This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json) Hash identifier: POzsPrVpwOXgEsyQOxa1GOATx2dJ8l2ApZcTjf8glno= Subject key identifier: CB:C1:48:CC:2E:01:70:0A:FB:59:3A:43:3E:18:A4:CF:7F:8F:B8:14 Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86 Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786 Certificate serial: 019AF42E8D3C255FEBFA662D555919B06273 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft Manifest number: 057D Signing time: Sat 06 Dec 2025 15:01:22 +0000 Manifest this update: Sat 06 Dec 2025 15:01:22 +0000 Manifest next update: Sun 07 Dec 2025 15:01:22 +0000 Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: 6yyib9m7PzVQ9IDMZm+CCflCQqiQUKHiH0mvYtlZZMA=) 2: ayUSDw8mdGoHelr_2bHuT_Ht97M.roa (hash: gvA+DDKSQOPFRf0cxBqKQel7xs/RAWw3rOxPxkz9/ZY=) 3: i3ThCtdNGW1cjUxQLhhdn5p0rJI.roa (hash: GXqzqfOOBrl4UZP/OkbdiBzFUWkoVhn5KODt99i+lAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:8d:3c:25:5f:eb:fa:66:2d:55:59:19:b0:62:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099da06b80fa749068028b597be3e50e8b118786 Validity Not Before: Dec 6 15:01:22 2025 GMT Not After : Dec 7 15:01:22 2025 GMT Subject: CN=cbc148cc2e01700afb593a433e18a4cf7f8fb814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4a:d4:a9:0c:78:98:20:68:c2:fc:d5:f9:fd: 0e:56:d7:c4:29:b2:8a:1b:bc:5a:31:c2:6b:c2:18: fa:aa:4c:5b:9d:9e:5d:88:9b:22:3e:10:93:d6:6b: 7f:96:f4:f8:ab:ba:3d:d8:c5:9b:45:20:d1:70:8f: 03:9e:8f:84:61:36:8d:30:21:3b:f3:a6:c9:99:0e: 92:5d:fe:a3:80:88:2b:9b:de:ec:1e:7b:ff:dd:a0: 83:16:6e:60:2f:ad:f6:72:c3:92:79:01:6f:d1:8a: 1a:e5:ad:3a:c2:08:89:84:41:c5:e4:e3:02:a5:95: 71:94:70:e3:e5:30:a3:06:39:9a:fc:a7:72:49:df: 77:9d:82:b1:aa:5d:01:c4:81:8e:25:c4:2f:17:32: e4:f1:24:40:ba:70:4e:fe:67:bb:25:ca:ad:0a:15: 5f:aa:88:dc:c3:41:72:03:8a:15:55:4e:5f:2a:a0: c0:4d:d3:b5:0e:5c:e4:b7:2e:57:1b:f0:25:fc:37: c6:7c:fe:47:97:e2:76:2f:be:8d:58:3c:02:09:4e: 9d:01:9a:dd:98:7b:b5:a7:b0:d4:03:17:df:48:11: cb:a5:07:ba:33:4d:82:62:89:c0:be:8d:e3:f3:79: d4:6d:b3:76:29:b4:ae:41:6b:f1:f0:27:c4:df:f0: 4e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C1:48:CC:2E:01:70:0A:FB:59:3A:43:3E:18:A4:CF:7F:8F:B8:14 X509v3 Authority Key Identifier: keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e7:bd:4d:ba:f2:7c:25:b7:50:70:82:89:c2:7c:6c:3c:d7: 90:9a:cb:99:f6:e1:b8:bd:b7:57:3d:cd:c5:c4:bd:cd:38:1a: 0d:11:22:95:02:3a:a0:e9:4f:56:d3:e6:1b:21:43:f0:f3:bb: b9:85:8a:0e:8f:bc:32:51:53:c9:84:32:78:62:a3:92:f2:46: cc:25:b1:b9:bd:b2:fc:09:2d:86:db:0c:04:f1:c0:e1:fd:c1: f4:55:8e:96:96:c0:8b:b5:9d:cd:2f:92:0d:a8:00:a3:10:69: 9a:04:c1:c1:46:42:0b:bf:38:b1:33:f3:89:67:70:9d:1c:04: 79:eb:5c:e3:84:77:bd:7f:8c:6a:6a:64:3e:4b:37:55:e8:19: 5b:c0:43:89:c5:b8:ec:ca:20:a2:d3:59:4f:32:dc:08:e1:af: 57:ed:ff:ee:22:86:e9:de:db:f1:b8:a0:8e:4d:29:64:39:43: 3c:e0:e9:1a:29:05:54:3f:b1:29:67:f7:e3:63:61:1f:e1:7d: e5:32:2c:2f:c7:61:2d:46:d1:13:29:5a:e2:b7:c0:b4:9a:73: a8:90:de:de:11:e1:00:03:6b:77:9b:2c:f4:45:3d:f2:5e:89: ee:71:28:83:75:7b:3d:60:50:56:ae:28:10:1c:fc:ac:42:53: 3b:9b:88:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lo08JV/r+mYtVVkZsGJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWRhMDZiODBmYTc0OTA2ODAyOGI1OTdiZTNlNTBlOGIx MTg3ODYwHhcNMjUxMjA2MTUwMTIyWhcNMjUxMjA3MTUwMTIyWjAzMTEwLwYDVQQD EyhjYmMxNDhjYzJlMDE3MDBhZmI1OTNhNDMzZTE4YTRjZjdmOGZiODE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUrUqQx4mCBowvzV+f0OVtfEKbKK G7xaMcJrwhj6qkxbnZ5diJsiPhCT1mt/lvT4q7o92MWbRSDRcI8Dno+EYTaNMCE7 86bJmQ6SXf6jgIgrm97sHnv/3aCDFm5gL632csOSeQFv0Yoa5a06wgiJhEHF5OMC pZVxlHDj5TCjBjma/KdySd93nYKxql0BxIGOJcQvFzLk8SRAunBO/me7JcqtChVf qojcw0FyA4oVVU5fKqDATdO1Dlzkty5XG/Al/DfGfP5Hl+J2L76NWDwCCU6dAZrd mHu1p7DUAxffSBHLpQe6M02CYonAvo3j83nUbbN2KbSuQWvx8CfE3/BOPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvBSMwuAXAK+1k6Qz4YpM9/j7gUMB8GA1UdIwQY MBaAFAmdoGuA+nSQaAKLWXvj5Q6LEYeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUt MzFmY2M0NTU1NzVlLzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUtMzFmY2M0NTU1NzVl LzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIee9Tbry fCW3UHCCicJ8bDzXkJrLmfbhuL23Vz3NxcS9zTgaDREilQI6oOlPVtPmGyFD8PO7 uYWKDo+8MlFTyYQyeGKjkvJGzCWxub2y/AkthtsMBPHA4f3B9FWOlpbAi7WdzS+S DagAoxBpmgTBwUZCC784sTPziWdwnRwEeetc44R3vX+MampkPks3VegZW8BDicW4 7MogotNZTzLcCOGvV+3/7iKG6d7b8bigjk0pZDlDPODpGikFVD+xKWf342NhH+F9 5TIsL8dhLUbREyla4rfAtJpzqJDe3hHhAANrd5ss9EU98l6J7nEog3V7PWBQVq4o EBz8rEJTO5uI3g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:30 2025 by rpki-client