This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft File: cpIiZWfact2GiDyt1fPeb_1bNXM.mft (raw, json) Hash identifier: 5NWiodaDDErGSvwWBZ48Enqg3+8AGXlRtcpFVmMcngM= Subject key identifier: 3D:D2:28:3E:91:6B:3D:64:1C:88:8A:06:8B:20:FC:59:FD:89:60:B4 Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73 Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573 Certificate serial: 019AF1642704EDE67E0432A5F29886BCB75B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 02:01:03 +0000 Manifest this update: Sat 06 Dec 2025 02:01:03 +0000 Manifest next update: Sun 07 Dec 2025 02:01:03 +0000 Files and hashes: 1: A2a55CFuU3rmZKWMjbnP0QRTKbw.roa (hash: h7ObFO2cHNspjyZ0BOSzsO0dobQTCK4BjzPiMYTX+dk=) 2: cpIiZWfact2GiDyt1fPeb_1bNXM.crl (hash: qazCLE4ZmW53SofG6IcxKEfeJyIg5ee8tMkAEQKrSX4=) 3: hOIlW-rpHRc2nOKpMGO_mfzaetg.roa (hash: VUIEi5LXdhfGKiMndwB/BQwcKviQdKt6bC3rAVXouZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:27:04:ed:e6:7e:04:32:a5:f2:98:86:bc:b7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573 Validity Not Before: Dec 6 02:01:03 2025 GMT Not After : Dec 7 02:01:03 2025 GMT Subject: CN=3dd2283e916b3d641c888a068b20fc59fd8960b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:81:e6:56:02:1b:62:98:6c:9a:73:13:0a:5f: 19:11:7a:fa:78:49:8a:c2:6e:11:38:b4:24:6e:04: 25:7d:ea:6b:fb:45:93:3c:09:9a:8c:bb:9e:46:92: ba:d8:27:e4:02:f9:a6:ae:00:f0:19:13:4c:6e:bc: 79:3b:b9:74:e0:94:02:be:5e:5a:cc:c2:78:e4:66: 1b:90:a2:48:8c:6c:a2:1c:fe:93:2f:46:1b:1a:df: 9a:9e:f8:e6:84:2d:f6:0f:cb:d9:54:0f:1e:7d:7c: 38:88:da:b7:67:34:ca:3d:71:ad:4d:3c:d3:bc:fa: 1a:f0:bf:c5:51:14:93:c9:2e:f6:b9:d7:8d:e4:6c: db:b9:bb:cd:16:e9:2e:bc:d0:d6:9f:7c:27:35:04: 7c:aa:89:d4:50:7c:59:2f:8f:90:18:43:35:ff:9e: 61:b5:a0:2e:1d:44:e6:23:75:9f:0d:f1:5f:79:1e: d3:1b:56:b6:d2:2d:3c:f9:cb:d3:cb:f9:79:68:54: d7:c2:42:d2:77:96:a2:31:51:28:1f:2d:70:91:6e: 89:4d:9f:03:d4:65:cd:0d:61:ad:7a:12:b5:39:33: 49:ba:b8:40:96:73:09:ca:0e:2c:96:98:92:49:d7: c6:80:68:e9:47:05:4a:66:a9:df:b5:e6:eb:75:1f: 78:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D2:28:3E:91:6B:3D:64:1C:88:8A:06:8B:20:FC:59:FD:89:60:B4 X509v3 Authority Key Identifier: keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:69:04:2b:ce:29:bf:0a:0c:94:85:c0:51:20:c3:a1:72:5d: 7a:53:d7:d6:f5:9d:aa:60:2b:dd:1f:a4:68:0a:74:60:05:a0: