This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft File: CZ05RkE90RFhtGx99q02Kpk41dQ.mft (raw, json) Hash identifier: JQqF6u7/a+Aq42/Qe81kktRgFfaBuZjQBmyMzsL8ld8= Subject key identifier: DE:5A:9D:E4:8D:B6:64:D5:46:22:33:63:EF:88:C6:F7:A6:AB:F3:85 Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4 Certificate issuer: /CN=099d3946413dd11161b46c7df6ad362a9938d5d4 Certificate serial: 019B3AFE2FA29B549F37562C7E6794D3243F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft Manifest number: 0557 Signing time: Sat 20 Dec 2025 09:01:35 +0000 Manifest this update: Sat 20 Dec 2025 09:01:35 +0000 Manifest next update: Sun 21 Dec 2025 09:01:35 +0000 Files and hashes: 1: 1-jvgd6RnvKghGloVJb1Iw3eDs48.roa (hash: B7s4SajlBd3EvNe+3zoLXiT8A5U0bChHVGW9zyQgNFY=) 2: CZ05RkE90RFhtGx99q02Kpk41dQ.crl (hash: IDhPZlFyKE08aq983tn7aJoPElNABnePyzszuY6R6ag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:2f:a2:9b:54:9f:37:56:2c:7e:67:94:d3:24:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4 Validity Not Before: Dec 20 09:01:35 2025 GMT Not After : Dec 21 09:01:35 2025 GMT Subject: CN=de5a9de48db664d546223363ef88c6f7a6abf385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:46:a3:8d:66:0f:3d:3c:2a:f2:cb:e3:46:5d: 08:d3:3a:02:0b:fc:e4:52:53:bb:e9:49:c5:2e:a9: 86:61:12:1c:2e:4a:21:8a:89:eb:a1:7c:44:6e:2f: 9f:00:34:cc:8e:e4:45:37:d7:ac:98:98:8c:b9:00: d7:0c:10:b8:d3:ef:53:b3:16:77:cb:30:bf:91:e2: 49:88:75:ad:09:ad:05:e4:54:24:e4:26:e2:25:a9: 16:1e:8c:eb:87:5d:f5:8f:31:41:fc:ea:5e:39:51: 1e:3f:cc:ae:0f:99:0e:f1:d0:5b:ae:9f:82:d8:8e: 2a:2d:02:5f:ca:c3:a3:c0:87:b9:60:41:a9:a9:05: d1:21:59:ff:6d:bb:af:9f:6b:bf:31:a7:68:f2:df: 9c:71:f1:9e:a3:0a:8e:8d:b6:be:74:b9:04:72:c4: 3f:0a:f4:60:49:3f:f1:b0:2a:07:3a:88:0e:db:14: 66:82:5d:f6:ee:d7:6d:20:71:89:03:0f:f8:9b:62: 97:25:e6:80:f5:8c:51:9f:48:20:fe:02:be:16:a6: 6a:c4:f9:cd:db:8e:0b:3e:e3:7a:b7:c7:f0:25:d8: 90:0c:88:ce:fb:7a:22:fd:2c:43:bc:8a:10:22:c3: b8:27:74:72:e8:df:ab:24:4d:f6:3e:9c:be:3b:8a: bd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5A:9D:E4:8D:B6:64:D5:46:22:33:63:EF:88:C6:F7:A6:AB:F3:85 X509v3 Authority Key Identifier: keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:99:f0:25:3c:a5:32:c5:9c:a9:c3:4b:3d:97:b4:69:0d:dc: 91:a5:4e:69:38:17:e6:f1:10:e6:6e:64:07:1f:83:9a:b8:e3: 83:87:b4:6c:d7:96:47:6a:de:44:3c:7f:79:be:80:94:78:d7: 5f:eb:94:16:e1:4b:70:0f:5a:c7:50:ce:8d:3f:78:25:57:d2: ed:51:b8:60:55:bb:01:96:64:3e:11:c5:39:ea:65:55:4e:25: d9:7a:62:81:28:fc:00:b8:57:b4:4f:b0:a0:39:3d:d8:44:ab: da:0a:03:4b:74:bb:4e:50:9c:1d:64:a9:9e:ae:17:f5:a8:02: 3f:bb:43:56:35:a0:56:69:b3:73:b7:13:98:8c:a3:2f:f0:5f: 84:67:3d:9a:cc:9c:53:c5:4d:5f:61:ad:85:f3:b5:05:f4:29: 9e:79:a3:00:e5:f2:fa:ea:b1:c5:08:b0:7a:54:a6:ec:cd:27: 91:73:36:3d:5b:a1:89:a5:f5:04:55:f8:33:19:7a:1a:28:8e: ec:c2:51:b7:39:a5:18:15:47:ae:87:a2:b6:39:15:3f:4d:31: e9:31:6d:35:28:a8:82:d7:1f:2e:32:b4:c1:7a:ba:db:c5:c6: 7a:25:f8:0c:d9:8b:15:0c:c5:0a:93:6a:ed:63:59:e6:45:7f: 19:7f:7f:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/i+im1SfN1YsfmeU0yQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWQzOTQ2NDEzZGQxMTE2MWI0NmM3ZGY2YWQzNjJhOTkz OGQ1ZDQwHhcNMjUxMjIwMDkwMTM1WhcNMjUxMjIxMDkwMTM1WjAzMTEwLwYDVQQD EyhkZTVhOWRlNDhkYjY2NGQ1NDYyMjMzNjNlZjg4YzZmN2E2YWJmMzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEajjWYPPTwq8svjRl0I0zoCC/zk UlO76UnFLqmGYRIcLkohionroXxEbi+fADTMjuRFN9esmJiMuQDXDBC40+9TsxZ3 yzC/keJJiHWtCa0F5FQk5CbiJakWHozrh131jzFB/OpeOVEeP8yuD5kO8dBbrp+C 2I4qLQJfysOjwIe5YEGpqQXRIVn/bbuvn2u/Mado8t+ccfGeowqOjba+dLkEcsQ/ CvRgST/xsCoHOogO2xRmgl327tdtIHGJAw/4m2KXJeaA9YxRn0gg/gK+FqZqxPnN 244LPuN6t8fwJdiQDIjO+3oi/SxDvIoQIsO4J3Ry6N+rJE32Ppy+O4q9OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5aneSNtmTVRiIzY++Ixvemq/OFMB8GA1UdIwQY MBaAFAmdOUZBPdERYbRsffatNiqZONXUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84NTY0NDMtYjhmYi00NzhlLTg3Yzkt Y2Y1MmFhOWQ2Y2NjLzEvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC84NTY0NDMtYjhmYi00NzhlLTg3YzktY2Y1MmFhOWQ2Y2Nj LzEvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5nwJTyl MsWcqcNLPZe0aQ3ckaVOaTgX5vEQ5m5kBx+Dmrjjg4e0bNeWR2reRDx/eb6AlHjX X+uUFuFLcA9ax1DOjT94JVfS7VG4YFW7AZZkPhHFOeplVU4l2XpigSj8ALhXtE+w oDk92ESr2goDS3S7TlCcHWSpnq4X9agCP7tDVjWgVmmzc7cTmIyjL/BfhGc9msyc U8VNX2GthfO1BfQpnnmjAOXy+uqxxQiwelSm7M0nkXM2PVuhiaX1BFX4Mxl6GiiO 7MJRtzmlGBVHroeitjkVP00x6TFtNSiogtcfLjK0wXq628XGeiX4DNmLFQzFCpNq 7WNZ5kV/GX9/1A== -----END CERTIFICATE-----Generated at Sat Dec 20 16:46:19 2025 by rpki-client