This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft File: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft (raw, json) Hash identifier: dPvuz53bUD+mq6OE9qCcmRSsLxLkHTYS5ItgFOfCaZM= Subject key identifier: F3:B6:35:26:3F:D0:2E:F3:64:E8:B3:85:AB:63:66:AB:22:6D:1C:8D Authority key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24 Certificate issuer: /CN=08f2eb8fb02e87e7184337b245af99e3133ef524 Certificate serial: 019AF20901059CD3BE9098442D9896CCE754 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 05:01:07 +0000 Manifest this update: Sat 06 Dec 2025 05:01:07 +0000 Manifest next update: Sun 07 Dec 2025 05:01:07 +0000 Files and hashes: 1: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl (hash: GBjNVjUWkycHmRnSSs6i5oOwZVVtI9YUyLV0+oI3Y9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:01:05:9c:d3:be:90:98:44:2d:98:96:cc:e7:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08f2eb8fb02e87e7184337b245af99e3133ef524 Validity Not Before: Dec 6 05:01:07 2025 GMT Not After : Dec 7 05:01:07 2025 GMT Subject: CN=f3b635263fd02ef364e8b385ab6366ab226d1c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6f:2f:47:5c:8b:53:93:61:23:e0:58:b4:e5: de:d4:6e:6c:cb:d5:93:27:90:99:c2:6a:39:55:17: ab:08:ae:d3:13:8f:47:00:91:ce:99:fa:ab:90:f4: 5f:c4:b3:b9:92:2b:4d:41:05:6d:e7:9c:56:d8:df: c6:7d:fa:ad:f6:5d:3d:97:57:f9:62:e4:83:95:32: 19:c1:69:43:af:8b:b4:fb:2c:f8:bf:37:c5:dd:c4: 8d:b1:36:c8:f8:e0:be:bd:b5:8f:e9:75:e7:18:00: d0:d5:12:34:0c:21:13:48:1e:e3:40:30:f6:8f:2c: 0d:e9:bb:a8:40:2e:fb:b0:20:58:c3:a6:5f:ad:ac: b8:a2:f2:db:4d:76:5b:88:1c:67:33:89:81:35:8d: 5e:39:56:1a:80:4a:f0:80:bb:16:9f:ff:ba:41:f3: 6b:7f:cb:19:3d:cc:98:af:f6:31:ee:85:55:77:64: c1:9f:6d:12:7a:8e:42:96:95:da:77:e3:4e:97:bc: 9b:ab:93:81:95:74:24:a7:03:bd:0b:bc:cc:e6:11: 97:a7:6e:0d:d4:90:1d:4e:d6:06:fc:84:14:48:db: f2:0d:61:c7:64:93:a8:ed:3b:8d:6a:40:b0:f7:6a: f8:77:35:96:65:20:ac:50:23:df:38:e5:5b:23:d7: fa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B6:35:26:3F:D0:2E:F3:64:E8:B3:85:AB:63:66:AB:22:6D:1C:8D X509v3 Authority Key Identifier: keyid:08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e8:f3:56:c8:c1:90:32:68:64:d4:20:d4:4d:53:f6:01:0d: 7b:22:19:5a:5c:64:d5:a7:84:9b:8b:fc:c6:dd:17:cb:e7:b6: b7:18:ad:6a:f9:37:e4:ea:cd:2d:a5:ea:25:67:64:a6:e9:2e: 7b:a9:a8:01:99:4a:d6:71:81:05:87:12:41:b0:4f:30:3a:87: bc:15:fa:c7:1e:47:67:9e:6e:5b:10:31:3a:26:8e:17:ff:88: 60:2f:75:81:f4:1b:15:87:1c:83:bb:d2:b1:47:29:7f:5c:ea: 6f:ea:58:dd:86:42:b0:af:44:bc:5e:07:16:2f:b3:f8:fa:ad: 8c:dc:47:c7:a9:8a:c6:75:de:6f:8f:70:90:d2:43:cb:35:39: 73:f3:3c:70:76:f1:19:78:56:2f:60:4b:70:39:9e:58:a2:36: 20:1f:62:6f:b3:92:b2:a9:fb:4d:f8:51:2c:68:71:c2:ef:92: 0b:ca:ed:77:4d:2a:6e:43:9d:34:57:8c:0b:b5:1c:1a:8c:73: 0b:7a:f4:67:0b:a0:a8:6e:e8:fb:8b:0d:ff:67:41:91:b5:83: ba:f1:be:55:57:6c:0e:12:91:e0:c3:5a:d7:11:2b:10:0a:d9: 6b:ff:f0:4d:20:ef:98:94:44:7c:b8:c7:c4:5c:a8:3d:18:e9: c1:7c:c4:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQEFnNO+kJhELZiWzOdUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZjJlYjhmYjAyZTg3ZTcxODQzMzdiMjQ1YWY5OWUzMTMz ZWY1MjQwHhcNMjUxMjA2MDUwMTA3WhcNMjUxMjA3MDUwMTA3WjAzMTEwLwYDVQQD EyhmM2I2MzUyNjNmZDAyZWYzNjRlOGIzODVhYjYzNjZhYjIyNmQxYzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG8vR1yLU5NhI+BYtOXe1G5sy9WT J5CZwmo5VRerCK7TE49HAJHOmfqrkPRfxLO5kitNQQVt55xW2N/Gffqt9l09l1f5 YuSDlTIZwWlDr4u0+yz4vzfF3cSNsTbI+OC+vbWP6XXnGADQ1RI0DCETSB7jQDD2 jywN6buoQC77sCBYw6Zfray4ovLbTXZbiBxnM4mBNY1eOVYagErwgLsWn/+6QfNr f8sZPcyYr/Yx7oVVd2TBn20Seo5ClpXad+NOl7ybq5OBlXQkpwO9C7zM5hGXp24N 1JAdTtYG/IQUSNvyDWHHZJOo7TuNakCw92r4dzWWZSCsUCPfOOVbI9f6AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPO2NSY/0C7zZOizhatjZqsibRyNMB8GA1UdIwQY MBaAFAjy64+wLofnGEM3skWvmeMTPvUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NWVhNDgtYzNlZC00ZTQ3LWJkMTIt NmNkZWNkNGRiOGI1LzEvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85NWVhNDgtYzNlZC00ZTQ3LWJkMTItNmNkZWNkNGRiOGI1 LzEvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOjzVsjB kDJoZNQg1E1T9gENeyIZWlxk1aeEm4v8xt0Xy+e2txitavk35OrNLaXqJWdkpuku e6moAZlK1nGBBYcSQbBPMDqHvBX6xx5HZ55uWxAxOiaOF/+IYC91gfQbFYccg7vS sUcpf1zqb+pY3YZCsK9EvF4HFi+z+PqtjNxHx6mKxnXeb49wkNJDyzU5c/M8cHbx GXhWL2BLcDmeWKI2IB9ib7OSsqn7TfhRLGhxwu+SC8rtd00qbkOdNFeMC7UcGoxz C3r0ZwugqG7o+4sN/2dBkbWDuvG+VVdsDhKR4MNa1xErEArZa//wTSDvmJREfLjH xFyoPRjpwXzEVg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:14 2025 by rpki-client