This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json) Hash identifier: 8RSv/G/MChf9tCdz9mRaWcSG9c4IxUUjYr5wciYOW7k= Subject key identifier: F5:7E:95:5B:66:45:2F:38:08:F8:A6:9E:6A:60:F2:1A:28:01:03:6D Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01 Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001 Certificate serial: 019AF50AD8BEE618C158E5C6A8C38EE24B37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 19:02:00 +0000 Manifest this update: Sat 06 Dec 2025 19:02:00 +0000 Manifest next update: Sun 07 Dec 2025 19:02:00 +0000 Files and hashes: 1: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: Wi31WQ50zl1QbnvTwE68CYmDL0ddlCW/rQAWria9lvE=) 2: dh_JgCZHkTokMGRr7H9M3cKhoRc.roa (hash: 4Kx8qkmvFu9/ph3LEnJvdO/hVDQr2VoTVCm1ptdvoEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:d8:be:e6:18:c1:58:e5:c6:a8:c3:8e:e2:4b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001 Validity Not Before: Dec 6 19:02:00 2025 GMT Not After : Dec 7 19:02:00 2025 GMT Subject: CN=f57e955b66452f3808f8a69e6a60f21a2801036d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:60:21:c5:45:da:87:94:fe:8c:33:76:66:f7: 4d:ab:9e:bb:67:9c:e3:88:2f:64:56:4b:44:40:52: bd:b3:94:12:1b:41:4f:57:ae:31:26:6c:e3:88:96: 05:e2:97:92:cf:7b:cd:21:4f:67:c2:42:78:6d:20: a7:57:42:bb:dc:10:5f:c7:05:56:09:cf:bf:10:41: 5a:f8:4f:f2:89:8e:fd:18:8b:6d:80:47:3d:8b:74: c2:81:f4:68:e2:58:f8:1e:83:4b:33:9b:e6:3d:2e: e9:df:93:93:32:f0:96:83:76:31:95:57:b2:0c:5a: 76:32:c3:63:e7:05:e0:fc:3d:a2:a1:36:4e:e7:62: 1f:1b:ab:57:dc:66:0e:2c:06:a7:ad:08:c2:77:79: 87:17:61:ad:7e:07:5b:84:2e:99:64:28:03:ac:fa: 52:71:24:9f:25:1e:61:72:3c:73:c8:b2:ca:a3:a3: 63:8a:88:ba:d6:ec:5c:a0:34:33:3e:0a:25:0f:4c: 9c:65:c4:59:ab:1b:18:83:a0:b7:82:5d:4c:3c:b3: c3:5e:cf:1e:77:13:fb:f4:30:41:2c:ac:63:2e:5c: 15:03:1b:37:b9:95:a2:04:f0:03:7d:68:d7:41:4b: 44:f5:d9:69:d1:87:f4:7b:a3:77:f3:98:60:b8:c4: 43:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7E:95:5B:66:45:2F:38:08:F8:A6:9E:6A:60:F2:1A:28:01:03:6D X509v3 Authority Key Identifier: keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:d9:0e:3a:f3:7d:55:20:f2:21:55:93:d0:b5:0d:38:12:5d: a0:8d:2f:ca:e3:a7:b4:86:3a:a4:52:36:d6:85:2c:d7:8b:aa: c3:7d:e0:f8:6b:68:af:39:39:b4:76:ae:30:7b:35:97:6f:fb: 8f:7e:36:15:80:ee:f6:c4:2b:24:11:8e:92:10:64:3f:7d:b4: 7c:e3:ba:7a:9a:3b:7c:51:66:69:35:71:fb:96:ab:33:29:10: 34:b7:af:fc:dd:0a:f7:41:a6:a7:2b:12:ce:54:4f:aa:9a:3f: 93:f2:89:f5:01:2e:b3:cd:cb:62:73:61:42:16:38:0c:7e:12: 2c:32:6a:16:9d:eb:21:f9:7f:95:5b:e1:db:b1:e2:ea:5d:21: 35:33:9d:f9:6e:5b:1c:52:1f:92:87:9c:2c:2b:4c:6a:de:b0: d7:d8:58:5a:1d:dc:72:6a:3a:ce:e8:47:26:14:3c:19:e2:de: 27:6d:93:54:5b:70:4d:9e:e4:3c:23:6f:21:52:fc:8b:49:11: 86:e1:46:0f:73:3f:be:b3:6b:e4:52:e1:c5:23:2b:53:32:60: a9:01:b8:09:80:f2:59:1d:2e:04:13:e4:1e:e1:4b:d3:f9:6b: c1:e5:3d:26:07:f6:cc:73:ec:3b:9d:52:ba:43:78:90:0f:ee: c2:be:73:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cti+5hjBWOXGqMOO4ks3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZjdmMTQ3NmZmODI5MWVmYWYyODQ5Y2QzZjIxNDY3MjI2 N2IwMDEwHhcNMjUxMjA2MTkwMjAwWhcNMjUxMjA3MTkwMjAwWjAzMTEwLwYDVQQD EyhmNTdlOTU1YjY2NDUyZjM4MDhmOGE2OWU2YTYwZjIxYTI4MDEwMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGAhxUXah5T+jDN2ZvdNq567Z5zj iC9kVktEQFK9s5QSG0FPV64xJmzjiJYF4peSz3vNIU9nwkJ4bSCnV0K73BBfxwVW Cc+/EEFa+E/yiY79GIttgEc9i3TCgfRo4lj4HoNLM5vmPS7p35OTMvCWg3YxlVey DFp2MsNj5wXg/D2ioTZO52IfG6tX3GYOLAanrQjCd3mHF2GtfgdbhC6ZZCgDrPpS cSSfJR5hcjxzyLLKo6Njioi61uxcoDQzPgolD0ycZcRZqxsYg6C3gl1MPLPDXs8e dxP79DBBLKxjLlwVAxs3uZWiBPADfWjXQUtE9dlp0Yf0e6N385hguMRDxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPV+lVtmRS84CPimnmpg8hooAQNtMB8GA1UdIwQY MBaAFHL38Udv+Cke+vKEnNPyFGciZ7ABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3ZmeFIyXzRLUjc2OG9TYzBfSVVaeUpuc0FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGVjZDEtMWUyYi00MmQ1LWFmNzEt MzkxZDEwZmY5NDdjLzEvY3ZmeFIyXzRLUjc2OG9TYzBfSVVaeUpuc0FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lOGVjZDEtMWUyYi00MmQ1LWFmNzEtMzkxZDEwZmY5NDdj LzEvY3ZmeFIyXzRLUjc2OG9TYzBfSVVaeUpuc0FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArtkOOvN9 VSDyIVWT0LUNOBJdoI0vyuOntIY6pFI21oUs14uqw33g+Gtorzk5tHauMHs1l2/7 j342FYDu9sQrJBGOkhBkP320fOO6epo7fFFmaTVx+5arMykQNLev/N0K90GmpysS zlRPqpo/k/KJ9QEus83LYnNhQhY4DH4SLDJqFp3rIfl/lVvh27Hi6l0hNTOd+W5b HFIfkoecLCtMat6w19hYWh3ccmo6zuhHJhQ8GeLeJ22TVFtwTZ7kPCNvIVL8i0kR huFGD3M/vrNr5FLhxSMrUzJgqQG4CYDyWR0uBBPkHuFL0/lrweU9Jgf2zHPsO51S ukN4kA/uwr5ztw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:26 2025 by rpki-client