This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft File: cpnOZKDxYk17stKWnlwRrbqlSFw.mft (raw, json) Hash identifier: O+8Fd7xys2nSWlQLatDXBqUlbCgSs8839cEGw36A/Ok= Subject key identifier: 33:54:B7:A2:03:A4:7D:5D:59:98:4A:CB:01:CE:FD:D5:EB:CD:A6:2B Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C Certificate issuer: /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c Certificate serial: 019AF1D1C33E9D3D4E805FDDD60D0185FB14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft Manifest number: 0B89 Signing time: Sat 06 Dec 2025 04:00:47 +0000 Manifest this update: Sat 06 Dec 2025 04:00:47 +0000 Manifest next update: Sun 07 Dec 2025 04:00:47 +0000 Files and hashes: 1: cpnOZKDxYk17stKWnlwRrbqlSFw.crl (hash: JUeafrDh5U7lF92M9WPacIUMj1hFxSfPev7dBeIEV0Q=) 2: hGLXMAJyrLLUknw2I4rIa47GY5A.roa (hash: 2PfIq+E4/YZaE6ygL6f+ygB4E8ocD+aiVc7FkOqVsVA=) 3: vbTBxrwzB75awQdnuHxvUmGSxrI.roa (hash: BNvntPsh9Cs3tqn2zXlS+7ZhQF3J782Zk6D2d5jtV8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c3:3e:9d:3d:4e:80:5f:dd:d6:0d:01:85:fb:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c Validity Not Before: Dec 6 04:00:47 2025 GMT Not After : Dec 7 04:00:47 2025 GMT Subject: CN=3354b7a203a47d5d59984acb01cefdd5ebcda62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:99:b7:70:f8:0f:4a:eb:a8:25:93:b7:40: 63:d7:04:d7:6f:ca:db:2b:14:6d:e9:44:4a:65:56: 9d:49:38:65:b8:43:cc:81:1a:8b:78:76:dc:5c:24: 59:87:20:c0:3b:d5:cd:1a:07:34:6a:28:ed:72:40: 5f:c8:ee:6e:b9:4c:12:d9:8d:3a:12:96:01:62:ff: e6:0d:8e:a1:d0:0f:aa:34:4d:8d:c3:fe:86:f5:a1: b0:8b:71:cc:03:03:2f:d3:b2:d4:b0:90:67:f0:dc: ab:b5:4a:24:04:f0:62:9a:ec:f3:9d:31:47:25:d2: d7:9c:22:e0:1e:5b:9d:66:14:b1:9b:ff:e6:8b:23: f8:da:d4:b6:c8:e2:55:b5:d0:ff:1a:af:43:d7:de: 86:26:74:23:71:ff:33:26:f3:fe:9b:42:3d:46:8d: 5c:30:06:61:f0:02:b9:85:99:c7:4a:36:ea:6f:e0: 18:6d:c2:f4:08:1e:19:c5:e2:0c:c4:1b:04:5d:ce: 48:93:1c:42:af:d5:73:4c:d9:c4:99:d0:26:e8:47: d7:87:e1:88:40:42:78:72:b0:7e:6f:f7:ac:ef:14: ba:f8:c6:2b:b0:8a:da:9a:68:17:b6:4d:cf:d9:7a: 79:16:65:63:d8:a2:04:75:d9:97:59:64:64:60:42: 39:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:54:B7:A2:03:A4:7D:5D:59:98:4A:CB:01:CE:FD:D5:EB:CD:A6:2B X509v3 Authority Key Identifier: keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:5e:95:ae:1b:b8:11:23:bb:24:dc:74:5d:da:d4:10:d0:71: 5b:98:c9:3e:90:4c:ad:80:be:01:ce:f0:6d:a6:37:fa:0a:26: a2:ae:0a:ab:31:7b:d6:54:5e:94:79:72:5b:be:8f:5b:9e:04: 56:15:a7:a0:2d:52:75:c4:e1:41:d6:bc:be:0f:8f:c2:3d:93: 3a:46:b6:7d:e9:d8:2e:a2:0a:95:a0:28:b1:04:a0:fa:d8:b4: 3a:0c:69:93:67:c9:bf:6f:b9:b2:18:bf:c1:fd:49:62:eb:c7: 49:e7:0e:1f:24:59:ae:55:71:b7:31:1e:0e:c8:5f:d8:50:98: 46:43:82:75:9c:1f:9b:db:65:93:82:eb:6a:88:5a:ad:28:32: a7:dc:4b:06:39:a5:28:66:ea:a8:b2:3d:ef:ed:35:f4:38:31: 2d:02:e9:41:5a:c9:a9:e8:b1:8b:28:78:ea:85:ad:04:c2:d4: e1:94:db:0e:14:55:64:2c:59:0e:2a:fe:03:35:72:f7:85:fd: f0:8e:a8:20:32:e0:e0:ef:1e:12:56:74:df:31:ad:46:cd:ad: 10:92:e0:7e:88:35:d8:d6:1c:75:23:a8:46:b7:40:71:30:27: c3:58:dd:74:35:e7:32:9f:ca:3f:43:1c:e3:2d:a8:81:22:df: b8:fb:14:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cM+nT1OgF/d1g0BhfsUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOTljZTY0YTBmMTYyNGQ3YmIyZDI5NjllNWMxMWFkYmFh NTQ4NWMwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD EygzMzU0YjdhMjAzYTQ3ZDVkNTk5ODRhY2IwMWNlZmRkNWViY2RhNjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywmZt3D4D0rrqCWTt0Bj1wTXb8rb KxRt6URKZVadSThluEPMgRqLeHbcXCRZhyDAO9XNGgc0aijtckBfyO5uuUwS2Y06 EpYBYv/mDY6h0A+qNE2Nw/6G9aGwi3HMAwMv07LUsJBn8NyrtUokBPBimuzznTFH JdLXnCLgHludZhSxm//miyP42tS2yOJVtdD/Gq9D196GJnQjcf8zJvP+m0I9Ro1c MAZh8AK5hZnHSjbqb+AYbcL0CB4ZxeIMxBsEXc5IkxxCr9VzTNnEmdAm6EfXh+GI QEJ4crB+b/es7xS6+MYrsIrammgXtk3P2Xp5FmVj2KIEddmXWWRkYEI5OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNUt6IDpH1dWZhKywHO/dXrzaYrMB8GA1UdIwQY MBaAFHKZzmSg8WJNe7LSlp5cEa26pUhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jMjBmYmEtNWI2Ny00MzhjLWFiMDAt YzdlYjM0ZTJkY2E2LzEvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jMjBmYmEtNWI2Ny00MzhjLWFiMDAtYzdlYjM0ZTJkY2E2 LzEvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF16Vrhu4 ESO7JNx0XdrUENBxW5jJPpBMrYC+Ac7wbaY3+gomoq4KqzF71lRelHlyW76PW54E VhWnoC1SdcThQda8vg+Pwj2TOka2fenYLqIKlaAosQSg+ti0Ogxpk2fJv2+5shi/ wf1JYuvHSecOHyRZrlVxtzEeDshf2FCYRkOCdZwfm9tlk4LraoharSgyp9xLBjml KGbqqLI97+019DgxLQLpQVrJqeixiyh46oWtBMLU4ZTbDhRVZCxZDir+AzVy94X9 8I6oIDLg4O8eElZ03zGtRs2tEJLgfog12NYcdSOoRrdAcTAnw1jddDXnMp/KP0Mc 4y2ogSLfuPsUig== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:49 2025 by rpki-client