This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json) Hash identifier: JmYRcmVsp4S9cwoQ3gkD3MVVIpfKBHiHqK11Za9zqi0= Subject key identifier: C3:1E:1B:57:A5:CE:2B:87:3D:09:54:0C:AF:F0:EC:14:AB:86:C5:C0 Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11 Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211 Certificate serial: 019B39B43FDC42DA17199E0CE28B26D0832C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 03:01:12 +0000 Manifest this update: Sat 20 Dec 2025 03:01:12 +0000 Manifest next update: Sun 21 Dec 2025 03:01:12 +0000 Files and hashes: 1: RZxjFWlo2i2aJOHKRic4Fv-bX9o.roa (hash: gz7c2rZX9EEeMlQK8oZvhSguZMORv69xoCYnqP22C6w=) 2: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: oCblhCYgFNL5wdoVPTC2Qs9UQ8ev5riinFTcY0HCaVE=) 3: ecPozDTBiwtPhHsED0tZv93AzPY.roa (hash: VAqfrUatc4XqZvYROBfJJkH7/EgI7JEtqS/gigZEo5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:3f:dc:42:da:17:19:9e:0c:e2:8b:26:d0:83:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211 Validity Not Before: Dec 20 03:01:12 2025 GMT Not After : Dec 21 03:01:12 2025 GMT Subject: CN=c31e1b57a5ce2b873d09540caff0ec14ab86c5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:eb:f8:75:42:a6:3a:86:16:b8:ce:a4:37: 3e:11:0c:29:8c:7f:86:ac:64:14:4a:a2:34:51:22: d8:77:08:3a:a9:06:3f:1f:34:91:dd:49:ac:29:09: 04:53:6b:31:43:7d:62:88:24:49:ed:72:02:a8:52: f5:6c:bb:ba:de:4c:2b:a2:0b:59:26:49:e9:89:84: 00:42:e2:09:18:a9:b5:8f:3e:87:22:68:9d:51:81: be:37:36:f1:61:73:81:60:85:8a:d9:a7:39:58:63: 25:e7:a4:cd:ee:20:f1:7f:7c:e2:75:1e:0c:c3:11: 56:90:5f:b1:0c:54:81:4c:f9:da:9b:02:bb:c3:62: 16:d3:5a:59:3c:35:e7:bc:7c:11:d4:72:13:fc:00: 2a:ad:23:74:f1:b3:d0:de:f1:44:d1:91:23:2a:c9: ec:03:83:1c:5e:e2:8e:8f:5d:bf:17:fb:bc:49:d0: 13:82:fb:2d:ca:08:78:2d:4a:39:ed:9a:85:84:15: 40:7e:ad:c9:3b:a7:5e:33:07:98:ed:f0:2b:3f:1c: eb:9e:06:5a:d8:18:15:36:f4:a5:1b:e7:e1:64:46: b3:62:e7:0e:ad:f9:b4:51:1d:43:b9:55:f9:bd:68: c2:fc:be:48:0a:fc:8f:15:fd:14:a3:3e:61:d9:21: cf:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1E:1B:57:A5:CE:2B:87:3D:09:54:0C:AF:F0:EC:14:AB:86:C5:C0 X509v3 Authority Key Identifier: keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:d9:a6:71:f7:7f:20:bd:64:c8:47:36:49:7f:fd:3c:97:53: 6c:d3:81:7d:c0:d9:9c:f2:77:57:c0:06:b2:96:6b:12:1a:8e: 2d:a9:fb:2b:07:56:00:79:d5:6d:29:29:63:46:e7:fb:fa:00: 6e:26:cc:e6:cf:1d:4c:80:c9:bb:f6:8a:b7:bb:a9:80:10:0b: 06:ab:1a:fd:7a:bc:d9:af:be:e3:6b:f7:19:8f:72:2c:12:4f: d7:4d:a5:0f:3f:5d:de:89:d5:59:24:60:7c:8f:bd:bc:65:66: 25:8f:de:09:ed:b8:51:7f:0c:a7:e8:b0:f4:75:2a:41:43:aa: ea:1e:04:92:00:52:97:60:19:43:b8:a2:ec:54:0e:39:8e:c5: 0c:f3:3c:f6:ef:76:5f:f1:b9:39:67:8d:e3:2a:2a:01:82:f8: ce:76:41:b2:08:07:f3:19:93:df:2d:05:34:92:a2:e5:14:8e: c6:05:92:2c:bf:08:f7:ca:75:6e:f6:c0:72:85:e5:a5:03:16: 3f:57:90:3f:27:34:1c:ca:c3:a7:65:c1:a0:9d:42:0d:42:f0: 56:16:03:d2:0c:12:79:9f:ab:05:2a:a9:1a:2d:ea:76:09:c1: 45:57:76:c4:ce:c9:5c:17:03:f8:35:69:d0:a7:0f:85:d0:da: 5e:c8:0b:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tD/cQtoXGZ4M4osm0IMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOWIzM2RlNjA1MWQwNGQ3NWY2YmIxZjdlNTNiMWVmZDY2 NDYyMTEwHhcNMjUxMjIwMDMwMTEyWhcNMjUxMjIxMDMwMTEyWjAzMTEwLwYDVQQD EyhjMzFlMWI1N2E1Y2UyYjg3M2QwOTU0MGNhZmYwZWMxNGFiODZjNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtovr+HVCpjqGFrjOpDc+EQwpjH+G rGQUSqI0USLYdwg6qQY/HzSR3UmsKQkEU2sxQ31iiCRJ7XICqFL1bLu63kwrogtZ JknpiYQAQuIJGKm1jz6HImidUYG+NzbxYXOBYIWK2ac5WGMl56TN7iDxf3zidR4M wxFWkF+xDFSBTPnamwK7w2IW01pZPDXnvHwR1HIT/AAqrSN08bPQ3vFE0ZEjKsns A4McXuKOj12/F/u8SdATgvstygh4LUo57ZqFhBVAfq3JO6deMweY7fArPxzrngZa 2BgVNvSlG+fhZEazYucOrfm0UR1DuVX5vWjC/L5ICvyPFf0Uoz5h2SHP/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMeG1elziuHPQlUDK/w7BSrhsXAMB8GA1UdIwQY MBaAFHKbM95gUdBNdfa7H35Tse/WZGIRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZDk1NDEtZWI3ZS00YTFhLWI4NGIt NmVhMjc5YTJlNmNiLzEvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8yZDk1NDEtZWI3ZS00YTFhLWI4NGItNmVhMjc5YTJlNmNi LzEvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvtmmcfd/ IL1kyEc2SX/9PJdTbNOBfcDZnPJ3V8AGspZrEhqOLan7KwdWAHnVbSkpY0bn+/oA bibM5s8dTIDJu/aKt7upgBALBqsa/Xq82a++42v3GY9yLBJP102lDz9d3onVWSRg fI+9vGVmJY/eCe24UX8Mp+iw9HUqQUOq6h4EkgBSl2AZQ7ii7FQOOY7FDPM89u92 X/G5OWeN4yoqAYL4znZBsggH8xmT3y0FNJKi5RSOxgWSLL8I98p1bvbAcoXlpQMW P1eQPyc0HMrDp2XBoJ1CDULwVhYD0gwSeZ+rBSqpGi3qdgnBRVd2xM7JXBcD+DVp 0KcPhdDaXsgLQg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:27:45 2025 by rpki-client