This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json) Hash identifier: 32vGRFlOhAhFcb9nNLXsJr2EPW/16j3TSRe9yVkbOeQ= Subject key identifier: 8A:DD:95:DB:89:74:C1:70:39:E8:2D:24:E5:82:2A:FE:C6:80:F2:FB Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd Certificate serial: 019B3DC79E2F976AA2A8EEBFD13B380BEBAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft Manifest number: 17AA Signing time: Sat 20 Dec 2025 22:00:50 +0000 Manifest this update: Sat 20 Dec 2025 22:00:50 +0000 Manifest next update: Sun 21 Dec 2025 22:00:50 +0000 Files and hashes: 1: 1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa (hash: B3C32+APojLLpoq0P/3+v4OioF2SbZXBsRXy/mWXSxY=) 2: AqjmEKa_KPT9IwoGnFjP0jiJ6oM.roa (hash: XfS/oUTMWeZlyIQCw2CHPz1Yz8M9tUiaYOFg7dyhr+A=) 3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: CTIl2veV7zBen2rlyG6R4JM9PVCRfXEgQjgTjcVpqiU=) 4: ecf817WnJwsGfmatFeQyUhb3Llc.roa (hash: OXDEPH7uN3GYyUlwskriOcVgXTD3tnLi2wfgN52n2YQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:9e:2f:97:6a:a2:a8:ee:bf:d1:3b:38:0b:eb:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd Validity Not Before: Dec 20 22:00:50 2025 GMT Not After : Dec 21 22:00:50 2025 GMT Subject: CN=8add95db8974c17039e82d24e5822afec680f2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:af:fd:4f:ee:42:41:4b:10:17:14:43:33:ef: e6:dd:cf:66:d8:2e:71:87:60:89:17:8a:e6:63:ed: 35:c9:0b:97:12:ac:df:cc:31:06:1d:a6:21:dc:cb: 46:25:84:19:fa:08:46:fe:35:51:91:da:fd:ac:8a: 1d:0a:fc:5b:00:de:5b:d5:12:63:9c:f2:32:1c:fa: 7b:68:8e:4a:49:46:83:3f:fb:63:78:66:c8:16:b1: 8c:14:48:fe:c1:46:6f:05:d6:c6:c7:02:56:ff:84: d4:35:39:e4:35:3e:52:2e:10:b9:84:d1:e6:24:34: a1:a4:67:5d:8b:da:09:55:66:3c:f9:b5:50:89:17: 14:70:b1:79:a7:dc:71:9d:9b:ea:93:db:40:e5:c5: 3d:9f:cd:2b:8e:d8:45:93:0b:d6:f2:e4:de:ff:46: f3:9b:b7:d3:4d:1b:14:78:e2:0b:4b:79:c0:d4:6c: 3a:bb:95:b3:b6:0b:46:25:0d:c9:44:47:cb:54:9b: cd:e1:75:6a:86:ab:76:99:0f:dd:55:72:fc:48:d1: b9:a4:c2:4d:e3:ba:00:ff:c6:b2:f8:99:71:e4:55: dc:35:9a:1e:63:81:1c:35:32:d8:4e:88:6e:e2:88: 8a:d2:c2:52:ee:60:29:8d:78:f2:1d:e7:ea:ec:d7: f8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DD:95:DB:89:74:C1:70:39:E8:2D:24:E5:82:2A:FE:C6:80:F2:FB X509v3 Authority Key Identifier: keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a5:9a:b6:01:f6:2a:be:02:4c:40:25:57:05:c9:83:f6:04: 77:ba:79:59:a0:54:0a:d3:a8:1a:dd:4c:47:84:07:ff:d2:0d: f3:b5:80:4e:e5:68:ae:26:55:78:fb:f1:f0:03:f6:07:fb:01: 67:17:de:eb:e5:9c:12:b2:4d:e4:bb:df:8b:db:f5:88:8f:ee: 89:f5:94:0e:13:2d:43:e8:84:b6:fa:ab:33:24:ab:c4:c3:a4: 01:b8:5f:47:f3:14:43:7b:99:ae:8f:4e:62:84:95:34:93:f9: e8:8e:a3:6f:fa:77:6f:c0:81:97:62:65:17:c7:80:20:2b:31: ba:b5:01:b3:07:a8:b5:86:75:51:7a:af:42:0d:b8:72:d5:ff: dc:41:65:46:fb:e1:3a:1a:a7:96:04:38:f0:b3:e1:96:36:51: eb:a5:78:8f:ac:fa:62:c1:6f:80:53:e0:2c:46:58:fe:13:4c: 68:03:c9:e1:4f:49:6d:f1:22:86:75:7e:28:ac:ac:7c:c0:3d: f4:9c:56:85:4d:30:e9:e0:e8:4c:65:db:ea:cb:3e:c8:e3:02: ab:02:55:f3:6d:b8:b2:54:23:85:45:88:fa:84:e9:4a:fd:26: 8c:f6:25:72:61:dd:aa:0e:e8:7c:d5:b3:d0:13:0b:66:16:58: 5a:fc:6b:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x54vl2qiqO6/0Ts4C+urMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOTQ5YjQ3ZGYzMTNjYmFiOTQ1MmRhOThmY2M2Mzc2MDhh OTA5YmQwHhcNMjUxMjIwMjIwMDUwWhcNMjUxMjIxMjIwMDUwWjAzMTEwLwYDVQQD Eyg4YWRkOTVkYjg5NzRjMTcwMzllODJkMjRlNTgyMmFmZWM2ODBmMmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq/9T+5CQUsQFxRDM+/m3c9m2C5x h2CJF4rmY+01yQuXEqzfzDEGHaYh3MtGJYQZ+ghG/jVRkdr9rIodCvxbAN5b1RJj nPIyHPp7aI5KSUaDP/tjeGbIFrGMFEj+wUZvBdbGxwJW/4TUNTnkNT5SLhC5hNHm JDShpGddi9oJVWY8+bVQiRcUcLF5p9xxnZvqk9tA5cU9n80rjthFkwvW8uTe/0bz m7fTTRsUeOILS3nA1Gw6u5WztgtGJQ3JREfLVJvN4XVqhqt2mQ/dVXL8SNG5pMJN 47oA/8ay+Jlx5FXcNZoeY4EcNTLYTohu4oiK0sJS7mApjXjyHefq7Nf4rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrdlduJdMFwOegtJOWCKv7GgPL7MB8GA1UdIwQY MBaAFHGUm0ffMTy6uUUtqY/MY3YIqQm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgt MDA2NmY1NDFmYWVhLzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgtMDA2NmY1NDFmYWVh LzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKWatgH2 Kr4CTEAlVwXJg/YEd7p5WaBUCtOoGt1MR4QH/9IN87WATuVoriZVePvx8AP2B/sB Zxfe6+WcErJN5Lvfi9v1iI/uifWUDhMtQ+iEtvqrMySrxMOkAbhfR/MUQ3uZro9O YoSVNJP56I6jb/p3b8CBl2JlF8eAICsxurUBsweotYZ1UXqvQg24ctX/3EFlRvvh OhqnlgQ48LPhljZR66V4j6z6YsFvgFPgLEZY/hNMaAPJ4U9JbfEihnV+KKysfMA9 9JxWhU0w6eDoTGXb6ss+yOMCqwJV8224slQjhUWI+oTpSv0mjPYlcmHdqg7ofNWz 0BMLZhZYWvxrnA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:19:56 2025 by rpki-client