This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json) Hash identifier: jCC3X2WEB/SVmrfuRy0Polz/Pkejej5PRhEX9oU4tQ4= Subject key identifier: D5:DC:2B:05:A7:9A:3A:97:BB:0E:0B:04:09:D5:DD:C0:EA:AD:32:12 Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8 Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8 Certificate serial: 019AF61CB6649E1EF32853D83E1A210ECB80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft Manifest number: 1762 Signing time: Sun 07 Dec 2025 00:01:07 +0000 Manifest this update: Sun 07 Dec 2025 00:01:07 +0000 Manifest next update: Mon 08 Dec 2025 00:01:07 +0000 Files and hashes: 1: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: DdVdjoYFBxiBGvKsiBTAlP3FoPloEU9rgzxXGJX4pgc=) 2: IXCtEaMNeIUhqXl8Lx3l8-Dir_Q.roa (hash: ZiR3KjxwRefwM+SxQhOx2wRJ2km2w6JI0EvTFa0nnZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:b6:64:9e:1e:f3:28:53:d8:3e:1a:21:0e:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8 Validity Not Before: Dec 7 00:01:07 2025 GMT Not After : Dec 8 00:01:07 2025 GMT Subject: CN=d5dc2b05a79a3a97bb0e0b0409d5ddc0eaad3212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:29:66:aa:ce:52:f8:69:e8:c2:d8:04:93: 27:f9:2a:ba:0a:2b:c2:bf:06:7d:9f:66:a3:e0:c9: 1b:cd:a3:60:e7:bb:e3:35:66:52:84:e1:64:44:e9: 9d:a5:41:05:d1:f9:33:e1:56:1f:60:01:2e:e1:83: c6:78:e8:d9:6e:65:f9:71:5b:36:06:fc:08:67:f9: 04:85:60:04:46:25:86:ec:b1:c7:fd:a5:46:db:e5: 21:b0:f2:0d:44:1c:5c:70:dc:2d:6d:e8:9a:8d:3c: 36:24:03:6d:d9:d5:06:70:9f:c5:e1:75:46:22:7b: 33:d3:36:fe:30:50:1f:fc:52:42:16:28:43:21:a5: f2:ed:83:4f:4a:84:7b:e0:02:7a:ef:ae:f6:e1:48: f2:88:23:9a:13:a4:41:ed:07:71:91:51:08:72:76: c6:e6:e0:2b:5e:ae:b1:64:ba:2c:af:c4:e5:0c:af: f3:d0:bf:31:e1:2d:c2:df:e4:8d:91:88:1c:23:e2: 9c:d6:2a:42:9f:f9:03:6c:41:a8:10:5b:4b:5b:9e: 2e:fe:ba:db:df:6c:10:20:df:b5:fd:9b:aa:1f:14: fd:d6:e3:8d:5c:8c:53:2e:1f:33:5a:42:71:88:85: d0:50:bc:37:d4:ac:32:1e:9d:4e:b2:38:ac:fd:e9: ae:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DC:2B:05:A7:9A:3A:97:BB:0E:0B:04:09:D5:DD:C0:EA:AD:32:12 X509v3 Authority Key Identifier: keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d2:c4:41:21:90:3b:95:05:b1:98:52:3b:f2:a7:d5:c6:bf: 93:62:bc:22:3b:32:12:a2:8f:ac:d4:62:4e:54:42:22:f0:39: a3:cc:84:24:89:cc:63:20:dd:36:61:29:28:56:35:d3:dd:d8: 73:25:65:9a:7f:a7:a9:b5:2a:2d:a4:ce:a2:47:ee:fe:4f:0e: dd:e6:80:0a:d0:a4:20:47:b5:03:76:8a:1a:19:32:59:55:37: c5:24:63:44:1f:0e:11:67:47:09:fc:1d:99:00:43:74:17:f6: 2e:d1:e0:29:af:f1:cb:50:7b:5e:cf:b2:91:a9:89:4e:db:d5: 0b:d1:eb:4d:47:9e:eb:d6:f3:b1:64:75:2a:f7:b3:91:d8:e5: eb:46:47:3d:01:d4:23:5e:0b:00:25:41:33:92:16:b7:8a:c5: 78:fe:5b:d4:d7:09:c0:97:9c:61:3e:0f:42:cf:e2:6b:f0:61: a7:07:95:6f:1b:14:c4:fc:7b:b9:70:3f:95:81:9d:c5:fd:c2: 0a:a7:73:82:c3:7d:0a:a0:be:64:1a:c4:31:a0:88:21:37:59: 57:34:fd:f6:6a:37:db:cb:ec:a1:1a:9b:6c:87:5c:69:74:e2: ed:4b:66:d5:d3:b1:64:0b:cc:9e:1a:bd:cc:16:53:0f:25:a0: 17:fb:21:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HLZknh7zKFPYPhohDsuAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZjEyMzgxMDAzNzBhMmMwNWZiMDY4MDBhZmRlNjkwNmRh YWYyZDgwHhcNMjUxMjA3MDAwMTA3WhcNMjUxMjA4MDAwMTA3WjAzMTEwLwYDVQQD EyhkNWRjMmIwNWE3OWEzYTk3YmIwZTBiMDQwOWQ1ZGRjMGVhYWQzMjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqQpZqrOUvhp6MLYBJMn+Sq6CivC vwZ9n2aj4MkbzaNg57vjNWZShOFkROmdpUEF0fkz4VYfYAEu4YPGeOjZbmX5cVs2 BvwIZ/kEhWAERiWG7LHH/aVG2+UhsPINRBxccNwtbeiajTw2JANt2dUGcJ/F4XVG Insz0zb+MFAf/FJCFihDIaXy7YNPSoR74AJ676724UjyiCOaE6RB7QdxkVEIcnbG 5uArXq6xZLosr8TlDK/z0L8x4S3C3+SNkYgcI+Kc1ipCn/kDbEGoEFtLW54u/rrb 32wQIN+1/ZuqHxT91uONXIxTLh8zWkJxiIXQULw31KwyHp1Osjis/emucQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXcKwWnmjqXuw4LBAnV3cDqrTISMB8GA1UdIwQY MBaAFArxI4EANwosBfsGgAr95pBtqvLYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ZFamdRQTNDaXdGLXdhQUN2M21rRzJxOHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85YzFiMDgtYjVhYy00YmJkLWI4YzMt MGUwZmQwM2IxMTA0LzEvQ3ZFamdRQTNDaXdGLXdhQUN2M21rRzJxOHRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy85YzFiMDgtYjVhYy00YmJkLWI4YzMtMGUwZmQwM2IxMTA0 LzEvQ3ZFamdRQTNDaXdGLXdhQUN2M21rRzJxOHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtLEQSGQ O5UFsZhSO/Kn1ca/k2K8IjsyEqKPrNRiTlRCIvA5o8yEJInMYyDdNmEpKFY1093Y cyVlmn+nqbUqLaTOokfu/k8O3eaACtCkIEe1A3aKGhkyWVU3xSRjRB8OEWdHCfwd mQBDdBf2LtHgKa/xy1B7Xs+ykamJTtvVC9HrTUee69bzsWR1Kvezkdjl60ZHPQHU I14LACVBM5IWt4rFeP5b1NcJwJecYT4PQs/ia/BhpweVbxsUxPx7uXA/lYGdxf3C CqdzgsN9CqC+ZBrEMaCIITdZVzT99mo328vsoRqbbIdcaXTi7Utm1dOxZAvMnhq9 zBZTDyWgF/shHw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:33:53 2025 by rpki-client