This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json) Hash identifier: QX/Clnh1Am5GKNHZArqaXnNtOZGO27wyJXRWXpo6mqA= Subject key identifier: CD:72:62:A7:B1:87:31:DA:93:EA:7E:D2:F6:DF:C2:7F:F4:05:A7:4A Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20 Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320 Certificate serial: 019B3DC791985CAA5EF5769DB8C0CB034FF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft Manifest number: 1476 Signing time: Sat 20 Dec 2025 22:00:47 +0000 Manifest this update: Sat 20 Dec 2025 22:00:47 +0000 Manifest next update: Sun 21 Dec 2025 22:00:47 +0000 Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: 8z9PMDHSXVoJR5GV4VugyunuE4ChX8NNJR+pV6D+Oe8=) 2: GpM90An4j0aWnAQVOPwoRVNatnk.roa (hash: MKIleZe0XP5Hk0DTuIZD6iDzaTxtrUWEQu34eF8ZBrE=) 3: QRwZwj-EtgWsWtGLyP94z8eYhbY.roa (hash: XsWkHritSLVCWhTRPolIJOQ4NjLpOalWZgwmSQSOCg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:91:98:5c:aa:5e:f5:76:9d:b8:c0:cb:03:4f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320 Validity Not Before: Dec 20 22:00:47 2025 GMT Not After : Dec 21 22:00:47 2025 GMT Subject: CN=cd7262a7b18731da93ea7ed2f6dfc27ff405a74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0f:44:61:7f:fc:43:cb:43:ca:0c:ef:1c:1b: f7:23:e6:b1:f1:c5:2e:65:54:35:3d:d0:ea:ea:88: 85:28:9e:4e:26:98:ae:9c:ac:cf:5e:b3:e5:83:78: e5:f1:90:af:72:ef:bc:34:c5:b3:45:ce:d9:62:26: 09:dd:ab:0d:ec:d8:46:25:c8:76:1a:b5:9e:70:9f: 57:cc:41:83:a0:53:ef:55:71:b7:00:44:63:ff:80: 3d:a7:26:12:a8:5d:7b:02:89:5b:95:f9:8f:ae:68: e0:f4:7e:77:d8:32:9e:bc:f3:c1:2c:29:16:ee:68: ec:ae:4e:06:a4:d6:18:98:09:6c:1c:78:a3:c8:4b: 4d:8d:52:39:b1:cb:5b:73:38:74:3d:58:4d:94:d9: f2:cf:a9:66:69:e7:f2:20:80:27:77:fd:70:9f:60: 1e:33:8e:b6:bc:91:c7:19:bc:61:87:0e:75:69:cc: 54:82:0b:8e:2c:e5:d8:1e:02:1b:fd:dc:86:a9:ab: b9:ff:e5:18:b5:0c:88:c8:0b:2a:8e:ca:88:8c:48: 7b:ee:18:9c:0e:85:a1:aa:ec:e8:d7:b0:51:42:0e: c3:79:1b:b2:0b:d5:7f:16:fe:af:8d:8f:f0:65:23: e6:b1:f2:11:e8:85:02:20:2b:29:51:11:3b:c7:22: 21:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:72:62:A7:B1:87:31:DA:93:EA:7E:D2:F6:DF:C2:7F:F4:05:A7:4A X509v3 Authority Key Identifier: keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:9b:14:56:70:21:93:de:2e:b7:6a:b4:44:39:b9:15:08:bf: 29:ef:19:a6:79:18:ce:9e:4f:f8:2e:80:b0:1b:2f:f1:28:09: 90:3c:8f:22:6c:64:bd:38:b3:39:8d:28:c0:9f:ad:a7:43:23: d9:7a:18:db:64:1e:7d:98:71:58:79:f6:a3:3a:83:f9:2f:ef: 63:18:ce:38:19:2d:aa:48:5c:ce:df:90:b1:be:2c:d6:fc:9c: 39:87:bd:89:7b:a2:6d:eb:22:4f:e5:e5:f1:92:58:06:f8:36: 19:db:60:cd:4e:67:0e:56:c2:d9:eb:48:d2:db:6e:fa:66:cd: 9f:a2:86:f5:34:6b:6d:2b:62:3b:d8:1d:75:6c:da:9d:84:94: 4a:0d:7b:0a:e6:56:26:e4:3d:9e:7b:47:c8:be:31:e1:a3:44: d3:b8:eb:f9:d2:68:5c:a3:38:e2:4e:0b:be:1e:f6:e6:ca:8a: 35:7c:de:b7:de:69:ce:49:9f:c4:f8:d0:48:39:35:aa:b2:e2: 2c:2c:b6:46:98:f3:19:b9:d3:82:f6:3e:a6:9b:9f:fa:fa:bd: a9:8b:22:76:9d:16:21:1b:38:ac:fa:bd:e1:5e:03:2f:95:d4: 43:3a:ed:c3:8c:63:4a:89:6a:20:f4:34:e0:18:bb:fd:11:1e: 77:a6:b2:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x5GYXKpe9XaduMDLA0/xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZGNmNjJjNmI1NDExMTM5YTVkMTMwOWRkOWVkOTI2ZjQz MTQzMjAwHhcNMjUxMjIwMjIwMDQ3WhcNMjUxMjIxMjIwMDQ3WjAzMTEwLwYDVQQD EyhjZDcyNjJhN2IxODczMWRhOTNlYTdlZDJmNmRmYzI3ZmY0MDVhNzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ9EYX/8Q8tDygzvHBv3I+ax8cUu ZVQ1PdDq6oiFKJ5OJpiunKzPXrPlg3jl8ZCvcu+8NMWzRc7ZYiYJ3asN7NhGJch2 GrWecJ9XzEGDoFPvVXG3AERj/4A9pyYSqF17AolblfmPrmjg9H532DKevPPBLCkW 7mjsrk4GpNYYmAlsHHijyEtNjVI5sctbczh0PVhNlNnyz6lmaefyIIAnd/1wn2Ae M462vJHHGbxhhw51acxUgguOLOXYHgIb/dyGqau5/+UYtQyIyAsqjsqIjEh77hic DoWhquzo17BRQg7DeRuyC9V/Fv6vjY/wZSPmsfIR6IUCICspURE7xyIhjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1yYqexhzHak+p+0vbfwn/0BadKMB8GA1UdIwQY MBaAFArc9ixrVBETml0TCd2e2Sb0MUMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYzg0M2UtNjBjNy00N2FjLTgyM2It ZjhkNmJkMzBjYzE5LzEvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYzg0M2UtNjBjNy00N2FjLTgyM2ItZjhkNmJkMzBjYzE5 LzEvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5sUVnAh k94ut2q0RDm5FQi/Ke8ZpnkYzp5P+C6AsBsv8SgJkDyPImxkvTizOY0owJ+tp0Mj 2XoY22QefZhxWHn2ozqD+S/vYxjOOBktqkhczt+Qsb4s1vycOYe9iXuibesiT+Xl 8ZJYBvg2GdtgzU5nDlbC2etI0ttu+mbNn6KG9TRrbStiO9gddWzanYSUSg17CuZW JuQ9nntHyL4x4aNE07jr+dJoXKM44k4Lvh725sqKNXzet95pzkmfxPjQSDk1qrLi LCy2RpjzGbnTgvY+ppuf+vq9qYsidp0WIRs4rPq94V4DL5XUQzrtw4xjSolqIPQ0 4Bi7/REed6ayIw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:03:48 2025 by rpki-client