This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json) Hash identifier: nUAM8jDhjbwPnRTXEiUUn2PPN5DFwgZUDGUBeuXU94w= Subject key identifier: 11:AC:62:09:83:80:7B:19:E0:7E:B6:03:A0:FA:D2:E1:20:CE:6E:1F Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81 Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481 Certificate serial: 019B3E6CED714264A683632338EC5BC40ECF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft Manifest number: 060A Signing time: Sun 21 Dec 2025 01:01:24 +0000 Manifest this update: Sun 21 Dec 2025 01:01:24 +0000 Manifest next update: Mon 22 Dec 2025 01:01:24 +0000 Files and hashes: 1: AIqZOuJk6FdX-ARR52-tZ3pV5L8.roa (hash: UtG/CvZxoKdSqsgWu/Ntn0zvOecwyIkuE2hEquBOnL4=) 2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: aKR7PW5WWIcyotjwLY/1cxfKJ7+Xwm73ehmLITnzkzU=) 3: xytDSya4p2EgaXuzXHLS_THUKdo.roa (hash: ZRTiRpSuhaqocQiQr7gHeK4/PUG2E2ZO09HQMf9siGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:ed:71:42:64:a6:83:63:23:38:ec:5b:c4:0e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481 Validity Not Before: Dec 21 01:01:24 2025 GMT Not After : Dec 22 01:01:24 2025 GMT Subject: CN=11ac620983807b19e07eb603a0fad2e120ce6e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:df:9f:90:93:94:bc:e1:f1:0c:46:db:bd:3e: 2a:cc:07:88:70:15:49:9c:82:86:64:08:d3:55:fe: 39:cd:08:4f:d6:17:1d:3b:4e:8e:d2:8b:8e:2a:49: a1:6f:ff:bd:aa:48:34:76:45:b9:a6:02:3e:1f:03: be:0c:c3:1d:b0:b4:c5:ec:b0:4d:b1:30:2b:b7:e5: 4d:99:ad:49:3f:e0:15:86:c0:03:62:22:ca:cc:c2: 52:d4:bb:a1:c9:9a:70:62:5b:83:25:b6:01:72:d0: 8a:c6:51:18:ab:ef:b6:f2:87:a9:bb:62:72:13:8f: 9a:95:6b:ed:4b:70:91:81:26:84:9a:1e:8b:4b:6d: 60:35:23:ca:98:83:73:d5:dc:52:54:cc:1d:40:fd: d2:a9:fb:fa:46:b5:31:ba:65:a7:6a:15:d9:6d:a7: 04:6c:16:d3:4f:7e:ac:8b:3b:ba:c3:bf:20:de:a7: c3:1a:a9:72:bf:a9:9c:11:32:92:0a:61:69:76:7c: 2b:28:21:64:90:26:44:b5:1d:84:8c:31:bf:af:8f: 9f:68:3e:9f:93:f6:df:29:87:06:ea:21:02:14:f7: 9f:46:c0:88:01:3e:b4:c5:48:02:3f:61:92:5a:f5: 0d:ac:be:07:04:e9:16:3a:31:94:01:46:c8:1d:65: 0a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AC:62:09:83:80:7B:19:E0:7E:B6:03:A0:FA:D2:E1:20:CE:6E:1F X509v3 Authority Key Identifier: keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:73:e4:c6:48:5e:3c:a3:94:e7:19:8c:f5:46:5f:fd:a2:94: 63:3a:05:15:35:25:1b:f9:43:40:c7:f8:54:30:15:41:99:1f: 1b:d6:85:4e:41:78:28:52:5d:42:76:2a:a2:3b:52:40:52:eb: e5:0d:25:90:9f:42:0e:cb:8b:df:f2:35:96:cb:01:98:fd:e8: 70:cb:b8:13:71:c1:50:ee:cc:fc:7c:c5:7b:7d:19:52:77:6f: 26:7c:d5:71:0a:d0:a5:fb:f0:0a:cf:37:e1:03:42:ee:a2:83: 98:ed:20:d8:66:79:57:a7:7c:26:91:ad:7c:b8:b3:0c:3f:27: 5d:bf:49:8d:5a:8e:b7:bb:45:c3:78:e3:d7:6b:24:df:4c:6e: 26:4c:b2:3c:c8:a1:39:49:64:1c:5f:be:22:3d:22:41:c1:65: b9:05:2c:f5:7c:4b:95:4a:59:62:98:f3:f1:db:59:24:bd:4e: 2f:30:d5:7f:fc:91:0a:37:85:a3:5e:71:56:10:20:8d:4d:1e: 5d:87:d4:77:c5:55:d9:84:31:ea:92:c1:8f:69:18:b7:1a:76: 2f:76:00:f3:b5:8f:75:d8:b2:d2:17:ad:8f:c3:95:f3:d8:02: b6:ec:9e:86:fe:57:4c:14:ad:d8:d1:52:8a:68:01:60:40:53: d9:3e:70:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bO1xQmSmg2MjOOxbxA7PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyY2FlOTY1N2MyZDg0ZDEwMWFkODUwMGQ1ZDIzNmVhOGVi ODU0ODEwHhcNMjUxMjIxMDEwMTI0WhcNMjUxMjIyMDEwMTI0WjAzMTEwLwYDVQQD EygxMWFjNjIwOTgzODA3YjE5ZTA3ZWI2MDNhMGZhZDJlMTIwY2U2ZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9+fkJOUvOHxDEbbvT4qzAeIcBVJ nIKGZAjTVf45zQhP1hcdO06O0ouOKkmhb/+9qkg0dkW5pgI+HwO+DMMdsLTF7LBN sTArt+VNma1JP+AVhsADYiLKzMJS1LuhyZpwYluDJbYBctCKxlEYq++28oepu2Jy E4+alWvtS3CRgSaEmh6LS21gNSPKmINz1dxSVMwdQP3Sqfv6RrUxumWnahXZbacE bBbTT36sizu6w78g3qfDGqlyv6mcETKSCmFpdnwrKCFkkCZEtR2EjDG/r4+faD6f k/bfKYcG6iECFPefRsCIAT60xUgCP2GSWvUNrL4HBOkWOjGUAUbIHWUKpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGsYgmDgHsZ4H62A6D60uEgzm4fMB8GA1UdIwQY MBaAFHLK6WV8LYTRAa2FANXSNuqOuFSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTkt NGFlNWZmOWY0ZmM2LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTktNGFlNWZmOWY0ZmM2 LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXPkxkhe PKOU5xmM9UZf/aKUYzoFFTUlG/lDQMf4VDAVQZkfG9aFTkF4KFJdQnYqojtSQFLr 5Q0lkJ9CDsuL3/I1lssBmP3ocMu4E3HBUO7M/HzFe30ZUndvJnzVcQrQpfvwCs83 4QNC7qKDmO0g2GZ5V6d8JpGtfLizDD8nXb9JjVqOt7tFw3jj12sk30xuJkyyPMih OUlkHF++Ij0iQcFluQUs9XxLlUpZYpjz8dtZJL1OLzDVf/yRCjeFo15xVhAgjU0e XYfUd8VV2YQx6pLBj2kYtxp2L3YA87WPddiy0hetj8OV89gCtuyehv5XTBSt2NFS imgBYEBT2T5wUw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:01 2025 by rpki-client