This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft File: CVZUSY4cx7-M4J6uF6zffIg9W0k.mft (raw, json) Hash identifier: q88VyDKKWXcmm/OX61wZlDkBsQ096aXZ/6Bln368WYA= Subject key identifier: 94:98:77:B1:39:9A:92:43:7D:3A:2B:44:F3:0E:6F:F6:4A:50:9E:35 Authority key identifier: 09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49 Certificate issuer: /CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49 Certificate serial: 019AF12DB541ACD74A3F27022735C7545DBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft Manifest number: 01B4 Signing time: Sat 06 Dec 2025 01:01:35 +0000 Manifest this update: Sat 06 Dec 2025 01:01:35 +0000 Manifest next update: Sun 07 Dec 2025 01:01:35 +0000 Files and hashes: 1: Bk_-tAtBQBDMWsFeWLzWEKqm6r8.roa (hash: WNJKvTpD/DoB8twbES4bI7LJ/l4C3v8zVuuorOHSnjs=) 2: CVZUSY4cx7-M4J6uF6zffIg9W0k.crl (hash: 7b60+JpJp1LFxC2TJlt97VmaAZfUdHHzFZt04ys0rdQ=) 3: QKYY4pu514sUmDk5ewMC9BudeYM.roa (hash: Xw/leKA1IBGEhTPQThy/3jPwmzjFadxqafY3h81jZnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b5:41:ac:d7:4a:3f:27:02:27:35:c7:54:5d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49 Validity Not Before: Dec 6 01:01:35 2025 GMT Not After : Dec 7 01:01:35 2025 GMT Subject: CN=949877b1399a92437d3a2b44f30e6ff64a509e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d4:66:50:38:94:0c:e7:b2:98:6f:41:af:d5: 0e:68:a6:ce:4d:37:b7:9d:f0:e4:7a:0b:78:20:34: 50:3a:03:e8:29:75:71:3a:3c:ab:ea:66:77:f4:52: 94:72:5b:10:ef:3f:79:e1:9f:0a:a8:f4:a6:12:b4: a7:6e:48:a5:5f:65:cd:99:ab:bb:02:93:e0:f2:58: 0e:26:fe:1f:49:5d:7d:70:d3:0f:90:89:f0:1c:1e: 47:bb:e5:da:c7:46:d3:ad:52:d5:27:c0:0d:9d:40: b0:68:38:0a:d7:c5:ff:7d:9c:ce:19:57:15:aa:a6: 6e:47:ed:3c:df:96:66:9d:d9:ad:21:cb:46:f7:50: 6c:cb:55:77:cd:6e:63:72:4a:4a:72:81:aa:27:b9: ed:ff:a8:8e:cf:03:01:e6:cd:39:42:8b:64:36:9f: ae:bf:c8:14:c6:7b:f8:d7:e7:29:ba:54:6d:2b:bd: b2:06:50:0a:eb:3b:19:c3:72:ed:5c:6a:ce:65:b2: 34:c2:d5:dd:7c:f7:f8:d8:11:c8:c9:9c:33:9a:23: 11:fc:30:ba:bc:15:11:6b:54:1d:bf:87:9a:8e:4b: 2e:b6:20:ea:15:0d:79:1c:84:1e:28:55:ca:d3:1c: dc:e7:29:06:57:c4:18:43:d9:f5:58:5e:d2:d3:20: d6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:98:77:B1:39:9A:92:43:7D:3A:2B:44:F3:0E:6F:F6:4A:50:9E:35 X509v3 Authority Key Identifier: keyid:09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:2a:3a:89:69:c3:c9:ff:85:e6:5e:2b:6d:0d:13:55:54:ba: 