af:62:b4:05:be:ca:71:18:94:e6:7c:3a:7a:1e:eb:cb:dc:1a: cc:45:41:a7:13:6f:47:cd:ed:a2:1d:70:07:1d:b1:2d:b4:b4: 54:3c:0a:80:23:40:88:1e:88:cf:fe:16:3e:79:15:96:0f:85: da:77:61:50:9a:58:c1:57:2a:8c:76:8d:e3:33:d1:d1:69:78: 3f:1d:33:13:43:74:48:95:d0:c9:97:2e:68:2d:6a:f4:85:f0: db:a8:3e:5c:57:41:53:c0:3d:ef:53:c7:86:3d:3c:55:fd:ee: 63:69:b9:9d:02:92:79:c7:8e:16:69:04:82:4c:87:91:42:bd: 77:75:aa:5f:c0:8b:fc:cb:c0:ec:a5:5b:7f:6c:d7:51:1a:1c: fd:3c:c8:f0:12:d9:58:28:fa:89:25:ee:e9:14:e2:4d:2a:e7: 08:c6:a6:ee:c0:45:a9:8e:bb:3f:88:57:7e:b7:f7:4c:14:32: d7:b1:ab:06:99:ed:0d:3e:af:50:a8:44:72:55:9c:ea:71:a5: 23:3c:32:8d:4a:73:f0:00:6c:54:7a:b2:7f:09:01:ff:57:bb: 1e:88:51:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCcE7eZ+BDKl8piGvLdbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOTIyMjY1NjdkYTcyZGQ4Njg4M2NhZGQ1ZjNkZTZmZmQ1 YjM1NzMwHhcNMjUxMjA2MDIwMTAzWhcNMjUxMjA3MDIwMTAzWjAzMTEwLwYDVQQD EygzZGQyMjgzZTkxNmIzZDY0MWM4ODhhMDY4YjIwZmM1OWZkODk2MGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIHmVgIbYphsmnMTCl8ZEXr6eEmK wm4ROLQkbgQlfepr+0WTPAmajLueRpK62CfkAvmmrgDwGRNMbrx5O7l04JQCvl5a zMJ45GYbkKJIjGyiHP6TL0YbGt+anvjmhC32D8vZVA8efXw4iNq3ZzTKPXGtTTzT vPoa8L/FURSTyS72udeN5GzbubvNFukuvNDWn3wnNQR8qonUUHxZL4+QGEM1/55h taAuHUTmI3WfDfFfeR7TG1a20i08+cvTy/l5aFTXwkLSd5aiMVEoHy1wkW6JTZ8D 1GXNDWGtehK1OTNJurhAlnMJyg4slpiSSdfGgGjpRwVKZqnftebrdR948wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3SKD6Raz1kHIiKBosg/Fn9iWC0MB8GA1UdIwQY MBaAFHKSImVn2nLdhog8rdXz3m/9WzVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3BJaVpXZmFjdDJHaUR5dDFmUGViXzFiTlhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80ZWMyMTctZThkNy00ZTgwLTg3Y2Qt MDM5ZGU3ODRkOTQxLzEvY3BJaVpXZmFjdDJHaUR5dDFmUGViXzFiTlhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC80ZWMyMTctZThkNy00ZTgwLTg3Y2QtMDM5ZGU3ODRkOTQx LzEvY3BJaVpXZmFjdDJHaUR5dDFmUGViXzFiTlhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2kEK84p vwoMlIXAUSDDoXJdelPX1vWdqmAr3R+kaAp0YAWgr2K0Bb7KcRiU5nw6eh7ry9wa zEVBpxNvR83toh1wBx2xLbS0VDwKgCNAiB6Iz/4WPnkVlg+F2ndhUJpYwVcqjHaN 4zPR0Wl4Px0zE0N0SJXQyZcuaC1q9IXw26g+XFdBU8A971PHhj08Vf3uY2m5nQKS eceOFmkEgkyHkUK9d3WqX8CL/MvA7KVbf2zXURoc/TzI8BLZWCj6iSXu6RTiTSrn CMam7sBFqY67P4hXfrf3TBQy17GrBpntDT6vUKhEclWc6nGlIzwyjUpz8ABsVHqy fwkB/1e7HohRCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:15:52 2025 by rpki-client