This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json) Hash identifier: WK1qDT0Bm/nFdhogNFrkMuxWNWR34MLOBeYxvVDI9NI= Subject key identifier: 72:56:31:BE:35:F9:F6:64:03:2C:A5:DD:15:AC:D2:DC:08:5B:DA:25 Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86 Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786 Certificate serial: 019B3F7F02E18A0E349C5D26F90585CF4722 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft Manifest number: 05A4 Signing time: Sun 21 Dec 2025 06:00:46 +0000 Manifest this update: Sun 21 Dec 2025 06:00:46 +0000 Manifest next update: Mon 22 Dec 2025 06:00:46 +0000 Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: 0Xp/yttLx4JgYlMB3fRTC/y9liizY1hc36V+waKjJRM=) 2: ayUSDw8mdGoHelr_2bHuT_Ht97M.roa (hash: gvA+DDKSQOPFRf0cxBqKQel7xs/RAWw3rOxPxkz9/ZY=) 3: i3ThCtdNGW1cjUxQLhhdn5p0rJI.roa (hash: GXqzqfOOBrl4UZP/OkbdiBzFUWkoVhn5KODt99i+lAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:02:e1:8a:0e:34:9c:5d:26:f9:05:85:cf:47:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099da06b80fa749068028b597be3e50e8b118786 Validity Not Before: Dec 21 06:00:46 2025 GMT Not After : Dec 22 06:00:46 2025 GMT Subject: CN=725631be35f9f664032ca5dd15acd2dc085bda25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fa:b8:2f:df:e1:8d:88:11:88:18:fe:2f:bc: 59:d4:9f:62:e0:f9:34:55:75:31:ff:81:9c:8e:95: a4:de:eb:73:98:ab:ab:f0:ec:73:4b:4b:52:f1:04: 16:44:31:eb:8d:4c:5b:ce:27:c4:f8:a6:66:c5:96: 51:40:57:00:98:80:73:a1:cd:96:38:88:40:4f:62: e7:ae:2e:a8:af:7b:0f:02:c3:c1:c5:28:03:0f:24: 48:1d:ed:c9:3d:ea:b9:56:f7:1a:73:45:2d:d6:e6: 9c:6e:5b:a0:c5:50:1b:b3:1f:66:24:e4:7e:33:17: 9a:af:8b:ea:ac:8e:73:04:dd:45:e7:87:db:03:7e: 8b:78:9c:2c:68:76:3c:58:98:60:cb:e5:e3:96:99: ab:eb:af:b9:63:b1:b5:58:f9:44:fa:45:52:2d:a8: 3c:0e:43:af:3a:c5:52:1a:f4:65:9a:2f:54:e7:76: ff:bd:d4:76:35:a3:e0:74:02:95:b2:45:e3:1c:e0: 98:b9:2a:16:74:00:af:94:10:38:cb:ab:48:de:95: c1:aa:db:2a:91:98:f1:ff:81:7a:5b:c6:ae:0a:fe: 4a:73:a7:30:31:b2:09:81:ab:4b:32:69:3c:0d:56: f2:08:68:20:97:69:a0:73:67:fb:52:b0:bd:69:ec: 8b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:56:31:BE:35:F9:F6:64:03:2C:A5:DD:15:AC:D2:DC:08:5B:DA:25 X509v3 Authority Key Identifier: keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:7f:09:67:54:9a:14:1f:9d:7f:7f:c0:3f:63:6e:c8:52:67: 74:75:6c:d2:ec:e3:cf:92:4c:13:cc:a9:5a:14:d4:9b:87:b8: ee:ac:12:48:68:16:27:8d:9a:c9:01:8c:fe:22:ff:d8:f5:ae: 5c:34:d8:e2:b0:3b:b3:03:09:e0:c3:b3:7f:29:e7:09:2e:7e: 74:e9:43:48:fc:90:7d:80:97:b1:83:eb:2e:aa:75:2d:1f:54: 33:bc:70:28:fa:01:52:c5:03:6f:79:a6:01:1a:e9:e5:a4:ae: 71:f1:a2:f5:cd:0c:0a:d9:b3:84:af:27:6a:02:0e:a9:85:a8: b8:18:24:36:23:6f:0d:19:de:54:a3:aa:f5:ba:b9:e7:96:9e: 29:6e:5e:15:00:f9:a8:56:fd:10:1b:a3:f0:06:2e:c6:83:13: d7:aa:62:b0:0a:6f:8f:45:08:c3:52:1a:e4:ef:b5:df:74:9e: 26:66:97:46:fe:54:f2:f2:3f:95:40:c9:9b:57:27:57:4c:d0: eb:c6:af:c8:ca:80:e8:98:d3:c5:08:bd:7f:a3:20:f6:87:1a: 8a:76:ab:fc:d4:4d:32:3e:ea:ea:f8:81:a7:56:d0:fe:c8:9e: 16:3f:d1:a0:cf:aa:07:41:b5:01:a4:de:10:01:97:e0:0b:57: a9:cd:f6:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fwLhig40nF0m+QWFz0ciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWRhMDZiODBmYTc0OTA2ODAyOGI1OTdiZTNlNTBlOGIx MTg3ODYwHhcNMjUxMjIxMDYwMDQ2WhcNMjUxMjIyMDYwMDQ2WjAzMTEwLwYDVQQD Eyg3MjU2MzFiZTM1ZjlmNjY0MDMyY2E1ZGQxNWFjZDJkYzA4NWJkYTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfq4L9/hjYgRiBj+L7xZ1J9i4Pk0 VXUx/4GcjpWk3utzmKur8OxzS0tS8QQWRDHrjUxbzifE+KZmxZZRQFcAmIBzoc2W OIhAT2Lnri6or3sPAsPBxSgDDyRIHe3JPeq5Vvcac0Ut1uacblugxVAbsx9mJOR+ Mxear4vqrI5zBN1F54fbA36LeJwsaHY8WJhgy+Xjlpmr66+5Y7G1WPlE+kVSLag8 DkOvOsVSGvRlmi9U53b/vdR2NaPgdAKVskXjHOCYuSoWdACvlBA4y6tI3pXBqtsq kZjx/4F6W8auCv5Kc6cwMbIJgatLMmk8DVbyCGggl2mgc2f7UrC9aeyLxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJWMb41+fZkAyyl3RWs0twIW9olMB8GA1UdIwQY MBaAFAmdoGuA+nSQaAKLWXvj5Q6LEYeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUt MzFmY2M0NTU1NzVlLzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUtMzFmY2M0NTU1NzVl LzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu38JZ1Sa FB+df3/AP2NuyFJndHVs0uzjz5JME8ypWhTUm4e47qwSSGgWJ42ayQGM/iL/2PWu XDTY4rA7swMJ4MOzfynnCS5+dOlDSPyQfYCXsYPrLqp1LR9UM7xwKPoBUsUDb3mm ARrp5aSucfGi9c0MCtmzhK8nagIOqYWouBgkNiNvDRneVKOq9bq555aeKW5eFQD5 qFb9EBuj8AYuxoMT16pisApvj0UIw1Ia5O+133SeJmaXRv5U8vI/lUDJm1cnV0zQ 68avyMqA6JjTxQi9f6Mg9ocainar/NRNMj7q6viBp1bQ/sieFj/RoM+qB0G1AaTe EAGX4AtXqc32KA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:02:39 2025 by rpki-client