This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft File: cspFbK0jiDCzjs1NJnys-lzV8fE.mft (raw, json) Hash identifier: MtrL7JDcTRjFmPwdRd5kMF9zZ82i/MuBTPEqqxzNAWw= Subject key identifier: 12:ED:16:8F:C2:A7:D5:A9:5E:65:3E:62:C1:70:A4:22:71:1A:50:D6 Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1 Certificate issuer: /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1 Certificate serial: 019B5D545A1AAA86736F08580902C41E5956 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 01:02:47 +0000 Manifest this update: Sat 27 Dec 2025 01:02:47 +0000 Manifest next update: Sun 28 Dec 2025 01:02:47 +0000 Files and hashes: 1: 9qsPYE67U8LKJS5RPyzpaJjKAjw.roa (hash: ate2+ga4mYDOeR+5DaCdTzRa6tHIKsrgVcrNBTn+5LQ=) 2: cspFbK0jiDCzjs1NJnys-lzV8fE.crl (hash: XiJN756mlZboV9rXcxzAGQHeTEd+eVOOnFNtIDlq9M4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:54:5a:1a:aa:86:73:6f:08:58:09:02:c4:1e:59:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1 Validity Not Before: Dec 27 01:02:47 2025 GMT Not After : Dec 28 01:02:47 2025 GMT Subject: CN=12ed168fc2a7d5a95e653e62c170a422711a50d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:ae:63:78:80:63:c6:bf:78:d0:b8:e8:9d: d6:c0:e5:25:3d:03:af:3a:95:aa:e9:f5:2b:55:e2: a4:41:1f:6f:2f:c3:67:f8:62:0c:58:ec:e1:1c:0d: 9b:69:00:87:4b:2f:73:a3:43:4e:ab:50:6d:b8:e3: 3b:01:61:15:c9:4a:18:7d:ca:43:48:06:d0:82:4b: fd:1a:98:ff:22:72:09:d2:b1:fb:74:29:53:fa:4b: 73:71:75:4a:c9:62:b8:5f:49:7f:34:a1:66:d4:97: 31:c2:55:e2:aa:04:4f:9c:79:c6:89:24:f5:8c:4b: 4b:e0:3a:fa:a9:b3:c8:26:92:d3:cc:53:f3:36:07: fc:ce:49:e4:b1:8b:5d:57:29:05:e0:8c:64:38:bc: fc:2a:67:b3:91:8f:38:6d:5c:b7:45:04:38:e1:ba: 38:dc:d2:de:5d:b1:18:e8:32:d1:b1:59:c7:3e:bc: 25:a3:d6:41:a5:10:7d:e9:c7:85:3e:7e:29:ea:ea: 5e:d6:21:d4:53:38:40:64:36:d7:a7:6f:cf:c5:6f: a8:6c:0d:6b:11:77:41:d5:8f:a2:99:a9:28:84:48: f3:f6:eb:19:76:14:69:f0:77:4d:88:3b:24:b8:df: 1a:1b:cf:4f:a1:0c:b3:f0:a1:4b:a2:90:f6:89:de: dd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:ED:16:8F:C2:A7:D5:A9:5E:65:3E:62:C1:70:A4:22:71:1A:50:D6 X509v3 Authority Key Identifier: keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:84:57:0f:33:9f:5c:0e:c1:05:c5:97:bb:ff:8b:96:24:44: 32:de:55:bf:c1:06:82:39:68:3c:f6:c8:1f:7e:02:76:2b:c5: ae:3d:7d:88:63:08:0b:03:62:b3:30:c5:fd:6e:b5:40:a4:06: 35:39:25:98:59:af:b4:c6:b5:40:29:3f:47:6f:c3:cf:46:62: bf:d8:9b:b6:f9:04:74:4d:17:8a:12:c3:71:c0:f8:67:c7:1c: f5:9c:a6:55:c7:0e:64:2b:3b:b5:7d:85:b9:da:de:91:cd:27: de:0b:e6:8a:9e:78:cd:67:21:fa:61:0c:53:c9:f5:46:c0:ac: d7:12:07:2a:5a:3a:92:ef:4d:d2:25:28:04:ed:a0:e6:fc:de: ec:d1:22:ac:29:60:f5:10:bd:a9:63:5b:07:1b:14:c2:e2:2a: ab:e8:b6:ac:ae:55:af:49:ef:aa:c3:ad:ab:13:42:e1:ea:6d: 04:45:82:c1:24:aa:58:9b:fb:be:65:6a:7d:7b:48:29:aa:3e: fe:97:6d:64:da:eb:1a:64:90:01:11:6a:5a:8a:37:c6:72:79: 7c:47:72:41:ac:e6:5a:dc:f1:6f:5b:3d:6e:a9:a1:58:83:61: bd:16:7f:22:22:76:22:43:84:01:98:c0:59:74:9c:1c:dd:89: 25:11:a4:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdVFoaqoZzbwhYCQLEHllWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyY2E0NTZjYWQyMzg4MzBiMzhlY2Q0ZDI2N2NhY2ZhNWNk NWYxZjEwHhcNMjUxMjI3MDEwMjQ3WhcNMjUxMjI4MDEwMjQ3WjAzMTEwLwYDVQQD EygxMmVkMTY4ZmMyYTdkNWE5NWU2NTNlNjJjMTcwYTQyMjcxMWE1MGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHiuY3iAY8a/eNC46J3WwOUlPQOv OpWq6fUrVeKkQR9vL8Nn+GIMWOzhHA2baQCHSy9zo0NOq1BtuOM7AWEVyUoYfcpD SAbQgkv9Gpj/InIJ0rH7dClT+ktzcXVKyWK4X0l/NKFm1JcxwlXiqgRPnHnGiST1 jEtL4Dr6qbPIJpLTzFPzNgf8zknksYtdVykF4IxkOLz8KmezkY84bVy3RQQ44bo4 3NLeXbEY6DLRsVnHPrwlo9ZBpRB96ceFPn4p6upe1iHUUzhAZDbXp2/PxW+obA1r EXdB1Y+imakohEjz9usZdhRp8HdNiDskuN8aG89PoQyz8KFLopD2id7d4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLtFo/Cp9WpXmU+YsFwpCJxGlDWMB8GA1UdIwQY MBaAFHLKRWytI4gws47NTSZ8rPpc1fHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81NzMxZjMtYjE4MC00MDU0LThhY2It MmNhMTNkZDFkYjYzLzEvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81NzMxZjMtYjE4MC00MDU0LThhY2ItMmNhMTNkZDFkYjYz LzEvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4RXDzOf XA7BBcWXu/+LliREMt5Vv8EGgjloPPbIH34CdivFrj19iGMICwNiszDF/W61QKQG NTklmFmvtMa1QCk/R2/Dz0Ziv9ibtvkEdE0XihLDccD4Z8cc9ZymVccOZCs7tX2F udrekc0n3gvmip54zWch+mEMU8n1RsCs1xIHKlo6ku9N0iUoBO2g5vze7NEirClg 9RC9qWNbBxsUwuIqq+i2rK5Vr0nvqsOtqxNC4eptBEWCwSSqWJv7vmVqfXtIKao+ /pdtZNrrGmSQARFqWoo3xnJ5fEdyQazmWtzxb1s9bqmhWINhvRZ/IiJ2IkOEAZjA WXScHN2JJRGkOg== -----END CERTIFICATE-----Generated at Sat Dec 27 06:15:30 2025 by rpki-client