This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json) Hash identifier: xJE+2lDLfkl8rqDjZBmkKOj34MxiA7HlchfnHIno6Dk= Subject key identifier: C4:0A:14:36:9A:3E:FF:7C:77:16:68:A8:33:FD:59:9D:F7:39:A4:9A Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9 Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9 Certificate serial: 019B42EE1446850D7361B28ABF64F889E97F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft Manifest number: 0E9F Signing time: Sun 21 Dec 2025 22:00:57 +0000 Manifest this update: Sun 21 Dec 2025 22:00:57 +0000 Manifest next update: Mon 22 Dec 2025 22:00:57 +0000 Files and hashes: 1: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: aK0UwbzuKwdax4B1IrHcF+gf1QQ/36CmRdcn4fKOtUM=) 2: P2VGtgj0Ve3JifdhxGXEPs8bYHw.roa (hash: krJRUyY9FgbmyjCpGEy7bhvyTA1VoPtEkFekALAvh2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:14:46:85:0d:73:61:b2:8a:bf:64:f8:89:e9:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9 Validity Not Before: Dec 21 22:00:57 2025 GMT Not After : Dec 22 22:00:57 2025 GMT Subject: CN=c40a14369a3eff7c771668a833fd599df739a49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b9:4b:1b:50:53:cc:da:3a:94:18:aa:02:c8: f8:05:98:b4:f2:1c:e5:26:1d:d7:a2:e2:fc:a7:08: 2d:e4:84:a7:9e:51:c0:42:d2:08:13:72:03:0a:96: 3a:c1:12:30:fa:9e:13:77:87:44:15:cd:76:9a:5e: 2a:d5:64:c0:35:98:33:09:ec:4a:e4:1e:ad:5f:dd: 0f:92:70:38:71:91:35:f9:4e:38:bc:13:53:23:b1: a7:01:6d:91:bf:c9:1f:3a:80:ce:28:d8:52:1e:d2: ed:f0:d4:7b:49:db:3d:6a:ae:6a:e2:9c:5a:1f:16: a6:4b:94:c7:17:c0:63:cc:4e:27:73:57:7e:f8:c6: f1:71:32:a0:d7:4d:df:e1:80:be:33:a8:d7:0c:d6: 67:4f:cd:0d:36:ef:7f:90:6f:02:92:52:3f:a7:e4: 01:25:bd:41:3c:16:ac:c1:80:d9:7c:6a:7d:6f:fe: 51:4d:4d:26:7e:4b:10:23:90:38:81:0e:e7:37:f2: e0:0c:93:68:50:0a:9b:fb:5b:e8:4a:46:9e:2f:72: 5d:62:e1:a0:83:df:49:b0:35:fd:f7:7f:8c:1d:44: 97:82:ab:ef:0e:7b:08:fe:81:4e:4b:ef:3d:97:b8: cd:7c:d6:8d:85:79:16:30:56:fd:42:fc:ab:8f:31: 28:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0A:14:36:9A:3E:FF:7C:77:16:68:A8:33:FD:59:9D:F7:39:A4:9A X509v3 Authority Key Identifier: keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6c:35:ec:73:10:df:06:65:e7:86:52:ba:7a:8c:8d:9f:e8: ab:a7:23:15:1c:35:0e:8a:a1:58:47:f3:20:d1:aa:be:02:3f: c9:1d:e5:e9:07:f5:d8:2d:80:69:3e:da:6c:c8:51:9c:99:d6: c4:5f:ea:61:3d:ed:f7:b5:88:45:96:c1:4f:3a:d7:ec:1f:28: 7b:79:f2:89:73:c7:ea:a9:c3:4a:a9:b8:40:93:f0:37:d0:5e: 9f:de:22:3d:0d:8d:79:f4:d9:a9:d7:15:19:18:bf:a7:c2:b4: de:83:b7:2d:0f:45:7d:27:28:74:c2:15:cd:b4:22:4f:f3:75: 85:91:cb:86:cf:77:b8:9d:fe:c1:5b:46:7f:8b:80:52:4b:d0: ed:39:45:a3:32:3f:67:46:e0:7c:fe:4a:96:1d:8c:59:f3:5e: 29:74:35:a9:99:b8:7a:12:2c:75:5f:51:e1:1e:b2:da:5a:6f: 7e:a6:7c:84:e6:8f:22:f0:4f:01:10:fd:05:c1:85:73:cc:31: 75:44:8b:0b:25:1d:d5:ff:51:5f:f6:80:fb:fb:40:17:75:30: 16:8f:44:7f:66:92:97:77:5a:4c:42:e4:f3:d4:1e:d0:6b:ac: 48:0f:c1:ae:6c:d7:9c:95:92:fb:83:7e:01:33:ba:1a:86:6b: 26:00:83:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7hRGhQ1zYbKKv2T4iel/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NTAyMjg5MDRiOWRiZWI0NzkyYTY5NzcyN2UzNmFhZmQ4 NGQyZTkwHhcNMjUxMjIxMjIwMDU3WhcNMjUxMjIyMjIwMDU3WjAzMTEwLwYDVQQD EyhjNDBhMTQzNjlhM2VmZjdjNzcxNjY4YTgzM2ZkNTk5ZGY3MzlhNDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrlLG1BTzNo6lBiqAsj4BZi08hzl Jh3XouL8pwgt5ISnnlHAQtIIE3IDCpY6wRIw+p4Td4dEFc12ml4q1WTANZgzCexK 5B6tX90PknA4cZE1+U44vBNTI7GnAW2Rv8kfOoDOKNhSHtLt8NR7Sds9aq5q4pxa HxamS5THF8BjzE4nc1d++MbxcTKg103f4YC+M6jXDNZnT80NNu9/kG8CklI/p+QB Jb1BPBaswYDZfGp9b/5RTU0mfksQI5A4gQ7nN/LgDJNoUAqb+1voSkaeL3JdYuGg g99JsDX993+MHUSXgqvvDnsI/oFOS+89l7jNfNaNhXkWMFb9QvyrjzEoUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQKFDaaPv98dxZoqDP9WZ33OaSaMB8GA1UdIwQY MBaAFAlQIokEudvrR5Kml3J+Nqr9hNLpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NGQ5MTAtOTQ1Yy00MmU4LWJiNDQt NjI4MjFjMmMyOTlmLzEvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82NGQ5MTAtOTQ1Yy00MmU4LWJiNDQtNjI4MjFjMmMyOTlm LzEvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmw17HMQ 3wZl54ZSunqMjZ/oq6cjFRw1DoqhWEfzINGqvgI/yR3l6Qf12C2AaT7abMhRnJnW xF/qYT3t97WIRZbBTzrX7B8oe3nyiXPH6qnDSqm4QJPwN9Ben94iPQ2NefTZqdcV GRi/p8K03oO3LQ9FfScodMIVzbQiT/N1hZHLhs93uJ3+wVtGf4uAUkvQ7TlFozI/ Z0bgfP5Klh2MWfNeKXQ1qZm4ehIsdV9R4R6y2lpvfqZ8hOaPIvBPARD9BcGFc8wx dUSLCyUd1f9RX/aA+/tAF3UwFo9Ef2aSl3daTELk89Qe0GusSA/BrmzXnJWS+4N+ ATO6GoZrJgCD3g== -----END CERTIFICATE-----Generated at Mon Dec 22 04:20:51 2025 by rpki-client