This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft File: csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json) Hash identifier: ep0V+9HflF9tOzEnKjVPBk70Uf5d1NtaFwbLyTlHX5w= Subject key identifier: 0C:05:E2:22:B1:9B:CA:F2:57:10:D4:87:77:C7:FB:C0:8B:01:F2:E8 Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c Certificate serial: 019AF1D1D2938CFD215DB41B28B7780C2BFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft Manifest number: 16C9 Signing time: Sat 06 Dec 2025 04:00:51 +0000 Manifest this update: Sat 06 Dec 2025 04:00:51 +0000 Manifest next update: Sun 07 Dec 2025 04:00:51 +0000 Files and hashes: 1: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: 4fzSdciidwTxV+a03GhfASx45fYpU35Apkdnl6oyRz8=) 2: rH_6QZmVa4_yNlZ_JVuN0_Vk3Xs.roa (hash: Z/fYNuFHcmnLVDSA1WLLI385MQXDkqW9Tw7vDgNOnAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d2:93:8c:fd:21:5d:b4:1b:28:b7:78:0c:2b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c Validity Not Before: Dec 6 04:00:51 2025 GMT Not After : Dec 7 04:00:51 2025 GMT Subject: CN=0c05e222b19bcaf25710d48777c7fbc08b01f2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d9:e0:7d:aa:ef:85:29:17:20:2b:56:ec:49: ff:9e:80:d2:70:53:6b:8a:25:e0:7a:20:cb:f5:83: 42:9f:02:d3:8e:7b:57:ac:aa:03:a5:3c:29:ba:73: d8:6f:d7:3d:89:e4:32:a2:16:26:23:86:84:23:fe: 5e:df:6d:ac:95:9e:43:65:9a:e3:95:dd:bb:8d:02: ca:e3:34:95:44:63:40:aa:78:cd:61:4e:d7:cb:86: 74:69:8a:3b:17:97:da:7b:57:27:ea:2e:04:cc:b1: 38:f7:5c:05:d4:d3:37:82:7a:5d:6e:6c:e6:c1:93: 51:42:12:74:53:ca:fb:69:ab:b9:e9:00:ea:6c:7a: 82:d1:ea:81:07:f2:62:92:7c:3d:d4:13:fb:08:3a: 35:65:2a:19:fe:7f:e4:9e:d5:72:79:3d:f9:60:a1: 4a:77:20:ec:c6:f6:20:31:54:18:ab:e5:0e:42:c0: b9:04:b8:ca:2e:18:74:c6:6d:8a:4d:2c:0d:bb:32: 3f:9f:af:11:94:00:67:25:4e:c0:97:6d:70:b8:d5: 70:3d:58:b5:d2:55:05:90:54:c7:44:73:ce:30:79: 03:63:1b:b7:90:fc:75:c9:36:64:9e:47:cc:97:13: c7:4c:0c:90:8f:2a:a9:a0:a1:ac:5c:42:92:64:4a: 44:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:05:E2:22:B1:9B:CA:F2:57:10:D4:87:77:C7:FB:C0:8B:01:F2:E8 X509v3 Authority Key Identifier: keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:41:cf:6b:d2:76:78:8e:40:7c:ec:14:3b:ca:ab:5a:ba:f8: 0d:1a:92:a9:8a:63:01:88:83:ad:34:51:08:fd:c0:e2:76:1f: ff:29:8b:04:6d:30:e4:be:52:39:c5:2d:7a:a4:59:25:b0:9d: 73:cc:5d:de:4d:80:2b:ca:1a:3d:ec:bd:1b:e2:4a:90:00:36: 1d:b9:65:60:45:70:a9:47:46:a8:c0:98:41:de:19:98:f7:8c: 4b:67:65:a5:67:f9:5f:7f:0c:e9:45:5d:59:c4:a9:31:8e:49: 58:e3:b7:cd:b9:cf:55:d6:3f:58:fa:6d:4b:d8:18:40:d1:1b: 95:4f:e0:d2:f5:97:04:07:c5:8e:bb:f1:d3:7b:aa:34:bd:cd: f0:82:c6:0a:bb:26:d0:2c:73:c2:3e:01:e8:db:f6:da:58:e9: 9a:2a:b9:ae:20:ec:4f:cb:c6:fb:ad:f6:ff:82:12:0f:d2:da: ff:a9:29:af:9a:d2:03:2d:af:a7:bd:87:33:46:8c:b7:f1:f3: 93:4c:c4:32:69:a6:6a:dd:3f:e8:8f:4a:9a:30:5b:b6:22:30: 6e:e6:ce:6a:3d:23:34:70:29:ea:10:f5:a1:29:df:ae:89:0f: aa:1d:ee:bd:f2:47:dd:18:a1:e1:d5:f7:4f:25:55:cf:f7:8b: dc:be:8e:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dKTjP0hXbQbKLd4DCv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyY2ExYTVjZmY1MmViZTJmMjJiNjY5ZGNjMmM5MDI3Y2Vh MGI4MWMwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD EygwYzA1ZTIyMmIxOWJjYWYyNTcxMGQ0ODc3N2M3ZmJjMDhiMDFmMmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09ngfarvhSkXICtW7En/noDScFNr iiXgeiDL9YNCnwLTjntXrKoDpTwpunPYb9c9ieQyohYmI4aEI/5e322slZ5DZZrj ld27jQLK4zSVRGNAqnjNYU7Xy4Z0aYo7F5fae1cn6i4EzLE491wF1NM3gnpdbmzm wZNRQhJ0U8r7aau56QDqbHqC0eqBB/Jiknw91BP7CDo1ZSoZ/n/kntVyeT35YKFK dyDsxvYgMVQYq+UOQsC5BLjKLhh0xm2KTSwNuzI/n68RlABnJU7Al21wuNVwPVi1 0lUFkFTHRHPOMHkDYxu3kPx1yTZknkfMlxPHTAyQjyqpoKGsXEKSZEpEWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwF4iKxm8ryVxDUh3fH+8CLAfLoMB8GA1UdIwQY MBaAFHLKGlz/Uuvi8itmncwskCfOoLgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NvYVhQOVM2LUx5SzJhZHpDeVFKODZndUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xMmFjMGUtNTQ3NC00NWQ1LThkZWYt NmE0MTRmMTg0NzA2LzEvY3NvYVhQOVM2LUx5SzJhZHpDeVFKODZndUJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8xMmFjMGUtNTQ3NC00NWQ1LThkZWYtNmE0MTRmMTg0NzA2 LzEvY3NvYVhQOVM2LUx5SzJhZHpDeVFKODZndUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0HPa9J2 eI5AfOwUO8qrWrr4DRqSqYpjAYiDrTRRCP3A4nYf/ymLBG0w5L5SOcUteqRZJbCd c8xd3k2AK8oaPey9G+JKkAA2HbllYEVwqUdGqMCYQd4ZmPeMS2dlpWf5X38M6UVd WcSpMY5JWOO3zbnPVdY/WPptS9gYQNEblU/g0vWXBAfFjrvx03uqNL3N8ILGCrsm 0Cxzwj4B6Nv22ljpmiq5riDsT8vG+632/4ISD9La/6kpr5rSAy2vp72HM0aMt/Hz k0zEMmmmat0/6I9KmjBbtiIwbubOaj0jNHAp6hD1oSnfrokPqh3uvfJH3Rih4dX3 TyVVz/eL3L6OXg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:13 2025 by rpki-client