This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json) Hash identifier: 4if4x3M/oo3Dl3Ju0ZyOScNPmb69UHXhoSBKpQe6fqM= Subject key identifier: 1F:84:02:1C:28:33:79:5A:B4:F9:7E:5F:83:24:56:87:8F:C6:AD:7B Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Certificate serial: 019AF1D227DEF7B4872A0849F46C57A27EB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft Manifest number: 1450 Signing time: Sat 06 Dec 2025 04:01:13 +0000 Manifest this update: Sat 06 Dec 2025 04:01:13 +0000 Manifest next update: Sun 07 Dec 2025 04:01:13 +0000 Files and hashes: 1: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (hash: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=) 2: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: GEeAe2bc1/10nuxvTNMF9g2WkQs2fMwJetYQVOplB0o=) 3: HtV3FEKPYRYDY8G-1hRWsnLwlC0.roa (hash: Fe1/XdGKNSuTPZCZpZdJHVC5upZbn8MH26YO1cQpOgY=) 4: MK8eqrMP3j5ymuZ4qk999b-iSkQ.roa (hash: nNhLpGCxsknDRkcaORpA6GPvezr0Frk5rCO7fQ7CtRw=) 5: R8GgH67MzGYrmtUBlZ44LYdM_44.roa (hash: eNGVD5qiBokWARwlEPYWPW2sMCzs8hQrScOks2RkSK0=) 6: XUbpg-tBDuOM-uZKqtdsmxOB38M.roa (hash: tw+hhnN/+elfL/3HxAjHoQN99yUqRR6yBg96qTz78+M=) 7: bKr8UWW3-RF_D0B7S4TpF3ssvtc.roa (hash: kYFW2by3SyFaWc3VlVXDw0SIgIp3P05RN26zndjXy/k=) 8: mtdclY8O-xs5gcnHoOhafDFUgKI.roa (hash: rbz7XQGehDM4qlCCC493lW8PFTdkUVLafneGpzVymQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:27:de:f7:b4:87:2a:08:49:f4:6c:57:a2:7e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Validity Not Before: Dec 6 04:01:13 2025 GMT Not After : Dec 7 04:01:13 2025 GMT Subject: CN=1f84021c2833795ab4f97e5f832456878fc6ad7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:98:94:46:76:a8:0f:2b:68:ba:20:b7:7c: 06:f8:f6:88:94:b4:8c:b0:9d:b1:ca:be:9f:be:c8: 47:68:88:b7:51:68:3e:f7:81:7b:da:98:ff:39:ff: b0:d3:65:09:32:10:86:68:da:8a:8a:b0:d6:5b:35: 61:bc:c2:c3:ab:a4:f0:96:6c:02:80:db:7b:dc:ce: cc:d0:65:1a:77:35:26:0f:e2:0b:1f:b3:bf:c7:31: d6:28:a6:8c:ea:dd:45:ab:14:81:c1:4b:9d:a2:4f: f8:74:0d:db:84:dd:34:9d:8f:ec:ec:c7:3b:f7:51: 48:44:29:d3:1e:58:fd:93:0d:4d:6d:dd:79:c3:ac: 5e:48:80:75:b7:83:b4:7a:2d:73:df:4d:1c:85:08: de:ee:80:61:6b:83:34:bc:a3:50:7b:4d:d1:1e:1f: e4:5a:a2:ea:a7:d4:c6:7e:66:5e:7c:c7:2f:73:c1: 97:16:10:d7:37:4e:d8:3c:a6:bb:88:c2:40:3a:e7: 66:87:f1:58:b2:69:e4:b4:8a:ea:04:b4:8f:fe:9a: 0e:26:64:8d:18:86:bc:db:7b:6a:85:04:83:4e:31: 8f:3f:51:d2:23:5b:2f:e4:1a:0a:5c:e1:f4:b3:81: bd:b1:8a:73:15:bc:47:7d:5a:7d:71:0d:3b:b3:ac: 