This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft File: czHb7QiXzOhcFINxtHzIB4Ll5ys.mft (raw, json) Hash identifier: FBt/c64vvQU23zOZCDhPhJGuBwVEOZdze0beJuuQSIs= Subject key identifier: A6:E4:8F:22:72:3E:F4:70:7E:59:77:7F:85:0C:A3:0F:53:CF:45:EE Authority key identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B Certificate issuer: /CN=7331dbed0897cce85c148371b47cc80782e5e72b Certificate serial: 019AF31B45EFBFCC3B1E60F82160DF32F196 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft Manifest number: 0652 Signing time: Sat 06 Dec 2025 10:00:42 +0000 Manifest this update: Sat 06 Dec 2025 10:00:42 +0000 Manifest next update: Sun 07 Dec 2025 10:00:42 +0000 Files and hashes: 1: czHb7QiXzOhcFINxtHzIB4Ll5ys.crl (hash: EHhJBwRyBjF9zwoAZI2vy/B/y3aMgfiCj1NPxGR6E2Y=) 2: x22xk2A-Apb8dLpmSadyKyJCkDo.roa (hash: gu74rPveiHXJ2A/NDXg+xf+4EJriNsSl+5m/7KHQAxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:45:ef:bf:cc:3b:1e:60:f8:21:60:df:32:f1:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7331dbed0897cce85c148371b47cc80782e5e72b Validity Not Before: Dec 6 10:00:42 2025 GMT Not After : Dec 7 10:00:42 2025 GMT Subject: CN=a6e48f22723ef4707e59777f850ca30f53cf45ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f7:ab:19:61:17:d4:4b:8b:27:10:24:0e:63: 08:1f:53:9f:2f:89:2d:23:7c:bd:c2:5b:71:64:d0: b0:17:f4:2d:c3:cd:50:90:48:6d:04:36:67:1c:74: 79:b2:36:43:96:c2:58:c1:d5:81:4c:e9:6a:ed:80: 0e:c0:c7:09:4a:db:2f:e8:4c:53:07:c1:a7:5f:46: 0e:93:43:18:3f:52:51:48:76:fa:16:29:72:8d:34: d0:5a:33:17:d9:ee:9e:3a:7d:02:60:cf:ce:05:6d: 04:57:b9:c6:9b:9e:27:6f:34:ef:c5:43:07:4b:81: 2f:90:75:a6:4b:7a:2d:4f:e3:bf:73:2c:d8:95:f7: 47:38:f0:91:08:89:91:f9:04:0c:c3:d0:63:78:6a: 62:f4:0d:f5:62:16:49:1b:c4:7c:2c:5c:00:73:50: f0:21:db:5e:76:41:3d:dd:93:95:92:0d:40:13:a5: 96:44:c7:c5:2e:f5:2c:c5:91:c2:83:de:1c:d9:1c: f0:73:d6:c2:83:e7:ac:16:f9:b4:80:be:41:5b:a1: 10:ea:0c:7b:25:52:3d:b3:0e:93:1a:9c:c9:98:fc: 9e:7e:29:b1:b2:2b:53:68:a2:07:71:65:b9:bc:5d: ce:6f:e8:9e:09:9b:81:54:7e:f8:32:5b:e5:49:ca: 03:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E4:8F:22:72:3E:F4:70:7E:59:77:7F:85:0C:A3:0F:53:CF:45:EE X509v3 Authority Key Identifier: keyid:73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:92:36:7e:67:ef:b4:57:b0:a5:80:43:43:38:19:27:b0:0b: 66:99:53:16:b5:35:2d:c4:f7:1a:40:24:5b:27:35:44:a3:fa: a9:63:83:1c:7c:88:21:fa:2c:8d:48:11:30:0d:80:81:e7:dd: 87:f0:04:93:af:da:a5:d4:11:ec:3e:8d:c5:c0:52:61:c1:ae: 7b:0f:40:5a:4f:55:be:b7:a3:1f:e6:3e:ef:7a:8b:c6:48:04: 31:71:6b:8f:95:e3:dc:bf:35:34:aa:76:05:b6:88:6c:16:42: f1:39:42:8a:24:1c:a4:3d:a5:54:b5:cc:1e:9c:2e:d2:2b:c1: 77:7d:02:66:95:c0:f8:96:61:f3:bb:5c:fe:9c:59:c1:6a:73: 9a:d4:c5:d9:f1:22:0c:18:07:fd:dc:75:7b:99:91:09:72:76: 70:4a:96:59:01:fb:eb:92:26:df:d2:d8:e5:22:60:9c:3c:d6: 1a:ec:26:b7:60:0d:c9:ad:b1:d7:86:b1:62:f6:ad:45:50:5b: e4:24:b4:6a:c5:eb:c0:15:3a:57:39:26:4e:c8:3d:98:a3:d6: 91:c7:fb:d1:68:e3:81:7a:44:79:cf:33:4b:3b:22:30:c8:4c: a7:99:7f:7e:c3:d9:78:00:be:2f:8d:82:8a:b1:0b:ea:e0:4e: f1:27:c3:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0Xvv8w7HmD4IWDfMvGWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMzFkYmVkMDg5N2NjZTg1YzE0ODM3MWI0N2NjODA3ODJl NWU3MmIwHhcNMjUxMjA2MTAwMDQyWhcNMjUxMjA3MTAwMDQyWjAzMTEwLwYDVQQD EyhhNmU0OGYyMjcyM2VmNDcwN2U1OTc3N2Y4NTBjYTMwZjUzY2Y0NWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmverGWEX1EuLJxAkDmMIH1OfL4kt I3y9wltxZNCwF/Qtw81QkEhtBDZnHHR5sjZDlsJYwdWBTOlq7YAOwMcJStsv6ExT B8GnX0YOk0MYP1JRSHb6FilyjTTQWjMX2e6eOn0CYM/OBW0EV7nGm54nbzTvxUMH S4EvkHWmS3otT+O/cyzYlfdHOPCRCImR+QQMw9BjeGpi9A31YhZJG8R8LFwAc1Dw IdtedkE93ZOVkg1AE6WWRMfFLvUsxZHCg94c2Rzwc9bCg+esFvm0gL5BW6EQ6gx7 JVI9sw6TGpzJmPyefimxsitTaKIHcWW5vF3Ob+ieCZuBVH74MlvlScoD1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbkjyJyPvRwfll3f4UMow9Tz0XuMB8GA1UdIwQY MBaAFHMx2+0Il8zoXBSDcbR8yAeC5ecrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNWYwYzMtMjJlNS00ODAxLTkwZmIt MDQ2NTA3MmU0MWEzLzEvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jNWYwYzMtMjJlNS00ODAxLTkwZmItMDQ2NTA3MmU0MWEz LzEvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpI2fmfv tFewpYBDQzgZJ7ALZplTFrU1LcT3GkAkWyc1RKP6qWODHHyIIfosjUgRMA2Agefd h/AEk6/apdQR7D6NxcBSYcGuew9AWk9VvrejH+Y+73qLxkgEMXFrj5Xj3L81NKp2 BbaIbBZC8TlCiiQcpD2lVLXMHpwu0ivBd30CZpXA+JZh87tc/pxZwWpzmtTF2fEi DBgH/dx1e5mRCXJ2cEqWWQH765Im39LY5SJgnDzWGuwmt2ANya2x14axYvatRVBb 5CS0asXrwBU6VzkmTsg9mKPWkcf70WjjgXpEec8zSzsiMMhMp5l/fsPZeAC+L42C irEL6uBO8SfDIA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:20:41 2025 by rpki-client