This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json) Hash identifier: oXrSahsiOzY7xd9qCD/jeCLPlgSRiQo41o5WVilM6ZE= Subject key identifier: FF:67:C2:3B:31:FF:DE:AC:7B:0B:B9:A4:32:F7:88:91:7E:53:0F:3B Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81 Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481 Certificate serial: 019B405C3284352377A724D6BF57FB33C02B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft Manifest number: 060B Signing time: Sun 21 Dec 2025 10:02:22 +0000 Manifest this update: Sun 21 Dec 2025 10:02:22 +0000 Manifest next update: Mon 22 Dec 2025 10:02:22 +0000 Files and hashes: 1: AIqZOuJk6FdX-ARR52-tZ3pV5L8.roa (hash: UtG/CvZxoKdSqsgWu/Ntn0zvOecwyIkuE2hEquBOnL4=) 2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: FtPE5op+fmuclErnYN2RmkL2we/B6EzqrS48Zor2syM=) 3: xytDSya4p2EgaXuzXHLS_THUKdo.roa (hash: ZRTiRpSuhaqocQiQr7gHeK4/PUG2E2ZO09HQMf9siGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:32:84:35:23:77:a7:24:d6:bf:57:fb:33:c0:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481 Validity Not Before: Dec 21 10:02:22 2025 GMT Not After : Dec 22 10:02:22 2025 GMT Subject: CN=ff67c23b31ffdeac7b0bb9a432f788917e530f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:3f:a5:f0:d5:6e:18:97:95:f7:91:6a:b4: 9e:47:2b:82:c1:3e:df:4e:06:8e:63:1f:af:fd:18: c9:12:61:62:aa:40:9a:d2:81:78:83:b9:15:78:21: db:45:af:cd:bc:c5:0b:ee:af:4e:c1:b2:11:0b:6e: bd:d7:50:fc:8c:91:6b:39:b1:5e:e3:fc:59:cd:65: d1:0c:0a:82:f6:a1:b6:c6:b2:88:35:63:ec:26:07: bc:19:1a:d1:8b:64:be:a4:77:23:ae:01:a5:89:0b: a2:95:95:3f:a4:fc:ec:aa:ba:2f:60:e8:d2:7b:b1: fc:c1:7c:98:45:3e:a6:a8:49:c9:d2:6f:27:80:72: 94:11:56:60:01:59:e3:69:05:29:5b:aa:d3:4d:d7: 64:d8:7c:3f:bf:d2:55:74:ba:ca:a0:ce:c6:b7:15: ad:e5:d4:ff:a5:96:91:6b:c7:94:21:b7:18:46:f0: 24:44:d8:71:3a:d4:08:86:85:20:11:bf:30:01:d8: c4:9c:7f:ce:b3:70:a4:81:f4:88:fd:7b:a7:08:31: 2e:52:43:af:6a:55:b6:f6:1d:c7:ce:63:6c:6c:cd: 1c:ed:de:e8:00:2b:d7:02:15:65:cc:f4:c3:3b:15: f1:96:f7:f8:14:2a:2e:77:e8:bf:d9:77:7b:f2:eb: 8f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:67:C2:3B:31:FF:DE:AC:7B:0B:B9:A4:32:F7:88:91:7E:53:0F:3B X509v3 Authority Key Identifier: keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:92:96:f5:15:c3:05:87:2f:9b:81:af:b6:ec:59:8f:dd:24: 45:8f:2e:90:b1:68:14:4d:75:ab:f8:ce:eb:1a:67:58:58:3d: 9a:d0:d8:b0:42:03:1e:72:1c:22:73:b1:a6:fb:32:47:33:71: b5:b3:19:7f:28:a7:94:1a:e5:80:11:5b:d1:6e:e1:4f:aa:c9: 97:cc:64:a1:4d:d9:02:db:a9:3d:48:33:2c:5e:ba:10:87:2a: 28:6b:3c:e7:f2:45:71:54:70:3d:31:b2:d0:f2:90:45:42:09: c3:ad:21:4d:e6:97:9b:89:c0:11:66:cc:bf:a2:6b:85:63:6f: 98:2f:48:bd:88:2b:6a:02:5c:8a:3e:b3:f5:b0:20:2d:df:6f: 77:53:4f:44:af:39:8e:69:8c:27:21:29:2e:74:e3:2a:0a:9f: df:ae:29:dc:5f:19:2d:d4:c8:36:37:b8:72:5d:25:f8:dc:d5: a2:5c:20:95:fb:98:77:dc:fd:c3:ce:97:32:09:32:ad:50:00: fb:b6:cf:6f:6a:f3:a3:54:c1:05:f2:c6:d0:be:40:36:73:ad: d4:65:ed:79:71:3f:c5:28:37:3b:5f:0e:9c:e1:74:45:9e:09: fe:c3:c9:6b:7b:d5:70:f6:e1:bb:2e:85:2f:90:23:2f:a9:f3: 16:77:19:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXDKENSN3pyTWv1f7M8ArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyY2FlOTY1N2MyZDg0ZDEwMWFkODUwMGQ1ZDIzNmVhOGVi ODU0ODEwHhcNMjUxMjIxMTAwMjIyWhcNMjUxMjIyMTAwMjIyWjAzMTEwLwYDVQQD EyhmZjY3YzIzYjMxZmZkZWFjN2IwYmI5YTQzMmY3ODg5MTdlNTMwZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz8/pfDVbhiXlfeRarSeRyuCwT7f TgaOYx+v/RjJEmFiqkCa0oF4g7kVeCHbRa/NvMUL7q9OwbIRC26911D8jJFrObFe 4/xZzWXRDAqC9qG2xrKINWPsJge8GRrRi2S+pHcjrgGliQuilZU/pPzsqrovYOjS e7H8wXyYRT6mqEnJ0m8ngHKUEVZgAVnjaQUpW6rTTddk2Hw/v9JVdLrKoM7GtxWt 5dT/pZaRa8eUIbcYRvAkRNhxOtQIhoUgEb8wAdjEnH/Os3CkgfSI/XunCDEuUkOv alW29h3HzmNsbM0c7d7oACvXAhVlzPTDOxXxlvf4FCoud+i/2Xd78uuPlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9nwjsx/96sewu5pDL3iJF+Uw87MB8GA1UdIwQY MBaAFHLK6WV8LYTRAa2FANXSNuqOuFSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTkt NGFlNWZmOWY0ZmM2LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTktNGFlNWZmOWY0ZmM2 LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZKW9RXD BYcvm4GvtuxZj90kRY8ukLFoFE11q/jO6xpnWFg9mtDYsEIDHnIcInOxpvsyRzNx tbMZfyinlBrlgBFb0W7hT6rJl8xkoU3ZAtupPUgzLF66EIcqKGs85/JFcVRwPTGy 0PKQRUIJw60hTeaXm4nAEWbMv6JrhWNvmC9IvYgragJcij6z9bAgLd9vd1NPRK85 jmmMJyEpLnTjKgqf364p3F8ZLdTINje4cl0l+NzVolwglfuYd9z9w86XMgkyrVAA +7bPb2rzo1TBBfLG0L5ANnOt1GXteXE/xSg3O18OnOF0RZ4J/sPJa3vVcPbhuy6F L5AjL6nzFncZow== -----END CERTIFICATE-----Generated at Sun Dec 21 15:50:02 2025 by rpki-client