This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft File: CANpo1iWH3KE-9WR6SdzfNsFw10.mft (raw, json) Hash identifier: xZHX+QVFVp1mDqDkughKx/z5vVr2OVBJIdaG5rUdeW0= Subject key identifier: 62:B5:C9:9E:49:99:66:B1:B8:94:09:9F:56:77:D6:20:35:7F:89:0E Authority key identifier: 08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D Certificate issuer: /CN=080369a358961f7284fbd591e927737cdb05c35d Certificate serial: 019AF0F5DC217BCC6BF93774DED89D8BD1A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 00:00:35 +0000 Manifest this update: Sat 06 Dec 2025 00:00:35 +0000 Manifest next update: Sun 07 Dec 2025 00:00:35 +0000 Files and hashes: 1: CANpo1iWH3KE-9WR6SdzfNsFw10.crl (hash: qcI0dog4NHxfkQLrnblzyVR/hOSi5UtPAcJumHhBKWU=) 2: GP2HIzJfCfnGM2MVlkSHwUHaN84.roa (hash: ETW1pgFwQtTKE9AFyJGtQ+Xl0Zj/E5KZv9xhDaWW5T8=) 3: qfVV9jSGkUSpTVAmIfthWu05Cnw.roa (hash: UbRHP3L39dp/ZkCYjMy0IuUuv/BT0urLDu7xXNtiXsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:dc:21:7b:cc:6b:f9:37:74:de:d8:9d:8b:d1:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=080369a358961f7284fbd591e927737cdb05c35d Validity Not Before: Dec 6 00:00:35 2025 GMT Not After : Dec 7 00:00:35 2025 GMT Subject: CN=62b5c99e499966b1b894099f5677d620357f890e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:62:59:fe:b3:9a:50:15:b4:39:f2:fe:2b: af:1c:e7:22:55:9a:32:c1:a8:4a:e4:bd:6f:c6:11: d1:fb:94:33:1a:1a:df:63:f6:7c:30:57:84:6b:85: 3f:f2:60:c7:cc:87:aa:07:99:84:8a:29:97:3b:b5: 94:86:50:1d:3b:3c:05:e7:8e:e7:b0:9b:30:ed:14: 4b:33:50:ab:ac:2d:1c:2f:50:6c:8e:f2:8c:52:5a: 52:73:09:97:a3:12:0e:16:52:05:90:7e:69:5b:3e: dc:58:a3:8f:28:5d:72:9f:07:d8:fa:0e:25:1c:b7: 41:13:c2:d6:52:53:48:ca:99:fb:fd:6c:0a:78:15: 61:1c:e3:18:bc:57:db:40:0e:ff:92:42:25:47:b2: 01:66:78:ba:d1:64:06:62:5c:03:ed:be:a4:93:31: 6d:25:38:1a:11:ed:4e:71:51:d0:10:ee:29:3c:2c: 76:79:ab:e8:83:da:91:58:25:be:57:b2:82:c1:45: 19:7e:5d:db:7c:4b:2c:a9:3f:be:6f:42:9f:40:47: fb:06:e6:5c:3a:49:14:2e:ef:b4:92:ed:1f:4b:df: 58:9f:82:6c:64:7d:36:6e:e6:f9:bd:95:01:6f:37: 50:7b:d8:3e:41:00:51:27:74:39:d5:46:43:cd:80: 90:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B5:C9:9E:49:99:66:B1:B8:94:09:9F:56:77:D6:20:35:7F:89:0E X509v3 Authority Key Identifier: keyid:08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:4f:26:a2:9b:63:0d:c9:42:e7:7f:ca:c8:df:bd:cb:1e:e9: 