This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft File: Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft (raw, json) Hash identifier: YdkPvidmvCQkSBeGpl1zdHH2ssWm7qrtgL8g8tioMzU= Subject key identifier: D6:85:EE:F4:0B:E9:13:30:59:A1:66:C2:AC:97:70:78:6A:DB:0B:7E Authority key identifier: 0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A Certificate issuer: /CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a Certificate serial: 019AF4D29FC9F2C1ED4ACD0DD582F88FE6F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft Manifest number: 0BF7 Signing time: Sat 06 Dec 2025 18:00:35 +0000 Manifest this update: Sat 06 Dec 2025 18:00:35 +0000 Manifest next update: Sun 07 Dec 2025 18:00:35 +0000 Files and hashes: 1: Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl (hash: 0AEiw5cL8iLCIC45Nc7LmVqrMWLwxzlRXloU8/EzAaw=) 2: bscorJtE41igLaTAQbtgAQqBxz0.roa (hash: sGg8Ckzp0oPzFQ9Hy7BsC5B5QG6ZfSY1AxKv6j6SlLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:9f:c9:f2:c1:ed:4a:cd:0d:d5:82:f8:8f:e6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a Validity Not Before: Dec 6 18:00:35 2025 GMT Not After : Dec 7 18:00:35 2025 GMT Subject: CN=d685eef40be9133059a166c2ac9770786adb0b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f2:94:eb:b9:31:10:06:ab:8c:1d:47:a8:4a: e6:1c:02:b9:7f:82:cc:61:de:c3:e9:3c:b8:e3:23: aa:df:35:d3:e9:2f:0a:75:8c:fc:79:f7:dd:c7:83: b2:15:65:f4:dc:e7:96:83:13:22:c0:04:77:7d:2b: 3b:e7:cb:fb:9b:23:76:86:71:bd:56:f1:c5:72:e9: b4:c9:2b:48:61:5a:8d:c7:6d:8d:a3:e2:1e:df:4e: df:46:98:ad:fd:58:2b:7e:42:9c:6c:22:fb:5e:e0: c2:37:65:5f:0e:19:b0:c0:6c:f5:37:6e:7b:10:4b: 49:74:c9:e4:38:0c:fc:a6:63:ba:43:97:99:2d:4c: d5:a1:9c:5a:fc:d9:9f:ae:4f:7c:7c:ae:e9:7b:a6: 43:49:64:30:4b:be:1b:f7:67:c8:f9:be:44:14:b1: 9b:7d:dd:9d:de:4c:c9:85:5d:1a:4e:1c:3b:3d:9a: 31:10:a2:75:31:41:aa:ba:59:54:8f:11:5d:52:ea: ae:f5:d6:95:cc:f7:55:81:cd:10:c4:3b:d9:c4:87: 06:54:6f:eb:c1:40:57:40:62:d1:e6:83:33:e9:66: 4c:2f:14:1a:98:68:e9:48:75:34:47:5e:f2:e4:63: e9:c0:43:c8:01:a4:0d:e1:d2:83:dd:0d:98:9a:13: 84:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:85:EE:F4:0B:E9:13:30:59:A1:66:C2:AC:97:70:78:6A:DB:0B:7E X509v3 Authority Key Identifier: keyid:0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f9:03:b7:fd:32:af:7e:83:7b:32:7c:e3:6b:3f:dd:66:e1: 99:a3:cd:a2:d8:97:b7:cd:19:98:76:9e:da:e8:54:aa:34:8d: 