This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json) Hash identifier: aFpAOU/5C+EqbPnAv8ZKV584zDEAsEb+D+IIgWVCBMg= Subject key identifier: 52:17:8C:85:A7:DF:C7:00:B1:85:1E:49:F5:DA:A7:88:A7:D0:6E:EC Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45 Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45 Certificate serial: 019AF2ADC4C5F97734093E0FB3393DC0A2C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft Manifest number: 0160 Signing time: Sat 06 Dec 2025 08:01:05 +0000 Manifest this update: Sat 06 Dec 2025 08:01:05 +0000 Manifest next update: Sun 07 Dec 2025 08:01:05 +0000 Files and hashes: 1: AUKx0J4WNHpEIs7yN_p5Gj-AKQc.roa (hash: eENZl1wDIRgwnUAmEgxPXPDBi6xMrW0OqSMxiYMTiao=) 2: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: P1cLlk2MuTI3Wx+w5/Dg+/uqPATMlVPuPWjtrc1dFbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c4:c5:f9:77:34:09:3e:0f:b3:39:3d:c0:a2:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45 Validity Not Before: Dec 6 08:01:05 2025 GMT Not After : Dec 7 08:01:05 2025 GMT Subject: CN=52178c85a7dfc700b1851e49f5daa788a7d06eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ab:2b:88:6b:e5:f9:5e:6f:b9:5e:9d:40:e1: 65:fc:53:f6:40:27:24:ef:12:4d:bf:5d:b9:c1:39: 1d:c6:25:48:ed:4e:4c:e4:1d:bc:97:dc:37:c2:d0: b2:5f:f3:ed:9e:76:ef:0d:46:0a:c4:3d:ea:d0:d3: 80:95:2c:0d:7d:50:33:bb:3e:87:e3:68:11:ef:d7: a6:60:56:4b:dd:cd:f8:ab:4a:9f:30:ef:c7:eb:2f: c7:f6:19:88:f0:f1:f9:f3:eb:39:c1:e9:99:16:dc: a4:60:6d:fb:89:d7:c6:20:06:2a:d7:5d:a2:40:5e: a7:ea:dd:f4:80:14:30:3e:aa:5f:12:74:8e:d0:ba: a9:e4:7b:8f:79:36:d3:2a:bd:33:68:f6:c3:ff:f6: 95:b7:39:b3:9b:c7:97:e4:b9:ec:54:eb:c9:d0:54: a1:16:04:43:30:fe:fa:0a:78:18:12:1d:d9:c0:50: ea:60:3f:bd:50:0d:5f:3d:2f:a9:85:d1:3c:f9:68: 9c:1a:30:2d:5f:34:88:c5:f6:b9:f3:08:6d:a9:28: 63:8e:be:6c:1e:8a:4c:93:6c:b5:d3:0b:31:c8:46: 7c:3b:39:e5:14:f0:16:e6:c3:a3:78:cc:8b:3a:95: d4:5e:43:20:f1:e7:f9:6d:bc:cd:95:c7:3f:2c:07: bb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:17:8C:85:A7:DF:C7:00:B1:85:1E:49:F5:DA:A7:88:A7:D0:6E:EC X509v3 Authority Key Identifier: keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:64:12:5c:2e:22:5c:ad:0e:12:fc:b0:5d:e5:5c:ff:27:59: ec:49:10:48:b2:a9:d7:38:b5:f3:87:59:6c:fb:ab:48:7b:90: 5c:c7:c9:c3:ee:eb:cb:b1:9e:4f:c6:63:d7:5b:43:34:f5:5c: dd:36:c7:a2:ae:a6:23:51:c8:71:06:f7:46:f8:5d:b9:f6:60: 6e:ec:f3:c0:00:2c:2d:3f:8b:b4:44:dc:66:0f:e7:77:b9:ab: 08:11:1a:65:d7:d9:11:86:d8:e2:65:3f:d5:7b:c8:46:89:eb: ff:97:18:fc:ef:0a:31:a3:0f:8e:73:c6:40:45:80:20:ee:7e: d1:19:fc:9a:c7:c0:c4:b5:e5:fc:e1:8a:f6:59:bb:ab:d0:11: 57:e4:b0:48:6b:e1:31:a5:db:43:67:83:d1:c8:32:b1:fc:0e: de:51:f1:e1:18:be:26:85:19:e7:a9:4e:4b:ea:52:85:e3:f3: 0a:c1:9e:ff:ba:73:2c:ee:02:fb:7d:50:c0:ee:52:59:be:f9: 3e:7b:30:d7:88:46:b7:11:0a:27:15:8e:45:8f:1c:be:5b:88: e2:8a:e4:05:4a:8a:a7:1a:27:7d:12:10:56:c9:51:c4:61:9c: e0:8d:01:16:60:2b:0c:86:17:bb:f2:2e:2a:e8:9e:60:b1:6d: 72:02:b7:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcTF+Xc0CT4Pszk9wKLEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOWNhNjNlNmQyYjUwNDQ0OTIxN2RjMDc4OGM5ZDM3NDg5 YjRjNDUwHhcNMjUxMjA2MDgwMTA1WhcNMjUxMjA3MDgwMTA1WjAzMTEwLwYDVQQD Eyg1MjE3OGM4NWE3ZGZjNzAwYjE4NTFlNDlmNWRhYTc4OGE3ZDA2ZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKsriGvl+V5vuV6dQOFl/FP2QCck 7xJNv125wTkdxiVI7U5M5B28l9w3wtCyX/PtnnbvDUYKxD3q0NOAlSwNfVAzuz6H 42gR79emYFZL3c34q0qfMO/H6y/H9hmI8PH58+s5wemZFtykYG37idfGIAYq112i QF6n6t30gBQwPqpfEnSO0Lqp5HuPeTbTKr0zaPbD//aVtzmzm8eX5LnsVOvJ0FSh FgRDMP76CngYEh3ZwFDqYD+9UA1fPS+phdE8+WicGjAtXzSIxfa58whtqShjjr5s HopMk2y10wsxyEZ8OznlFPAW5sOjeMyLOpXUXkMg8ef5bbzNlcc/LAe7xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIXjIWn38cAsYUeSfXap4in0G7sMB8GA1UdIwQY MBaAFHKcpj5tK1BESSF9wHiMnTdIm0xFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81OWVhMjktZjI4OC00NjhlLWEzM2Ut NTU5ZTNkNzZjNWI2LzEvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81OWVhMjktZjI4OC00NjhlLWEzM2UtNTU5ZTNkNzZjNWI2 LzEvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2QSXC4i XK0OEvywXeVc/ydZ7EkQSLKp1zi184dZbPurSHuQXMfJw+7ry7GeT8Zj11tDNPVc 3TbHoq6mI1HIcQb3RvhdufZgbuzzwAAsLT+LtETcZg/nd7mrCBEaZdfZEYbY4mU/ 1XvIRonr/5cY/O8KMaMPjnPGQEWAIO5+0Rn8msfAxLXl/OGK9lm7q9ARV+SwSGvh MaXbQ2eD0cgysfwO3lHx4Ri+JoUZ56lOS+pShePzCsGe/7pzLO4C+31QwO5SWb75 Pnsw14hGtxEKJxWORY8cvluI4orkBUqKpxonfRIQVslRxGGc4I0BFmArDIYXu/Iu KuieYLFtcgK33w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:01 2025 by rpki-client