This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft File: c2spT5ZdrWQPnjU784-a8RkUeeo.mft (raw, json) Hash identifier: PKTmIeTVK1ZItSw38ttiPh3xtNqBSOnuGSRyfkv1NsY= Subject key identifier: D5:A5:72:CE:77:E0:3C:A5:3F:DE:AD:18:96:16:91:21:9C:07:50:28 Authority key identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA Certificate issuer: /CN=736b294f965dad640f9e353bf38f9af1191479ea Certificate serial: 019B2A7877427B02E4D623EEB3D233C9F8E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft Manifest number: 159B Signing time: Wed 17 Dec 2025 04:01:36 +0000 Manifest this update: Wed 17 Dec 2025 04:01:36 +0000 Manifest next update: Thu 18 Dec 2025 04:01:36 +0000 Files and hashes: 1: Pb8L9pbGV7NQfgKmcvhMk6D02_s.roa (hash: CoNWry2kYRJwo9FhSFsPeMR2m6gz3FAFYuGEKzEDx5w=) 2: c2spT5ZdrWQPnjU784-a8RkUeeo.crl (hash: XHcvqz3lFBvYYO1AMQ1SAI9hDnoeha+0Xlvl8xKei9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 04:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:78:77:42:7b:02:e4:d6:23:ee:b3:d2:33:c9:f8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=736b294f965dad640f9e353bf38f9af1191479ea Validity Not Before: Dec 17 04:01:36 2025 GMT Not After : Dec 18 04:01:36 2025 GMT Subject: CN=d5a572ce77e03ca53fdead18961691219c075028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0a:c3:a5:69:c2:9f:16:f4:c6:7a:15:df:08: 49:61:93:24:43:0f:75:64:d7:56:b7:4c:a7:67:b7: 6d:4a:ca:8c:26:74:af:9b:d1:1f:ee:5f:7d:0f:d6: 05:ef:b2:b2:98:1e:3a:f9:d8:24:87:c2:5d:cf:cc: a0:96:ec:10:c7:64:3c:64:15:88:0e:d3:98:48:e9: aa:5a:1b:32:f5:4e:55:72:21:37:d7:4a:46:90:c5: f8:ee:c5:eb:93:73:ca:d0:fb:bc:a5:85:63:de:a0: 76:c2:08:0c:84:79:66:0c:f6:74:46:8e:47:3c:7d: d7:46:33:bf:a0:bf:d9:75:43:a3:09:9c:17:b6:0c: 0c:49:c6:89:80:e3:02:5a:ed:af:53:fd:9c:8b:fb: d1:14:18:c5:c4:1b:84:c1:57:7b:1a:20:3f:03:2a: 06:be:0b:31:f8:5e:56:c3:41:dc:80:92:26:05:4e: a3:46:a0:f7:90:b1:8a:88:1b:af:af:ea:f5:59:f1: 6c:f3:13:91:63:7b:a6:ed:30:0b:f3:e4:a9:5c:2e: 00:c9:65:e5:ee:fc:1c:fe:9e:66:77:77:60:cc:8b: e1:fb:5c:21:4d:1c:4f:1e:92:76:af:65:fe:20:bd: af:82:cf:05:6b:23:cb:0e:15:8f:cb:76:05:11:b2: 2c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A5:72:CE:77:E0:3C:A5:3F:DE:AD:18:96:16:91:21:9C:07:50:28 X509v3 Authority Key Identifier: keyid:73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8b:fc:f3:f7:cf:6c:98:b0:44:c7:f2:7b:97:de:5e:bb:dc: 