This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json) Hash identifier: IFKjoPj5oRKHot6xoSOuLxACOGLEH9Mqu8Vu7G73OUs= Subject key identifier: EA:63:29:DC:80:D3:BF:7A:06:CB:F4:E9:75:2E:AB:F5:CD:AD:A4:87 Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5 Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5 Certificate serial: 019B34C5099F654C5A17D7C73058E4E577D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 04:01:26 +0000 Manifest this update: Fri 19 Dec 2025 04:01:26 +0000 Manifest next update: Sat 20 Dec 2025 04:01:26 +0000 Files and hashes: 1: 1NnPIelPhTu2KqOrRaVheTjGDtA.roa (hash: rysz73IInmOVJuH+riwA3J47+EGtI1eXu44kPUE1b4E=) 2: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: Iqvc1yXLwuekq4iYgiloPSqWnZw2wj8zCGjffFDqBf8=) 3: FSxkv144AbC5PzM8dG4BNoPhaic.asa (hash: 03r5BEM2yZSr1vAPxFAZ56oxX+2rQMHlRynV2W59QMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:09:9f:65:4c:5a:17:d7:c7:30:58:e4:e5:77:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5 Validity Not Before: Dec 19 04:01:26 2025 GMT Not After : Dec 20 04:01:26 2025 GMT Subject: CN=ea6329dc80d3bf7a06cbf4e9752eabf5cdada487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:66:0f:b7:98:65:e4:20:1b:5c:df:64:12:3c: a4:17:e3:ef:4b:fc:e8:cd:ad:1b:27:7d:04:8c:bf: 8f:e4:26:82:c1:b7:e5:ed:03:87:e6:0c:d8:a1:02: 8e:e0:fd:47:1f:d6:65:ed:45:60:9e:c3:8e:f7:8c: 39:9c:10:69:c1:a7:91:10:df:7e:7a:fd:3d:b5:24: bb:db:f2:ab:76:63:65:41:69:16:f9:0a:dc:56:db: aa:57:63:3b:d4:92:15:16:e9:92:cc:7b:c4:ab:af: ef:a2:5e:f2:81:aa:30:83:8f:00:cc:0d:5b:90:f8: 80:b2:95:87:02:e5:03:8f:5d:f0:38:ce:d7:88:71: c8:b8:7c:12:4b:7f:f6:a3:46:e5:f1:f9:c2:cf:25: ce:4b:a8:02:73:2c:17:8d:f2:ff:75:af:d8:ed:36: 44:ca:c8:57:18:e9:65:2c:1b:7a:1c:a1:1a:18:20: 26:81:67:da:64:ca:4b:a3:d7:e1:34:47:ba:bd:7a: e0:2e:a0:39:ee:2b:61:b4:29:eb:5b:4a:f5:4e:d1: 41:5a:eb:3d:0a:80:7b:5b:a8:12:98:23:29:89:99: f9:99:0c:d4:3c:48:6e:d4:de:ba:c2:ce:60:94:c1: dc:72:cf:c4:4a:39:22:f8:9d:76:da:f7:bd:50:3c: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:63:29:DC:80:D3:BF:7A:06:CB:F4:E9:75:2E:AB:F5:CD:AD:A4:87 X509v3 Authority Key Identifier: keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f4:de:4f:a9:ca:ac:fc:8e:21:58:73:7b:16:26:d9:75:26: c8:cb:9a:7d:45:d5:12:23:db:e0:88:db:b3:25:99:0b:3b:55: df:66:d4:c3:54:c1:41:6e:e8:80:54:62:a5:79:ad:4b:37:4c: 91:71:61:21:c8:6c:5b:e0:8b:a8:f7:23:94:29:92:ff:34:60: 99:a4:23:4c:45:87:04:c2:5b:7e:11:25:b2:4e:51:6a:59:e7: e5:ce:cf:45:50:66:a7:d8:9a:bd:ec:16:ae:54:54:23:9d:0a: de:f3:73:23:d9:7b:29:db:33:c7:1c:2d:26:be:28:bc:65:49: da:d8:b4:06:26:e8:03:bf:09:85:f0:f7:3e:bf:84:22:2d:6b: 4c:c4:4c:08:80:a5:41:2e:45:59:84:2a:27:42:79:3a:3f:42: e3:98:33:94:db:13:2f:d7:4a:1e:c4:d0:e0:7f:c4:3c:fc:06: 6e:a0:37:f0:f1:a9:9a:9e:6a:d6:fb:08:1c:20:a3:0f:b4:03: ac:a2:8d:52:bb:88:20:02:9e:36:e9:e3:17:02:25:0e:f4:f1: 36:8b:b3:ff:87:c8:6c:ea:82:96:c0:90:af:4d:8e:36:5d:e3: b0:95:b1:04:3c:00:d6:8a:64:df:c8:77:60:fa:5f:61:c5:49: ec:c8:e8:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xQmfZUxaF9fHMFjk5XfTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NTkwZWVmOWUxZDFhZjhiNzJlNTE4ZWM2Y2NmNTljZDdm NzUxZjUwHhcNMjUxMjE5MDQwMTI2WhcNMjUxMjIwMDQwMTI2WjAzMTEwLwYDVQQD EyhlYTYzMjlkYzgwZDNiZjdhMDZjYmY0ZTk3NTJlYWJmNWNkYWRhNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWYPt5hl5CAbXN9kEjykF+PvS/zo za0bJ30EjL+P5CaCwbfl7QOH5gzYoQKO4P1HH9Zl7UVgnsOO94w5nBBpwaeREN9+ ev09tSS72/KrdmNlQWkW+QrcVtuqV2M71JIVFumSzHvEq6/vol7ygaowg48AzA1b kPiAspWHAuUDj13wOM7XiHHIuHwSS3/2o0bl8fnCzyXOS6gCcywXjfL/da/Y7TZE yshXGOllLBt6HKEaGCAmgWfaZMpLo9fhNEe6vXrgLqA57ithtCnrW0r1TtFBWus9 CoB7W6gSmCMpiZn5mQzUPEhu1N66ws5glMHccs/ESjki+J122ve9UDxrDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpjKdyA0796Bsv06XUuq/XNraSHMB8GA1UdIwQY MBaAFAlZDu+eHRr4ty5RjsbM9ZzX91H1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83N2YyYzUtNDEyYS00ZTRkLThjYmYt ZTRkOGNmNzMzZWM5LzEvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83N2YyYzUtNDEyYS00ZTRkLThjYmYtZTRkOGNmNzMzZWM5 LzEvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPTeT6nK rPyOIVhzexYm2XUmyMuafUXVEiPb4IjbsyWZCztV32bUw1TBQW7ogFRipXmtSzdM kXFhIchsW+CLqPcjlCmS/zRgmaQjTEWHBMJbfhElsk5Ralnn5c7PRVBmp9iavewW rlRUI50K3vNzI9l7KdszxxwtJr4ovGVJ2ti0BiboA78JhfD3Pr+EIi1rTMRMCICl QS5FWYQqJ0J5Oj9C45gzlNsTL9dKHsTQ4H/EPPwGbqA38PGpmp5q1vsIHCCjD7QD rKKNUruIIAKeNunjFwIlDvTxNouz/4fIbOqClsCQr02ONl3jsJWxBDwA1opk38h3 YPpfYcVJ7MjoNg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:32:01 2025 by rpki-client