This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft File: cZLyKnioBxsCo2Ko2zPo8_ct00g.mft (raw, json) Hash identifier: 6Mxw71j9EucAsSnTGAwPujVW4p0ZCXEUKVF2lNMbMGA= Subject key identifier: 5A:48:39:C9:F6:55:8E:4C:DC:E5:3A:A7:7E:BE:35:BE:38:99:AF:47 Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48 Certificate issuer: /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348 Certificate serial: 019B3CB52AF761BF7311DFD255EC2F236CB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 17:01:04 +0000 Manifest this update: Sat 20 Dec 2025 17:01:04 +0000 Manifest next update: Sun 21 Dec 2025 17:01:04 +0000 Files and hashes: 1: cZLyKnioBxsCo2Ko2zPo8_ct00g.crl (hash: voLzROIk5/dOjXzWtKJZQQe1JBfgtD/H3R7MlxjYiXc=) 2: iySxd4tMbCEPkoMPKxUDu_5FR6M.roa (hash: aI0T28ewsgkic6wSWjP7Zq6jLamL49Y0wJiPkH5nxZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:2a:f7:61:bf:73:11:df:d2:55:ec:2f:23:6c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348 Validity Not Before: Dec 20 17:01:04 2025 GMT Not After : Dec 21 17:01:04 2025 GMT Subject: CN=5a4839c9f6558e4cdce53aa77ebe35be3899af47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1e:34:e0:3b:66:33:36:36:5e:63:fa:da:2a: 25:75:0a:0b:e1:3d:6e:60:f5:d8:44:0a:07:53:8b: 9f:36:db:c5:cb:e6:22:33:d7:a1:fd:c4:35:4f:cd: 70:7e:38:2a:62:26:ae:6a:26:24:08:8f:85:16:a1: ee:c3:4c:88:b4:18:04:21:01:eb:e1:e5:d4:2c:bc: 5d:c1:25:18:33:df:fc:55:a8:01:9e:2f:99:48:44: ba:38:a7:ad:3e:d5:13:50:10:65:07:34:58:c1:9e: b2:b5:91:72:4c:8c:12:f0:16:a1:b3:eb:c6:5b:b1: d3:27:20:50:17:65:f1:7f:bf:dd:68:73:a8:19:c0: 9c:f6:c9:07:46:fa:36:1b:17:f8:3e:c0:a8:e6:c9: a0:3b:2e:30:ee:d2:fc:b1:2f:09:7d:db:2a:81:0c: dd:d3:cd:3f:e9:27:0c:95:74:b9:5a:df:d9:61:f8: 1a:5f:4b:fe:6e:ba:63:e7:b7:c1:25:b2:14:f4:45: 3f:37:4b:cc:7e:db:fe:a8:37:94:96:44:f8:f6:47: ce:1b:79:42:fc:ab:2c:35:39:e6:f3:75:85:e9:55: 94:13:de:bc:19:3c:43:2e:6a:3d:6a:dd:ec:ff:3a: 97:6a:92:c5:74:d7:29:d9:ca:c1:76:87:06:44:60: ba:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:48:39:C9:F6:55:8E:4C:DC:E5:3A:A7:7E:BE:35:BE:38:99:AF:47 X509v3 Authority Key Identifier: keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:75:4c:dd:f2:05:b0:42:68:2b:cc:28:d9:68:c4:7b:cb:6d: f1:79:cb:f7:16:03:c0:0e:c1:45:db:41:0f:d4:4e:11:a5:93: e2:28:f8:eb:a5:e1:13:02:d7:5c:03:89:98:6f:ef:bc:d2:3c: 