9d:09:30:75:d7:f8:c9:06:6f:78:05:7e:ca:34:0b:a2:e3:3e: 02:a6:d9:25:e3:85:42:6b:6c:d8:c5:2d:17:ed:f0:80:2e:b9: 13:6f:78:f0:88:09:d1:be:5a:d1:cb:f3:05:7c:a8:7d:84:70: ec:99:4e:09:bb:4f:56:27:54:63:00:a1:41:9a:89:0f:e8:e4: 6d:7d:57:f1:4c:06:1b:0d:31:49:ea:76:a8:0e:1a:5c:74:a4: 5f:fc:80:1e:ea:f4:93:c2:56:d6:8c:54:b7:24:27:98:42:66: 78:eb:60:e1:ab:2e:24:9d:81:0c:c0:eb:59:a0:69:6b:97:00: c3:af:58:ca:df:15:f8:48:e3:fb:ae:7e:14:23:33:6e:ed:e9: c2:e0:85:2b:ff:02:cf:2e:c6:34:3d:37:8e:17:cb:fc:c4:f6: 81:10:f2:59:c9:f8:18:b3:7a:7f:bd:95:59:f6:c3:96:94:f6: c8:df:ad:7a:09:8e:b3:5b:b2:3b:4f:73:b4:03:ee:12:e5:fe: b4:cc:5f:68:e9:40:24:c0:9a:3c:80:df:d1:63:75:4d:9b:ba: 42:96:ff:df:49:e9:c7:d5:ca:a5:f3:2b:88:2e:db:2f:7e:f4: 9e:71:ce:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dwhe8xr+Td03tidi9GkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDM2OWEzNTg5NjFmNzI4NGZiZDU5MWU5Mjc3MzdjZGIw NWMzNWQwHhcNMjUxMjA2MDAwMDM1WhcNMjUxMjA3MDAwMDM1WjAzMTEwLwYDVQQD Eyg2MmI1Yzk5ZTQ5OTk2NmIxYjg5NDA5OWY1Njc3ZDYyMDM1N2Y4OTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9ZiWf6zmlAVtDny/iuvHOciVZoy wahK5L1vxhHR+5QzGhrfY/Z8MFeEa4U/8mDHzIeqB5mEiimXO7WUhlAdOzwF547n sJsw7RRLM1CrrC0cL1BsjvKMUlpScwmXoxIOFlIFkH5pWz7cWKOPKF1ynwfY+g4l HLdBE8LWUlNIypn7/WwKeBVhHOMYvFfbQA7/kkIlR7IBZni60WQGYlwD7b6kkzFt JTgaEe1OcVHQEO4pPCx2eavog9qRWCW+V7KCwUUZfl3bfEssqT++b0KfQEf7BuZc OkkULu+0ku0fS99Yn4JsZH02bub5vZUBbzdQe9g+QQBRJ3Q51UZDzYCQvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGK1yZ5JmWaxuJQJn1Z31iA1f4kOMB8GA1UdIwQY MBaAFAgDaaNYlh9yhPvVkeknc3zbBcNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FOcG8xaVdIM0tFLTlXUjZTZHpmTnNGdzEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMWFhYzMtYmNlOS00ZDdlLWE1ZmMt M2YxYjE2YzZjZDYzLzEvQ0FOcG8xaVdIM0tFLTlXUjZTZHpmTnNGdzEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8wMWFhYzMtYmNlOS00ZDdlLWE1ZmMtM2YxYjE2YzZjZDYz LzEvQ0FOcG8xaVdIM0tFLTlXUjZTZHpmTnNGdzEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmE8moptj DclC53/KyN+9yx7pnQkwddf4yQZveAV+yjQLouM+AqbZJeOFQmts2MUtF+3wgC65 E2948IgJ0b5a0cvzBXyofYRw7JlOCbtPVidUYwChQZqJD+jkbX1X8UwGGw0xSep2 qA4aXHSkX/yAHur0k8JW1oxUtyQnmEJmeOtg4asuJJ2BDMDrWaBpa5cAw69Yyt8V +Ejj+65+FCMzbu3pwuCFK/8Czy7GND03jhfL/MT2gRDyWcn4GLN6f72VWfbDlpT2 yN+tegmOs1uyO09ztAPuEuX+tMxfaOlAJMCaPIDf0WN1TZu6Qpb/30npx9XKpfMr iC7bL370nnHOuA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:47 2025 by rpki-client