This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft File: CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json) Hash identifier: gfvtqm6lNICjQqWbAudoUDJsb1GX3G5JzWZXk3zl6Ac= Subject key identifier: 13:D0:24:B6:23:DC:42:9B:7C:91:C8:14:13:AA:ED:04:35:12:C1:02 Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40 Certificate issuer: /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840 Certificate serial: 019B5229E80CE60E94AC9E55C64D0E051235 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 21:00:36 +0000 Manifest this update: Wed 24 Dec 2025 21:00:36 +0000 Manifest next update: Thu 25 Dec 2025 21:00:36 +0000 Files and hashes: 1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: QbPtmhR8AwKtUAqlXm0FJJFvYfX1eoHrCBdI+HdSYSM=) 2: QP38gNz3xco5qv5nlkhRVeJhNcc.roa (hash: iHHCmYPxx8nMI8Pl/VJqH9lchdWekUpYcRiMjWpeVhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:29:e8:0c:e6:0e:94:ac:9e:55:c6:4d:0e:05:12:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840 Validity Not Before: Dec 24 21:00:36 2025 GMT Not After : Dec 25 21:00:36 2025 GMT Subject: CN=13d024b623dc429b7c91c81413aaed043512c102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c9:90:ce:a0:d6:ed:03:72:c3:96:61:da:4c: bd:32:a6:74:6f:12:66:8d:87:c6:59:7a:3c:df:fd: f3:a2:46:bd:75:df:c1:7c:ce:a2:bc:df:87:e2:d2: ae:01:c3:76:8d:e7:34:ae:8a:f9:b9:37:a4:b6:d3: f8:c8:94:b9:d9:43:19:c9:16:20:80:27:7e:dd:12: b0:72:56:14:24:7f:cf:3f:9a:f9:f0:4b:95:db:18: df:af:62:b2:3f:9e:70:2c:29:7c:a8:e8:ff:19:b5: 28:77:e8:2d:b0:55:b7:f9:fc:2a:07:e2:13:da:09: d1:52:6e:77:52:4f:9f:0e:e4:6d:e4:a6:37:82:e3: 87:d5:a1:92:f3:05:08:e6:94:5a:24:05:29:06:10: 56:78:79:ca:e1:99:6b:37:33:d9:7a:3a:49:79:c3: be:79:13:cc:dd:69:00:89:61:5c:e1:cc:da:30:c3: a8:f3:a8:17:4a:f7:c0:e5:90:f1:e2:72:c8:a7:f9: dc:80:61:d5:43:96:fc:de:20:86:f7:21:51:00:cd: 7d:f8:9e:4e:c7:47:fe:f5:5c:ce:a4:a9:3f:2b:99: 9d:a6:d6:48:85:37:2b:56:f1:dc:42:91:86:98:db: 44:de:c1:d7:72:65:65:82:01:04:59:3a:20:02:b5: d7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D0:24:B6:23:DC:42:9B:7C:91:C8:14:13:AA:ED:04:35:12:C1:02 X509v3 Authority Key Identifier: keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9a:26:25:72:8d:45:b9:81:48:a6:d6:48:08:d5:c5:f9:8a: d6:00:b1:b4:99:13:41:c3:fd:6b:b7:ea:24:9e:35:06:75:cf: 12:69:39:7a:2b:5f:a1:a9:d5:7d:41:5a:26:19:ac:7a:a3:84: d4:91:d2:5f:40:10:95:74:78:56:5f:b8:68:e5:1b:74:51:b5: d7:9a:18:31:67:5f:3f:47:4b:0a:6b:27:14:2c:cf:2b:57:41: 01:e1:3d:99:f9:47:b7:d9:cb:21:16:5b:e2:88:9a:15:64:7b: e8:31:4d:3b:d9:af:9b:92:2d:d5:72:22:41:2d:cc:01:f7:ad: 7c:92:b5:78:c8:4a:17:6a:4c:9d:91:bd:1a:50:10:29:39:8e: e7:0a:09:d6:62:96:7f:c2:4e:8b:41:92:76:e3:65:0d:3c:39: 75:75:05:54:f8:91:d4:8e:1b:22:70:de:be:5c:bd:c0:69:1c: 3a:fc:0c:3b:f1:52:8d:51:03:fa:04:78:52:a0:79:27:dc:dc: 10:51:db:1a:c6:c8:31:9a:ad:31:99:dc:9d:9f:cb:73:6b:a6: 22:70:e8:23:ea:58:58:d3:91:5b:de:92:d0:a6:0e:82:32:40: 3b:0b:5a:d1:5b:4d:52:e9:85:c1:f9:63:b8:cf:20:73:3a:7f: 71:b7:34:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKegM5g6UrJ5Vxk0OBRI1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYzE1NjVhNWY2YzRlNTRjYTJmMTlkMzY0NzU5YjZhMGVk NjE4NDAwHhcNMjUxMjI0MjEwMDM2WhcNMjUxMjI1MjEwMDM2WjAzMTEwLwYDVQQD EygxM2QwMjRiNjIzZGM0MjliN2M5MWM4MTQxM2FhZWQwNDM1MTJjMTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8mQzqDW7QNyw5Zh2ky9MqZ0bxJm jYfGWXo83/3zoka9dd/BfM6ivN+H4tKuAcN2jec0ror5uTekttP4yJS52UMZyRYg gCd+3RKwclYUJH/PP5r58EuV2xjfr2KyP55wLCl8qOj/GbUod+gtsFW3+fwqB+IT 2gnRUm53Uk+fDuRt5KY3guOH1aGS8wUI5pRaJAUpBhBWeHnK4ZlrNzPZejpJecO+ eRPM3WkAiWFc4czaMMOo86gXSvfA5ZDx4nLIp/ncgGHVQ5b83iCG9yFRAM19+J5O x0f+9VzOpKk/K5mdptZIhTcrVvHcQpGGmNtE3sHXcmVlggEEWTogArXX5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPQJLYj3EKbfJHIFBOq7QQ1EsECMB8GA1UdIwQY MBaAFArBVlpfbE5Uyi8Z02R1m2oO1hhAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3NGV1dsOXNUbFRLTHhuVFpIV2JhZzdXR0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZWRiMjItZmY0Ny00NjVmLTkwNjgt NWM0YTBlYjIwMTdmLzEvQ3NGV1dsOXNUbFRLTHhuVFpIV2JhZzdXR0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83ZWRiMjItZmY0Ny00NjVmLTkwNjgtNWM0YTBlYjIwMTdm LzEvQ3NGV1dsOXNUbFRLTHhuVFpIV2JhZzdXR0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZomJXKN RbmBSKbWSAjVxfmK1gCxtJkTQcP9a7fqJJ41BnXPEmk5eitfoanVfUFaJhmseqOE 1JHSX0AQlXR4Vl+4aOUbdFG115oYMWdfP0dLCmsnFCzPK1dBAeE9mflHt9nLIRZb 4oiaFWR76DFNO9mvm5It1XIiQS3MAfetfJK1eMhKF2pMnZG9GlAQKTmO5woJ1mKW f8JOi0GSduNlDTw5dXUFVPiR1I4bInDevly9wGkcOvwMO/FSjVED+gR4UqB5J9zc EFHbGsbIMZqtMZncnZ/Lc2umInDoI+pYWNORW96S0KYOgjJAOwta0VtNUumFwflj uM8gczp/cbc0Bw== -----END CERTIFICATE-----Generated at Thu Dec 25 06:56:06 2025 by rpki-client