This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft File: cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft (raw, json) Hash identifier: GcN3hCtGO/mNFBrGv4eyFQ9kwMlTMTz5DM0FoCa/wwo= Subject key identifier: 5E:B3:5A:5C:6D:CB:19:EA:B0:4D:4B:CB:6B:7D:62:FF:CD:1B:D0:D4 Authority key identifier: 72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E Certificate issuer: /CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e Certificate serial: 019AF277018657F5D5A6B5347838D34DE2EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:01:16 +0000 Manifest this update: Sat 06 Dec 2025 07:01:16 +0000 Manifest next update: Sun 07 Dec 2025 07:01:16 +0000 Files and hashes: 1: cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl (hash: gBthWJ1lZDz+jxSFsgsXy6FgMeomq7eD1V2tHFDEYS8=) 2: wfmRA1o816NK2nebior9nQRqs6I.roa (hash: WsRrqYQ4pFa/JlBicKV1hWW2cLlAeaKvafPxPghqGUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:01:86:57:f5:d5:a6:b5:34:78:38:d3:4d:e2:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e Validity Not Before: Dec 6 07:01:16 2025 GMT Not After : Dec 7 07:01:16 2025 GMT Subject: CN=5eb35a5c6dcb19eab04d4bcb6b7d62ffcd1bd0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:04:40:f1:9c:6f:07:16:2a:c5:d2:89:e1:83: 11:25:95:26:76:4c:42:89:ba:6b:d8:8c:b9:2f:b5: d3:29:56:a6:87:5c:fb:55:80:53:3f:1a:f5:ae:32: d5:cf:60:2d:24:a1:e5:7e:4e:7c:d7:4b:3a:f3:34: aa:0a:eb:48:e0:9a:77:ff:71:09:ea:d9:85:17:0b: 1b:ca:87:9a:a7:ca:c8:5d:f9:99:f4:44:b7:93:1f: ce:de:ae:a7:f7:47:bd:58:4f:e4:c6:a6:38:47:4d: 3d:f6:45:42:7c:bc:4a:fa:67:b2:48:1c:2d:55:82: 7f:26:08:5d:7e:e3:8f:32:97:ca:fd:62:7d:a2:4f: d3:4c:e2:2e:49:9c:65:a3:8c:0e:3c:8b:5e:13:8f: 62:40:8e:e1:7a:57:86:90:29:47:ec:d7:36:8b:e4: ab:ff:63:af:79:a7:d3:c8:0b:7a:7d:36:c5:e3:35: c3:53:a4:9d:a1:71:1f:8e:55:b9:ad:f8:95:74:12: e6:52:5c:17:66:83:97:f4:dc:4f:65:2c:91:92:62: 55:f4:86:8c:5e:b3:04:92:f6:a0:d7:e4:cb:5e:3a: 73:a0:5f:07:5e:5d:77:45:6e:aa:7b:f5:0f:4c:35: 74:31:ee:1e:e2:a1:a1:fa:0d:6c:27:a1:f2:0e:10: cc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B3:5A:5C:6D:CB:19:EA:B0:4D:4B:CB:6B:7D:62:FF:CD:1B:D0:D4 X509v3 Authority Key Identifier: keyid:72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:45:b6:cc:7b:57:b7:b0:6e:c9:0b:05:c7:c9:b4:59:27:fc: bf:15:21:3e:67:56:a5:1f:fc:f3:af:c7:4b:a5:40:31:17:75: ad:02:eb:a6:b0:f4:80:c9:a1:10:3d:a7:7c:6e:ca:12:d6:85: ed:e9:9b:a8:4e:40:f4:ed:28:9a:56:b7:09:d0:2c:a4:ae:37: 3b:d3:1d:c8:9f:78:2a:77:9c:11:92:50:7c:71:5f:ff:10:a4: 18:87:fe:8c:d3:82:73:a5:00:0e:39:ef:f8:a8:db:ee:44:db: d2:21:c9:c4:dc:b5:66:03:c5:fb:da:f4:4f:4e:11:85:66:f5: 15:96:a6:9d:5d:4d:4d:36:00:e1:08:31:61:c5:9b:de:e8:ae: 48:c5:cf:d3:82:33:81:29:71:06:01:2b:9b:42:29:30:70:29: c1:cb:59:ed:36:96:df:7d:fe:04:41:88:87:ab:9b:b1:eb:71: 29:4d:f7:8f:03:20:29:c2:76:45:36:37:51:2c:a0:6c:cc:b8: 0e:bc:b1:10:87:a9:8b:f9:3d:e5:e7:99:ad:eb:b6:b3:86:0d: 3b:86:fc:6a:74:16:d7:d9:a4:be:db:68:48:a6:9d:c7:e5:3c: 14:d7:57:4c:76:c6:d5:94:27:92:0b:79:44:5d:cd:32:77:6d: f6:c1:bc:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwGGV/XVprU0eDjTTeLqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOWZhMTMwOTVkM2U3ZjA5ZmQ4ZjYxYWM1MDg0YzNiYzUx OTRhMGUwHhcNMjUxMjA2MDcwMTE2WhcNMjUxMjA3MDcwMTE2WjAzMTEwLwYDVQQD Eyg1ZWIzNWE1YzZkY2IxOWVhYjA0ZDRiY2I2YjdkNjJmZmNkMWJkMGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgRA8ZxvBxYqxdKJ4YMRJZUmdkxC ibpr2Iy5L7XTKVamh1z7VYBTPxr1rjLVz2AtJKHlfk5810s68zSqCutI4Jp3/3EJ 6tmFFwsbyoeap8rIXfmZ9ES3kx/O3q6n90e9WE/kxqY4R0099kVCfLxK+meySBwt VYJ/JghdfuOPMpfK/WJ9ok/TTOIuSZxlo4wOPIteE49iQI7heleGkClH7Nc2i+Sr /2OveafTyAt6fTbF4zXDU6SdoXEfjlW5rfiVdBLmUlwXZoOX9NxPZSyRkmJV9IaM XrMEkvag1+TLXjpzoF8HXl13RW6qe/UPTDV0Me4e4qGh+g1sJ6HyDhDM0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6zWlxtyxnqsE1Ly2t9Yv/NG9DUMB8GA1UdIwQY MBaAFHKfoTCV0+fwn9j2GsUITDvFGUoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3AtaE1KWFQ1X0NmMlBZYXhRaE1POFVaU2c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC81ZDU1OTMtNzdmYi00NGE1LWE2MGMt YTdiNWY5NTM1OGJmLzEvY3AtaE1KWFQ1X0NmMlBZYXhRaE1POFVaU2c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC81ZDU1OTMtNzdmYi00NGE1LWE2MGMtYTdiNWY5NTM1OGJm LzEvY3AtaE1KWFQ1X0NmMlBZYXhRaE1POFVaU2c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt0W2zHtX t7BuyQsFx8m0WSf8vxUhPmdWpR/886/HS6VAMRd1rQLrprD0gMmhED2nfG7KEtaF 7embqE5A9O0omla3CdAspK43O9MdyJ94KnecEZJQfHFf/xCkGIf+jNOCc6UADjnv +Kjb7kTb0iHJxNy1ZgPF+9r0T04RhWb1FZamnV1NTTYA4QgxYcWb3uiuSMXP04Iz gSlxBgErm0IpMHApwctZ7TaW333+BEGIh6ubsetxKU33jwMgKcJ2RTY3USygbMy4 DryxEIepi/k95eeZreu2s4YNO4b8anQW19mkvttoSKadx+U8FNdXTHbG1ZQnkgt5 RF3NMndt9sG8zg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:48 2025 by rpki-client