This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft File: csKTdgpzQBjN0qB_HYvVTyffaAo.mft (raw, json) Hash identifier: aOLb1lDw9kMlaZrN1akxaOEMietCZ5UCZ7bcxt+3ifo= Subject key identifier: 9D:D3:E5:D5:97:A0:B7:DB:A9:A1:A5:3B:A4:A4:13:38:9D:0E:7F:66 Authority key identifier: 72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A Certificate issuer: /CN=72c293760a734018cdd2a07f1d8bd54f27df680a Certificate serial: 019AF42DF33BEB42A43ACFC63DDB96FB8E49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft Manifest number: 104F Signing time: Sat 06 Dec 2025 15:00:43 +0000 Manifest this update: Sat 06 Dec 2025 15:00:43 +0000 Manifest next update: Sun 07 Dec 2025 15:00:43 +0000 Files and hashes: 1: 1xdt--r7pLEFi9mXxf_8plnoO9U.roa (hash: uBNn/aL6HR9ZcIyFxzznkQDCk3CxgIi9L2wMoXNB7qk=) 2: csKTdgpzQBjN0qB_HYvVTyffaAo.crl (hash: JfbUPA9KS6XmrjmNExqWr0VaRxmBgknlNJiUc9/9bfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:f3:3b:eb:42:a4:3a:cf:c6:3d:db:96:fb:8e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72c293760a734018cdd2a07f1d8bd54f27df680a Validity Not Before: Dec 6 15:00:43 2025 GMT Not After : Dec 7 15:00:43 2025 GMT Subject: CN=9dd3e5d597a0b7dba9a1a53ba4a413389d0e7f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:af:c1:1e:ef:5c:ab:c5:c6:02:c2:eb:59:0b: c1:4a:33:cf:f7:d2:94:2b:b3:bb:43:63:1f:f4:f2: 3d:ea:99:5e:6f:ed:e1:2b:ff:12:1f:a0:3f:68:5f: a5:4f:c7:bd:0b:51:e2:a0:df:9e:b2:6b:c2:c8:7a: 7a:c7:ca:26:28:36:04:06:77:df:ea:8c:96:2f:bf: 19:71:f2:87:62:89:2f:21:60:f9:e9:13:f6:06:57: 87:83:7c:06:61:bc:1a:5b:f4:2e:55:7f:3b:24:31: 58:2d:bc:e0:d6:a5:4d:f4:a7:10:2d:17:e6:b1:32: c0:4f:97:da:6e:78:1b:93:31:32:fa:17:b1:e3:af: 5d:96:ae:94:00:b0:bc:14:83:81:b5:ac:6e:95:44: 6c:50:54:f8:5e:d4:eb:a2:53:fe:9f:62:1b:28:fb: 74:4b:c1:c3:15:fb:b5:3a:ae:8e:65:68:24:48:57: 7b:2e:8b:04:0f:ef:95:16:de:a8:44:03:19:de:49: 28:59:c7:98:37:55:6b:54:36:1e:9c:1e:fa:3e:cf: f7:26:40:5e:72:e6:9b:6d:14:3b:11:1e:3c:87:34: a8:0f:06:51:77:a0:c3:d5:22:1b:29:61:5c:8b:70: 18:b1:5d:b5:76:b3:44:f7:cb:0c:64:06:35:6c:07: 1e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D3:E5:D5:97:A0:B7:DB:A9:A1:A5:3B:A4:A4:13:38:9D:0E:7F:66 X509v3 Authority Key Identifier: keyid:72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:89:51:c0:14:38:2d:4f:05:12:72:f5:d1:dc:13:8b:c0:c7: 14:90:97:a9:25:b2:bc:80:4c:7a:10:1d:5f:7d:cf:db:8f:7a: 