This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json) Hash identifier: +ViQAgRW5squh6Qtr1AW7frkMznhIlBLH0R+gE1AxNk= Subject key identifier: 1C:74:8E:A4:3B:48:D2:58:37:8E:33:62:37:E5:A2:C3:4B:2A:43:F3 Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9 Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9 Certificate serial: 019AF23FE0AF623F89BEFB1895A8F1EEB813 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft Manifest number: 0301 Signing time: Sat 06 Dec 2025 06:01:03 +0000 Manifest this update: Sat 06 Dec 2025 06:01:03 +0000 Manifest next update: Sun 07 Dec 2025 06:01:03 +0000 Files and hashes: 1: 5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa (hash: Ba0mjq3pimajTCvvrrrZyoHBHvgCNhQury7Kq+n9Wpw=) 2: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: nYFDl1Bc7hg20iFLTVD3g534MUXOupQ4LqJgcTHXmik=) 3: ejCYeubtEX2rMSmkNAwpyfa0Enw.roa (hash: 4hn9ccLxIO+b+OCd227Erjt+kM9+/9+bRDsSA2RYfoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e0:af:62:3f:89:be:fb:18:95:a8:f1:ee:b8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9 Validity Not Before: Dec 6 06:01:03 2025 GMT Not After : Dec 7 06:01:03 2025 GMT Subject: CN=1c748ea43b48d258378e336237e5a2c34b2a43f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:e5:80:ea:c5:1a:31:42:da:f5:5f:d0:e6: fd:2c:67:6f:df:a1:65:7c:90:fb:fe:9b:73:88:78: 1b:9f:83:f5:fc:15:56:21:f2:12:3d:40:89:1f:35: a7:77:41:30:52:ab:a6:6a:6f:3a:2a:cf:84:7f:18: 1e:8d:cd:aa:fb:89:d9:a3:98:f8:ff:cd:f6:b6:51: 2f:d3:06:fa:eb:1e:e4:ce:66:83:9b:8f:9c:6d:1f: 68:29:d9:a3:2f:68:e7:3d:bf:d5:90:3c:6d:42:b4: 3f:98:41:e7:fe:7e:e5:10:0a:cc:a3:ff:1f:95:35: f2:6d:18:12:49:f0:08:9c:cb:ce:cb:1c:15:11:bf: 58:ec:f2:44:d7:68:90:2b:06:1f:cf:ad:f0:d6:09: 34:9b:71:05:55:2f:23:e5:65:1b:a3:fe:c5:cc:75: db:cc:9f:9b:96:13:53:2f:07:d9:b1:4d:16:9f:92: 25:10:aa:f8:b5:2b:7e:80:d2:0a:06:6d:97:b0:64: 8a:3b:8d:47:47:ce:c2:5a:1d:74:57:d4:44:db:c5: d4:1b:ee:c9:1b:a3:91:f7:45:c4:0a:ee:20:87:a8: 6d:60:34:f1:a7:79:15:da:d9:fe:8c:d4:ae:02:6e: 12:c5:ec:9f:ea:72:cc:fa:f2:09:9f:48:63:c2:fb: 73:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:74:8E:A4:3B:48:D2:58:37:8E:33:62:37:E5:A2:C3:4B:2A:43:F3 X509v3 Authority Key Identifier: keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:44:27:0d:8b:a9:a2:f2:63:19:8e:7c:df:f6:e5:04:1a:18: 27:f6:60:22:d1:15:fd:e6:40:ad:9a:d5:37:02:98:6b:a5:3e: 53:d3:04:b4:ba:ac:7d:e9:e1:77:d1:04:83:f2:bf:66:76:6b: a8:d2:d6:90:3e:a9:0e:ec:eb:bf:c8:6a:3b:14:6c:5c:23:f8: 12:05:82:e8:94:43:aa:70:f2:89:85:c1:bb:61:22:07:3b:63: b4:89:32:87:7b:41:c5:5d:f5:7d:21:a3:4e:d4:ee:6c:17:1e: 90:97:f9:05:18:49:e1:57:28:af:d5:16:bb:1a:2e:86:7b:ba: 84:ef:c9:8c:a1:0b:0a:73:4e:05:42:8b:06:a7:77:f8:a8:d2: 09:6e:df:c3:82:ca:dd:57:72:9f:a4:be:3e:3c:18:b6:7d:93: 4f:85:37:71:2c:30:c9:0b:89:2e:c7:25:63:25:df:33:39:9c: 6c:c0:3e:22:ae:05:ed:bb:44:49:95:92:bf:43:26:33:85:37: a9:66:b3:06:7f:87:8a:eb:db:aa:68:e1:19:cf:a0:9c:57:fd: 49:1f:d1:4f:1b:8d:ba:35:64:4b:b9:1f:ea:95:7d:11:a6:1a: a9:ac:b2:d8:8c:75:bd:b5:7b:92:ef:59:df:2d:b5:ed:ae:99: ac:5b:c3:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+CvYj+JvvsYlajx7rgTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOTM0ZmMzY2FkYWRlNmYwNzkwN2FlYjZlMGJlNWE5ZWM0 NDA3YjkwHhcNMjUxMjA2MDYwMTAzWhcNMjUxMjA3MDYwMTAzWjAzMTEwLwYDVQQD EygxYzc0OGVhNDNiNDhkMjU4Mzc4ZTMzNjIzN2U1YTJjMzRiMmE0M2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW3lgOrFGjFC2vVf0Ob9LGdv36Fl fJD7/ptziHgbn4P1/BVWIfISPUCJHzWnd0EwUqumam86Ks+Efxgejc2q+4nZo5j4 /832tlEv0wb66x7kzmaDm4+cbR9oKdmjL2jnPb/VkDxtQrQ/mEHn/n7lEArMo/8f lTXybRgSSfAInMvOyxwVEb9Y7PJE12iQKwYfz63w1gk0m3EFVS8j5WUbo/7FzHXb zJ+blhNTLwfZsU0Wn5IlEKr4tSt+gNIKBm2XsGSKO41HR87CWh10V9RE28XUG+7J G6OR90XECu4gh6htYDTxp3kV2tn+jNSuAm4Sxeyf6nLM+vIJn0hjwvtz4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBx0jqQ7SNJYN44zYjflosNLKkPzMB8GA1UdIwQY MBaAFHKTT8PK2t5vB5B6624L5ansRAe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jNDlkMTktOGM3OS00Zjc3LWI0NTAt YzA4Y2YxOTdhMTBjLzEvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9jNDlkMTktOGM3OS00Zjc3LWI0NTAtYzA4Y2YxOTdhMTBj LzEvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkQnDYup ovJjGY583/blBBoYJ/ZgItEV/eZArZrVNwKYa6U+U9MEtLqsfenhd9EEg/K/ZnZr qNLWkD6pDuzrv8hqOxRsXCP4EgWC6JRDqnDyiYXBu2EiBztjtIkyh3tBxV31fSGj TtTubBcekJf5BRhJ4Vcor9UWuxouhnu6hO/JjKELCnNOBUKLBqd3+KjSCW7fw4LK 3Vdyn6S+PjwYtn2TT4U3cSwwyQuJLsclYyXfMzmcbMA+Iq4F7btESZWSv0MmM4U3 qWazBn+HiuvbqmjhGc+gnFf9SR/RTxuNujVkS7kf6pV9EaYaqayy2Ix1vbV7ku9Z 3y217a6ZrFvD6g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:56:48 2025 by rpki-client