This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft File: crsdyZa54KP6ZjLPgHp8IFCUnEY.mft (raw, json) Hash identifier: hZTBpdvqSTVlYgl/aFGp2LMsaQJ4vqIx70sxwkMuc9Y= Subject key identifier: 73:1F:F6:B0:E2:1C:42:4D:22:3A:32:D4:2C:F1:DE:D8:CD:E9:EE:40 Authority key identifier: 72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46 Certificate issuer: /CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46 Certificate serial: 019B341FB7FFDBD6E4D337CA0F36B39C40D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft Manifest number: 0A72 Signing time: Fri 19 Dec 2025 01:00:52 +0000 Manifest this update: Fri 19 Dec 2025 01:00:52 +0000 Manifest next update: Sat 20 Dec 2025 01:00:52 +0000 Files and hashes: 1: crsdyZa54KP6ZjLPgHp8IFCUnEY.crl (hash: 2gPB73Z7TdCXNs04YvVU0dDY4YQDW3y0HoMVtXVpZgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:b7:ff:db:d6:e4:d3:37:ca:0f:36:b3:9c:40:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46 Validity Not Before: Dec 19 01:00:52 2025 GMT Not After : Dec 20 01:00:52 2025 GMT Subject: CN=731ff6b0e21c424d223a32d42cf1ded8cde9ee40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d1:5e:4f:d7:08:6d:b3:d3:df:44:d0:41:5c: ab:b1:81:0a:62:a9:d4:c3:b5:90:3c:09:68:2b:92: e7:51:f3:07:f7:84:cc:f5:1a:09:02:7a:aa:75:d7: 46:7d:f9:40:8f:14:49:d3:69:18:04:fc:f0:43:c1: 0c:c8:e6:e2:db:4d:7b:8f:f4:cf:2c:51:02:bd:f1: 3c:8d:ed:6d:43:09:2d:ea:dc:1a:7b:21:a3:41:a0: d4:ba:81:26:ed:2a:f1:23:e8:1b:78:1a:6b:88:c8: 26:22:3e:26:e3:11:97:24:d3:4d:13:5f:98:c7:7a: c4:1d:66:ae:0c:38:65:23:a9:76:84:61:2e:3d:58: 1f:0d:2b:c6:31:ab:9c:44:c8:90:7d:28:18:9d:d2: 27:6c:e4:cc:17:a0:e3:8b:7a:ae:42:fe:95:af:f9: e0:97:7a:a7:cb:54:e0:d7:10:7b:2a:83:f4:2c:c6: 05:11:e8:69:4b:5c:ed:25:4e:ba:b8:9e:89:75:8f: 2c:c3:e6:20:2f:22:7c:42:09:90:26:43:38:d0:62: 86:75:39:43:64:63:dd:c3:7b:31:4e:26:95:33:6c: 8c:bb:5b:33:4a:42:f0:5e:ea:74:b5:cc:e4:b4:a5: fb:14:dd:31:62:59:ef:86:fb:a4:2e:cd:c1:b0:c4: c6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1F:F6:B0:E2:1C:42:4D:22:3A:32:D4:2C:F1:DE:D8:CD:E9:EE:40 X509v3 Authority Key Identifier: keyid:72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9c:8a:01:5f:b5:53:3a:4b:ad:48:10:44:18:1e:f2:4f:b3: a4:00:00:7f:fb:26:b2:5d:2d:5b:ee:70:66:53:2c:b9:57:bb: 61:af:06:b8:97:21:2f:10:30:8d:90:98:95:70:40:ee:0c:cf: 76:46:9b:84:05:30:29:9c:8b:61:83:0f:25:fe:5d:5a:14:c9: e9:9b:c7:b4:09:63:8f:b2:b0:d7:f9:96:1e:25:7e:4a:0d:00: a4:7c:1a:d2:8a:4b:2e:ef:a1:1b:61:02:09:8f:37:e7:5a:62: d8:20:91:03:32:81:4a:79:55:0f:3c:90:83:22:79:f9:14:5c: 76:3f:6d:af:4c:92:b5:9d:4d:47:0c:1e:bd:58:61:d3:91:ce: b7:1b:f0:65:44:ab:2e:7a:1d:03:c4:8e:5a:44:6b:c2:61:95: c8:9d:46:c0:c8:6f:be:84:6a:cf:9d:62:e0:a3:1a:c2:0a:6d: 77:a6:88:7a:88:df:a2:6d:6d:a7:90:c7:92:da:6a:71:7e:65: b0:56:48:42:36:53:da:2d:52:fa:7b:59:a7:10:8f:42:7e:27: c2:d1:15:a0:ed:9c:75:3a:77:38:69:e0:2f:4a:7c:a6:07:c9: 21:95:af:88:84:79:b9:54:97:5d:65:31:e7:46:6b:30:ab:66: e9:d8:9d:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H7f/29bk0zfKDzaznEDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYmIxZGM5OTZiOWUwYTNmYTY2MzJjZjgwN2E3YzIwNTA5 NDljNDYwHhcNMjUxMjE5MDEwMDUyWhcNMjUxMjIwMDEwMDUyWjAzMTEwLwYDVQQD Eyg3MzFmZjZiMGUyMWM0MjRkMjIzYTMyZDQyY2YxZGVkOGNkZTllZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9FeT9cIbbPT30TQQVyrsYEKYqnU w7WQPAloK5LnUfMH94TM9RoJAnqqdddGfflAjxRJ02kYBPzwQ8EMyObi2017j/TP LFECvfE8je1tQwkt6twaeyGjQaDUuoEm7SrxI+gbeBpriMgmIj4m4xGXJNNNE1+Y x3rEHWauDDhlI6l2hGEuPVgfDSvGMaucRMiQfSgYndInbOTMF6Dji3quQv6Vr/ng l3qny1Tg1xB7KoP0LMYFEehpS1ztJU66uJ6JdY8sw+YgLyJ8QgmQJkM40GKGdTlD ZGPdw3sxTiaVM2yMu1szSkLwXup0tczktKX7FN0xYlnvhvukLs3BsMTGMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMf9rDiHEJNIjoy1Czx3tjN6e5AMB8GA1UdIwQY MBaAFHK7HcmWueCj+mYyz4B6fCBQlJxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kN2E1ZWItZDE4OC00YWEyLWJjYTUt ZmE1OWRjMmE0NjNiLzEvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kN2E1ZWItZDE4OC00YWEyLWJjYTUtZmE1OWRjMmE0NjNi LzEvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZyKAV+1 UzpLrUgQRBge8k+zpAAAf/smsl0tW+5wZlMsuVe7Ya8GuJchLxAwjZCYlXBA7gzP dkabhAUwKZyLYYMPJf5dWhTJ6ZvHtAljj7Kw1/mWHiV+Sg0ApHwa0opLLu+hG2EC CY8351pi2CCRAzKBSnlVDzyQgyJ5+RRcdj9tr0yStZ1NRwwevVhh05HOtxvwZUSr LnodA8SOWkRrwmGVyJ1GwMhvvoRqz51i4KMawgptd6aIeojfom1tp5DHktpqcX5l sFZIQjZT2i1S+ntZpxCPQn4nwtEVoO2cdTp3OGngL0p8pgfJIZWviIR5uVSXXWUx 50ZrMKtm6didbA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:20:51 2025 by rpki-client