This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json) Hash identifier: CnPeEIO1thk7zKsz9+fCV6gB7yW8XMxTurlE6XIX410= Subject key identifier: EE:80:46:06:01:18:42:9F:CA:B7:B7:5B:9C:E9:50:6A:08:CB:56:1F Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b Certificate serial: 019AF31BBD4B14FCFE9F339AEC2411F8CE6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 10:01:12 +0000 Manifest this update: Sat 06 Dec 2025 10:01:12 +0000 Manifest next update: Sun 07 Dec 2025 10:01:12 +0000 Files and hashes: 1: 5kFz87V3cREdddc3AsaZImesrc4.roa (hash: GMf/VeYSaAQLAvigW84goiaYuSw8QRXcx94y9RzK0U8=) 2: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: 8uup7w/xT87dQgof6c8NqnYM9RVhQJi9PzSAaqDJdQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:bd:4b:14:fc:fe:9f:33:9a:ec:24:11:f8:ce:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b Validity Not Before: Dec 6 10:01:12 2025 GMT Not After : Dec 7 10:01:12 2025 GMT Subject: CN=ee8046060118429fcab7b75b9ce9506a08cb561f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:40:db:09:ca:5a:4f:b1:55:55:0b:f9:77:a8: ae:c8:eb:c9:f9:ae:fd:cd:b1:50:e2:0a:ef:d4:e6: 06:3d:b2:73:39:57:39:17:06:14:da:b9:fb:70:6d: c7:44:f0:9c:6b:b1:59:5a:40:2b:6c:0d:91:a0:2e: fd:2a:a6:7a:87:5d:5e:3f:44:da:db:20:da:d2:40: c1:54:33:a8:64:76:d4:0a:01:6f:9b:70:c5:2b:54: 8c:b6:82:7d:01:24:b6:66:da:0b:01:f6:00:62:f8: 9e:6f:b9:d7:51:6f:ad:4c:aa:81:b2:d9:84:2c:82: 24:f8:98:dc:56:70:b3:eb:38:46:42:5b:b7:29:13: bb:7a:75:83:1a:4e:b2:61:43:d7:cb:1c:50:77:76: 57:b9:35:e3:db:48:37:f4:a5:e2:c5:50:77:14:a7: 28:13:3d:d8:1e:4e:26:98:17:8a:5f:79:2e:8f:39: 57:be:5c:fb:a7:48:9e:06:8f:85:f6:64:4c:84:d5: a6:a2:bc:5d:d6:ad:9c:a5:57:8d:34:69:69:80:29: 56:e8:32:5a:bc:63:2e:02:96:42:1e:a8:4e:85:d8: 70:06:2e:30:a6:10:97:c5:73:7d:9f:c5:52:20:cf: f2:6d:6b:e0:4e:9a:4c:56:ab:05:f6:f8:50:55:45: 39:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:80:46:06:01:18:42:9F:CA:B7:B7:5B:9C:E9:50:6A:08:CB:56:1F X509v3 Authority Key Identifier: keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:da:24:de:43:fa:09:38:29:63:be:4a:fb:2d:c1:3e:5b:7d: 23:96:b2:c9:5f:24:a3:7c:ab:a8:99:f2:19:49:8a:6c:1f:61: be:4f:ca:d2:b8:18:f2:75:73:79:51:07:30:44:57:46:06:08: f4:7d:6d:9a:60:76:9f:66:b6:27:f4:88:c4:35:77:15:f3:d1: f8:14:55:7c:64:78:50:8e:3a:21:fa:f8:60:67:a1:29:d8:9c: 3a:95:04:f7:70:a5:e8:6b:a1:f6:70:78:4a:c9:50:c9:d5:77: 69:56:c7:14:86:23:89:f7:05:54:34:54:5b:cd:05:46:6d:22: c8:8b:2e:3a:88:85:8f:2e:d8:4b:96:4f:4e:82:bb:03:a8:0d: 54:3a:82:d8:61:ec:3d:62:57:e6:ca:40:dd:a4:03:01:bc:e1: 57:6a:22:08:b3:36:01:5f:8e:f0:79:88:cd:dd:5e:96:b4:ac: 8a:8b:a0:5d:59:c0:ca:5b:6b:fc:f8:a1:08:50:d4:20:0e:52: 5d:35:db:cd:a3:b0:e9:4b:be:da:fa:54:70:88:b3:03:d0:92: 1f:0a:59:ca:56:10:56:ef:9e:9f:42:59:b7:89:50:5d:a6:ea: 6d:df:26:12:b0:68:b4:ea:e0:fd:c1:38:8a:59:bb:aa:74:94: c8:08:d0:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG71LFPz+nzOa7CQR+M5qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NThiNTRiZmVlOTg5NmM0YWRhN2RjMThiM2I3Zjk3MTlk YTA0NmIwHhcNMjUxMjA2MTAwMTEyWhcNMjUxMjA3MTAwMTEyWjAzMTEwLwYDVQQD EyhlZTgwNDYwNjAxMTg0MjlmY2FiN2I3NWI5Y2U5NTA2YTA4Y2I1NjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEDbCcpaT7FVVQv5d6iuyOvJ+a79 zbFQ4grv1OYGPbJzOVc5FwYU2rn7cG3HRPCca7FZWkArbA2RoC79KqZ6h11eP0Ta 2yDa0kDBVDOoZHbUCgFvm3DFK1SMtoJ9ASS2ZtoLAfYAYvieb7nXUW+tTKqBstmE LIIk+JjcVnCz6zhGQlu3KRO7enWDGk6yYUPXyxxQd3ZXuTXj20g39KXixVB3FKco Ez3YHk4mmBeKX3kujzlXvlz7p0ieBo+F9mRMhNWmorxd1q2cpVeNNGlpgClW6DJa vGMuApZCHqhOhdhwBi4wphCXxXN9n8VSIM/ybWvgTppMVqsF9vhQVUU5ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6ARgYBGEKfyre3W5zpUGoIy1YfMB8GA1UdIwQY MBaAFAlYtUv+6YlsStp9wYs7f5cZ2gRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEt ZmY0YzcxODMwMjRmLzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEtZmY0YzcxODMwMjRm LzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqtok3kP6 CTgpY75K+y3BPlt9I5ayyV8ko3yrqJnyGUmKbB9hvk/K0rgY8nVzeVEHMERXRgYI 9H1tmmB2n2a2J/SIxDV3FfPR+BRVfGR4UI46Ifr4YGehKdicOpUE93Cl6Guh9nB4 SslQydV3aVbHFIYjifcFVDRUW80FRm0iyIsuOoiFjy7YS5ZPToK7A6gNVDqC2GHs PWJX5spA3aQDAbzhV2oiCLM2AV+O8HmIzd1elrSsiougXVnAyltr/PihCFDUIA5S XTXbzaOw6Uu+2vpUcIizA9CSHwpZylYQVu+en0JZt4lQXabqbd8mErBotOrg/cE4 ilm7qnSUyAjQTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:41:10 2025 by rpki-client