This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft File: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json) Hash identifier: ITQ30SuYIxyuAAhWZxzLxGYdywR3nfBiyM+pbRDXlKg= Subject key identifier: F3:4E:A1:92:94:23:DB:0C:C1:F1:21:3E:99:87:E2:1C:4B:A7:46:9B Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5 Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5 Certificate serial: 019B5117F6C61FB802D638A8294211DF1FF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft Manifest number: 01ED Signing time: Wed 24 Dec 2025 16:01:23 +0000 Manifest this update: Wed 24 Dec 2025 16:01:23 +0000 Manifest next update: Thu 25 Dec 2025 16:01:23 +0000 Files and hashes: 1: 0En_rM3ItFKYLhaLLd8WBZOTlpA.roa (hash: 152maO322NYmeUI+2QBI3Muc080/yMuLJaeicPAME94=) 2: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: TmJl9Ds5gN9AliLDH2I65VjGsSXDzD4wst1CqsmT+BQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:f6:c6:1f:b8:02:d6:38:a8:29:42:11:df:1f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5 Validity Not Before: Dec 24 16:01:23 2025 GMT Not After : Dec 25 16:01:23 2025 GMT Subject: CN=f34ea1929423db0cc1f1213e9987e21c4ba7469b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d9:f7:8c:24:06:7b:a6:0c:0e:87:16:b5:d6: a1:70:da:b5:8c:0d:72:c0:2e:81:5e:55:d7:af:13: d2:25:46:3e:3b:93:13:56:fc:a7:e5:89:4d:93:a3: f3:f9:7c:c8:2e:01:7e:1e:0a:79:87:cb:52:aa:4c: f2:df:af:19:ac:ce:a9:4b:74:cc:97:b6:33:f3:42: 68:c7:85:b4:17:b5:be:ef:79:c6:07:1f:77:75:58: b7:2c:c5:d7:ec:b4:37:93:e6:09:e3:33:24:82:ca: b0:07:ac:57:b2:ca:81:45:75:b8:eb:29:59:20:83: 49:cb:4f:23:00:55:e6:d0:bd:82:49:81:fe:2a:ea: 7a:65:c7:07:df:93:7f:c0:d5:7b:09:f1:ae:0b:ab: ab:7c:2c:d3:56:33:58:42:38:2c:3a:43:d9:3a:65: 60:9b:f3:ba:01:0b:c7:86:52:b1:26:9a:04:76:39: 33:ff:4f:38:f9:8e:58:14:9b:92:5b:5e:9c:f5:05: 90:87:69:a6:aa:bb:20:59:0d:11:a6:19:82:86:d2: 3d:45:39:6e:b2:7e:d6:01:4d:7d:87:8d:f5:a7:b5: 4b:1f:41:10:31:f7:f4:72:86:f5:18:80:6d:bc:50: e8:bd:37:aa:65:88:a6:da:eb:2d:56:d5:ee:0f:1f: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4E:A1:92:94:23:DB:0C:C1:F1:21:3E:99:87:E2:1C:4B:A7:46:9B X509v3 Authority Key Identifier: keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c3:4d:6a:67:b1:a5:44:81:f7:bd:b3:e9:a8:35:57:2b:a6: e1:95:85:c0:7e:e6:42:ea:2f:bf:50:1e:7e:01:a9:71:d7:4c: 61:e6:6d:c2:10:49:cb:cc:f2:26:e0:a0:73:20:69:d3:ba:54: 86:47:71:20:43:00:f6:fd:57:f4:66:b7:60:00:ef:8e:1e:d1: 2e:9a:d2:27:43:2c:15:50:3c:8f:87:40:37:9d:84:3e:ec:d3: c6:72:23:00:95:14:bd:3e:8d:e8:65:f8:c0:96:54:5d:24:ec: f0:aa:eb:0d:79:01:1c:17:0c:ad:2a:6f:e5:c4:6c:26:0e:b6: 06:4d:1c:32:86:2d:9e:2f:2e:d2:a3:1e:00:2c:51:1a:60:2a: 14:b0:25:d8:bf:e9:5d:93:de:a6:5c:14:ac:be:e4:96:34:47: 7d:55:b6:eb:07:05:72:48:7e:83:02:e4:0d:e5:39:10:0e:bf: 4d:de:14:99:29:da:a9:db:ea:4d:70:7e:4d:2e:0a:7a:42:10: c8:9f:e5:13:58:18:1f:f0:80:b4:94:bc:19:b5:01:b7:d3:f2: c7:ea:5c:3e:1d:02:f5:9f:bb:dc:81:b3:33:37:fe:0d:77:0d: c5:68:a7:fc:07:94:fb:2d:68:08:7d:ac:34:c8:59:b3:cf:12: a8:49:99:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF/bGH7gC1jioKUIR3x/4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MmJlNzYyZmJiMTBmZWU0MmQ2ZGU1NTY3OTM2ZWNkMWY4 M2RlZDUwHhcNMjUxMjI0MTYwMTIzWhcNMjUxMjI1MTYwMTIzWjAzMTEwLwYDVQQD EyhmMzRlYTE5Mjk0MjNkYjBjYzFmMTIxM2U5OTg3ZTIxYzRiYTc0NjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9n3jCQGe6YMDocWtdahcNq1jA1y wC6BXlXXrxPSJUY+O5MTVvyn5YlNk6Pz+XzILgF+Hgp5h8tSqkzy368ZrM6pS3TM l7Yz80Jox4W0F7W+73nGBx93dVi3LMXX7LQ3k+YJ4zMkgsqwB6xXssqBRXW46ylZ IINJy08jAFXm0L2CSYH+Kup6ZccH35N/wNV7CfGuC6urfCzTVjNYQjgsOkPZOmVg m/O6AQvHhlKxJpoEdjkz/084+Y5YFJuSW16c9QWQh2mmqrsgWQ0RphmChtI9RTlu sn7WAU19h431p7VLH0EQMff0cob1GIBtvFDovTeqZYim2ustVtXuDx8miwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNOoZKUI9sMwfEhPpmH4hxLp0abMB8GA1UdIwQY MBaAFAkr52L7sQ/uQtbeVWeTbs0fg97VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1N2bll2dXhELTVDMXQ1Vlo1TnV6Ui1EM3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hYWMzZWItMGNiNC00ZTIzLTlmNzAt Yzk0MGFkM2MwMDhhLzEvQ1N2bll2dXhELTVDMXQ1Vlo1TnV6Ui1EM3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hYWMzZWItMGNiNC00ZTIzLTlmNzAtYzk0MGFkM2MwMDhh LzEvQ1N2bll2dXhELTVDMXQ1Vlo1TnV6Ui1EM3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsNNamex pUSB972z6ag1Vyum4ZWFwH7mQuovv1AefgGpcddMYeZtwhBJy8zyJuCgcyBp07pU hkdxIEMA9v1X9Ga3YADvjh7RLprSJ0MsFVA8j4dAN52EPuzTxnIjAJUUvT6N6GX4 wJZUXSTs8KrrDXkBHBcMrSpv5cRsJg62Bk0cMoYtni8u0qMeACxRGmAqFLAl2L/p XZPeplwUrL7kljRHfVW26wcFckh+gwLkDeU5EA6/Td4UmSnaqdvqTXB+TS4KekIQ yJ/lE1gYH/CAtJS8GbUBt9Pyx+pcPh0C9Z+73IGzMzf+DXcNxWin/AeU+y1oCH2s NMhZs88SqEmZ0g== -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:12 2025 by rpki-client