This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json) Hash identifier: u91LSeaAmxYEnmj6rzB30FPC5Y0wkCnADvs+tZxfiMo= Subject key identifier: F2:99:6C:0C:61:54:39:CA:CE:3A:00:CF:8E:9A:6E:C9:9C:C1:C5:67 Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3 Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3 Certificate serial: 019AF12D1F6F6CB2020F5111386E000FB826 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:00:57 +0000 Manifest this update: Sat 06 Dec 2025 01:00:57 +0000 Manifest next update: Sun 07 Dec 2025 01:00:57 +0000 Files and hashes: 1: 5eRiGQx5boAqRAuznUmYz2xfqMQ.roa (hash: zDFWtpJ7+CfToiZs8AAMHmyitJykUodCcfEyyz3iDfc=) 2: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: Ny9hQoa+6adLzaSYTEUFfRCJ0aRgrxFPEkPMSCTYojU=) 3: FuRu0xLu2HvckUxx6CKawcRdyGM.roa (hash: X0KwYGhpxludEjFHlw9/03BXtRT7Yd1fekWuVBjCvVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:1f:6f:6c:b2:02:0f:51:11:38:6e:00:0f:b8:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3 Validity Not Before: Dec 6 01:00:57 2025 GMT Not After : Dec 7 01:00:57 2025 GMT Subject: CN=f2996c0c615439cace3a00cf8e9a6ec99cc1c567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:15:bd:fb:62:7f:1a:2a:1b:45:07:5b:b5:d9: f5:0f:3d:64:bf:01:98:85:e5:7f:bd:95:70:4c:34: f8:1f:99:cc:02:38:4a:4b:06:21:84:8b:ef:27:cb: d7:0a:e2:7b:09:2d:90:14:1c:bf:b4:f3:f7:59:68: b3:16:e2:9a:4a:c8:eb:7e:a1:38:9e:68:ca:2f:9d: 8e:9a:3f:c3:e0:a1:bc:48:80:de:1f:08:63:0e:68: 05:84:ec:3c:02:29:9a:ec:43:b2:f9:56:ab:ec:ba: 66:a0:d1:75:37:d6:43:f5:de:16:6e:fb:dc:94:59: 01:c5:d5:23:1b:42:b6:88:af:58:75:56:68:5a:90: b4:f0:84:8b:2e:d8:10:dc:d1:2a:fc:c4:d4:1f:9a: e9:66:e2:50:d9:71:c7:d9:7e:1b:bf:de:f4:f9:c6: 5c:68:06:d5:28:1b:e7:21:3a:47:36:85:23:02:98: 77:47:09:03:22:d4:2e:45:27:c7:cb:64:bb:4e:38: a9:67:e5:64:6c:f0:e2:c9:2c:1f:f3:0a:c9:2f:7b: 5c:52:6b:93:30:5b:de:77:6f:9a:26:0c:58:f0:64: 25:38:81:24:b1:6f:2a:47:e4:64:fa:5b:28:9f:3c: a3:ae:14:8a:4f:62:f9:c1:9c:9a:e9:05:1c:a1:a2: ce:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:99:6C:0C:61:54:39:CA:CE:3A:00:CF:8E:9A:6E:C9:9C:C1:C5:67 X509v3 Authority Key Identifier: keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:48:14:5e:98:60:aa:4a:1e:e1:a7:77:a1:87:c1:c6:4e:43: d0:16:9e:61:dd:6f:cc:00:aa:c8:90:6b:85:75:4d:04:b4:fd: 3a:74:ba:bd:54:a2:31:f7:8b:41:d3:fa:7b:cf:9d:b8:6c:af: 8e:82:dd:9d:d4:fb:67:2c:9f:91:4e:22:19:8e:ff:b6:8c:39: c9:b0:3c:39:9c:ef:00:93:ad:63:50:0c:d7:7b:cb:96:56:9a: 4c:88:4d:54:03:b3:ee:a3:e8:7b:05:21:14:9b:ac:af:37:e6: ad:c8:6e:f3:14:10:e6:e5:af:a2:cc:37:35:43:e8:84:8c:ed: f3:72:01:19:0e:ba:ec:ba:a3:83:b4:9a:d8:8e:c1:ec:91:9d: 33:3f:58:b6:99:0e:69:34:a6:aa:6c:8e:15:67:c6:25:22:e8: 14:19:48:3d:14:66:35:81:61:77:06:19:73:fb:e5:b2:c1:21: 7a:1e:fb:b5:d5:2e:37:28:7e:4f:f6:5a:d4:bd:07:1e:69:d2: 60:09:73:31:17:59:0a:66:b5:b7:e7:fc:de:4e:d8:39:9b:a1: e8:76:7f:41:f1:1f:99:e2:cd:0a:f0:fd:c3:7e:7a:57:1d:3a: 92:cc:93:c2:8c:ad:46:27:89:d2:1e:ce:3d:e0:d6:8e:9f:d1: 12:4f:34:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLR9vbLICD1EROG4AD7gmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmNiYzM0MWM4NzQzM2QwM2U0ZGQ2MTViN2YzNDUzMTY0 MzQ0YjMwHhcNMjUxMjA2MDEwMDU3WhcNMjUxMjA3MDEwMDU3WjAzMTEwLwYDVQQD EyhmMjk5NmMwYzYxNTQzOWNhY2UzYTAwY2Y4ZTlhNmVjOTljYzFjNTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxW9+2J/GiobRQdbtdn1Dz1kvwGY heV/vZVwTDT4H5nMAjhKSwYhhIvvJ8vXCuJ7CS2QFBy/tPP3WWizFuKaSsjrfqE4 nmjKL52Omj/D4KG8SIDeHwhjDmgFhOw8Aima7EOy+Var7LpmoNF1N9ZD9d4Wbvvc lFkBxdUjG0K2iK9YdVZoWpC08ISLLtgQ3NEq/MTUH5rpZuJQ2XHH2X4bv970+cZc aAbVKBvnITpHNoUjAph3RwkDItQuRSfHy2S7TjipZ+VkbPDiySwf8wrJL3tcUmuT MFved2+aJgxY8GQlOIEksW8qR+Rk+lsonzyjrhSKT2L5wZya6QUcoaLOuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKZbAxhVDnKzjoAz46absmcwcVnMB8GA1UdIwQY MBaAFAj8vDQch0M9A+TdYVt/NFMWQ0SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQt YzEwMGE5ODZiYzVjLzEvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQtYzEwMGE5ODZiYzVj LzEvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkgUXphg qkoe4ad3oYfBxk5D0BaeYd1vzACqyJBrhXVNBLT9OnS6vVSiMfeLQdP6e8+duGyv joLdndT7ZyyfkU4iGY7/tow5ybA8OZzvAJOtY1AM13vLllaaTIhNVAOz7qPoewUh FJusrzfmrchu8xQQ5uWvosw3NUPohIzt83IBGQ667Lqjg7Sa2I7B7JGdMz9YtpkO aTSmqmyOFWfGJSLoFBlIPRRmNYFhdwYZc/vlssEheh77tdUuNyh+T/Za1L0HHmnS YAlzMRdZCma1t+f83k7YOZuh6HZ/QfEfmeLNCvD9w356Vx06ksyTwoytRieJ0h7O PeDWjp/REk80zw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:21 2025 by rpki-client