This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft File: CPRr-iBG-8mOYn9ANIMnESO-ygo.mft (raw, json) Hash identifier: ORRR6CjNwUTmVbc7bLIlMtQhUumZ1BeqK/TbxuGevNc= Subject key identifier: D7:99:5A:DE:BC:2B:A9:AF:B3:E3:D2:1D:5B:2D:B1:41:E6:88:78:BC Authority key identifier: 08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A Certificate issuer: /CN=08f46bfa2046fbc98e627f403483271123beca0a Certificate serial: 019AF209B04C826BA3F8C9F647968054BA45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft Manifest number: 33 Signing time: Sat 06 Dec 2025 05:01:52 +0000 Manifest this update: Sat 06 Dec 2025 05:01:52 +0000 Manifest next update: Sun 07 Dec 2025 05:01:52 +0000 Files and hashes: 1: A406_tfLInjDBVSbBQ7mKFBN-JE.roa (hash: E+hB0yuwu5D4hH5rECO553wANZ9LShkCcSEX/+zvqLQ=) 2: CPRr-iBG-8mOYn9ANIMnESO-ygo.crl (hash: O3H8knTY2kPMbbqUv99NYlQRKvVWvm8vCc0SnoJFrts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:b0:4c:82:6b:a3:f8:c9:f6:47:96:80:54:ba:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08f46bfa2046fbc98e627f403483271123beca0a Validity Not Before: Dec 6 05:01:52 2025 GMT Not After : Dec 7 05:01:52 2025 GMT Subject: CN=d7995adebc2ba9afb3e3d21d5b2db141e68878bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:be:99:c9:4a:c4:2c:ec:49:40:07:8c:db: 33:72:b7:8c:9d:e0:da:49:be:3b:be:e7:4a:19:fd: ed:15:63:a9:05:6e:c5:1c:af:bc:46:0a:dd:91:7a: 90:cc:64:67:5e:91:cc:bd:80:a3:74:4c:0b:49:d2: 27:0f:ed:00:96:01:5f:17:35:f2:20:63:34:10:26: 3a:3a:f0:d5:d1:d1:b0:13:18:a0:fe:3d:83:71:61: ea:89:bb:7b:8e:12:2d:3c:5d:62:59:1f:82:2b:50: 68:f8:d5:0a:35:67:a5:ee:cf:e3:8f:22:76:b8:2b: e3:8a:b2:cd:2b:77:d8:5e:51:98:39:19:bc:73:54: 1e:ad:b9:f2:f0:3c:25:49:32:53:4b:20:2b:40:33: ec:10:87:37:0b:db:ca:a9:ee:12:a1:1c:4c:b3:8e: dc:18:00:72:c9:48:17:09:9d:be:7d:33:a7:aa:c9: f7:be:f0:22:45:cd:b8:21:1d:3d:72:57:2e:c7:f3: 24:79:f1:4b:9d:a0:cf:71:5d:93:89:67:2f:60:bd: 8d:e2:c3:45:95:0a:04:1f:b2:eb:bb:2b:16:29:20: a5:41:d9:88:aa:38:05:61:9b:7f:d3:e5:71:5b:bf: 31:ba:ec:c5:05:9a:97:5e:35:0a:7e:ee:dc:31:d2: 30:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:99:5A:DE:BC:2B:A9:AF:B3:E3:D2:1D:5B:2D:B1:41:E6:88:78:BC X509v3 Authority Key Identifier: keyid:08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4c:87:e7:d8:3d:b0:37:31:05:53:ab:14:b6:ac:41:b8:6a: 22:24:fe:c7:d3:2a:26:00:9b:29:1e:3f:8a:be:19:97:59:46: 4d:1a:90:15:2e:e3:53:1f:89:3d:08:fb:ef:a8:6a:bc:34:ab: 63:91:df:d6:6b:f8:fd:24:68:e7:84:bd:44:d6:7f:5c:f8:b1: e6:57:94:5a:96:db:93:09:13:f3:5f:6d:0b:a4:4a:d8:8a:6f: f8:98:22:9f:37:96:7f:a2:c3:3e:b1:05:01:57:71:7c:ea:e2: 74:e6:d9:7f:0d:88:33:15:15:1e:dc:5c:60:cb:52:5a:38:0c: 0d:15:e6:ee:b7:0a:c6:d0:b5:a7:21:01:47:b2:76:56:2d:c3: 78:d1:0f:9a:a6:c8:0c:f8:e9:f6:49:ec:d6:f6:cb:b5:f0:33: 55:4b:12:92:4e:76:13:81:54:66:81:4a:b4:9c:ce:e0:18:c2: 83:da:c6:6a:25:51:5e:f4:a1:43:73:c6:d0:6e:f6:33:09:eb: dd:55:d5:e2:9a:61:a4:59:3b:d2:52:03:0c:87:ea:7d:ff:d3: 1d:db:ba:3a:50:82:77:7c:ec:3a:17:f5:23:8d:82:be:64:b2: af:da:46:53:32:36:d9:be:03:6d:6d:4a:47:f5:a1:db:6d:3f: 1b:e8:42:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCbBMgmuj+Mn2R5aAVLpFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZjQ2YmZhMjA0NmZiYzk4ZTYyN2Y0MDM0ODMyNzExMjNi ZWNhMGEwHhcNMjUxMjA2MDUwMTUyWhcNMjUxMjA3MDUwMTUyWjAzMTEwLwYDVQQD EyhkNzk5NWFkZWJjMmJhOWFmYjNlM2QyMWQ1YjJkYjE0MWU2ODg3OGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVe+mclKxCzsSUAHjNszcreMneDa Sb47vudKGf3tFWOpBW7FHK+8RgrdkXqQzGRnXpHMvYCjdEwLSdInD+0AlgFfFzXy IGM0ECY6OvDV0dGwExig/j2DcWHqibt7jhItPF1iWR+CK1Bo+NUKNWel7s/jjyJ2 uCvjirLNK3fYXlGYORm8c1Qerbny8DwlSTJTSyArQDPsEIc3C9vKqe4SoRxMs47c GAByyUgXCZ2+fTOnqsn3vvAiRc24IR09clcux/MkefFLnaDPcV2TiWcvYL2N4sNF lQoEH7LruysWKSClQdmIqjgFYZt/0+VxW78xuuzFBZqXXjUKfu7cMdIwdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeZWt68K6mvs+PSHVstsUHmiHi8MB8GA1UdIwQY MBaAFAj0a/ogRvvJjmJ/QDSDJxEjvsoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS82ZWUyZjUtOWY2MC00N2RjLThjZDkt Y2Q1MjU1NzMzMzA0LzEvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS82ZWUyZjUtOWY2MC00N2RjLThjZDktY2Q1MjU1NzMzMzA0 LzEvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEyH59g9 sDcxBVOrFLasQbhqIiT+x9MqJgCbKR4/ir4Zl1lGTRqQFS7jUx+JPQj776hqvDSr Y5Hf1mv4/SRo54S9RNZ/XPix5leUWpbbkwkT819tC6RK2Ipv+JginzeWf6LDPrEF AVdxfOridObZfw2IMxUVHtxcYMtSWjgMDRXm7rcKxtC1pyEBR7J2Vi3DeNEPmqbI DPjp9kns1vbLtfAzVUsSkk52E4FUZoFKtJzO4BjCg9rGaiVRXvShQ3PG0G72Mwnr 3VXV4pphpFk70lIDDIfqff/THdu6OlCCd3zsOhf1I42CvmSyr9pGUzI22b4DbW1K R/Wh220/G+hCqA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:56:05 2025 by rpki-client