6b:74:52:59:0a:19:90:d9:4c:77:76:ab:73:83:79:f7:50:29: d7:e7:3f:8d:57:53:6f:1a:ba:a1:4d:43:df:0f:7c:b7:db:d4: 97:6b:83:82:7f:3a:ab:ce:0e:fc:3c:c6:56:30:d8:ef:69:a4: 66:30:66:f5:1b:91:43:4a:de:d8:a0:18:a7:de:57:a1:41:d6: dc:f0:26:61:c1:3b:16:bf:a8:e4:29:ca:5c:1d:de:7c:0c:7e: bf:97:6d:95:51:49:2b:e2:e7:37:93:cb:e4:ba:64:b0:62:99: 1d:c7:7e:60:b4:25:7e:8c:89:26:52:57:85:55:10:2b:f8:db: bc:3b:7f:6a:5e:95:44:c1:8e:ad:94:ac:66:07:f8:48:ae:db: bd:dd:d5:01:69:00:0a:53:b1:3c:4d:ea:83:c3:b6:35:c9:ce: 0e:ef:41:f1:ab:7f:b4:36:a4:95:65:0d:94:91:a3:fa:83:de: 2b:e9:e5:d7:f5:1c:96:e0:7d:f2:a7:0a:b1:d9:32:c4:c7:51: 4f:6e:a0:db:7b:75:d5:27:2b:cf:94:2a:c9:d5:83:56:b5:dd: 06:ad:f3:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00p/J8sHtSs0N1YL4j+b4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZmU5ZDY2NjU1YjVmZDI3YjJjMTdjYTk2ODU2NTBkNTNm M2JiMGEwHhcNMjUxMjA2MTgwMDM1WhcNMjUxMjA3MTgwMDM1WjAzMTEwLwYDVQQD EyhkNjg1ZWVmNDBiZTkxMzMwNTlhMTY2YzJhYzk3NzA3ODZhZGIwYjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vKU67kxEAarjB1HqErmHAK5f4LM Yd7D6Ty44yOq3zXT6S8KdYz8effdx4OyFWX03OeWgxMiwAR3fSs758v7myN2hnG9 VvHFcum0yStIYVqNx22No+Ie307fRpit/VgrfkKcbCL7XuDCN2VfDhmwwGz1N257 EEtJdMnkOAz8pmO6Q5eZLUzVoZxa/Nmfrk98fK7pe6ZDSWQwS74b92fI+b5EFLGb fd2d3kzJhV0aThw7PZoxEKJ1MUGqullUjxFdUuqu9daVzPdVgc0QxDvZxIcGVG/r wUBXQGLR5oMz6WZMLxQamGjpSHU0R17y5GPpwEPIAaQN4dKD3Q2YmhOEYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaF7vQL6RMwWaFmwqyXcHhq2wt+MB8GA1UdIwQY MBaAFAr+nWZlW1/SeywXypaFZQ1T87sKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3Y2ZFptVmJYOUo3TEJmS2xvVmxEVlB6dXdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84MWVmMmQtYWU2Ni00NzM5LThkZWIt YmRjMjQ4YTZmNTY1LzEvQ3Y2ZFptVmJYOUo3TEJmS2xvVmxEVlB6dXdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84MWVmMmQtYWU2Ni00NzM5LThkZWItYmRjMjQ4YTZmNTY1 LzEvQ3Y2ZFptVmJYOUo3TEJmS2xvVmxEVlB6dXdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPkDt/0y r36DezJ842s/3WbhmaPNotiXt80ZmHae2uhUqjSNa3RSWQoZkNlMd3arc4N591Ap 1+c/jVdTbxq6oU1D3w98t9vUl2uDgn86q84O/DzGVjDY72mkZjBm9RuRQ0re2KAY p95XoUHW3PAmYcE7Fr+o5CnKXB3efAx+v5dtlVFJK+LnN5PL5LpksGKZHcd+YLQl foyJJlJXhVUQK/jbvDt/al6VRMGOrZSsZgf4SK7bvd3VAWkAClOxPE3qg8O2NcnO Du9B8at/tDaklWUNlJGj+oPeK+nl1/UcluB98qcKsdkyxMdRT26g23t11Scrz5Qq ydWDVrXdBq3z0w== -----END CERTIFICATE-----Generated at Sat Dec 6 21:58:16 2025 by rpki-client