This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft File: CZ05RkE90RFhtGx99q02Kpk41dQ.mft (raw, json) Hash identifier: sORl891RwBJE2yVA6os0cHGXQPshpPbzBxcH4D+TEzc= Subject key identifier: CE:01:92:A7:3D:02:9F:1D:D7:8B:94:02:08:FB:54:13:07:57:A1:B3 Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4 Certificate issuer: /CN=099d3946413dd11161b46c7df6ad362a9938d5d4 Certificate serial: 019AF19AC0DB265B06CA0333EBA268F4BB9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft Manifest number: 0531 Signing time: Sat 06 Dec 2025 03:00:42 +0000 Manifest this update: Sat 06 Dec 2025 03:00:42 +0000 Manifest next update: Sun 07 Dec 2025 03:00:42 +0000 Files and hashes: 1: 1-jvgd6RnvKghGloVJb1Iw3eDs48.roa (hash: B7s4SajlBd3EvNe+3zoLXiT8A5U0bChHVGW9zyQgNFY=) 2: CZ05RkE90RFhtGx99q02Kpk41dQ.crl (hash: ADsECczLS6LgMl8jhnKTpLxqKaZjaWhgxNqsxxTBfwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c0:db:26:5b:06:ca:03:33:eb:a2:68:f4:bb:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4 Validity Not Before: Dec 6 03:00:42 2025 GMT Not After : Dec 7 03:00:42 2025 GMT Subject: CN=ce0192a73d029f1dd78b940208fb54130757a1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5d:84:80:90:e4:6e:6b:e6:dc:33:e0:7e:52: e0:c2:a3:a5:24:67:58:4f:41:e6:0e:5d:07:70:76: 04:b1:dc:91:a8:e0:f9:03:da:f3:c7:ec:25:f1:4f: 8d:79:00:ee:d5:4d:81:33:ad:de:c0:33:d5:29:ba: 74:51:bb:cc:09:5e:73:38:5c:c1:80:b2:fa:89:60: b9:76:48:11:c3:54:a2:94:30:89:4a:21:84:76:aa: 26:8b:3a:c4:21:10:48:a9:84:56:e2:c4:ce:85:fb: 0b:be:61:86:da:22:b6:1a:e5:a9:bc:e7:47:d1:e4: 57:21:dd:9a:f9:26:04:ab:33:15:ef:3e:14:02:6d: d5:d9:52:77:92:97:b1:8b:33:f6:f4:52:6e:a7:0e: 02:bb:2b:f3:46:7d:d5:55:fe:dd:1f:ec:41:1c:21: c1:16:71:69:5f:fb:5d:55:1b:22:21:a6:61:b0:8e: ff:58:0d:c6:10:70:a6:9a:fc:19:a6:fa:b1:e3:d9: 60:ca:43:80:a2:f7:17:d6:4b:93:0a:60:1a:55:42: bb:61:ee:61:f8:de:83:16:3f:93:65:0f:a0:51:0a: 2a:da:e3:88:09:82:be:c8:a8:e2:4c:fc:c2:86:79: 66:b1:bd:8f:d5:38:cc:3f:a6:8c:47:a8:af:35:77: ce:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:01:92:A7:3D:02:9F:1D:D7:8B:94:02:08:FB:54:13:07:57:A1:B3 X509v3 Authority Key Identifier: keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:1d:ab:9b:9b:9e:43:f0:dc:eb:b5:b9:54:1b:3f:48:86:e7: 82:02:e5:1d:db:fd:60:c1:63:e6:08:07:ac:c0:0d:59:20:4e: 9e:b1:19:f4:72:e2:dd:dd:03:e2:dd:59:50:50:4c:f6:a6:f7: a4:68:2a:47:39:55:e7:89:74:80:53:e5:93:2d:4d:6f:06:43: 30:e0:4d:5a:04:8d:9a:96:5b:d8:0c:c8:01:89:db:c9:7b:e7: 25:e3:e6:47:31:bf:f0:5a:af:67:29:69:1e:d1:62:2a:5d:ca: 91:16:c5:35:f6:22:79:06:d6:fc:ca:a1:54:12:06:45:96:f2: 82:53:8c:1c:89:72:c0:9c:39:7b:fc:e0:bb:5e:95:6e:34:1c: 5f:de:62:ea:09:d5:81:7b:8d:25:f6:33:fd:4a:8f:0d:c9:2b: 9e:d4:41:e0:ea:da:58:8f:d9:ac:47:cb:a2:9a:40:0b:d2:ca: ae:c1:95:7a:29:46:31:a5:4c:92:b9:a5:6f:68:73:22:57:9a: 28:52:ff:eb:37:06:a0:7a:5e:b7:44:a9:c1:c6:57:79:aa:07: 97:fc:57:d5:50:cb:0f:8c:fd:5d:2e:b5:13:e9:ed:dc:41:a8: 37:ef:20:a4:7c:93:09:b8:b5:c8:a6:15:e9:6e:f1:0a:37:d0: 2a:2d:ed:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsDbJlsGygMz66Jo9LudMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWQzOTQ2NDEzZGQxMTE2MWI0NmM3ZGY2YWQzNjJhOTkz OGQ1ZDQwHhcNMjUxMjA2MDMwMDQyWhcNMjUxMjA3MDMwMDQyWjAzMTEwLwYDVQQD EyhjZTAxOTJhNzNkMDI5ZjFkZDc4Yjk0MDIwOGZiNTQxMzA3NTdhMWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5F2EgJDkbmvm3DPgflLgwqOlJGdY T0HmDl0HcHYEsdyRqOD5A9rzx+wl8U+NeQDu1U2BM63ewDPVKbp0UbvMCV5zOFzB gLL6iWC5dkgRw1SilDCJSiGEdqomizrEIRBIqYRW4sTOhfsLvmGG2iK2GuWpvOdH 0eRXId2a+SYEqzMV7z4UAm3V2VJ3kpexizP29FJupw4CuyvzRn3VVf7dH+xBHCHB FnFpX/tdVRsiIaZhsI7/WA3GEHCmmvwZpvqx49lgykOAovcX1kuTCmAaVUK7Ye5h +N6DFj+TZQ+gUQoq2uOICYK+yKjiTPzChnlmsb2P1TjMP6aMR6ivNXfOWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4Bkqc9Ap8d14uUAgj7VBMHV6GzMB8GA1UdIwQY MBaAFAmdOUZBPdERYbRsffatNiqZONXUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84NTY0NDMtYjhmYi00NzhlLTg3Yzkt Y2Y1MmFhOWQ2Y2NjLzEvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC84NTY0NDMtYjhmYi00NzhlLTg3YzktY2Y1MmFhOWQ2Y2Nj LzEvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATh2rm5ue Q/Dc67W5VBs/SIbnggLlHdv9YMFj5ggHrMANWSBOnrEZ9HLi3d0D4t1ZUFBM9qb3 pGgqRzlV54l0gFPlky1NbwZDMOBNWgSNmpZb2AzIAYnbyXvnJePmRzG/8FqvZylp HtFiKl3KkRbFNfYieQbW/MqhVBIGRZbyglOMHIlywJw5e/zgu16VbjQcX95i6gnV gXuNJfYz/UqPDckrntRB4OraWI/ZrEfLoppAC9LKrsGVeilGMaVMkrmlb2hzIlea KFL/6zcGoHpet0SpwcZXeaoHl/xX1VDLD4z9XS61E+nt3EGoN+8gpHyTCbi1yKYV 6W7xCjfQKi3t8g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:24 2025 by rpki-client