This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft File: CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft (raw, json) Hash identifier: 8Mi7Yba44/x0ZBOByEj5y0CEbPKxOtoBFLDCXS1nydY= Subject key identifier: FF:43:AE:AD:8A:20:E2:93:1A:9D:3C:56:EC:5C:6D:40:A8:ED:6F:09 Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89 Certificate issuer: /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89 Certificate serial: 019AF23FFB6B00AA7FB572F502D4FAF3BD2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:01:10 +0000 Manifest this update: Sat 06 Dec 2025 06:01:10 +0000 Manifest next update: Sun 07 Dec 2025 06:01:10 +0000 Files and hashes: 1: CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl (hash: oKS16Ugdd4yAVV9EyCItd2IYnLDnFYg68ju2sRwht2U=) 2: eEiaQt6Ze9WxjrZL-d6aNqKJOCY.roa (hash: uCPWdRUrjQcc9uIJEuG8eyiVfoHC/vX0+wXoSm20VqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:fb:6b:00:aa:7f:b5:72:f5:02:d4:fa:f3:bd:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89 Validity Not Before: Dec 6 06:01:10 2025 GMT Not After : Dec 7 06:01:10 2025 GMT Subject: CN=ff43aead8a20e2931a9d3c56ec5c6d40a8ed6f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:43:a1:2a:7a:f4:cf:32:d4:09:80:85:d1: ea:cc:ba:dd:2d:f3:c7:1c:64:48:ce:ae:8c:ff:a7: 97:d3:bd:78:c4:b7:88:97:e1:63:f8:d2:21:eb:30: f9:df:df:7d:c4:bd:6d:85:4a:f3:86:c3:2c:db:89: 54:20:fd:8f:53:20:e0:65:30:ab:c1:bf:ec:9d:4f: ea:2a:c1:82:fa:28:47:87:ee:1b:9b:4a:c6:70:ac: a3:09:41:43:e3:f2:96:e1:82:75:53:7b:b3:3c:2e: 32:cb:1d:11:93:f2:79:3d:2f:55:08:37:cd:6d:f7: 8a:24:43:46:52:e4:0a:fe:55:dc:25:c3:84:48:24: 94:ca:f8:a8:83:1a:6c:3e:80:24:6b:9e:9b:37:d9: f6:da:30:33:2b:59:0d:21:c0:eb:ff:35:47:11:22: e6:05:65:73:26:c0:f9:a3:06:76:b3:b7:d5:bd:81: 88:ac:1a:6a:28:51:16:b4:64:18:0c:e4:e2:79:70: 5d:f0:34:79:f6:6c:27:d3:e2:94:d2:ba:e8:48:4d: c1:1f:76:3a:c0:fb:f2:3e:fd:c2:0a:18:13:a4:8e: ff:9b:8b:78:d6:ee:90:9d:cd:97:c6:37:67:4e:67: 6a:ef:47:e7:d1:f3:3c:09:3d:29:de:2c:90:09:5b: c4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:43:AE:AD:8A:20:E2:93:1A:9D:3C:56:EC:5C:6D:40:A8:ED:6F:09 X509v3 Authority Key Identifier: keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ec:d4:f6:19:f6:49:de:64:41:65:e3:74:8d:7c:50:7a:34: b6:d6:3e:82:cc:e6:e6:4f:a8:92:bf:be:96:7d:6c:49:84:3c: f3:a8:f9:e2:67:35:1a:2c:47:5d:6d:07:17:8c:58:8e:f4:74: 0b:7d:45:87:87:5d:7c:07:ed:c1:2d:3d:ce:35:29:63:14:0d: 0b:a0:27:67:56:8c:9f:7b:23:91:a0:5d:e8:52:99:9e:53:3c: 9f:16:53:dd:72:72:33:77:15:04:de:50:46:c0:9c:c7:44:ba: 07:98:f4:75:80:cd:79:8a:28:7c:5d:51:bd:39:04:a9:04:f7: 05:7c:bb:f4:2a:06:ab:40:5c:be:22:ca:31:2a:87:ba:c2:23: cf:78:e6:6f:1f:49:75:90:70:29:1f:4f:46:64:85:89:71:a2: 01:32:ca:41:88:5c:0a:82:29:0b:e6:6b:97:71:8f:3d:b5:7c: f7:6c:0d:b6:19:dc:ed:57:9c:4d:3f:bf:0b:9a:74:7a:e8:a0: cf:e4:95:d8:3f:61:00:81:67:35:ec:93:c2:51:35:7e:e5:bf: 73:ce:39:80:d1:54:b4:ae:15:41:01:67:20:0b:5d:d6:72:87: d2:bf:6b:d4:53:59:5e:16:1c:9f:dd:26:6b:50:63:06:23:6f: dd:5e:be:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/trAKp/tXL1AtT6870sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NTdiMjNjODM3OTViYzM1YzMwYmMxMzY1YTMwZmRmMzM3 NWFjODkwHhcNMjUxMjA2MDYwMTEwWhcNMjUxMjA3MDYwMTEwWjAzMTEwLwYDVQQD EyhmZjQzYWVhZDhhMjBlMjkzMWE5ZDNjNTZlYzVjNmQ0MGE4ZWQ2ZjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1RDoSp69M8y1AmAhdHqzLrdLfPH HGRIzq6M/6eX0714xLeIl+Fj+NIh6zD53999xL1thUrzhsMs24lUIP2PUyDgZTCr wb/snU/qKsGC+ihHh+4bm0rGcKyjCUFD4/KW4YJ1U3uzPC4yyx0Rk/J5PS9VCDfN bfeKJENGUuQK/lXcJcOESCSUyviogxpsPoAka56bN9n22jAzK1kNIcDr/zVHESLm BWVzJsD5owZ2s7fVvYGIrBpqKFEWtGQYDOTieXBd8DR59mwn0+KU0rroSE3BH3Y6 wPvyPv3CChgTpI7/m4t41u6Qnc2XxjdnTmdq70fn0fM8CT0p3iyQCVvEmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9Drq2KIOKTGp08VuxcbUCo7W8JMB8GA1UdIwQY MBaAFAlXsjyDeVvDXDC8E2WjD98zdayJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZleVBJTjVXOE5jTUx3VFphTVAzek4xcklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NDk4NGQtYWU4Zi00Y2Y5LWEzYzMt MWU5MmM3YmRjNTgyLzEvQ1ZleVBJTjVXOE5jTUx3VFphTVAzek4xcklrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi82NDk4NGQtYWU4Zi00Y2Y5LWEzYzMtMWU5MmM3YmRjNTgy LzEvQ1ZleVBJTjVXOE5jTUx3VFphTVAzek4xcklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOzU9hn2 Sd5kQWXjdI18UHo0ttY+gszm5k+okr++ln1sSYQ886j54mc1GixHXW0HF4xYjvR0 C31Fh4ddfAftwS09zjUpYxQNC6AnZ1aMn3sjkaBd6FKZnlM8nxZT3XJyM3cVBN5Q RsCcx0S6B5j0dYDNeYoofF1RvTkEqQT3BXy79CoGq0BcviLKMSqHusIjz3jmbx9J dZBwKR9PRmSFiXGiATLKQYhcCoIpC+Zrl3GPPbV892wNthnc7VecTT+/C5p0euig z+SV2D9hAIFnNeyTwlE1fuW/c845gNFUtK4VQQFnIAtd1nKH0r9r1FNZXhYcn90m a1BjBiNv3V6+5w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:41 2025 by rpki-client