This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json) Hash identifier: x7ko93L4BC4C7ZKMUjGPTd+k322JBmfeQzHnfjuXDmE= Subject key identifier: 56:BD:DE:66:53:3D:42:8C:C4:71:A9:87:5B:81:85:2C:7C:9D:EF:6C Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Certificate serial: 019B0EC9E6C0B39BF0D1CD0646FD21D87932 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft Manifest number: 145F Signing time: Thu 11 Dec 2025 19:01:11 +0000 Manifest this update: Thu 11 Dec 2025 19:01:11 +0000 Manifest next update: Fri 12 Dec 2025 19:01:11 +0000 Files and hashes: 1: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (hash: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=) 2: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: 9T8Hk2IQYYM/f7pnj8S8/FPIE3I8YzFK2VYSa+Zkg9Q=) 3: HtV3FEKPYRYDY8G-1hRWsnLwlC0.roa (hash: Fe1/XdGKNSuTPZCZpZdJHVC5upZbn8MH26YO1cQpOgY=) 4: MK8eqrMP3j5ymuZ4qk999b-iSkQ.roa (hash: nNhLpGCxsknDRkcaORpA6GPvezr0Frk5rCO7fQ7CtRw=) 5: R8GgH67MzGYrmtUBlZ44LYdM_44.roa (hash: eNGVD5qiBokWARwlEPYWPW2sMCzs8hQrScOks2RkSK0=) 6: XUbpg-tBDuOM-uZKqtdsmxOB38M.roa (hash: tw+hhnN/+elfL/3HxAjHoQN99yUqRR6yBg96qTz78+M=) 7: bKr8UWW3-RF_D0B7S4TpF3ssvtc.roa (hash: kYFW2by3SyFaWc3VlVXDw0SIgIp3P05RN26zndjXy/k=) 8: mtdclY8O-xs5gcnHoOhafDFUgKI.roa (hash: rbz7XQGehDM4qlCCC493lW8PFTdkUVLafneGpzVymQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:e6:c0:b3:9b:f0:d1:cd:06:46:fd:21:d8:79:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Validity Not Before: Dec 11 19:01:11 2025 GMT Not After : Dec 12 19:01:11 2025 GMT Subject: CN=56bdde66533d428cc471a9875b81852c7c9def6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c4:91:ed:42:a0:e2:d6:06:b7:a1:ac:66:3e: 99:d5:38:96:1d:6b:01:43:c2:ae:7c:a4:33:a2:ec: 40:57:7b:43:28:05:42:74:10:d5:95:e7:fd:26:b6: 8e:0d:83:2e:7c:fa:ca:92:57:91:0b:c1:ad:1b:c1: e6:16:a3:63:1d:4b:98:14:b6:7a:ee:64:cf:5a:b0: 9b:dc:77:44:48:b0:40:d1:d8:04:b9:4b:3a:1f:ac: b6:f4:7e:e6:39:cf:4a:e4:f3:6d:3c:ab:8b:66:97: 91:85:d0:06:6f:b9:33:b8:38:96:0a:73:7c:f8:59: 40:79:8d:50:43:64:29:b8:6a:70:81:c1:9e:ea:6a: 65:5f:2b:cf:e3:f1:55:f0:52:84:ab:01:5c:4b:75: f1:17:e9:c0:45:94:b0:40:7c:4d:c0:72:c1:38:25: d3:59:78:8a:dd:67:16:f5:36:bc:56:11:36:a9:5d: 6f:9c:3a:30:d4:1e:25:c5:98:6d:88:42:7b:15:f7: 9b:a6:46:14:47:80:48:22:ea:df:52:78:d6:fb:98: 40:62:78:f2:60:74:15:2e:70:a6:43:75:af:c6:ca: 8a:e1:06:bd:1a:58:e9:4d:97:da:a7:3f:e5:fc:df: 5e:33:4f:2c:56:93:86:ae:c8:56:3d:af:6a:38:c7: 21:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BD:DE:66:53:3D:42:8C:C4:71:A9:87:5B:81:85:2C:7C:9D:EF:6C X509v3 Authority Key Identifier: keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b1:bd:81:00:71:92:6a:6b:b4:6b:73:f9:0a:c4:0c:af:a4: 4e:97:f6:aa:01:f7:f1:53:87:55:0a:e2:3b:8f:48:37:56:3b: c7:51:6b:c2:0b:24:0c:3f:65:86:9a:12:61:56:51:f7:fa:9e: a9:4b:03:94:34:c1:a6:a7:48:e4:4b:21:54:48:7b:e1:28:e8: 6e:47:98:b6:ae:24:e0:54:94:cf:ba:35:ec:21:4e:fb:65:dc: ac:82:2c:ef:3a:ae:df:ae:ec:df:3f:7d:3d:aa:a2:e9:62:81: 40:c1:15:9f:c4:1a:6d:1a:a3:3f:be:36:75:04:48:bd:6d:d5: 14:2f:a3:d3:16:1a:35:52:2d:57:1d:36:0c:c0:5c:7f:a3:c2: 84:5d:51:5c:ea:2f:97:56:d5:6d:de:bf:36:14:76:15:eb:be: 02:d6:51:83:4d:91:43:d8:47:3e:ef:c5:41:b9:2f:8e:c9:d5: 9b:5a:17:be:c4:53:de:b6:91:02:3d:73:6d:7d:e1:cc:d4:76: 94:48:6f:34:96:73:93:4d:3c:27:fb:a9:b0:6c:d5:b7:d5:65: ec:6b:7b:2d:15:a2:99:ed:bb:63:6e:d2:00:0d:9f:67:5a:86: 57:53:90:ab:47:70:24:aa:db:c6:cc:09:6f:fa:8e:cf:96:4f: 5a:74:e3:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyebAs5vw0c0GRv0h2HkyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZjYxNzk4ZGQxODk2NWMwMjdhZmE3ZjkzYWUwMzBmZjVl MWQ3NmUwHhcNMjUxMjExMTkwMTExWhcNMjUxMjEyMTkwMTExWjAzMTEwLwYDVQQD Eyg1NmJkZGU2NjUzM2Q0MjhjYzQ3MWE5ODc1YjgxODUyYzdjOWRlZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcSR7UKg4tYGt6GsZj6Z1TiWHWsB Q8KufKQzouxAV3tDKAVCdBDVlef9JraODYMufPrKkleRC8GtG8HmFqNjHUuYFLZ6 7mTPWrCb3HdESLBA0dgEuUs6H6y29H7mOc9K5PNtPKuLZpeRhdAGb7kzuDiWCnN8 +FlAeY1QQ2QpuGpwgcGe6mplXyvP4/FV8FKEqwFcS3XxF+nARZSwQHxNwHLBOCXT WXiK3WcW9Ta8VhE2qV1vnDow1B4lxZhtiEJ7FfebpkYUR4BIIurfUnjW+5hAYnjy YHQVLnCmQ3WvxsqK4Qa9GljpTZfapz/l/N9eM08sVpOGrshWPa9qOMchUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFa93mZTPUKMxHGph1uBhSx8ne9sMB8GA1UdIwQY MBaAFAr2F5jdGJZcAnr6f5OuAw/14dduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEt ZDZlMWUzNDdmOWM3LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEtZDZlMWUzNDdmOWM3 LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7G9gQBx kmprtGtz+QrEDK+kTpf2qgH38VOHVQriO49IN1Y7x1FrwgskDD9lhpoSYVZR9/qe qUsDlDTBpqdI5EshVEh74SjobkeYtq4k4FSUz7o17CFO+2XcrIIs7zqu367s3z99 Paqi6WKBQMEVn8QabRqjP742dQRIvW3VFC+j0xYaNVItVx02DMBcf6PChF1RXOov l1bVbd6/NhR2Feu+AtZRg02RQ9hHPu/FQbkvjsnVm1oXvsRT3raRAj1zbX3hzNR2 lEhvNJZzk008J/upsGzVt9Vl7Gt7LRWime27Y27SAA2fZ1qGV1OQq0dwJKrbxswJ b/qOz5ZPWnTj+Q== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:09 2025 by rpki-client