This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft File: cZLyKnioBxsCo2Ko2zPo8_ct00g.mft (raw, json) Hash identifier: UCPceZWJLdrMWOKxYOH0z/7/bq1EVZNWqWiyIHu3D8s= Subject key identifier: 5E:5F:FC:30:D7:6B:EC:1A:E3:F4:FF:AC:19:2D:95:E1:37:F8:04:9A Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48 Certificate issuer: /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348 Certificate serial: 019B2F3090E37858752DDDFA8DDB38529EF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 02:01:10 +0000 Manifest this update: Thu 18 Dec 2025 02:01:10 +0000 Manifest next update: Fri 19 Dec 2025 02:01:10 +0000 Files and hashes: 1: cZLyKnioBxsCo2Ko2zPo8_ct00g.crl (hash: AnG0aYA8xmfCKf9F97UmyI2izQ1Quyz0ZOfXQovqm7Q=) 2: iySxd4tMbCEPkoMPKxUDu_5FR6M.roa (hash: aI0T28ewsgkic6wSWjP7Zq6jLamL49Y0wJiPkH5nxZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:90:e3:78:58:75:2d:dd:fa:8d:db:38:52:9e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348 Validity Not Before: Dec 18 02:01:10 2025 GMT Not After : Dec 19 02:01:10 2025 GMT Subject: CN=5e5ffc30d76bec1ae3f4ffac192d95e137f8049a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:f2:b0:e7:3e:f4:e7:9c:94:74:a3:49:14: d4:ad:96:51:ce:3d:82:f1:16:69:ff:f6:82:6b:20: f0:79:f7:ae:f6:68:70:ce:f4:99:33:c2:74:2e:f7: 82:3f:4e:93:a0:ab:92:61:8a:60:d1:64:d2:c9:e8: 5a:94:ad:d3:ac:af:b0:c8:2c:97:74:82:b1:ee:e3: 07:94:06:7a:a9:9b:ea:da:24:96:79:ba:8a:4f:4d: 7e:bb:73:f1:ec:b4:77:b0:96:65:eb:cd:6a:7d:a6: 28:9b:d0:55:d9:9b:bc:e1:10:d0:d8:c8:3f:0f:b7: 56:e5:ff:86:fb:12:10:b0:cd:3a:30:60:1a:12:a4: 19:10:a2:b3:d0:37:15:25:18:6a:44:3f:f3:0f:88: 2d:2e:9d:61:c4:9f:9d:9b:45:ac:84:ea:1a:5e:7b: 82:3f:21:fb:79:ea:fa:ee:4a:41:68:b2:de:ac:fb: 26:8d:c5:1c:4b:99:de:a0:c5:07:a8:e2:ef:34:b2: 0d:b0:c9:2a:41:e6:d3:6d:9c:26:92:61:6e:d3:9a: 2d:40:9a:4f:2b:41:6c:1f:63:97:c4:d3:05:cf:ae: 52:29:ab:7b:0a:24:74:1a:a7:c7:ab:6d:65:0f:9a: 6f:ac:24:d9:62:56:e5:f1:cc:04:12:e3:77:d8:e1: d1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5F:FC:30:D7:6B:EC:1A:E3:F4:FF:AC:19:2D:95:E1:37:F8:04:9A X509v3 Authority Key Identifier: keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:71:49:73:69:f8:57:2e:8a:a4:db:bf:80:f9:93:62:34:ee: cd:37:66:2f:6f:53:e8:82:85:8d:ff:8d:0d:aa:96:4b:14:8f: 59:cd:de:b0:7c:40:bf:c9:23:0a:4c:4d:73:e5:6a:51:7d:17: 