This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft File: CsgX_khqx3vpTil6zjqVzyff-xo.mft (raw, json) Hash identifier: K+0DwTHnO4Doz05GQ5c3ThIPEfk9KPSJKt+2wUihiKw= Subject key identifier: 12:A1:4F:31:FE:06:F7:BC:57:04:92:6D:62:62:BB:25:42:D7:CD:43 Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A Certificate issuer: /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a Certificate serial: 019AF540D51D246071DF555C3714A8DDCC24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft Manifest number: 0C92 Signing time: Sat 06 Dec 2025 20:00:57 +0000 Manifest this update: Sat 06 Dec 2025 20:00:57 +0000 Manifest next update: Sun 07 Dec 2025 20:00:57 +0000 Files and hashes: 1: CsgX_khqx3vpTil6zjqVzyff-xo.crl (hash: 2fDipvQu6jzpqPTNWQwrnaBnUuoXAof8gZ2GDlgnlvk=) 2: rKgQI-w1UXNWfaL5RhIkWUF_FgI.roa (hash: hcJ9d+FGrXGqRkOgDTqfnuX4GbB1zYDVH1Gwhkt3mDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:d5:1d:24:60:71:df:55:5c:37:14:a8:dd:cc:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a Validity Not Before: Dec 6 20:00:57 2025 GMT Not After : Dec 7 20:00:57 2025 GMT Subject: CN=12a14f31fe06f7bc5704926d6262bb2542d7cd43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:74:f5:72:6d:0e:3e:96:c3:ff:35:6a:b0:4a: 1d:1d:72:8d:da:d8:f6:e8:1d:39:3d:c6:d4:31:99: ac:dc:df:82:c2:f6:9f:c0:1b:a1:92:c8:66:14:34: 66:87:07:63:25:ae:17:09:0a:31:e1:0a:32:51:8d: 03:e4:94:65:f5:a4:94:39:5c:14:43:e2:ff:40:9c: 55:93:c4:ba:18:16:c9:86:35:01:75:5c:a1:3f:dd: c2:25:ae:12:97:d8:97:3f:cf:38:4e:3e:c9:3b:4a: a5:3b:1e:2d:d1:81:7e:a0:ef:3a:84:9b:3b:d5:42: 20:7b:71:23:7f:13:09:ec:63:d0:51:c7:a6:34:41: e1:78:6a:b5:7d:09:9a:ed:99:f2:47:d0:18:f4:cc: 78:f3:07:8b:1e:23:fc:00:cc:04:33:05:ce:2e:00: 27:9a:98:05:2b:4c:ce:66:72:6b:5e:33:f1:37:3d: d5:0b:69:32:31:ad:52:75:01:be:d5:89:78:78:72: df:e5:93:97:03:ba:16:a8:8a:67:66:41:1f:a3:a2: 22:9f:57:49:2e:73:88:bf:93:52:da:94:d8:26:35: 83:96:dc:93:0e:1c:fb:be:2d:7e:be:e4:42:84:f3: 1b:9a:66:ab:a6:6e:0a:88:df:2b:27:60:86:19:d6: 10:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A1:4F:31:FE:06:F7:BC:57:04:92:6D:62:62:BB:25:42:D7:CD:43 X509v3 Authority Key Identifier: keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1c:80:a3:4a:5e:6c:1d:da:7d:2c:70:93:26:da:46:67:83: 44:7a:34:05:45:74:82:e0:c4:c3:bf:c5:71:c1:3a:a2:97:9b: 