This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json) Hash identifier: rafJgDjH/vYa00FW/a7BNLCqGUHHml4gjZ+N2mIefU8= Subject key identifier: 60:64:AC:4E:43:C3:2A:2F:43:F2:99:28:2F:8D:4D:90:BB:85:F7:2A Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20 Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820 Certificate serial: 019B3BD9E7D7C7064020B94F8FDBFB0C401A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 13:01:34 +0000 Manifest this update: Sat 20 Dec 2025 13:01:34 +0000 Manifest next update: Sun 21 Dec 2025 13:01:34 +0000 Files and hashes: 1: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: /XJ318JkmugqRQkvcUWaBb9Rwl0WaB8T9RSgkfIat6w=) 2: lRz2gnfLm7nHaNSGeuPC7z_h668.roa (hash: 8k0N7eTmOOHH9ozZI5M8UWNCcA5B8u1B/kuz2VrrXfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:e7:d7:c7:06:40:20:b9:4f:8f:db:fb:0c:40:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820 Validity Not Before: Dec 20 13:01:34 2025 GMT Not After : Dec 21 13:01:34 2025 GMT Subject: CN=6064ac4e43c32a2f43f299282f8d4d90bb85f72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:9a:19:d6:64:b1:2e:59:d3:02:40:bc:d7: 8a:99:7d:ce:b4:ca:fa:5f:b2:6c:e0:92:ec:30:48: e9:6d:56:88:a7:2d:57:3c:b3:d7:3e:cf:b1:c0:a1: 34:16:5f:a2:d5:34:9f:12:7a:20:51:4a:eb:c6:a2: 8e:7e:73:09:0e:55:b5:fb:17:4f:86:5c:5e:20:0b: 4e:88:15:a8:27:5f:14:dc:c0:f0:07:f3:e4:fa:f2: 85:7d:a9:b6:73:35:99:1c:26:ae:dd:84:20:4a:e5: c5:90:10:dc:ab:01:bc:09:2d:15:db:bb:1b:cb:be: 39:d9:17:14:63:d4:4b:fc:20:54:59:69:07:b1:05: 89:0f:f9:df:d3:e5:f2:25:5c:2a:43:a5:c8:0b:b7: 9a:93:07:34:5a:83:48:1f:67:61:a9:f9:a7:de:5f: ad:24:bf:51:db:a3:ac:49:c6:5a:f4:2f:33:eb:29: 46:a1:6a:72:da:d4:d6:95:09:8c:bd:b4:20:5d:92: 55:cc:53:17:1c:e2:7a:e0:79:34:62:b2:48:e8:3a: 4d:e4:4e:6b:0d:86:0d:2d:ef:3f:7a:a8:30:40:ea: 72:3c:a8:fc:56:98:e2:a5:92:6a:ed:12:c5:cf:d0: 68:b6:90:8d:c1:8d:c0:b0:8f:46:e2:b6:e5:d7:2f: 74:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:64:AC:4E:43:C3:2A:2F:43:F2:99:28:2F:8D:4D:90:BB:85:F7:2A X509v3 Authority Key Identifier: keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:23:b9:23:e2:63:d4:fc:74:80:c8:1e:15:1c:fa:59:e6:32: 31:c1:de:85:cd:a0:8f:c8:6e:e6:e6:8e:9d:3d:fc:4a:f4:36: fb:bd:8f:45:cd:33:f7:32:e1:ab:aa:13:9b:58:47:9f:f6:dc: 3c:02:65:4c:08:f2:4b:c4:c0:11:24:41:77:71:4d:d0:6f:d0: 42:8a:b9:36:3f:94:3c:d0:41:45:1f:5c:62:d0:fa:7e:5d:d5: a2:2d:a4:9c:27:d6:03:23:15:b3:ed:79:6e:07:74:72:a3:07: c9:84:e1:99:30:e9:43:06:dc:14:07:61:22:be:26:d3:cf:af: be:96:73:99:6a:19:c0:4d:9f:2f:3e:bf:c3:c7:af:3f:a3:fb: ca:06:fc:53:2c:d9:55:2f:55:1e:4a:dd:46:be:2d:45:d5:a0: 98:80:f8:68:37:aa:70:8a:2d:80:8a:02:63:cd:6a:b9:2c:4b: 85:bb:62:d6:64:d6:6c:f1:c0:ec:75:26:ee:52:ac:bf:08:0e: 67:7c:3b:74:8e:04:7c:ef:04:38:8c:dc:29:cf:35:1b:42:78: b9:1f:39:a2:da:5a:c1:6d:bd:29:a1:b5:f4:e8:8c:f7:05:29: cd:31:2a:ec:f4:0f:fd:c5:6f:bd:a0:2d:bf:7d:58:25:7f:37: df:21:8c:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72efXxwZAILlPj9v7DEAaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmM5OWNjMzM4ZjY5MmRhOGY4MWI3MTZiYWQ3OWQxYzlk N2M4MjAwHhcNMjUxMjIwMTMwMTM0WhcNMjUxMjIxMTMwMTM0WjAzMTEwLwYDVQQD Eyg2MDY0YWM0ZTQzYzMyYTJmNDNmMjk5MjgyZjhkNGQ5MGJiODVmNzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPCaGdZksS5Z0wJAvNeKmX3OtMr6 X7Js4JLsMEjpbVaIpy1XPLPXPs+xwKE0Fl+i1TSfEnogUUrrxqKOfnMJDlW1+xdP hlxeIAtOiBWoJ18U3MDwB/Pk+vKFfam2czWZHCau3YQgSuXFkBDcqwG8CS0V27sb y7452RcUY9RL/CBUWWkHsQWJD/nf0+XyJVwqQ6XIC7eakwc0WoNIH2dhqfmn3l+t JL9R26OsScZa9C8z6ylGoWpy2tTWlQmMvbQgXZJVzFMXHOJ64Hk0YrJI6DpN5E5r DYYNLe8/eqgwQOpyPKj8VpjipZJq7RLFz9BotpCNwY3AsI9G4rbl1y90xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBkrE5DwyovQ/KZKC+NTZC7hfcqMB8GA1UdIwQY MBaAFHEsmcwzj2ktqPgbcWutedHJ18ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1N5WnpET1BhUzJvLUJ0eGE2MTUwY25YeUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kOTVmMzItODIyYS00Y2ZlLTk4NTMt NGViZWY4ODg0Mzk2LzEvY1N5WnpET1BhUzJvLUJ0eGE2MTUwY25YeUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kOTVmMzItODIyYS00Y2ZlLTk4NTMtNGViZWY4ODg0Mzk2 LzEvY1N5WnpET1BhUzJvLUJ0eGE2MTUwY25YeUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiO5I+Jj 1Px0gMgeFRz6WeYyMcHehc2gj8hu5uaOnT38SvQ2+72PRc0z9zLhq6oTm1hHn/bc PAJlTAjyS8TAESRBd3FN0G/QQoq5Nj+UPNBBRR9cYtD6fl3Voi2knCfWAyMVs+15 bgd0cqMHyYThmTDpQwbcFAdhIr4m08+vvpZzmWoZwE2fLz6/w8evP6P7ygb8UyzZ VS9VHkrdRr4tRdWgmID4aDeqcIotgIoCY81quSxLhbti1mTWbPHA7HUm7lKsvwgO Z3w7dI4EfO8EOIzcKc81G0J4uR85otpawW29KaG19OiM9wUpzTEq7PQP/cVvvaAt v31YJX833yGMqw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:13:37 2025 by rpki-client