This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft File: CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft (raw, json) Hash identifier: WHSzZVvxxlxSpibgJfRQH93n45fedAHR8gOE+H65cmU= Subject key identifier: DE:51:5E:FB:6D:F6:BD:6B:6B:11:CA:8A:E5:2E:E5:12:F3:74:27:BD Authority key identifier: 08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05 Certificate issuer: /CN=08f234563be959822df42f8d7274fe547c0b2f05 Certificate serial: 019AF19B6919CF5EEA96314EE9DC177A149D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft Manifest number: FA Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl (hash: rPngB4aIC4DgyjBLhlJaZDEJwXvpVwBsB6wbociKZ0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:69:19:cf:5e:ea:96:31:4e:e9:dc:17:7a:14:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08f234563be959822df42f8d7274fe547c0b2f05 Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=de515efb6df6bd6b6b11ca8ae52ee512f37427bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8f:dc:f6:3d:3d:e3:82:4e:02:1f:49:a0:6c: 0a:ff:37:d8:c0:d5:fb:64:46:ec:c3:93:2a:a2:a3: 14:ee:d2:95:ba:9c:24:dd:fd:ac:e0:a4:a8:5c:f0: 40:f6:0d:66:e7:66:13:ec:fb:c1:63:39:22:90:2a: 4b:6c:78:88:c0:20:75:85:c9:b8:b2:a8:46:dc:16: ff:84:d0:d1:57:70:a4:24:3d:65:0a:98:27:a3:5b: 69:14:38:db:6c:c5:94:a2:de:e5:a8:0f:a6:2c:fc: 7c:f8:21:cb:f6:d8:f0:fd:b0:b6:f8:9a:0a:0a:8a: 69:45:18:58:23:57:a5:29:9e:7d:6d:27:d4:37:25: 8c:63:47:89:55:ed:cc:10:9c:c3:71:9a:d0:cc:2c: 2d:f8:82:d6:7e:02:86:3b:8e:2e:fc:41:15:26:64: 54:df:2e:17:db:0a:ad:5b:08:03:66:d8:69:b4:a4: 02:f9:ab:3b:12:f8:a9:3c:48:27:bc:20:2a:a6:28: 46:37:47:4e:37:7f:29:a6:3b:0b:42:29:d5:24:a7: 15:f5:32:84:a9:e6:73:e8:4d:2d:83:44:fe:01:f1: 5c:a5:42:60:ec:40:fa:67:2c:0a:59:ef:aa:1d:33: 01:5a:5c:57:f1:1d:5e:bf:52:d6:21:b5:be:36:b9: af:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:51:5E:FB:6D:F6:BD:6B:6B:11:CA:8A:E5:2E:E5:12:F3:74:27:BD X509v3 Authority Key Identifier: keyid:08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3f:06:e4:9d:65:d8:c3:ed:ac:dd:6c:00:64:71:89:d6:8b: de:f2:2f:6c:8e:61:1b:da:5c:d0:a7:84:31:22:69:5f:a7:c4: 85:9f:31:77:a2:32:c3:72:bc:0b:8f:76:a6:a4:3f:ce:3a:82: 84:16:d2:f1:01:9c:bb:53:49:29:19:09:15:4e:31:03:2c:e2: ac:10:31:32:91:20:67:40:60:fc:3c:d0:e2:8d:f0:ad:83:a0: 0f:c7:11:89:aa:fa:90:1f:10:8e:d2:39:37:05:d0:30:b3:bc: da:9b:ed:ce:f6:d4:1a:09:aa:07:42:fe:06:f4:27:67:d9:48: e5:4d:96:eb:26:78:6f:1c:b6:d5:f2:63:f8:a3:40:a1:f6:bb: b1:07:07:66:db:6b:b8:c4:0c:86:97:f1:45:9e:16:0f:55:47: c7:27:48:c6:ae:75:cf:62:5e:f1:fa:6f:e9:32:fc:44:4e:bd: a3:73:dc:4f:eb:87:dd:60:ea:2b:bb:c7:fd:2b:be:73:89:16: 57:dd:eb:94:c4:a7:c5:d6:29:55:e0:db:42:dc:21:90:c6:7b: 89:92:73:43:68:09:00:fa:99:3f:96:cb:72:e1:4d:d2:c3:45: e9:c9:34:48:43:a0:1e:21:fb:58:af:0a:42:07:06:8c:4c:17: ba:a8:d1:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2kZz17qljFO6dwXehSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZjIzNDU2M2JlOTU5ODIyZGY0MmY4ZDcyNzRmZTU0N2Mw YjJmMDUwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD EyhkZTUxNWVmYjZkZjZiZDZiNmIxMWNhOGFlNTJlZTUxMmYzNzQyN2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y/c9j0944JOAh9JoGwK/zfYwNX7 ZEbsw5MqoqMU7tKVupwk3f2s4KSoXPBA9g1m52YT7PvBYzkikCpLbHiIwCB1hcm4 sqhG3Bb/hNDRV3CkJD1lCpgno1tpFDjbbMWUot7lqA+mLPx8+CHL9tjw/bC2+JoK CoppRRhYI1elKZ59bSfUNyWMY0eJVe3MEJzDcZrQzCwt+ILWfgKGO44u/EEVJmRU 3y4X2wqtWwgDZthptKQC+as7EvipPEgnvCAqpihGN0dON38ppjsLQinVJKcV9TKE qeZz6E0tg0T+AfFcpUJg7ED6ZywKWe+qHTMBWlxX8R1ev1LWIbW+Nrmv+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5RXvtt9r1raxHKiuUu5RLzdCe9MB8GA1UdIwQY MBaAFAjyNFY76VmCLfQvjXJ0/lR8Cy8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1BJMFZqdnBXWUl0OUMtTmNuVC1WSHdMTHdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMzM3YmItYjVmNi00NjhmLWI5NmEt NjNmZTcyNjViNzE4LzEvQ1BJMFZqdnBXWUl0OUMtTmNuVC1WSHdMTHdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xMzM3YmItYjVmNi00NjhmLWI5NmEtNjNmZTcyNjViNzE4 LzEvQ1BJMFZqdnBXWUl0OUMtTmNuVC1WSHdMTHdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAej8G5J1l 2MPtrN1sAGRxidaL3vIvbI5hG9pc0KeEMSJpX6fEhZ8xd6Iyw3K8C492pqQ/zjqC hBbS8QGcu1NJKRkJFU4xAyzirBAxMpEgZ0Bg/DzQ4o3wrYOgD8cRiar6kB8QjtI5 NwXQMLO82pvtzvbUGgmqB0L+BvQnZ9lI5U2W6yZ4bxy21fJj+KNAofa7sQcHZttr uMQMhpfxRZ4WD1VHxydIxq51z2Je8fpv6TL8RE69o3PcT+uH3WDqK7vH/Su+c4kW V93rlMSnxdYpVeDbQtwhkMZ7iZJzQ2gJAPqZP5bLcuFN0sNF6ck0SEOgHiH7WK8K QgcGjEwXuqjRzg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:57:58 2025 by rpki-client