This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft File: CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json) Hash identifier: kkzLyCpp1XfWKfXdIuw3vgzZ59g0nDDjRh/9Sl6Xr3k= Subject key identifier: 1A:21:65:6C:D7:B8:38:0A:5F:2A:C6:A0:4B:ED:97:85:4A:B0:3D:09 Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40 Certificate issuer: /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840 Certificate serial: 019AF3890BF2AA5ECBF37A164E2965B37E03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 12:00:36 +0000 Manifest this update: Sat 06 Dec 2025 12:00:36 +0000 Manifest next update: Sun 07 Dec 2025 12:00:36 +0000 Files and hashes: 1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: Lhs9o2GaVro58ktx3KXwBExEeuu1/o96SKzsQ6vVwrI=) 2: QP38gNz3xco5qv5nlkhRVeJhNcc.roa (hash: iHHCmYPxx8nMI8Pl/VJqH9lchdWekUpYcRiMjWpeVhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:0b:f2:aa:5e:cb:f3:7a:16:4e:29:65:b3:7e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840 Validity Not Before: Dec 6 12:00:36 2025 GMT Not After : Dec 7 12:00:36 2025 GMT Subject: CN=1a21656cd7b8380a5f2ac6a04bed97854ab03d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:62:7f:10:9e:76:56:22:42:49:0a:67:d4:66: 48:8c:d5:09:aa:4d:48:7a:41:83:95:50:9e:b5:08: 31:5c:b3:e8:71:ba:6d:e4:42:94:90:77:45:b7:6a: 8d:9f:31:38:60:98:58:fd:63:af:67:1b:2a:7a:2a: 0a:97:80:0c:92:89:60:46:cb:8f:c8:b1:f7:96:f8: 6c:81:d0:fe:5f:a7:ae:49:e7:7d:d1:68:10:f0:b6: 46:c6:a0:0d:7e:a6:34:3c:f4:6d:b5:c3:8e:55:c0: cb:dc:c9:ab:22:15:20:2c:1e:fb:a9:ef:2f:b1:5a: 02:6a:46:41:c1:cd:0e:e2:d0:fc:da:4c:84:6f:48: b5:7b:84:c1:05:72:2d:cf:f7:d0:54:9b:6c:d5:9c: 5f:8d:4e:e7:43:34:1e:57:ff:30:44:7b:8b:96:79: 9a:38:0c:f0:08:13:8d:ac:f8:ba:a6:d9:ba:ae:ec: 84:dd:cf:2e:04:4f:56:d9:13:89:53:3d:53:cc:25: f1:9b:e1:e4:92:46:eb:66:c4:b6:ba:25:6a:08:39: 41:5c:e6:88:e1:d0:92:a2:98:df:fb:c3:3b:18:f5: a7:da:e5:fd:62:27:a2:df:b0:28:70:5a:6c:58:2a: 5c:d5:9d:9d:6c:49:4f:20:5f:3c:c0:20:5a:95:a9: b4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:21:65:6C:D7:B8:38:0A:5F:2A:C6:A0:4B:ED:97:85:4A:B0:3D:09 X509v3 Authority Key Identifier: keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2c:a8:e2:d6:3f:9d:9c:9e:ea:42:98:58:83:01:0e:9e:60: 57:9b:a6:d8:ac:5c:ad:17:d6:cc:4e:bb:a3:a5:65:d3:ec:80: d5:d6:66:8c:55:cf:42:0c:90:d3:cf:a8:90:fe:77:a1:79:75: ed:8e:49:8d:12:6c:d4:14:01:59:62:a3:b9:76:3d:35:64:11: 0a:e7:62:c5:3e:46:5c:84:10:5d:be:cb:e1:72:bf:8d:b7:b2: e3:c5:3e:48:05:d1:b0:60:44:2e:1d:ad:76:90:08:d5:f1:aa: 36:3d:6a:8d:3b:8e:0c:51:c2:1f:81:e8:6d:66:0d:54:44:56: 3b:67:44:35:2e:a8:00:86:b3:70:d8:e0:da:aa:ec:73:07:ab: e1:58:c4:b8:36:53:0d:29:f6:20:52:8d:8b:1f:af:a2:2a:a7: 84:a2:7d:25:5d:e8:e5:23:f3:d7:73:c2:f4:f7:81:52:5a:f8: 48:73:45:99:1d:3f:22:a0:c2:5f:f2:86:c7:04:e2:f7:03:22: 30:e4:e3:8a:14:2c:4f:61:79:63:a3:bf:cd:85:c7:c4:fd:02: 41:c4:f5:c9:47:42:99:81:58:8c:bf:37:72:0a:55:ff:1d:52: 43:48:ea:52:01:e1:78:83:bf:84:f8:b4:51:87:bd:07:a1:5d: b6:a8:6d:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQvyql7L83oWTills34DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYzE1NjVhNWY2YzRlNTRjYTJmMTlkMzY0NzU5YjZhMGVk NjE4NDAwHhcNMjUxMjA2MTIwMDM2WhcNMjUxMjA3MTIwMDM2WjAzMTEwLwYDVQQD EygxYTIxNjU2Y2Q3YjgzODBhNWYyYWM2YTA0YmVkOTc4NTRhYjAzZDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2J/EJ52ViJCSQpn1GZIjNUJqk1I ekGDlVCetQgxXLPocbpt5EKUkHdFt2qNnzE4YJhY/WOvZxsqeioKl4AMkolgRsuP yLH3lvhsgdD+X6euSed90WgQ8LZGxqANfqY0PPRttcOOVcDL3MmrIhUgLB77qe8v sVoCakZBwc0O4tD82kyEb0i1e4TBBXItz/fQVJts1ZxfjU7nQzQeV/8wRHuLlnma OAzwCBONrPi6ptm6ruyE3c8uBE9W2ROJUz1TzCXxm+HkkkbrZsS2uiVqCDlBXOaI 4dCSopjf+8M7GPWn2uX9Yiei37AocFpsWCpc1Z2dbElPIF88wCBalam0AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBohZWzXuDgKXyrGoEvtl4VKsD0JMB8GA1UdIwQY MBaAFArBVlpfbE5Uyi8Z02R1m2oO1hhAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3NGV1dsOXNUbFRLTHhuVFpIV2JhZzdXR0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZWRiMjItZmY0Ny00NjVmLTkwNjgt NWM0YTBlYjIwMTdmLzEvQ3NGV1dsOXNUbFRLTHhuVFpIV2JhZzdXR0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83ZWRiMjItZmY0Ny00NjVmLTkwNjgtNWM0YTBlYjIwMTdm LzEvQ3NGV1dsOXNUbFRLTHhuVFpIV2JhZzdXR0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCyo4tY/ nZye6kKYWIMBDp5gV5um2KxcrRfWzE67o6Vl0+yA1dZmjFXPQgyQ08+okP53oXl1 7Y5JjRJs1BQBWWKjuXY9NWQRCudixT5GXIQQXb7L4XK/jbey48U+SAXRsGBELh2t dpAI1fGqNj1qjTuODFHCH4HobWYNVERWO2dENS6oAIazcNjg2qrscwer4VjEuDZT DSn2IFKNix+voiqnhKJ9JV3o5SPz13PC9PeBUlr4SHNFmR0/IqDCX/KGxwTi9wMi MOTjihQsT2F5Y6O/zYXHxP0CQcT1yUdCmYFYjL83cgpV/x1SQ0jqUgHheIO/hPi0 UYe9B6Fdtqhtsg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:58:25 2025 by rpki-client