkw LzEvQ1N6RTRfRWFEMTdueFc5bnpnbVdBYVRQdTdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxmz2636 Y81F5av36DNeTZZA++4550z6bluDSvZPP9lPPm9BMPoCbV+neL/hzDu6xdmbFiNM /JOatdFWZiFhW/3j1HrHBvDP9qiMpYyJzwoSbGBGfj8uWUwoLWqYC571YpdyWd3W eUZCn0CBol4SLwuykePuRXy+glPHkvLRBdRC6AS/rfBOTFDn3wcEBdFyt2aPw5Y+ nVocs3EAKo4AAMS2NWr/s1pp3F8yzA9C4hAhUzmI503TRhFGXE2c0YGXEZN1fnpW qFLqrvwC4bkXJOxARFsr5HhCvR/Cv2qq+KaFFA5HA/itJKWRFqv0bw/tvaKLdEfO jjsLFw+AMIQK3g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:47 2025 by rpki-client