3d:f0:07:6c:46:81:24:0e:21:f0:6c:91:0e:0d:f8:32:ea:24: 70:21:f8:cf:f1:9b:b9:5a:dd:9d:e1:13:4a:52:3e:d3:fa:fa: cb:2e:b6:3f:3a:5d:b0:b8:14:3d:97:82:d2:4d:fe:73:57:4c: 67:39:ab:b6:27:09:4d:f5:3b:a1:07:5d:69:4f:f6:8d:85:3e: c0:03:57:81:c9:4b:45:3b:0c:0f:6f:70:c1:05:ed:01:f8:21: 0a:6b:e9:06:7a:81:e5:67:33:60:a7:f8:21:72:d9:76:1f:05: 7a:94:ba:24:b7:7b:e9:24:8b:a2:42:5b:77:3f:e3:37:1a:e6: 47:3d:1f:3f:18:ca:84:45:bd:d1:47:07:2f:1d:1b:59:7a:c4: c6:b7:0c:49:0c:ab:0e:2e:48:93:cf:2e:ad:76:cf:ac:27:80: b8:43:ca:c4:2b:68:35:50:e6:1c:48:2a:1b:26:f6:76:4a:06: 1f:ca:72:46:e6:07:8a:11:d3:e4:52:d7:55:49:ca:20:42:95: 78:03:47:20:cd:42:4a:fb:bb:e5:3b:95:fa:3d:74:5e:ac:ed: 5c:d3:e2:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LfM760KkOs/GPduW+45JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYzI5Mzc2MGE3MzQwMThjZGQyYTA3ZjFkOGJkNTRmMjdk ZjY4MGEwHhcNMjUxMjA2MTUwMDQzWhcNMjUxMjA3MTUwMDQzWjAzMTEwLwYDVQQD Eyg5ZGQzZTVkNTk3YTBiN2RiYTlhMWE1M2JhNGE0MTMzODlkMGU3ZjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6/BHu9cq8XGAsLrWQvBSjPP99KU K7O7Q2Mf9PI96pleb+3hK/8SH6A/aF+lT8e9C1HioN+esmvCyHp6x8omKDYEBnff 6oyWL78ZcfKHYokvIWD56RP2BleHg3wGYbwaW/QuVX87JDFYLbzg1qVN9KcQLRfm sTLAT5fabngbkzEy+hex469dlq6UALC8FIOBtaxulURsUFT4XtTrolP+n2IbKPt0 S8HDFfu1Oq6OZWgkSFd7LosED++VFt6oRAMZ3kkoWceYN1VrVDYenB76Ps/3JkBe cuabbRQ7ER48hzSoDwZRd6DD1SIbKWFci3AYsV21drNE98sMZAY1bAceGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3T5dWXoLfbqaGlO6SkEzidDn9mMB8GA1UdIwQY MBaAFHLCk3YKc0AYzdKgfx2L1U8n32gKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NLVGRncHpRQmpOMHFCX0hZdlZUeWZmYUFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80NGFhYzQtNDVmNC00ZDE5LThjMTUt MzYyM2I5YjUwZjk2LzEvY3NLVGRncHpRQmpOMHFCX0hZdlZUeWZmYUFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS80NGFhYzQtNDVmNC00ZDE5LThjMTUtMzYyM2I5YjUwZjk2 LzEvY3NLVGRncHpRQmpOMHFCX0hZdlZUeWZmYUFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIlRwBQ4 LU8FEnL10dwTi8DHFJCXqSWyvIBMehAdX33P2496PfAHbEaBJA4h8GyRDg34Muok cCH4z/GbuVrdneETSlI+0/r6yy62PzpdsLgUPZeC0k3+c1dMZzmrticJTfU7oQdd aU/2jYU+wANXgclLRTsMD29wwQXtAfghCmvpBnqB5WczYKf4IXLZdh8FepS6JLd7 6SSLokJbdz/jNxrmRz0fPxjKhEW90UcHLx0bWXrExrcMSQyrDi5Ik88urXbPrCeA uEPKxCtoNVDmHEgqGyb2dkoGH8pyRuYHihHT5FLXVUnKIEKVeANHIM1CSvu75TuV +j10XqztXNPiJA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:33:56 2025 by rpki-client