This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json) Hash identifier: o3K+nDjouhdNIjtZDHbIfM7YYaCIB1D08uGwtoT3+Oo= Subject key identifier: AF:30:46:9C:F9:95:06:6B:47:2A:72:D1:E0:1F:24:82:7C:26:29:96 Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7 Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7 Certificate serial: 019B54866DD8094C85D45E33E5CBCAA4ACDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft Manifest number: 13D5 Signing time: Thu 25 Dec 2025 08:00:54 +0000 Manifest this update: Thu 25 Dec 2025 08:00:54 +0000 Manifest next update: Fri 26 Dec 2025 08:00:54 +0000 Files and hashes: 1: 4c8--QgXbx8QC_JFp2ao9vSi3cQ.roa (hash: 9rzljFXZsljfliBgRYCkXTC5VYqcqhOIMYMb68KvfKw=) 2: 8fw-hYkolDEKJ1ctrBbs1PHS39s.roa (hash: XMuARJljMXs1kizk5ea5ttatqj4ZMgxKjO1p6vsjrO8=) 3: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: q0LwhepgxiUP+X+WlvbsNVJhHRbN/MDZsvZP2/PO2DM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:6d:d8:09:4c:85:d4:5e:33:e5:cb:ca:a4:ac:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7 Validity Not Before: Dec 25 08:00:54 2025 GMT Not After : Dec 26 08:00:54 2025 GMT Subject: CN=af30469cf995066b472a72d1e01f24827c262996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c4:63:ae:fd:e5:ae:73:a4:a7:10:b6:0b:70: 63:5e:99:ad:99:c3:c5:b1:1c:24:ba:45:56:d9:91: 23:d1:4b:f4:11:2e:6c:35:f2:3e:a1:00:e4:6f:72: 3e:30:c0:bc:06:94:2c:4a:84:69:4c:e1:40:6f:0e: cc:65:a1:ea:6d:d3:6f:a4:7d:18:10:2b:60:79:fd: d1:2f:80:a3:cb:75:b1:7e:00:64:a7:ef:cb:37:8a: 50:fc:9a:7a:d1:ec:40:41:ea:b4:26:8c:e5:c6:fb: 06:92:cd:ee:79:24:c6:50:ab:25:97:7e:19:0a:e3: 54:9f:a1:43:7e:b1:ed:94:0e:1a:46:b9:7d:4a:12: 80:c3:11:08:80:a6:8b:7d:aa:4f:89:71:d3:9f:8f: 87:1a:e3:b9:7e:dc:d0:43:74:5d:1d:81:e7:64:a7: 0f:4d:f4:4a:bc:a4:01:d3:4d:77:93:c2:06:a1:31: 83:58:03:64:50:15:ec:5a:90:95:a6:cd:40:fe:eb: 34:61:a5:41:d3:ea:e8:53:11:da:8d:82:50:12:3e: 17:a9:fb:f1:4f:5a:15:bb:7b:de:e5:71:08:96:e9: 11:73:b8:5f:5a:ec:4b:69:e1:80:c8:89:d5:26:35: 41:36:eb:4f:8c:a1:cc:05:30:20:9a:70:c2:02:48: 86:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:30:46:9C:F9:95:06:6B:47:2A:72:D1:E0:1F:24:82:7C:26:29:96 X509v3 Authority Key Identifier: keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:60:2c:93:78:be:bd:bd:87:ec:7c:00:66:6e:79:da:40:2d: 87:48:af:3c:d9:66:16:a7:9b:7e:85:7b:a6:c1:92:87:0d:36: 9b:c3:b7:f0:9d:42:f2:ea:69:a4:dc:d7:7b:7d:cd:ae:5a:c5: 83:44:25:27:d9:67:eb:e0:25:37:8f:36:59:0e:46:f8:5b:47: 6f:7d:87:02:f0:44:6a:4e:78:0d:e1:46:3a:02:a9:f3:d7:01: 19:ed:29:7a:33:53:5a:7a:7b:da:82:46:24:87:36:0f:d6:f5: 65:d8:0d:39:8e:6a:1a:a1:08:bc:ca:4e:07:a9:c5:b2:08:58: e8:25:aa:37:7e:20:54:c8:cc:03:51:63:57:ab:e1:67:52:59: 7c:24:ee:bb:a8:9d:40:51:71:dd:d9:85:9f:9f:b1:f1:de:4c: 45:be:05:f3:d3:d7:7b:60:e5:93:44:6b:45:de:f3:1b:7a:89: 78:4f:80:92:84:3e:38:b5:81:d0:d3:81:53:54:fe:b0:0c:e9: 68:84:c5:13:f6:aa:41:11:d4:9a:cf:ab:bc:87:39:6f:9d:a2: ca:42:7a:4d:97:dd:25:95:a1:a8:9c:16:c8:6e:34:55:d6:e0: 54:38:4b:c9:03:9b:09:2b:49:fe:46:bd:80:8c:68:1e:4a:e4: 49:d3:89:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhm3YCUyF1F4z5cvKpKzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzk2OWNkYzBiNWZmMDlkMTk5YmNhNWRhZGRiOWFhYjUx MDQwZTcwHhcNMjUxMjI1MDgwMDU0WhcNMjUxMjI2MDgwMDU0WjAzMTEwLwYDVQQD EyhhZjMwNDY5Y2Y5OTUwNjZiNDcyYTcyZDFlMDFmMjQ4MjdjMjYyOTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMRjrv3lrnOkpxC2C3BjXpmtmcPF sRwkukVW2ZEj0Uv0ES5sNfI+oQDkb3I+MMC8BpQsSoRpTOFAbw7MZaHqbdNvpH0Y ECtgef3RL4Cjy3WxfgBkp+/LN4pQ/Jp60exAQeq0JozlxvsGks3ueSTGUKsll34Z CuNUn6FDfrHtlA4aRrl9ShKAwxEIgKaLfapPiXHTn4+HGuO5ftzQQ3RdHYHnZKcP TfRKvKQB0013k8IGoTGDWANkUBXsWpCVps1A/us0YaVB0+roUxHajYJQEj4Xqfvx T1oVu3ve5XEIlukRc7hfWuxLaeGAyInVJjVBNutPjKHMBTAgmnDCAkiG+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8wRpz5lQZrRypy0eAfJIJ8JimWMB8GA1UdIwQY MBaAFAs5ac3Atf8J0Zm8pdrduaq1EEDnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYt NmJiNGZlZTg1NzM1LzEvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYtNmJiNGZlZTg1NzM1 LzEvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2Ask3i+ vb2H7HwAZm552kAth0ivPNlmFqebfoV7psGShw02m8O38J1C8upppNzXe33NrlrF g0QlJ9ln6+AlN482WQ5G+FtHb32HAvBEak54DeFGOgKp89cBGe0pejNTWnp72oJG JIc2D9b1ZdgNOY5qGqEIvMpOB6nFsghY6CWqN34gVMjMA1FjV6vhZ1JZfCTuu6id QFFx3dmFn5+x8d5MRb4F89PXe2Dlk0RrRd7zG3qJeE+AkoQ+OLWB0NOBU1T+sAzp aITFE/aqQRHUms+rvIc5b52iykJ6TZfdJZWhqJwWyG40VdbgVDhLyQObCStJ/ka9 gIxoHkrkSdOJwA== -----END CERTIFICATE-----Generated at Thu Dec 25 12:31:54 2025 by rpki-client