This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json) Hash identifier: kadNZsEiQcbXB6lbLV6hipOigmWftWh/ZZuYQ0xZ9zU= Subject key identifier: 73:2A:4D:FC:47:40:B3:48:33:71:DF:80:A6:9E:0E:97:40:2E:69:BD Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc Certificate serial: 019B2FD51AEDC8F8908FC42C31472A788166 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft Manifest number: 044E Signing time: Thu 18 Dec 2025 05:00:53 +0000 Manifest this update: Thu 18 Dec 2025 05:00:53 +0000 Manifest next update: Fri 19 Dec 2025 05:00:53 +0000 Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: ywSPNAUI4FQgzy+hRa2eitNbL9bnKtuFuCxGJuSN2s8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:1a:ed:c8:f8:90:8f:c4:2c:31:47:2a:78:81:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc Validity Not Before: Dec 18 05:00:53 2025 GMT Not After : Dec 19 05:00:53 2025 GMT Subject: CN=732a4dfc4740b3483371df80a69e0e97402e69bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:78:50:27:ad:8d:43:ef:bc:49:25:72:cf:da: c3:d4:8f:c9:86:b8:c9:b6:28:51:c1:8b:22:a3:6b: 55:0a:a4:0e:b7:cd:91:62:19:e3:d1:96:7e:81:6e: 18:7c:ce:1a:d9:4e:44:ad:d4:d0:d8:a2:3e:62:0f: c4:72:37:33:87:56:5f:e7:a5:d0:b6:4f:43:0f:45: 68:27:bc:d9:00:3c:dd:15:b7:ca:ff:ba:8b:b0:82: 6e:a6:8c:94:f2:a5:2d:73:7d:17:68:68:24:48:7e: 8b:4d:af:d1:0f:92:15:ea:d2:b1:1b:d0:90:3c:cc: 66:45:d8:7a:84:15:1f:c2:9c:5f:6a:ef:5a:d5:bd: 1e:90:64:8a:a6:93:84:96:2c:72:9f:aa:49:76:ef: f8:4f:50:02:f9:10:69:74:3b:5b:ff:ef:5d:5f:33: bc:f7:d9:5e:02:1f:7c:2e:f2:63:41:19:5c:9a:cc: 25:76:fa:76:44:21:7b:f4:c0:f2:b5:f3:d9:ce:41: 05:7b:94:09:a6:07:c9:cc:12:df:4e:e4:5e:80:97: e4:f3:ef:90:37:21:d7:6d:a9:51:95:85:7f:16:3a: e5:5b:37:5c:80:73:42:c1:a2:2d:0b:35:81:72:a9: a7:7c:7f:3a:80:55:8c:42:37:dc:86:f9:78:13:3f: 4f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2A:4D:FC:47:40:B3:48:33:71:DF:80:A6:9E:0E:97:40:2E:69:BD X509v3 Authority Key Identifier: keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b4:dc:57:7d:9f:a4:ef:63:3c:c8:c6:af:3e:61:ca:56:45: 24:d6:ff:24:29:99:df:34:a4:78:d6:6d:93:4a:1a:8f:b3:b1: 9c:75:71:6b:0f:46:69:e8:6f:68:e3:ac:3b:bb:6b:1d:e0:3f: 32:43:3e:45:2c:b3:09:2d:47:ce:70:70:84:b3:5d:1e:1e:09: 35:cb:4e:25:78:71:ea:84:b1:43:04:45:ba:79:49:0b:f8:9b: 7b:39:a2:5d:a7:5f:fb:4c:c8:5d:02:39:dd:10:89:1c:f2:51: 99:ba:b8:34:71:3b:8a:03:c3:34:83:de:f1:f4:73:8f:2f:8f: 45:e6:8b:7d:94:9a:cd:90:e0:05:fd:4a:17:53:f8:c4:e4:83: d5:59:88:68:24:4e:7a:e8:12:2c:f2:fb:ba:0e:e6:1a:8b:a4: e6:1b:d7:06:d6:51:72:85:14:62:b7:54:f1:73:a1:d8:6c:f6: 7e:a0:45:2d:e5:02:a8:da:a8:f4:cb:0e:af:4a:aa:36:78:6e: d9:03:ea:6c:60:bd:be:b5:dd:39:e0:20:f5:c8:76:e9:e3:89: cd:fb:29:c8:69:97:0a:a7:fa:25:07:32:02:ce:aa:2d:f4:61: ca:c9:7b:78:b3:e9:83:6b:32:ac:5b:00:82:3d:b8:87:31:3f: 18:a0:84:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1RrtyPiQj8QsMUcqeIFmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZjNlNDIzYmQxZTk3MzZhNWY1ZDc4NGVjOTI5OWQ1MDgy NzI3ZGMwHhcNMjUxMjE4MDUwMDUzWhcNMjUxMjE5MDUwMDUzWjAzMTEwLwYDVQQD Eyg3MzJhNGRmYzQ3NDBiMzQ4MzM3MWRmODBhNjllMGU5NzQwMmU2OWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHhQJ62NQ++8SSVyz9rD1I/JhrjJ tihRwYsio2tVCqQOt82RYhnj0ZZ+gW4YfM4a2U5ErdTQ2KI+Yg/Ecjczh1Zf56XQ tk9DD0VoJ7zZADzdFbfK/7qLsIJupoyU8qUtc30XaGgkSH6LTa/RD5IV6tKxG9CQ PMxmRdh6hBUfwpxfau9a1b0ekGSKppOElixyn6pJdu/4T1AC+RBpdDtb/+9dXzO8 99leAh98LvJjQRlcmswldvp2RCF79MDytfPZzkEFe5QJpgfJzBLfTuRegJfk8++Q NyHXbalRlYV/FjrlWzdcgHNCwaItCzWBcqmnfH86gFWMQjfchvl4Ez9PqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMqTfxHQLNIM3HfgKaeDpdALmm9MB8GA1UdIwQY MBaAFArz5CO9Hpc2pfXXhOySmdUIJyfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ZQa0k3MGVsemFsOWRlRTdKS1oxUWduSjl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hNzUxZjctNzZlNS00NzhjLTkxNWEt ZmUxZTkyYzM2YWRiLzEvQ3ZQa0k3MGVsemFsOWRlRTdKS1oxUWduSjl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9hNzUxZjctNzZlNS00NzhjLTkxNWEtZmUxZTkyYzM2YWRi LzEvQ3ZQa0k3MGVsemFsOWRlRTdKS1oxUWduSjl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrTcV32f pO9jPMjGrz5hylZFJNb/JCmZ3zSkeNZtk0oaj7OxnHVxaw9GaehvaOOsO7trHeA/ MkM+RSyzCS1HznBwhLNdHh4JNctOJXhx6oSxQwRFunlJC/ibezmiXadf+0zIXQI5 3RCJHPJRmbq4NHE7igPDNIPe8fRzjy+PReaLfZSazZDgBf1KF1P4xOSD1VmIaCRO eugSLPL7ug7mGouk5hvXBtZRcoUUYrdU8XOh2Gz2fqBFLeUCqNqo9MsOr0qqNnhu 2QPqbGC9vrXdOeAg9ch26eOJzfspyGmXCqf6JQcyAs6qLfRhysl7eLPpg2syrFsA gj24hzE/GKCEPQ== -----END CERTIFICATE-----Generated at Thu Dec 18 09:55:14 2025 by rpki-client