40:a4:dc:27:be:77:ca:1e:92:e2:05:0c:bf:3e:ca:7d:36:18: 44:15:08:4b:6a:09:2b:d4:d4:1b:63:1f:88:d3:0a:d1:05:dc: 8d:bc:15:06:7d:61:a4:4d:09:fd:db:a0:80:0a:e3:bc:46:df: 1e:19:21:9e:2d:dd:b5:8d:7a:c3:91:32:cd:af:d1:45:a8:36: af:8c:cc:c3:e4:35:73:0b:e3:6f:d8:2a:58:99:90:27:84:93: db:22:15:32:a3:67:00:d7:2a:d2:70:50:34:4b:d1:38:1e:66: c6:e8:39:31:45:82:d7:a9:b3:2c:e3:81:53:ea:08:18:d8:00: 8a:35:5b:c8:7b:ef:ac:d1:a0:37:fd:dc:6a:17:ea:a3:9a:51: 25:e2:1c:82:85:82:8e:31:8c:20:b5:f1:f7:0c:eb:cf:2d:6c: 95:40:58:ab:91:b1:af:30:74:ec:4a:4f:07:98:18:e9:e7:52: ee:70:47:16:fc:23:4e:89:40:7c:3b:d1:1f:24:64:a3:25:20: 51:f2:10:3e:43:59:0d:c9:9d:f2:50:1d:4b:8f:f5:72:ff:d1: ca:f1:d5:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QNUdJGBx31VcNxSo3cwkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYzgxN2ZlNDg2YWM3N2JlOTRlMjk3YWNlM2E5NWNmMjdk ZmZiMWEwHhcNMjUxMjA2MjAwMDU3WhcNMjUxMjA3MjAwMDU3WjAzMTEwLwYDVQQD EygxMmExNGYzMWZlMDZmN2JjNTcwNDkyNmQ2MjYyYmIyNTQyZDdjZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3T1cm0OPpbD/zVqsEodHXKN2tj2 6B05PcbUMZms3N+CwvafwBuhkshmFDRmhwdjJa4XCQox4QoyUY0D5JRl9aSUOVwU Q+L/QJxVk8S6GBbJhjUBdVyhP93CJa4Sl9iXP884Tj7JO0qlOx4t0YF+oO86hJs7 1UIge3EjfxMJ7GPQUcemNEHheGq1fQma7ZnyR9AY9Mx48weLHiP8AMwEMwXOLgAn mpgFK0zOZnJrXjPxNz3VC2kyMa1SdQG+1Yl4eHLf5ZOXA7oWqIpnZkEfo6Iin1dJ LnOIv5NS2pTYJjWDltyTDhz7vi1+vuRChPMbmmarpm4KiN8rJ2CGGdYQ8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKhTzH+Bve8VwSSbWJiuyVC181DMB8GA1UdIwQY MBaAFArIF/5Iasd76U4pes46lc8n3/saMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3NnWF9raHF4M3ZwVGlsNnpqcVZ6eWZmLXhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jMjUwOTgtZDdjOS00ZmE5LWEzYzEt ZDdmYzhjNWQwMGFhLzEvQ3NnWF9raHF4M3ZwVGlsNnpqcVZ6eWZmLXhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9jMjUwOTgtZDdjOS00ZmE5LWEzYzEtZDdmYzhjNWQwMGFh LzEvQ3NnWF9raHF4M3ZwVGlsNnpqcVZ6eWZmLXhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhyAo0pe bB3afSxwkybaRmeDRHo0BUV0guDEw7/FccE6opebQKTcJ753yh6S4gUMvz7KfTYY RBUIS2oJK9TUG2MfiNMK0QXcjbwVBn1hpE0J/duggArjvEbfHhkhni3dtY16w5Ey za/RRag2r4zMw+Q1cwvjb9gqWJmQJ4ST2yIVMqNnANcq0nBQNEvROB5mxug5MUWC 16mzLOOBU+oIGNgAijVbyHvvrNGgN/3cahfqo5pRJeIcgoWCjjGMILXx9wzrzy1s lUBYq5GxrzB07EpPB5gY6edS7nBHFvwjTolAfDvRHyRkoyUgUfIQPkNZDcmd8lAd S4/1cv/RyvHVbA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:52 2025 by rpki-client