8c:78:c5:19:30:c4:5b:7d:4f:ba:67:c6:9c:48:88:c6:e0:b0: 85:1e:45:9a:3e:06:f4:ee:9b:6f:1a:3c:ef:1b:60:f0:fa:60: 39:01:19:43:b2:99:a7:d9:1e:2d:48:6f:a9:df:0b:f4:cc:89: c4:04:bf:6a:9b:9f:12:4c:2d:e9:10:ef:e5:9f:82:be:22:61: f6:13:f9:fd:94:8e:46:1e:01:8a:6d:87:be:21:78:fa:79:6d: 65:a2:b7:a2:34:ff:fd:c6:3e:55:ae:e8:c9:6f:50:20:ab:c6: 1a:50:9d:cc:4b:47:b7:9a:16:39:dc:de:d7:96:6d:b4:5f:45: e8:6a:91:70:36:cd:09:52:26:c6:d6:c9:a8:c8:88:52:6d:46: 40:57:67:64:6e:7f:9b:49:e7:0b:67:78:fc:d8:78:8c:88:b2: f7:1b:d6:35:9b:6d:52:b8:8c:00:dd:1f:6c:1b:2a:f0:97:c1: 87:51:5c:04:32:f0:0a:d6:18:3e:fa:44:1f:3e:bc:d0:1a:b1: 14:37:0e:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMJDjeFh1Ld36jds4Up7wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOTJmMjJhNzhhODA3MWIwMmEzNjJhOGRiMzNlOGYzZjcy ZGQzNDgwHhcNMjUxMjE4MDIwMTEwWhcNMjUxMjE5MDIwMTEwWjAzMTEwLwYDVQQD Eyg1ZTVmZmMzMGQ3NmJlYzFhZTNmNGZmYWMxOTJkOTVlMTM3ZjgwNDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcPysOc+9OeclHSjSRTUrZZRzj2C 8RZp//aCayDwefeu9mhwzvSZM8J0LveCP06ToKuSYYpg0WTSyehalK3TrK+wyCyX dIKx7uMHlAZ6qZvq2iSWebqKT01+u3Px7LR3sJZl681qfaYom9BV2Zu84RDQ2Mg/ D7dW5f+G+xIQsM06MGAaEqQZEKKz0DcVJRhqRD/zD4gtLp1hxJ+dm0WshOoaXnuC PyH7eer67kpBaLLerPsmjcUcS5neoMUHqOLvNLINsMkqQebTbZwmkmFu05otQJpP K0FsH2OXxNMFz65SKat7CiR0GqfHq21lD5pvrCTZYlbl8cwEEuN32OHRBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5f/DDXa+wa4/T/rBktleE3+ASaMB8GA1UdIwQY MBaAFHGS8ip4qAcbAqNiqNsz6PP3LdNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1pMeUtuaW9CeHNDbzJLbzJ6UG84X2N0MDBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNzQ1M2QtOTZlYy00ZDRlLTlmM2Ut MGU4YmM4ZTgxMmVlLzEvY1pMeUtuaW9CeHNDbzJLbzJ6UG84X2N0MDBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mNzQ1M2QtOTZlYy00ZDRlLTlmM2UtMGU4YmM4ZTgxMmVl LzEvY1pMeUtuaW9CeHNDbzJLbzJ6UG84X2N0MDBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3FJc2n4 Vy6KpNu/gPmTYjTuzTdmL29T6IKFjf+NDaqWSxSPWc3esHxAv8kjCkxNc+VqUX0X jHjFGTDEW31PumfGnEiIxuCwhR5Fmj4G9O6bbxo87xtg8PpgOQEZQ7KZp9keLUhv qd8L9MyJxAS/apufEkwt6RDv5Z+CviJh9hP5/ZSORh4Bim2HviF4+nltZaK3ojT/ /cY+Va7oyW9QIKvGGlCdzEtHt5oWOdze15ZttF9F6GqRcDbNCVImxtbJqMiIUm1G QFdnZG5/m0nnC2d4/Nh4jIiy9xvWNZttUriMAN0fbBsq8JfBh1FcBDLwCtYYPvpE Hz680BqxFDcOAQ== -----END CERTIFICATE-----Generated at Thu Dec 18 05:47:46 2025 by rpki-client