This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json) Hash identifier: 8FpjukKuzrFj3cGSzukkbKnKBMUKQDOVWY3+alDIA3E= Subject key identifier: 31:D9:62:63:D2:C6:B9:76:08:16:9A:79:B0:97:52:38:89:A4:8E:6E Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86 Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786 Certificate serial: 019B3D90B9BBC80F48EE9F25C0E9AA0B6988 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft Manifest number: 05A3 Signing time: Sat 20 Dec 2025 21:00:53 +0000 Manifest this update: Sat 20 Dec 2025 21:00:53 +0000 Manifest next update: Sun 21 Dec 2025 21:00:53 +0000 Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: daRdcd9UiFYk2kVD9zfFTffunxJZYSafp2UO1xXyeMQ=) 2: ayUSDw8mdGoHelr_2bHuT_Ht97M.roa (hash: gvA+DDKSQOPFRf0cxBqKQel7xs/RAWw3rOxPxkz9/ZY=) 3: i3ThCtdNGW1cjUxQLhhdn5p0rJI.roa (hash: GXqzqfOOBrl4UZP/OkbdiBzFUWkoVhn5KODt99i+lAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:b9:bb:c8:0f:48:ee:9f:25:c0:e9:aa:0b:69:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099da06b80fa749068028b597be3e50e8b118786 Validity Not Before: Dec 20 21:00:53 2025 GMT Not After : Dec 21 21:00:53 2025 GMT Subject: CN=31d96263d2c6b97608169a79b097523889a48e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:9a:b0:7d:49:15:bf:71:4f:8e:69:03:62: bc:5b:70:ac:ed:0d:b8:17:af:97:69:77:a4:dc:e0: 27:c5:f1:e5:02:a8:41:10:9b:2e:98:9d:7e:cd:3e: a4:5d:73:bb:a8:c1:cd:93:e4:fa:f2:95:f6:00:c5: 7d:8a:4b:2f:48:ad:9d:c3:24:5f:c8:ff:35:10:40: d8:b8:8e:73:86:4f:e7:21:c9:3d:da:91:61:35:1f: b7:6b:a4:63:e4:a8:52:e9:b1:20:d2:5d:3d:1c:84: 8f:78:dd:b1:1f:33:5a:20:53:2c:e4:e0:ce:d1:cf: 9f:15:27:01:81:dc:08:37:01:5b:ba:fc:0e:13:fa: df:43:4c:43:c2:38:03:0e:77:3d:9f:36:ec:85:5d: dc:b8:c9:6e:75:5d:a6:c1:cc:6b:05:b5:25:03:af: 50:d3:7a:20:cd:2f:a4:b6:b4:44:cb:d1:b1:83:8a: 60:fc:89:42:c3:df:2c:00:74:f3:a5:16:46:64:0c: 17:a4:e7:f2:a5:04:65:00:51:25:29:73:fa:49:ff: 19:ea:7e:2f:d6:c8:9b:4a:41:47:27:ca:2e:62:44: 20:64:a2:41:d5:bd:12:06:f4:19:c8:ef:38:98:3a: b3:9d:3f:3e:11:75:03:9a:18:29:47:0e:8e:12:a9: 97:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D9:62:63:D2:C6:B9:76:08:16:9A:79:B0:97:52:38:89:A4:8E:6E X509v3 Authority Key Identifier: keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:2e:c5:ef:4e:00:bb:7e:fe:ac:12:66:08:f6:c3:4c:9b:c3: 46:a6:b1:31:5c:55:85:41:e6:2e:64:6f:a3:4c:f3:ca:87:4f: 9d:63:a4:f1:e4:cb:b4:d2:84:bd:ae:78:a2:6f:2d:ac:56:e7: 40:7e:00:09:80:58:51:df:fe:a8:94:96:18:35:3b:0e:1c:50: 3f:67:cf:e7:94:f0:fc:66:64:b7:22:95:4b:e3:36:c0:15:31: 6d:a1:7e:a1:69:20:1e:6e:a9:58:67:41:17:64:06:95:c1:f8: 51:90:3a:57:7a:ec:d9:dc:7e:2a:31:14:c4:d3:2a:d3:09:ee: 44:ad:1d:64:98:00:32:11:0c:d4:4e:d3:2c:4c:fe:e4:5a:99: 5b:b3:0c:9a:e6:e2:ec:ac:ea:9e:c3:c6:18:13:65:18:99:9b: 65:a3:1a:ab:af:62:d2:e5:51:b9:3f:6b:84:f0:0e:f1:2f:c0: 7d:17:38:e4:69:a0:7d:57:8c:35:5c:d1:75:bb:a9:c6:80:39: 2b:b6:e8:c1:14:16:7e:a9:82:a0:08:4e:49:a1:63:cc:fe:e8: ce:f1:43:2e:38:82:e2:9d:a8:e9:31:d7:ba:8c:ce:f7:82:4a: 1a:92:c8:3e:14:48:b4:31:6a:2e:4f:fe:47:b7:e1:1e:21:27: e9:93:bf:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kLm7yA9I7p8lwOmqC2mIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWRhMDZiODBmYTc0OTA2ODAyOGI1OTdiZTNlNTBlOGIx MTg3ODYwHhcNMjUxMjIwMjEwMDUzWhcNMjUxMjIxMjEwMDUzWjAzMTEwLwYDVQQD EygzMWQ5NjI2M2QyYzZiOTc2MDgxNjlhNzliMDk3NTIzODg5YTQ4ZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonqasH1JFb9xT45pA2K8W3Cs7Q24 F6+XaXek3OAnxfHlAqhBEJsumJ1+zT6kXXO7qMHNk+T68pX2AMV9iksvSK2dwyRf yP81EEDYuI5zhk/nIck92pFhNR+3a6Rj5KhS6bEg0l09HISPeN2xHzNaIFMs5ODO 0c+fFScBgdwINwFbuvwOE/rfQ0xDwjgDDnc9nzbshV3cuMludV2mwcxrBbUlA69Q 03ogzS+ktrREy9Gxg4pg/IlCw98sAHTzpRZGZAwXpOfypQRlAFElKXP6Sf8Z6n4v 1sibSkFHJ8ouYkQgZKJB1b0SBvQZyO84mDqznT8+EXUDmhgpRw6OEqmXkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHZYmPSxrl2CBaaebCXUjiJpI5uMB8GA1UdIwQY MBaAFAmdoGuA+nSQaAKLWXvj5Q6LEYeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUt MzFmY2M0NTU1NzVlLzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUtMzFmY2M0NTU1NzVl LzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAri7F704A u37+rBJmCPbDTJvDRqaxMVxVhUHmLmRvo0zzyodPnWOk8eTLtNKEva54om8trFbn QH4ACYBYUd/+qJSWGDU7DhxQP2fP55Tw/GZktyKVS+M2wBUxbaF+oWkgHm6pWGdB F2QGlcH4UZA6V3rs2dx+KjEUxNMq0wnuRK0dZJgAMhEM1E7TLEz+5FqZW7MMmubi 7KzqnsPGGBNlGJmbZaMaq69i0uVRuT9rhPAO8S/AfRc45GmgfVeMNVzRdbupxoA5 K7bowRQWfqmCoAhOSaFjzP7ozvFDLjiC4p2o6THXuozO94JKGpLIPhRItDFqLk/+ R7fhHiEn6ZO/9w== -----END CERTIFICATE-----Generated at Sun Dec 21 07:02:36 2025 by rpki-client