This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json) Hash identifier: 2/vKfZ8cGHcRAftFUNMGCj+l+5/nLvXYPbA2nV+34eY= Subject key identifier: 32:94:B6:7A:01:D6:F5:90:2E:09:C6:46:6F:F4:26:F8:64:DE:AC:E6 Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b Certificate serial: 019B0E257908CD181D4321C3644333867941 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft Manifest number: 0E50 Signing time: Thu 11 Dec 2025 16:01:35 +0000 Manifest this update: Thu 11 Dec 2025 16:01:35 +0000 Manifest next update: Fri 12 Dec 2025 16:01:35 +0000 Files and hashes: 1: 5kFz87V3cREdddc3AsaZImesrc4.roa (hash: GMf/VeYSaAQLAvigW84goiaYuSw8QRXcx94y9RzK0U8=) 2: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: n3vwqhAI8ZTI/azZtlYYrvDOX5d5v7IYfPCzBlX7GZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:79:08:cd:18:1d:43:21:c3:64:43:33:86:79:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b Validity Not Before: Dec 11 16:01:35 2025 GMT Not After : Dec 12 16:01:35 2025 GMT Subject: CN=3294b67a01d6f5902e09c6466ff426f864deace6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:57:47:3f:04:cf:e7:8e:69:8a:4e:19:20:34: b4:f5:9e:c3:d5:0d:29:ff:ef:a4:d2:05:43:4d:46: f9:68:5b:42:24:e6:ca:44:fa:f1:ab:72:9b:fd:c4: 34:d2:03:a3:11:81:4c:be:aa:a6:25:27:0a:58:df: 7b:a5:66:47:45:02:1f:5f:ef:fc:32:42:1f:a3:b0: e8:48:ad:7d:b1:cd:ac:1d:f8:14:33:d7:a9:2a:79: b8:f6:12:40:82:2d:df:b4:86:08:3c:b8:0c:62:cd: f3:db:cc:66:20:24:f7:15:cc:0a:50:b8:d8:d2:43: 7f:87:12:88:bd:82:05:26:fa:82:0c:48:b3:41:ed: a8:fa:10:64:2a:49:56:77:92:a4:42:ec:29:5e:f0: be:39:9f:3f:01:c4:24:6d:4e:94:ce:1e:f5:a8:b4: 40:23:c7:3c:a5:ff:d3:27:5c:b8:f4:61:e6:96:da: c2:35:7f:e2:23:e6:b9:a6:38:5f:3d:60:42:00:c2: b5:ac:57:06:76:5a:3f:e2:29:2f:0d:bf:22:f5:86: 13:0b:09:50:95:55:6d:d0:d3:71:22:a5:07:03:2c: d2:63:4e:b7:fd:62:71:ad:b6:75:31:3a:0a:f4:d7: 22:af:cd:54:46:22:c3:67:74:1f:ae:94:d3:83:2c: 5e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:94:B6:7A:01:D6:F5:90:2E:09:C6:46:6F:F4:26:F8:64:DE:AC:E6 X509v3 Authority Key Identifier: keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:73:90:14:01:d4:ff:e6:ed:a3:58:85:51:62:59:c6:54:ea: 4b:06:15:4d:e4:98:cf:1e:a4:d4:3e:e7:6a:54:ee:b5:51:3e: c3:26:4a:83:ba:f0:45:6f:90:34:eb:0e:49:7e:d5:a7:42:c2: 44:66:1b:c8:77:99:e5:ff:3f:0b:7e:fd:e0:f2:c4:c2:c7:c4: b2:73:5e:77:3f:41:3e:3f:e7:14:f4:df:1f:b0:56:a5:5b:51: ad:a5:9d:a1:c6:32:75:49:82:41:e6:55:24:c3:f2:1e:f7:36: 9b:35:81:2d:64:69:1d:78:4a:ba:f9:6e:a6:04:2d:a3:3a:2f: 4b:26:3a:9b:16:31:e2:e2:43:f5:93:b9:3c:7c:1b:c3:10:a7: b7:c7:cf:d4:f7:c4:82:bf:1c:05:4c:29:fb:b7:dc:23:28:53: fd:92:2b:c7:1e:0a:bc:34:26:18:a1:27:be:11:01:0f:57:fd: 16:42:cf:7d:a1:a6:dd:f8:56:d5:3b:c5:9d:e5:59:06:27:4c: 95:95:01:28:0f:f1:5b:8d:06:1c:95:3c:80:a5:29:4a:da:fa: 60:f5:4d:f3:1b:14:ab:b2:4e:84:a6:4f:d1:1f:69:87:b2:5f: 99:28:7a:62:36:0b:c1:3a:d2:74:ee:a7:b1:12:b2:ae:52:9e: 23:71:09:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJXkIzRgdQyHDZEMzhnlBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NThiNTRiZmVlOTg5NmM0YWRhN2RjMThiM2I3Zjk3MTlk YTA0NmIwHhcNMjUxMjExMTYwMTM1WhcNMjUxMjEyMTYwMTM1WjAzMTEwLwYDVQQD EygzMjk0YjY3YTAxZDZmNTkwMmUwOWM2NDY2ZmY0MjZmODY0ZGVhY2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11dHPwTP545pik4ZIDS09Z7D1Q0p /++k0gVDTUb5aFtCJObKRPrxq3Kb/cQ00gOjEYFMvqqmJScKWN97pWZHRQIfX+/8 MkIfo7DoSK19sc2sHfgUM9epKnm49hJAgi3ftIYIPLgMYs3z28xmICT3FcwKULjY 0kN/hxKIvYIFJvqCDEizQe2o+hBkKklWd5KkQuwpXvC+OZ8/AcQkbU6Uzh71qLRA I8c8pf/TJ1y49GHmltrCNX/iI+a5pjhfPWBCAMK1rFcGdlo/4ikvDb8i9YYTCwlQ lVVt0NNxIqUHAyzSY063/WJxrbZ1MToK9Ncir81URiLDZ3QfrpTTgyxeYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKUtnoB1vWQLgnGRm/0Jvhk3qzmMB8GA1UdIwQY MBaAFAlYtUv+6YlsStp9wYs7f5cZ2gRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEt ZmY0YzcxODMwMjRmLzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEtZmY0YzcxODMwMjRm LzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnOQFAHU /+bto1iFUWJZxlTqSwYVTeSYzx6k1D7nalTutVE+wyZKg7rwRW+QNOsOSX7Vp0LC RGYbyHeZ5f8/C3794PLEwsfEsnNedz9BPj/nFPTfH7BWpVtRraWdocYydUmCQeZV JMPyHvc2mzWBLWRpHXhKuvlupgQtozovSyY6mxYx4uJD9ZO5PHwbwxCnt8fP1PfE gr8cBUwp+7fcIyhT/ZIrxx4KvDQmGKEnvhEBD1f9FkLPfaGm3fhW1TvFneVZBidM lZUBKA/xW40GHJU8gKUpStr6YPVN8xsUq7JOhKZP0R9ph7JfmSh6YjYLwTrSdO6n sRKyrlKeI3EJ8g== -----END CERTIFICATE-----Generated at Fri Dec 12 00:24:31 2025 by rpki-client