This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json) Hash identifier: iMiF2DMmPJrlFXZVWbwW8oEABMcYXYVloMPeyn9w5gY= Subject key identifier: 50:61:79:A8:B1:85:5E:72:99:F4:B0:69:8D:15:66:B7:4F:BA:FF:EA Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5 Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5 Certificate serial: 019B45817D2FD08F27ED96E76D611710E339 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft Manifest number: 09B1 Signing time: Mon 22 Dec 2025 10:01:12 +0000 Manifest this update: Mon 22 Dec 2025 10:01:12 +0000 Manifest next update: Tue 23 Dec 2025 10:01:12 +0000 Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: xfIfz6SHaeCDHowqF2qQy36umEFxHFEOPxo/f+9iRAc=) 2: ULilwJwlks2sPgTVgOcQHLDhOyI.roa (hash: gfxGsdUh7muf8faV+aGa5Rl6NvW7CdBeP3HuizIzPoM=) 3: euzuAPfeJuv2-cm-rKuGKDxPe8I.roa (hash: 96LpiX/MLfmTkOgA68PX4zJcqAm4CD3qIp5sMcLFqNU=) 4: uqI-e9Q5-oja9rvPU1QcSBBgp4Y.roa (hash: RtcbvrEpnnUY7EwUTMkcJmd+p3YJpS4SOiugiRag4tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:7d:2f:d0:8f:27:ed:96:e7:6d:61:17:10:e3:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5 Validity Not Before: Dec 22 10:01:12 2025 GMT Not After : Dec 23 10:01:12 2025 GMT Subject: CN=506179a8b1855e7299f4b0698d1566b74fbaffea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:1b:1a:79:a3:9d:d3:96:01:52:1c:84:d9: 14:ef:eb:21:41:f2:49:29:c6:74:e8:6e:aa:a9:e7: b1:5c:5f:9c:a3:aa:e0:8a:ed:61:6d:35:3c:59:86: 7e:04:5f:2d:d0:48:82:0a:09:06:59:87:33:34:d4: da:04:29:fd:be:01:47:72:be:bd:4e:fc:39:29:60: 49:40:8c:e4:84:c6:88:d3:15:52:4b:d2:5a:6e:c4: f1:10:fe:49:35:84:b4:12:d9:6a:53:51:af:52:f6: 15:a0:44:d7:5d:ed:21:65:68:5d:77:cf:33:31:48: 23:d5:87:3e:f4:34:84:78:1d:8a:26:70:c0:5d:b8: 8f:15:aa:30:c3:28:97:a7:80:02:36:80:6a:86:81: 62:28:cd:23:00:b6:37:24:08:fa:7e:c5:18:0c:aa: 2c:54:9a:45:7f:c0:0e:d2:e5:b7:97:e0:4e:d8:c3: b3:b0:3e:58:ea:e1:d8:1e:9e:b5:27:6f:83:54:3b: 43:0a:ae:3d:51:5a:e8:be:86:70:04:bb:69:d1:85: 78:c0:0f:f2:28:43:6b:cb:f4:c3:30:ea:7b:ac:1e: 3a:03:45:dc:77:f1:bb:e6:cb:df:73:23:70:e1:31: 4c:34:3b:35:3f:27:bb:df:84:99:5f:5b:ac:56:46: dc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:61:79:A8:B1:85:5E:72:99:F4:B0:69:8D:15:66:B7:4F:BA:FF:EA X509v3 Authority Key Identifier: keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:4f:1b:10:34:3c:50:0f:cc:2f:7e:34:98:f9:26:35:c3:72: ac:bc:a9:b0:e9:f1:0a:db:7e:d7:44:d2:18:8c:1b:e7:05:be: 05:9e:57:f7:fa:2a:8b:3a:a7:c4:82:2f:53:55:17:79:2f:b9: 0e:08:bd:1e:60:03:b0:9b:a6:6a:1c:cc:17:c9:46:e1:b2:72: 0e:8e:56:56:1e:9d:97:b4:24:3f:70:e5:a0:a8:af:e2:ce:71: a8:fe:1b:ae:c9:2a:6e:96:ec:6f:46:00:4a:48:67:6b:f7:d8: a4:67:05:10:7a:6e:5b:20:36:6b:44:15:2a:3a:ba:47:3c:98: e2:43:60:b0:ee:08:8a:30:f6:43:d2:03:ff:f4:e5:48:72:bd: 8f:b4:63:db:74:dc:84:ba:32:f6:16:4e:9a:e1:4d:3e:3f:99: 1a:c7:e2:38:ec:73:96:6e:32:35:d8:3f:19:51:7f:ff:53:6c: 34:60:3d:6d:4b:21:1a:12:cf:68:05:e7:37:3b:19:df:3b:fa: 90:b9:54:69:2c:3d:41:45:6e:e8:fc:4b:1d:39:22:4e:c5:d8: 29:60:4c:c6:f1:2e:2d:2b:69:e4:97:e8:d5:2b:a3:fc:3d:66: 71:95:c6:4e:6b:ab:b1:42:70:50:b9:9f:50:c7:d6:4b:d7:10: 9f:e2:b7:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgX0v0I8n7ZbnbWEXEOM5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWExZjJkYmY3YjdhODRhZTU3YjhkNjc0MjZiN2U0ZTQy MGZhYjUwHhcNMjUxMjIyMTAwMTEyWhcNMjUxMjIzMTAwMTEyWjAzMTEwLwYDVQQD Eyg1MDYxNzlhOGIxODU1ZTcyOTlmNGIwNjk4ZDE1NjZiNzRmYmFmZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumwbGnmjndOWAVIchNkU7+shQfJJ KcZ06G6qqeexXF+co6rgiu1hbTU8WYZ+BF8t0EiCCgkGWYczNNTaBCn9vgFHcr69 Tvw5KWBJQIzkhMaI0xVSS9JabsTxEP5JNYS0EtlqU1GvUvYVoETXXe0hZWhdd88z MUgj1Yc+9DSEeB2KJnDAXbiPFaowwyiXp4ACNoBqhoFiKM0jALY3JAj6fsUYDKos VJpFf8AO0uW3l+BO2MOzsD5Y6uHYHp61J2+DVDtDCq49UVrovoZwBLtp0YV4wA/y KENry/TDMOp7rB46A0Xcd/G75svfcyNw4TFMNDs1Pye734SZX1usVkbcrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBheaixhV5ymfSwaY0VZrdPuv/qMB8GA1UdIwQY MBaAFAmaHy2/e3qErle41nQmt+TkIPq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAt OWNkNjhmMjIxZTIxLzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAtOWNkNjhmMjIxZTIx LzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE08bEDQ8 UA/ML340mPkmNcNyrLypsOnxCtt+10TSGIwb5wW+BZ5X9/oqizqnxIIvU1UXeS+5 Dgi9HmADsJumahzMF8lG4bJyDo5WVh6dl7QkP3DloKiv4s5xqP4brskqbpbsb0YA Skhna/fYpGcFEHpuWyA2a0QVKjq6RzyY4kNgsO4IijD2Q9ID//TlSHK9j7Rj23Tc hLoy9hZOmuFNPj+ZGsfiOOxzlm4yNdg/GVF//1NsNGA9bUshGhLPaAXnNzsZ3zv6 kLlUaSw9QUVu6PxLHTkiTsXYKWBMxvEuLStp5Jfo1Suj/D1mcZXGTmursUJwULmf UMfWS9cQn+K3MQ== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:34 2025 by rpki-client