6a:63:de:fa:fc:07:08:70:7e:8d:43:82:05:59:15:e5:1a:c6: 3f:54:96:1a:66:d9:cc:d6:d8:d4:88:51:6f:91:53:10:12:f9: 59:2f:4b:b7:f4:52:42:08:6b:4b:72:18:f1:8d:de:01:3f:05: d3:2e:50:79:bd:ed:bd:c2:2e:c1:cb:af:62:fd:ad:78:ea:a8: de:db:1a:9d:96:df:9f:ea:9c:0e:57:b7:21:ab:62:20:8f:b7: d2:2d:0f:c8:8a:b4:97:0a:56:01:f7:05:0e:fb:0a:86:e9:1f: c1:7f:f6:50:83:c0:f5:a3:1f:f5:08:5a:19:4b:a9:19:48:0d: 9b:5a:2c:8c:f8:2d:6b:dc:ee:e7:90:52:75:9c:9f:b2:9c:68: 79:d3:18:98:1b:14:a3:e0:d6:e1:ab:ed:7d:83:1e:07:d6:a2: 01:34:5f:25:96:f0:87:ed:0e:c5:c9:e5:7a:65:81:b3:d7:bc: 0c:a5:4f:77:2e:79:98:84:70:08:ad:8d:03:f8:5d:45:ea:52: f0:08:24:e3:82:a6:63:ef:76:88:f7:b9:23:f6:7a:75:ac:a3: 13:b9:93:30:82:4c:1d:c1:8c:ac:c2:27:b8:cd:b4:89:db:95: fe:6f:8c:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbVBrNdKPycCJzXHVF27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NTY1NDQ5OGUxY2M3YmY4Y2UwOWVhZTE3YWNkZjdjODgz ZDViNDkwHhcNMjUxMjA2MDEwMTM1WhcNMjUxMjA3MDEwMTM1WjAzMTEwLwYDVQQD Eyg5NDk4NzdiMTM5OWE5MjQzN2QzYTJiNDRmMzBlNmZmNjRhNTA5ZTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtRmUDiUDOeymG9Br9UOaKbOTTe3 nfDkegt4IDRQOgPoKXVxOjyr6mZ39FKUclsQ7z954Z8KqPSmErSnbkilX2XNmau7 ApPg8lgOJv4fSV19cNMPkInwHB5Hu+Xax0bTrVLVJ8ANnUCwaDgK18X/fZzOGVcV qqZuR+0835ZmndmtIctG91Bsy1V3zW5jckpKcoGqJ7nt/6iOzwMB5s05QotkNp+u v8gUxnv41+cpulRtK72yBlAK6zsZw3LtXGrOZbI0wtXdfPf42BHIyZwzmiMR/DC6 vBURa1Qdv4eajksutiDqFQ15HIQeKFXK0xzc5ykGV8QYQ9n1WF7S0yDWkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSYd7E5mpJDfTorRPMOb/ZKUJ41MB8GA1UdIwQY MBaAFAlWVEmOHMe/jOCerhes33yIPVtJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZaVVNZNGN4Ny1NNEo2dUY2emZmSWc5VzBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMmRhYTQtMDg3NC00ZjNkLWJmMjIt ZDFhZDU0ZDBjMDUzLzEvQ1ZaVVNZNGN4Ny1NNEo2dUY2emZmSWc5VzBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMmRhYTQtMDg3NC00ZjNkLWJmMjItZDFhZDU0ZDBjMDUz LzEvQ1ZaVVNZNGN4Ny1NNEo2dUY2emZmSWc5VzBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqio6iWnD yf+F5l4rbQ0TVVS6amPe+vwHCHB+jUOCBVkV5RrGP1SWGmbZzNbY1IhRb5FTEBL5 WS9Lt/RSQghrS3IY8Y3eAT8F0y5Qeb3tvcIuwcuvYv2teOqo3tsanZbfn+qcDle3 IatiII+30i0PyIq0lwpWAfcFDvsKhukfwX/2UIPA9aMf9QhaGUupGUgNm1osjPgt a9zu55BSdZyfspxoedMYmBsUo+DW4avtfYMeB9aiATRfJZbwh+0OxcnlemWBs9e8 DKVPdy55mIRwCK2NA/hdRepS8Agk44KmY+92iPe5I/Z6dayjE7mTMIJMHcGMrMIn uM20iduV/m+Mvg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:44 2025 by rpki-client