This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft File: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft (raw, json) Hash identifier: jl9ZlW1JxuCkX04YVTanKaNFJkkq2Uum5xTczTR1knk= Subject key identifier: 21:BD:4F:AF:16:9F:CE:C8:D5:8B:A0:3C:81:96:B4:27:25:B3:FA:4E Authority key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24 Certificate issuer: /CN=08f2eb8fb02e87e7184337b245af99e3133ef524 Certificate serial: 019B2BF87132B5E41941735E8685444BDF73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft Manifest number: 177D Signing time: Wed 17 Dec 2025 11:01:00 +0000 Manifest this update: Wed 17 Dec 2025 11:01:00 +0000 Manifest next update: Thu 18 Dec 2025 11:01:00 +0000 Files and hashes: 1: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl (hash: 1FjyvJ1qdUv7dBo0YQkcV+h6l2NPwr2uzb8Qn6oHwU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:71:32:b5:e4:19:41:73:5e:86:85:44:4b:df:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08f2eb8fb02e87e7184337b245af99e3133ef524 Validity Not Before: Dec 17 11:01:00 2025 GMT Not After : Dec 18 11:01:00 2025 GMT Subject: CN=21bd4faf169fcec8d58ba03c8196b42725b3fa4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:38:07:43:c4:ee:dd:26:78:04:c4:2e:48: 60:27:20:f8:40:cc:e9:15:fd:6d:63:1f:87:43:5e: cc:b7:8c:6b:34:bc:27:60:95:fa:19:a2:0c:bb:f7: ef:b2:28:e6:94:c4:ae:cb:7e:f1:f8:f9:b9:a6:a8: a7:72:84:89:08:1a:dd:8a:51:76:4b:bb:34:a1:ae: 18:87:e7:12:f2:0b:af:39:8d:df:ac:5e:44:ff:f8: a4:df:d6:a4:17:5c:06:fd:35:6f:13:bc:77:72:61: 1f:0d:78:b0:72:14:5c:3e:a7:bc:a7:8e:d0:d9:fd: bb:de:98:63:c9:9d:cc:7b:56:34:66:21:7e:6d:2f: 2f:96:c7:f9:10:17:f8:01:67:f0:54:75:06:40:b6: ca:11:1a:6f:a1:06:6e:12:6b:db:f2:b0:cf:1d:2f: d1:92:71:99:04:11:8d:e3:18:e0:dc:dc:a0:ef:c4: 31:40:72:43:51:ca:75:3c:3b:23:fd:8f:d7:b8:f4: 1e:37:84:c4:b9:aa:b5:fb:fa:0e:14:56:b1:30:2e: ef:93:6f:90:d0:0f:a2:13:72:f3:ef:41:0a:61:dc: d6:ef:6f:92:e3:d4:1a:f0:95:98:c7:f7:b1:07:8f: 6b:84:74:bf:35:2a:02:92:81:5c:e7:f9:4f:a1:ec: 14:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BD:4F:AF:16:9F:CE:C8:D5:8B:A0:3C:81:96:B4:27:25:B3:FA:4E X509v3 Authority Key Identifier: keyid:08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9e:c1:ac:f2:77:3d:d1:52:90:f4:50:09:40:54:b2:60:96: 42:28:d6:f5:9c:b4:2f:bc:f8:0e:58:4e:90:ea:c3:f9:e1:57: 72:4b:5a:e8:ab:e1:5c:e4:78:62:c5:9d:da:8e:8f:cd:f9:a3: cd:ad:a5:05:0e:c0:66:c3:25:fb:f9:74:1b:20:bc:f4:1c:47: ab:55:20:7a:2e:22:a9:41:48:30:09:df:6e:e0:d9:5d:e5:32: 9b:bb:ae:43:92:b3:01:b5:6a:fa:3f:0b:fa:c1:a5:40:05:cc: 4b:34:23:dc:94:71:e9:b5:92:99:5d:1a:5f:04:d5:85:2a:49: f2:40:fc:c0:53:79:88:a9:d9:52:ac:c5:d5:d7:0e:06:38:43: ff:14:e6:0f:4c:d5:4a:48:49:4d:ca:d5:50:de:ad:5e:78:19: a9:67:fa:e4:a5:e9:6d:66:df:70:a4:d0:4f:1e:d1:05:60:2b: a0:ae:7c:f5:ef:59:a6:90:ff:76:1e:22:5c:5f:d8:42:bc:9a: b4:28:b6:ec:24:aa:2f:95:74:e5:3f:89:d5:6c:64:9a:35:61: a4:30:ae:e3:17:44:c2:47:7d:e9:e6:24:49:cc:da:76:dd:4a: 41:51:1c:db:25:96:55:9e:64:a4:26:9c:c6:60:d2:d6:18:ab: 15:e8:80:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+HEyteQZQXNehoVES99zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZjJlYjhmYjAyZTg3ZTcxODQzMzdiMjQ1YWY5OWUzMTMz ZWY1MjQwHhcNMjUxMjE3MTEwMTAwWhcNMjUxMjE4MTEwMTAwWjAzMTEwLwYDVQQD EygyMWJkNGZhZjE2OWZjZWM4ZDU4YmEwM2M4MTk2YjQyNzI1YjNmYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7g4B0PE7t0meATELkhgJyD4QMzp Ff1tYx+HQ17Mt4xrNLwnYJX6GaIMu/fvsijmlMSuy37x+Pm5pqincoSJCBrdilF2 S7s0oa4Yh+cS8guvOY3frF5E//ik39akF1wG/TVvE7x3cmEfDXiwchRcPqe8p47Q 2f273phjyZ3Me1Y0ZiF+bS8vlsf5EBf4AWfwVHUGQLbKERpvoQZuEmvb8rDPHS/R knGZBBGN4xjg3Nyg78QxQHJDUcp1PDsj/Y/XuPQeN4TEuaq1+/oOFFaxMC7vk2+Q 0A+iE3Lz70EKYdzW72+S49Qa8JWYx/exB49rhHS/NSoCkoFc5/lPoewU+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCG9T68Wn87I1YugPIGWtCcls/pOMB8GA1UdIwQY MBaAFAjy64+wLofnGEM3skWvmeMTPvUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NWVhNDgtYzNlZC00ZTQ3LWJkMTIt NmNkZWNkNGRiOGI1LzEvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85NWVhNDgtYzNlZC00ZTQ3LWJkMTItNmNkZWNkNGRiOGI1 LzEvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALp7BrPJ3 PdFSkPRQCUBUsmCWQijW9Zy0L7z4DlhOkOrD+eFXckta6KvhXOR4YsWd2o6Pzfmj za2lBQ7AZsMl+/l0GyC89BxHq1Ugei4iqUFIMAnfbuDZXeUym7uuQ5KzAbVq+j8L +sGlQAXMSzQj3JRx6bWSmV0aXwTVhSpJ8kD8wFN5iKnZUqzF1dcOBjhD/xTmD0zV SkhJTcrVUN6tXngZqWf65KXpbWbfcKTQTx7RBWAroK589e9ZppD/dh4iXF/YQrya tCi27CSqL5V05T+J1WxkmjVhpDCu4xdEwkd96eYkSczadt1KQVEc2yWWVZ5kpCac xmDS1hirFeiAbw== -----END CERTIFICATE-----Generated at Wed Dec 17 17:50:28 2025 by rpki-client