This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json) Hash identifier: mseqKEdw0AtkDupTaUupqanCucLLrvo6uMRJ6iMDOmQ= Subject key identifier: 1A:B9:62:FD:AF:A9:1D:D4:12:D0:E6:A2:0B:5E:67:03:40:F1:C6:32 Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20 Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820 Certificate serial: 019AF276B355353C82CB737BE2D314A90CA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:00:56 +0000 Manifest this update: Sat 06 Dec 2025 07:00:56 +0000 Manifest next update: Sun 07 Dec 2025 07:00:56 +0000 Files and hashes: 1: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: atFFSqNsKrr9OtqVmdekGgm0yY/rGpzMPqKsf1+IE/I=) 2: lRz2gnfLm7nHaNSGeuPC7z_h668.roa (hash: 8k0N7eTmOOHH9ozZI5M8UWNCcA5B8u1B/kuz2VrrXfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b3:55:35:3c:82:cb:73:7b:e2:d3:14:a9:0c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820 Validity Not Before: Dec 6 07:00:56 2025 GMT Not After : Dec 7 07:00:56 2025 GMT Subject: CN=1ab962fdafa91dd412d0e6a20b5e670340f1c632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:92:e9:ee:81:6e:d7:79:ea:17:3f:1b:66:a6: f5:4d:4f:3e:bd:5b:2b:c7:0f:92:7d:0f:cd:08:a8: 0f:67:b4:b2:90:00:fd:d4:33:bd:3d:20:3a:82:07: a8:f4:6a:47:b7:f8:6f:a1:c0:18:da:f9:42:86:3d: 4b:54:15:1d:6f:fe:f4:c2:e2:1e:0b:ec:c0:39:df: c8:e5:25:b2:46:96:d9:3d:de:ba:36:dc:35:56:50: 0e:48:e1:58:30:64:33:0b:33:a3:ac:6a:f7:54:f5: 45:47:22:21:87:a9:15:1a:af:d8:c2:cd:4c:29:3d: d2:a5:56:4f:f1:22:a4:20:82:ca:b1:47:70:62:ce: 29:7a:c9:58:43:bc:d2:99:35:04:8e:3b:7e:a1:96: 02:ee:98:aa:35:86:ad:9f:0d:40:ee:77:a2:7e:71: 29:46:05:53:ee:86:9c:bf:a3:90:f1:36:a3:fa:d3: 09:56:75:b8:60:05:45:da:18:dc:93:15:89:3f:a8: fe:ca:d1:46:4e:bd:23:9d:f6:a8:d2:f4:a4:66:9a: b2:00:43:73:8f:23:88:a2:ac:4c:45:47:ca:53:87: 7b:94:04:29:20:97:54:ac:de:7e:aa:5f:b1:41:bd: 1f:98:1f:2e:eb:21:9b:3a:b2:c5:96:5b:87:05:54: a6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B9:62:FD:AF:A9:1D:D4:12:D0:E6:A2:0B:5E:67:03:40:F1:C6:32 X509v3 Authority Key Identifier: keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:95:54:0c:fb:ee:ba:f3:19:ce:b1:2b:84:ea:9b:65:fa:ce: 8c:1f:96:d2:2b:33:2d:70:7d:42:74:55:19:bc:0b:95:93:3a: 4c:e2:7e:0c:16:a5:95:55:09:58:b2:1f:aa:9e:5a:07:a7:6b: 1c:a4:bd:d8:56:00:93:26:81:43:d9:d5:74:aa:0f:59:b4:74: e8:37:2e:25:c6:fc:03:30:f8:f6:e9:e1:60:d9:a3:4b:d3:0c: 48:32:db:47:29:81:5f:82:84:ec:a5:39:3a:95:c6:e4:d5:0e: 6d:b0:33:cd:50:a7:d7:bd:3f:ad:1d:23:9d:30:4b:ae:7a:ad: 3e:b6:c0:9d:92:e9:68:2b:4b:86:e5:bc:fe:47:5a:25:7b:ad: 18:77:76:71:1a:1b:4c:c4:a6:3a:c5:cb:9d:7c:c0:2d:b1:99: 8e:1f:57:a0:28:a6:6e:db:59:99:40:11:db:ec:a3:51:7f:6e: a0:f6:7b:5f:d5:ab:ec:bb:de:3e:38:30:d9:d0:6f:8b:c3:f3: 20:d6:14:b4:f8:ae:bc:1d:a1:55:3b:b2:b3:cb:aa:40:1b:13: 51:f0:13:32:4d:72:0b:e7:04:da:6f:dd:15:7b:97:69:7a:c0: 91:22:5c:86:35:78:d0:8b:0f:a2:be:86:86:59:6f:cc:97:22: d4:70:d2:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrNVNTyCy3N74tMUqQypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmM5OWNjMzM4ZjY5MmRhOGY4MWI3MTZiYWQ3OWQxYzlk N2M4MjAwHhcNMjUxMjA2MDcwMDU2WhcNMjUxMjA3MDcwMDU2WjAzMTEwLwYDVQQD EygxYWI5NjJmZGFmYTkxZGQ0MTJkMGU2YTIwYjVlNjcwMzQwZjFjNjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpLp7oFu13nqFz8bZqb1TU8+vVsr xw+SfQ/NCKgPZ7SykAD91DO9PSA6ggeo9GpHt/hvocAY2vlChj1LVBUdb/70wuIe C+zAOd/I5SWyRpbZPd66Ntw1VlAOSOFYMGQzCzOjrGr3VPVFRyIhh6kVGq/Yws1M KT3SpVZP8SKkIILKsUdwYs4peslYQ7zSmTUEjjt+oZYC7piqNYatnw1A7neifnEp RgVT7oacv6OQ8Taj+tMJVnW4YAVF2hjckxWJP6j+ytFGTr0jnfao0vSkZpqyAENz jyOIoqxMRUfKU4d7lAQpIJdUrN5+ql+xQb0fmB8u6yGbOrLFlluHBVSmUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBq5Yv2vqR3UEtDmogteZwNA8cYyMB8GA1UdIwQY MBaAFHEsmcwzj2ktqPgbcWutedHJ18ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1N5WnpET1BhUzJvLUJ0eGE2MTUwY25YeUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kOTVmMzItODIyYS00Y2ZlLTk4NTMt NGViZWY4ODg0Mzk2LzEvY1N5WnpET1BhUzJvLUJ0eGE2MTUwY25YeUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kOTVmMzItODIyYS00Y2ZlLTk4NTMtNGViZWY4ODg0Mzk2 LzEvY1N5WnpET1BhUzJvLUJ0eGE2MTUwY25YeUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5VUDPvu uvMZzrErhOqbZfrOjB+W0iszLXB9QnRVGbwLlZM6TOJ+DBallVUJWLIfqp5aB6dr HKS92FYAkyaBQ9nVdKoPWbR06DcuJcb8AzD49unhYNmjS9MMSDLbRymBX4KE7KU5 OpXG5NUObbAzzVCn170/rR0jnTBLrnqtPrbAnZLpaCtLhuW8/kdaJXutGHd2cRob TMSmOsXLnXzALbGZjh9XoCimbttZmUAR2+yjUX9uoPZ7X9Wr7LvePjgw2dBvi8Pz INYUtPiuvB2hVTuys8uqQBsTUfATMk1yC+cE2m/dFXuXaXrAkSJchjV40IsPor6G hllvzJci1HDSLA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:51 2025 by rpki-client