5a:33:ea:6c:8c:d3:f8:72:79:97:d9:be:5e:53:58:82:6b:07: ed:d4:8d:28:d3:0a:54:e3:9a:0d:1d:86:04:0a:f4:f8:bf:2e: af:54:08:8b:bc:40:44:a9:02:05:f9:a1:76:a0:69:12:aa:48: 45:26:26:5c:7b:5b:fc:da:96:f2:56:2e:e4:fc:40:b4:a2:4f: 90:57:a4:6e:6e:f9:e9:55:1f:53:f1:28:ce:76:ed:bd:a3:09: ab:8d:3c:31:e6:9c:cf:e3:fb:ee:d4:8b:4d:05:e3:f3:9c:5b: 7c:ed:96:e9:10:a0:5c:a0:bf:35:28:a7:98:b9:9a:27:0f:4b: 10:28:4d:71:ae:33:be:12:4b:53:e1:79:38:73:04:f8:5a:a6: d5:10:3a:c9:52:4e:9c:5f:87:1f:39:6a:a3:37:25:52:b6:00: 07:7a:e3:e9:a0:59:16:e3:90:3e:38:28:2e:28:e9:b1:dd:f5: af:ac:cc:b9:ed:0a:83:6b:b5:53:12:61:64:e3:b4:24:de:46: 5e:d8:01:1b:90:fb:40:86:9f:a4:b6:24:6b:d3:66:7d:6f:7b: 85:66:06:61:cc:86:c2:e0:18:5d:78:5b:36:7b:0c:80:ae:dc: c1:10:fc:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqeHdCewLk1iPus9IzyfjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNmIyOTRmOTY1ZGFkNjQwZjllMzUzYmYzOGY5YWYxMTkx NDc5ZWEwHhcNMjUxMjE3MDQwMTM2WhcNMjUxMjE4MDQwMTM2WjAzMTEwLwYDVQQD EyhkNWE1NzJjZTc3ZTAzY2E1M2ZkZWFkMTg5NjE2OTEyMTljMDc1MDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgrDpWnCnxb0xnoV3whJYZMkQw91 ZNdWt0ynZ7dtSsqMJnSvm9Ef7l99D9YF77KymB46+dgkh8Jdz8ygluwQx2Q8ZBWI DtOYSOmqWhsy9U5VciE310pGkMX47sXrk3PK0Pu8pYVj3qB2wggMhHlmDPZ0Ro5H PH3XRjO/oL/ZdUOjCZwXtgwMScaJgOMCWu2vU/2ci/vRFBjFxBuEwVd7GiA/AyoG vgsx+F5Ww0HcgJImBU6jRqD3kLGKiBuvr+r1WfFs8xORY3um7TAL8+SpXC4AyWXl 7vwc/p5md3dgzIvh+1whTRxPHpJ2r2X+IL2vgs8FayPLDhWPy3YFEbIsBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWlcs534DylP96tGJYWkSGcB1AoMB8GA1UdIwQY MBaAFHNrKU+WXa1kD541O/OPmvEZFHnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzJzcFQ1WmRyV1FQbmpVNzg0LWE4UmtVZWVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hNzFhNWMtMTc0Ni00M2M0LWE2N2Yt YThmNzZiZDI2YTI3LzEvYzJzcFQ1WmRyV1FQbmpVNzg0LWE4UmtVZWVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9hNzFhNWMtMTc0Ni00M2M0LWE2N2YtYThmNzZiZDI2YTI3 LzEvYzJzcFQ1WmRyV1FQbmpVNzg0LWE4UmtVZWVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYv88/fP bJiwRMfye5feXrvcWjPqbIzT+HJ5l9m+XlNYgmsH7dSNKNMKVOOaDR2GBAr0+L8u r1QIi7xARKkCBfmhdqBpEqpIRSYmXHtb/NqW8lYu5PxAtKJPkFekbm756VUfU/Eo znbtvaMJq408Meacz+P77tSLTQXj85xbfO2W6RCgXKC/NSinmLmaJw9LEChNca4z vhJLU+F5OHME+Fqm1RA6yVJOnF+HHzlqozclUrYAB3rj6aBZFuOQPjgoLijpsd31 r6zMue0Kg2u1UxJhZOO0JN5GXtgBG5D7QIafpLYka9NmfW97hWYGYcyGwuAYXXhb NnsMgK7cwRD8Kg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:42:24 2025 by rpki-client