This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft File: cspFbK0jiDCzjs1NJnys-lzV8fE.mft (raw, json) Hash identifier: oVz1ToVrh3xktiWP2Fi8InZ+gjn7oB5Ni++yOfv7VgA= Subject key identifier: C3:4D:9E:15:F0:48:C8:3A:A8:0E:AA:43:9B:D6:CF:28:31:88:AC:92 Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1 Certificate issuer: /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1 Certificate serial: 019B4BF30B461C3A0F0327E2825446ABBF70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 16:02:57 +0000 Manifest this update: Tue 23 Dec 2025 16:02:57 +0000 Manifest next update: Wed 24 Dec 2025 16:02:57 +0000 Files and hashes: 1: 9qsPYE67U8LKJS5RPyzpaJjKAjw.roa (hash: ate2+ga4mYDOeR+5DaCdTzRa6tHIKsrgVcrNBTn+5LQ=) 2: cspFbK0jiDCzjs1NJnys-lzV8fE.crl (hash: tVg9qsrBxd9d/QvmUwhd9OxLuYMn2upPSRa/aLQzanc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f3:0b:46:1c:3a:0f:03:27:e2:82:54:46:ab:bf:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1 Validity Not Before: Dec 23 16:02:57 2025 GMT Not After : Dec 24 16:02:57 2025 GMT Subject: CN=c34d9e15f048c83aa80eaa439bd6cf283188ac92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a8:c3:b6:2e:30:d5:cd:da:7d:63:88:75:d7: 43:d7:45:be:91:b9:68:1e:35:23:ab:67:e9:d4:62: 8f:c0:42:34:7e:e0:c4:71:c7:8d:d0:d1:39:91:fc: 29:d9:3a:df:ac:c9:6c:1e:b9:20:d7:b3:8f:4b:e0: 92:ba:21:20:88:f7:03:9e:c1:65:a8:fa:c8:56:97: 38:c5:88:50:2d:14:42:70:da:b7:a7:a8:93:59:e0: 4a:6f:3c:40:1d:e5:40:e4:6f:47:a3:03:f1:3c:72: 56:6a:a4:c7:3d:88:75:b1:0b:3a:ea:a5:8c:9b:50: 82:9b:b2:e3:19:68:e3:da:79:be:c2:fc:d2:79:33: a9:f7:8d:b3:93:a3:c9:66:9b:08:03:1a:fb:50:9b: ba:73:b9:ad:0c:c4:4d:58:65:a3:d2:8f:08:31:c3: 29:b2:b1:4e:47:80:7a:bf:64:7a:99:4f:e0:df:55: c5:d6:32:ed:5a:f7:fb:8a:b2:ef:50:9d:a4:d8:ad: 60:fa:4d:e7:79:f9:80:e0:6a:cf:eb:06:8a:85:28: ac:8a:c6:7d:6f:f5:57:6b:41:f2:df:01:59:a1:eb: 9a:a8:12:33:de:59:62:22:22:39:8e:97:2f:a3:9d: cc:9d:6c:4a:14:88:3c:2d:32:05:d5:d9:13:db:48: 55:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4D:9E:15:F0:48:C8:3A:A8:0E:AA:43:9B:D6:CF:28:31:88:AC:92 X509v3 Authority Key Identifier: keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b6:bc:64:52:08:47:60:79:53:30:71:f0:c2:bf:3d:7c:9b: 9b:73:d6:24:76:4a:d0:7d:d9:c6:2f:87:88:8a:bd:b9:8b:4d: ee:15:1e:b8:43:34:c1:0c:4a:0a:b9:d2:ed:c1:53:ef:fb:76: 2e:12:af:11:6b:79:06:0a:ad:ba:b2:ee:56:fb:12:d9:28:77: 58:ab:b8:88:74:38:d3:22:22:28:de:7a:c3:93:d0:9a:79:41: 7a:51:31:b3:3d:08:0a:6d:c0:47:21:1b:8d:13:fc:fd:7f:90: 2f:01:30:19:89:18:18:85:fb:23:5f:5b:4e:de:51:0a:6f:61: de:ab:65:ad:aa:61:a1:49:ab:97:d8:01:bb:71:85:5e:03:23: bc:af:c7:56:0b:b3:2b:04:cf:11:ab:30:fb:3f:b5:c3:ad:36: e0:62:e8:96:48:b6:95:7c:d4:87:3a:fa:21:3d:64:df:aa:7d: e3:1f:85:5a:2d:a3:60:55:40:7d:22:3b:7f:aa:4b:ee:58:69: 8f:31:f6:e5:2b:04:14:97:d4:be:83:a2:b6:05:64:cb:f6:aa: 0b:ba:50:6d:67:1d:77:2e:82:cc:4b:46:e1:72:0d:c3:65:d5: e0:b3:fc:55:a0:86:4a:1b:0d:48:2c:5d:2f:49:15:0d:64:a9: 66:49:23:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8wtGHDoPAyfiglRGq79wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyY2E0NTZjYWQyMzg4MzBiMzhlY2Q0ZDI2N2NhY2ZhNWNk NWYxZjEwHhcNMjUxMjIzMTYwMjU3WhcNMjUxMjI0MTYwMjU3WjAzMTEwLwYDVQQD EyhjMzRkOWUxNWYwNDhjODNhYTgwZWFhNDM5YmQ2Y2YyODMxODhhYzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKjDti4w1c3afWOIdddD10W+kblo HjUjq2fp1GKPwEI0fuDEcceN0NE5kfwp2TrfrMlsHrkg17OPS+CSuiEgiPcDnsFl qPrIVpc4xYhQLRRCcNq3p6iTWeBKbzxAHeVA5G9HowPxPHJWaqTHPYh1sQs66qWM m1CCm7LjGWjj2nm+wvzSeTOp942zk6PJZpsIAxr7UJu6c7mtDMRNWGWj0o8IMcMp srFOR4B6v2R6mU/g31XF1jLtWvf7irLvUJ2k2K1g+k3nefmA4GrP6waKhSisisZ9 b/VXa0Hy3wFZoeuaqBIz3lliIiI5jpcvo53MnWxKFIg8LTIF1dkT20hVUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNNnhXwSMg6qA6qQ5vWzygxiKySMB8GA1UdIwQY MBaAFHLKRWytI4gws47NTSZ8rPpc1fHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81NzMxZjMtYjE4MC00MDU0LThhY2It MmNhMTNkZDFkYjYzLzEvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81NzMxZjMtYjE4MC00MDU0LThhY2ItMmNhMTNkZDFkYjYz LzEvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEba8ZFII R2B5UzBx8MK/PXybm3PWJHZK0H3Zxi+HiIq9uYtN7hUeuEM0wQxKCrnS7cFT7/t2 LhKvEWt5BgqturLuVvsS2Sh3WKu4iHQ40yIiKN56w5PQmnlBelExsz0ICm3ARyEb jRP8/X+QLwEwGYkYGIX7I19bTt5RCm9h3qtlraphoUmrl9gBu3GFXgMjvK/HVguz KwTPEasw+z+1w6024GLolki2lXzUhzr6IT1k36p94x+FWi2jYFVAfSI7f6pL7lhp jzH25SsEFJfUvoOitgVky/aqC7pQbWcddy6CzEtG4XINw2XV4LP8VaCGShsNSCxd L0kVDWSpZkkjDg== -----END CERTIFICATE-----Generated at Tue Dec 23 18:53:19 2025 by rpki-client