3a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:84:02:1C:28:33:79:5A:B4:F9:7E:5F:83:24:56:87:8F:C6:AD:7B X509v3 Authority Key Identifier: keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e6:9c:c8:91:0e:f7:2a:3e:a0:a2:a9:ac:b1:10:2f:6d:46: 0b:2e:8c:fc:94:9e:06:32:d0:c8:39:60:0a:58:f8:f7:f0:17: 61:bd:db:d9:8e:80:4d:ae:58:41:44:e1:f1:82:d6:a4:e1:9c: fd:e4:4e:75:8a:f2:e4:80:31:88:6e:9a:0c:88:11:81:a0:9b: 00:f2:38:2e:6e:5c:a9:c9:72:0b:81:b9:fc:85:19:d1:e2:c3: 57:ab:bf:1c:16:f4:21:4a:b2:1e:f7:43:04:02:ea:c0:ba:d7: a0:ec:1e:58:db:55:b5:c9:e4:b1:b4:8e:ff:02:b8:36:60:42: 2b:23:67:16:42:2f:a1:bf:e6:7f:8f:09:e5:38:fb:20:0f:54: 1b:30:a9:33:77:95:f3:51:e4:c2:1b:6b:a1:8b:f5:33:cb:2f: 28:fb:a9:38:be:ba:20:31:4a:ed:76:92:13:ce:93:a1:7a:3d: 56:8e:47:3d:85:dc:e2:a3:84:10:eb:15:76:0d:7e:1f:6b:d5: 09:06:77:56:2f:75:98:c3:42:ad:87:8b:e9:89:10:c1:c8:89: 43:61:fe:be:d5:c4:95:b0:13:d5:88:02:f9:f9:d4:0f:43:3e: 09:30:9c:de:91:df:eb:08:61:ca:64:74:b2:65:26:55:af:73: 0a:3e:01:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ife97SHKghJ9GxXon63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZjYxNzk4ZGQxODk2NWMwMjdhZmE3ZjkzYWUwMzBmZjVl MWQ3NmUwHhcNMjUxMjA2MDQwMTEzWhcNMjUxMjA3MDQwMTEzWjAzMTEwLwYDVQQD EygxZjg0MDIxYzI4MzM3OTVhYjRmOTdlNWY4MzI0NTY4NzhmYzZhZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAqYlEZ2qA8raLogt3wG+PaIlLSM sJ2xyr6fvshHaIi3UWg+94F72pj/Of+w02UJMhCGaNqKirDWWzVhvMLDq6TwlmwC gNt73M7M0GUadzUmD+ILH7O/xzHWKKaM6t1FqxSBwUudok/4dA3bhN00nY/s7Mc7 91FIRCnTHlj9kw1Nbd15w6xeSIB1t4O0ei1z300chQje7oBha4M0vKNQe03RHh/k WqLqp9TGfmZefMcvc8GXFhDXN07YPKa7iMJAOudmh/FYsmnktIrqBLSP/poOJmSN GIa823tqhQSDTjGPP1HSI1sv5BoKXOH0s4G9sYpzFbxHfVp9cQ07s6w6JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+EAhwoM3latPl+X4MkVoePxq17MB8GA1UdIwQY MBaAFAr2F5jdGJZcAnr6f5OuAw/14dduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEt ZDZlMWUzNDdmOWM3LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEtZDZlMWUzNDdmOWM3 LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeacyJEO 9yo+oKKprLEQL21GCy6M/JSeBjLQyDlgClj49/AXYb3b2Y6ATa5YQUTh8YLWpOGc /eROdYry5IAxiG6aDIgRgaCbAPI4Lm5cqclyC4G5/IUZ0eLDV6u/HBb0IUqyHvdD BALqwLrXoOweWNtVtcnksbSO/wK4NmBCKyNnFkIvob/mf48J5Tj7IA9UGzCpM3eV 81HkwhtroYv1M8svKPupOL66IDFK7XaSE86ToXo9Vo5HPYXc4qOEEOsVdg1+H2vV CQZ3Vi91mMNCrYeL6YkQwciJQ2H+vtXElbAT1YgC+fnUD0M+CTCc3pHf6whhymR0 smUmVa9zCj4Bjg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:58 2025 by rpki-client