This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json) Hash identifier: C/zv5D36z3cqSqQqTbEYVa59cVIV1y1wSgENAxQeKBo= Subject key identifier: D6:F1:A8:11:20:F9:1F:88:BE:2C:AF:C5:69:42:87:FC:43:66:5B:DE Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd Certificate serial: 019AF12D984E685E13192565E9258EAA4181 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft Manifest number: 0A50 Signing time: Sat 06 Dec 2025 01:01:28 +0000 Manifest this update: Sat 06 Dec 2025 01:01:28 +0000 Manifest next update: Sun 07 Dec 2025 01:01:28 +0000 Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: BuL7bkq25e9sTVTu48bgLjrlrHeuFEv5r2d/4f9YANY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:98:4e:68:5e:13:19:25:65:e9:25:8e:aa:41:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd Validity Not Before: Dec 6 01:01:28 2025 GMT Not After : Dec 7 01:01:28 2025 GMT Subject: CN=d6f1a81120f91f88be2cafc5694287fc43665bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cb:3f:7e:ca:76:c2:ab:b9:40:82:6a:0a:b1: 22:dc:25:60:92:8b:22:41:71:de:26:19:e1:0a:70: ef:fb:94:96:dc:20:51:f9:ac:7b:b3:4b:bc:b9:90: 2e:b7:60:a7:6e:d8:0f:23:28:79:f5:5d:c7:e5:f7: 47:47:8a:64:91:1e:48:3d:9d:4e:15:22:70:f9:a5: 2c:6a:4f:0f:d9:ea:7b:5f:39:62:e0:a1:1a:5d:92: cc:49:45:56:4e:24:46:e2:60:5e:bd:a2:63:a8:82: 26:29:7c:ca:9e:37:42:aa:6c:6a:4f:95:66:3b:f3: 00:84:b2:37:10:8f:15:3d:c7:de:07:1e:04:ba:32: d7:ec:6e:ce:a4:8a:d0:09:99:5f:11:d8:86:02:98: 05:5a:8a:3a:0f:5f:3a:ea:4e:a5:8d:ca:ba:d9:a6: 45:9d:f6:e1:8e:d2:47:95:e3:ea:e7:72:26:93:da: 13:53:d0:ac:5b:2e:24:01:9c:f0:e2:26:b4:7f:cf: 88:ac:0d:c2:d7:44:2f:0d:24:f2:96:46:d0:af:86: 3a:fa:dc:93:4a:36:98:12:a1:b8:f7:7e:ee:1e:5c: 7b:ab:da:66:c0:e1:47:34:58:dd:a5:8c:7d:f4:d8: 43:5a:0b:e3:36:81:05:13:3e:02:ab:fb:f6:e9:f8: 6c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F1:A8:11:20:F9:1F:88:BE:2C:AF:C5:69:42:87:FC:43:66:5B:DE X509v3 Authority Key Identifier: keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:d8:08:fc:a4:58:ca:c4:07:96:58:15:37:e0:51:b3:f5:bc: b4:9e:0c:ff:02:bf:9f:d7:de:df:57:06:87:2d:7f:75:6b:81: bc:4c:e3:90:f7:7c:4f:22:dd:e5:0d:cf:99:c4:0c:e7:43:0d: f1:85:90:08:65:eb:12:e3:6f:c2:f5:06:a4:c6:41:2d:30:2d: 57:2a:e3:5d:ce:b0:de:32:fa:70:a4:e5:26:14:46:74:34:36: c5:f3:01:33:d9:b1:5b:91:3a:45:3d:2a:91:01:86:3e:4d:42: 2a:75:2e:8a:3b:73:15:ec:db:c7:8d:54:5f:0e:23:2b:4c:81: a5:de:04:4f:c3:dd:12:87:8a:f0:71:5f:a4:35:58:0e:df:7d: 3e:d1:28:2d:94:af:29:b7:8d:df:ff:fd:92:aa:cf:ee:50:e3: 70:82:ca:e8:8e:42:9b:61:69:3d:b4:3e:d1:47:5b:3a:d9:f8: 58:b1:52:e2:89:06:5d:4b:b4:11:b8:17:d7:18:16:96:89:36: 6a:60:4c:e3:46:31:de:0a:08:ae:42:af:a8:1d:ae:d3:b2:af: 1c:f1:e4:89:2a:36:f8:10:38:f5:0a:c5:5b:0d:6d:d1:ec:5b: 2a:3e:59:e2:60:9f:fc:50:fc:e6:c9:22:55:12:c3:33:13:22: 38:93:5b:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZhOaF4TGSVl6SWOqkGBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZjE2NjM5YmE0ODdlZjk2M2M1NmNjYjMyNmYyNTA4ZDFh ODNlZmQwHhcNMjUxMjA2MDEwMTI4WhcNMjUxMjA3MDEwMTI4WjAzMTEwLwYDVQQD EyhkNmYxYTgxMTIwZjkxZjg4YmUyY2FmYzU2OTQyODdmYzQzNjY1YmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ss/fsp2wqu5QIJqCrEi3CVgkosi QXHeJhnhCnDv+5SW3CBR+ax7s0u8uZAut2CnbtgPIyh59V3H5fdHR4pkkR5IPZ1O FSJw+aUsak8P2ep7Xzli4KEaXZLMSUVWTiRG4mBevaJjqIImKXzKnjdCqmxqT5Vm O/MAhLI3EI8VPcfeBx4EujLX7G7OpIrQCZlfEdiGApgFWoo6D1866k6ljcq62aZF nfbhjtJHlePq53Imk9oTU9CsWy4kAZzw4ia0f8+IrA3C10QvDSTylkbQr4Y6+tyT SjaYEqG4937uHlx7q9pmwOFHNFjdpYx99NhDWgvjNoEFEz4Cq/v26fhsEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbxqBEg+R+IviyvxWlCh/xDZlveMB8GA1UdIwQY MBaAFArxZjm6SH75Y8VsyzJvJQjRqD79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ZGbU9icElmdmxqeFd6TE1tOGxDTkdvUHYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mYzdlMmQtN2I3Ni00NjhmLTg1Mjkt M2M2Mzc2NTE1MDdkLzEvQ3ZGbU9icElmdmxqeFd6TE1tOGxDTkdvUHYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mYzdlMmQtN2I3Ni00NjhmLTg1MjktM2M2Mzc2NTE1MDdk LzEvQ3ZGbU9icElmdmxqeFd6TE1tOGxDTkdvUHYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNgI/KRY ysQHllgVN+BRs/W8tJ4M/wK/n9fe31cGhy1/dWuBvEzjkPd8TyLd5Q3PmcQM50MN 8YWQCGXrEuNvwvUGpMZBLTAtVyrjXc6w3jL6cKTlJhRGdDQ2xfMBM9mxW5E6RT0q kQGGPk1CKnUuijtzFezbx41UXw4jK0yBpd4ET8PdEoeK8HFfpDVYDt99PtEoLZSv KbeN3//9kqrP7lDjcILK6I5Cm2FpPbQ+0UdbOtn4WLFS4okGXUu0EbgX1xgWlok2 amBM40Yx3goIrkKvqB2u07KvHPHkiSo2+BA49QrFWw1t0exbKj5Z4mCf/FD85ski VRLDMxMiOJNb3w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:07 2025 by rpki-client