6a:c5:0e:11:00:31:92:5a:e2:84:68:59:41:c3:fd:52:43:16: 97:14:30:08:88:5b:1c:40:d7:85:6e:90:23:d3:08:12:c2:ba: 93:58:a6:3d:de:6a:43:6c:f2:03:c2:78:26:da:36:cd:be:b2: 55:70:39:04:1c:a3:aa:8e:26:5d:a1:ee:44:32:69:f5:54:0d: a0:46:2d:7d:d9:27:f6:dc:fe:a1:13:91:f1:01:2e:40:5f:10: 1c:c8:36:28:d5:02:7c:3d:a4:ca:42:78:fd:f6:a6:d1:a6:5e: ae:17:67:6d:e5:95:57:be:ad:cd:81:73:91:34:7d:a3:89:06: 75:cc:30:f3:eb:fa:09:e9:b7:42:05:13:69:c2:83:1b:c6:cb: ea:9a:e9:49:48:fa:79:b4:91:c4:d0:5d:8b:7a:84:75:25:a9: 1b:f7:06:ec:d1:12:54:4a:9b:d7:fa:e3:9e:75:f9:12:15:99: 3f:ea:f9:c1:4a:e2:6a:7f:be:7d:98:e4:23:41:96:f8:59:9c: d4:f9:60:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tSr3Yb9zEd/SVewvI2y3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOTJmMjJhNzhhODA3MWIwMmEzNjJhOGRiMzNlOGYzZjcy ZGQzNDgwHhcNMjUxMjIwMTcwMTA0WhcNMjUxMjIxMTcwMTA0WjAzMTEwLwYDVQQD Eyg1YTQ4MzljOWY2NTU4ZTRjZGNlNTNhYTc3ZWJlMzViZTM4OTlhZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3h404DtmMzY2XmP62ioldQoL4T1u YPXYRAoHU4ufNtvFy+YiM9eh/cQ1T81wfjgqYiauaiYkCI+FFqHuw0yItBgEIQHr 4eXULLxdwSUYM9/8VagBni+ZSES6OKetPtUTUBBlBzRYwZ6ytZFyTIwS8Bahs+vG W7HTJyBQF2Xxf7/daHOoGcCc9skHRvo2Gxf4PsCo5smgOy4w7tL8sS8JfdsqgQzd 080/6ScMlXS5Wt/ZYfgaX0v+brpj57fBJbIU9EU/N0vMftv+qDeUlkT49kfOG3lC /KssNTnm83WF6VWUE968GTxDLmo9at3s/zqXapLFdNcp2crBdocGRGC6AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpIOcn2VY5M3OU6p36+Nb44ma9HMB8GA1UdIwQY MBaAFHGS8ip4qAcbAqNiqNsz6PP3LdNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1pMeUtuaW9CeHNDbzJLbzJ6UG84X2N0MDBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNzQ1M2QtOTZlYy00ZDRlLTlmM2Ut MGU4YmM4ZTgxMmVlLzEvY1pMeUtuaW9CeHNDbzJLbzJ6UG84X2N0MDBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mNzQ1M2QtOTZlYy00ZDRlLTlmM2UtMGU4YmM4ZTgxMmVl LzEvY1pMeUtuaW9CeHNDbzJLbzJ6UG84X2N0MDBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHVM3fIF sEJoK8wo2WjEe8tt8XnL9xYDwA7BRdtBD9ROEaWT4ij466XhEwLXXAOJmG/vvNI8 asUOEQAxklrihGhZQcP9UkMWlxQwCIhbHEDXhW6QI9MIEsK6k1imPd5qQ2zyA8J4 Jto2zb6yVXA5BByjqo4mXaHuRDJp9VQNoEYtfdkn9tz+oROR8QEuQF8QHMg2KNUC fD2kykJ4/fam0aZerhdnbeWVV76tzYFzkTR9o4kGdcww8+v6Cem3QgUTacKDG8bL 6prpSUj6ebSRxNBdi3qEdSWpG/cG7NESVEqb1/rjnnX5EhWZP+r5wUrian++fZjk I0GW+Fmc1PlgGQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:53:08 2025 by rpki-client