This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json) Hash identifier: jdWl6qOhMt+8+9/knGKY15z5i05lKDnExBT0X7svtt8= Subject key identifier: 7C:A5:1A:EB:F4:6C:02:7C:0E:95:F5:D2:35:96:7F:D0:CB:B4:85:1C Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e Certificate serial: 019B6C8E870F14EF93952EB281C0DB3BFE42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft Manifest number: 17A1 Signing time: Tue 30 Dec 2025 00:00:38 +0000 Manifest this update: Tue 30 Dec 2025 00:00:38 +0000 Manifest next update: Wed 31 Dec 2025 00:00:38 +0000 Files and hashes: 1: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: PPeT32Ix/hhVcuVY1JPcA2ITGaowVtgcDi+3llXPjKI=) 2: fDOjbGC7SXuBR1WvGEj8iP8Gi68.roa (hash: hI6uFXxiWou3BV634T4h3OJSDdh6qUObBj238tGqfTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:8e:87:0f:14:ef:93:95:2e:b2:81:c0:db:3b:fe:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e Validity Not Before: Dec 30 00:00:38 2025 GMT Not After : Dec 31 00:00:38 2025 GMT Subject: CN=7ca51aebf46c027c0e95f5d235967fd0cbb4851c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c8:3c:55:7c:88:fa:db:7b:60:8e:aa:01:27: f7:42:45:40:3b:b3:61:56:75:d6:0e:c6:8b:fd:c1: cc:ee:6a:a9:e6:e2:0c:24:9e:b9:16:d6:fc:90:f1: cb:61:c9:1d:cf:2a:ec:c8:72:23:75:3f:53:53:b4: 4e:d8:83:34:f2:eb:22:5d:ad:8b:88:f3:1e:e2:0e: 49:16:42:72:01:de:45:3c:e3:67:05:48:6a:90:67: 3b:13:42:fc:ca:46:24:3e:a1:88:52:08:68:d8:bb: 69:32:a0:8f:95:72:4c:fd:a7:81:46:94:af:02:c4: cc:c2:a1:16:b2:eb:ff:8c:ed:8a:3a:1f:d0:fb:ee: 86:4d:9f:4a:e2:1e:f8:0c:fc:e0:fe:21:9d:aa:ef: a0:5d:37:59:38:cc:67:c5:c5:26:ff:76:df:81:1a: 4e:02:d0:86:f5:1c:7d:68:57:a6:07:21:a9:2f:9c: 55:f2:e0:48:45:71:ac:8a:e2:62:88:73:aa:c8:b6: a3:9c:16:f7:d2:fc:5c:62:3c:9d:23:3a:f9:b1:48: b4:a6:d0:eb:8f:ce:d7:df:80:9a:00:cf:26:65:ee: 6e:4c:2a:b8:0a:43:38:57:3d:41:b7:ba:5d:bc:0c: 44:1e:b3:d1:34:48:fe:18:55:33:e3:72:94:f9:b7: f4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A5:1A:EB:F4:6C:02:7C:0E:95:F5:D2:35:96:7F:D0:CB:B4:85:1C X509v3 Authority Key Identifier: keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:69:62:4f:30:b6:66:16:74:e2:b4:a6:9c:d7:05:56:72:96: 7a:e9:cd:b4:89:0d:69:7f:ca:50:2e:42:7e:19:5f:70:a5:bd: 99:51:f5:bb:cb:55:4e:93:cc:4e:75:bf:13:7d:cb:5f:be:fa: 59:d3:7b:81:01:6d:a3:f0:d1:54:85:4b:fb:74:2e:7e:ab:59: 88:8c:20:da:a4:e5:a6:84:65:49:59:a0:5d:bd:74:e4:91:e7: 13:19:eb:f7:4c:a9:c1:2f:8f:34:0b:4c:9a:37:ae:b8:1f:bc: 98:be:6f:7e:35:59:7a:61:a4:ce:f7:8e:ba:d2:e2:a1:39:f7: c3:97:9d:96:fc:f5:2e:85:e5:b7:e8:78:b6:1f:41:95:19:23: c7:75:ca:69:08:a3:ac:89:10:26:e7:25:03:7b:75:69:3a:a1: 00:25:8e:fc:04:4d:97:b6:6d:eb:be:fa:f1:b3:8d:19:60:a5: ec:f6:5d:50:52:e5:71:f9:11:34:7d:93:ec:1f:41:8d:87:ed: ab:4f:f6:f3:aa:76:89:9f:63:49:b6:23:98:b7:01:16:eb:ec: 95:c5:c2:37:ad:de:9b:70:14:5f:8e:0f:68:12:50:67:f7:cc: ff:1d:14:5b:07:d7:29:98:e4:dd:39:e5:79:75:9f:c9:26:75: c5:3c:d3:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsjocPFO+TlS6ygcDbO/5CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYzk4MjY3YTVkYjI2YzY1ZTQxZTY0NjY0OGYxMDE2NjM2 ZTU0NGUwHhcNMjUxMjMwMDAwMDM4WhcNMjUxMjMxMDAwMDM4WjAzMTEwLwYDVQQD Eyg3Y2E1MWFlYmY0NmMwMjdjMGU5NWY1ZDIzNTk2N2ZkMGNiYjQ4NTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8g8VXyI+tt7YI6qASf3QkVAO7Nh VnXWDsaL/cHM7mqp5uIMJJ65Ftb8kPHLYckdzyrsyHIjdT9TU7RO2IM08usiXa2L iPMe4g5JFkJyAd5FPONnBUhqkGc7E0L8ykYkPqGIUgho2LtpMqCPlXJM/aeBRpSv AsTMwqEWsuv/jO2KOh/Q++6GTZ9K4h74DPzg/iGdqu+gXTdZOMxnxcUm/3bfgRpO AtCG9Rx9aFemByGpL5xV8uBIRXGsiuJiiHOqyLajnBb30vxcYjydIzr5sUi0ptDr j87X34CaAM8mZe5uTCq4CkM4Vz1Bt7pdvAxEHrPRNEj+GFUz43KU+bf07wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHylGuv0bAJ8DpX10jWWf9DLtIUcMB8GA1UdIwQY MBaAFArJgmel2ybGXkHmRmSPEBZjblROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zNzk5ZmEtOWRiOS00ZmM4LThmZDYt MmQ5ZTk5ZjQ3MjJjLzEvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zNzk5ZmEtOWRiOS00ZmM4LThmZDYtMmQ5ZTk5ZjQ3MjJj LzEvQ3NtQ1o2WGJKc1plUWVaR1pJOFFGbU51VkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGliTzC2 ZhZ04rSmnNcFVnKWeunNtIkNaX/KUC5CfhlfcKW9mVH1u8tVTpPMTnW/E33LX776 WdN7gQFto/DRVIVL+3QufqtZiIwg2qTlpoRlSVmgXb105JHnExnr90ypwS+PNAtM mjeuuB+8mL5vfjVZemGkzveOutLioTn3w5edlvz1LoXlt+h4th9BlRkjx3XKaQij rIkQJuclA3t1aTqhACWO/ARNl7Zt67768bONGWCl7PZdUFLlcfkRNH2T7B9BjYft q0/286p2iZ9jSbYjmLcBFuvslcXCN63em3AUX44PaBJQZ/fM/x0UWwfXKZjk3Tnl eXWfySZ1xTzTzA== -----END CERTIFICATE-----Generated at Tue Dec 30 08:48:38 2025 by rpki-client