This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json) Hash identifier: 6FBTCBofH7OY0XBxlpaEtD4c9Jpw2gpBa1CvYzIOwMg= Subject key identifier: 98:A6:E0:AF:5E:D6:AE:C3:2D:9D:87:E7:FF:75:36:1B:6E:44:48:43 Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd Certificate serial: 019AF087E6DBE7C98BF265A53583357C7BC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft Manifest number: 1782 Signing time: Fri 05 Dec 2025 22:00:29 +0000 Manifest this update: Fri 05 Dec 2025 22:00:29 +0000 Manifest next update: Sat 06 Dec 2025 22:00:29 +0000 Files and hashes: 1: 1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa (hash: B3C32+APojLLpoq0P/3+v4OioF2SbZXBsRXy/mWXSxY=) 2: AqjmEKa_KPT9IwoGnFjP0jiJ6oM.roa (hash: XfS/oUTMWeZlyIQCw2CHPz1Yz8M9tUiaYOFg7dyhr+A=) 3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: H1TPSYohzhcOEamKhbyAgaMBf4x72HRBXqHGnJ/EGVk=) 4: ecf817WnJwsGfmatFeQyUhb3Llc.roa (hash: OXDEPH7uN3GYyUlwskriOcVgXTD3tnLi2wfgN52n2YQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:e6:db:e7:c9:8b:f2:65:a5:35:83:35:7c:7b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd Validity Not Before: Dec 5 22:00:29 2025 GMT Not After : Dec 6 22:00:29 2025 GMT Subject: CN=98a6e0af5ed6aec32d9d87e7ff75361b6e444843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:82:cb:b8:99:01:bc:79:b5:a5:76:d5:7f:f8: 2e:82:df:66:ac:f6:13:aa:60:b6:f6:3f:93:72:27: 0a:ca:61:05:8c:f5:bc:73:e1:15:0b:eb:24:ff:6c: 32:72:94:0d:6c:69:50:c2:8e:c4:72:10:a0:91:8d: f8:fb:b4:0b:b3:fb:d4:5b:28:5a:17:bd:cd:8e:52: 4a:3e:21:79:3f:7e:82:fa:4b:a4:8b:31:56:2b:4b: 5b:31:2f:45:42:d1:d5:66:1d:06:8b:df:b7:c7:b4: e6:c7:09:84:06:80:cf:5c:68:34:41:ca:30:32:bd: 0c:7c:22:dc:7d:e8:38:d5:3e:49:b1:27:3a:fb:2a: be:57:a8:12:b8:d1:b0:a1:f1:37:a6:0c:85:01:21: cf:75:f2:84:18:04:19:d4:80:13:e1:6e:0d:4f:7f: c3:8a:f9:55:eb:1e:44:e4:14:5f:0d:bb:9f:ac:12: f8:85:52:4b:fa:43:c8:d7:b9:29:6f:5d:3d:de:c9: 24:5c:f0:34:69:94:6f:f9:ba:46:6c:c6:6a:72:5d: 25:af:bf:ac:bb:44:cf:52:75:20:11:3d:7a:26:7b: 3b:05:e7:87:c4:8d:9e:7d:f6:8d:8f:74:13:73:02: c8:ee:d5:e8:ac:ed:33:ba:40:0b:ae:cc:6a:53:03: 3e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A6:E0:AF:5E:D6:AE:C3:2D:9D:87:E7:FF:75:36:1B:6E:44:48:43 X509v3 Authority Key Identifier: keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:5f:07:f7:d9:d2:46:d2:e0:d0:c2:29:91:58:ec:96:8a:c6: 7e:00:5c:a8:bc:9c:0d:09:c2:1e:8b:91:76:a5:aa:a8:36:87: 53:37:5f:0c:77:44:7b:e0:8f:d5:77:c4:04:0b:d9:18:6d:6d: 58:bb:78:74:4a:40:3e:33:c9:58:31:25:34:ef:2f:36:ba:6c: 84:1b:34:42:29:9a:81:7e:3e:ec:80:c6:3a:b4:8c:5f:b5:a0: bb:56:80:93:f1:7c:37:9a:0a:89:b0:5f:5a:00:92:25:69:8b: f1:4d:ae:62:04:4b:80:dc:84:2d:ca:d1:6f:e8:4d:df:a4:35: 2a:6e:d7:0e:5c:62:4a:a1:9d:16:0c:60:93:a0:c7:f6:e2:1a: 25:00:e4:ec:c4:98:95:9d:4f:4f:c2:6f:af:64:3e:5f:4f:4c: ea:14:2e:b2:4e:e3:5f:df:a0:3d:b8:71:ec:6d:bd:75:6f:13: 95:d0:83:91:2d:26:61:af:82:08:eb:d2:a9:d8:91:53:1a:cf: 56:92:19:b7:2b:c5:76:87:95:a8:6b:89:af:dd:ec:81:a9:aa: 90:fb:b8:95:3e:6f:95:5d:9e:1d:d2:8d:c5:6a:e2:db:d3:f6: 80:18:3d:16:e9:ef:68:69:d4:43:de:57:f9:9e:de:7e:17:62: 86:ac:88:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh+bb58mL8mWlNYM1fHvGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOTQ5YjQ3ZGYzMTNjYmFiOTQ1MmRhOThmY2M2Mzc2MDhh OTA5YmQwHhcNMjUxMjA1MjIwMDI5WhcNMjUxMjA2MjIwMDI5WjAzMTEwLwYDVQQD Eyg5OGE2ZTBhZjVlZDZhZWMzMmQ5ZDg3ZTdmZjc1MzYxYjZlNDQ0ODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ILLuJkBvHm1pXbVf/gugt9mrPYT qmC29j+TcicKymEFjPW8c+EVC+sk/2wycpQNbGlQwo7EchCgkY34+7QLs/vUWyha F73NjlJKPiF5P36C+kukizFWK0tbMS9FQtHVZh0Gi9+3x7TmxwmEBoDPXGg0Qcow Mr0MfCLcfeg41T5JsSc6+yq+V6gSuNGwofE3pgyFASHPdfKEGAQZ1IAT4W4NT3/D ivlV6x5E5BRfDbufrBL4hVJL+kPI17kpb1093skkXPA0aZRv+bpGbMZqcl0lr7+s u0TPUnUgET16Jns7BeeHxI2effaNj3QTcwLI7tXorO0zukALrsxqUwM+qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJim4K9e1q7DLZ2H5/91NhtuREhDMB8GA1UdIwQY MBaAFHGUm0ffMTy6uUUtqY/MY3YIqQm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgt MDA2NmY1NDFmYWVhLzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgtMDA2NmY1NDFmYWVh LzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZV8H99nS RtLg0MIpkVjslorGfgBcqLycDQnCHouRdqWqqDaHUzdfDHdEe+CP1XfEBAvZGG1t WLt4dEpAPjPJWDElNO8vNrpshBs0QimagX4+7IDGOrSMX7Wgu1aAk/F8N5oKibBf WgCSJWmL8U2uYgRLgNyELcrRb+hN36Q1Km7XDlxiSqGdFgxgk6DH9uIaJQDk7MSY lZ1PT8Jvr2Q+X09M6hQusk7jX9+gPbhx7G29dW8TldCDkS0mYa+CCOvSqdiRUxrP VpIZtyvFdoeVqGuJr93sgamqkPu4lT5vlV2eHdKNxWri29P2gBg9FunvaGnUQ95X +Z7efhdihqyI3A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:01 2025 by rpki-client