This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json) Hash identifier: ThC07qDS10lPGuP0aKB7uWQ4Xf/GvVrCsrBGXe5rOKQ= Subject key identifier: 73:6B:BF:36:AF:81:CD:63:71:A7:62:6E:C2:F3:3A:C7:E4:3F:02:2C Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9 Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9 Certificate serial: 019B375843A5F5679491C5F19A5016601DD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft Manifest number: 0E99 Signing time: Fri 19 Dec 2025 16:01:29 +0000 Manifest this update: Fri 19 Dec 2025 16:01:29 +0000 Manifest next update: Sat 20 Dec 2025 16:01:29 +0000 Files and hashes: 1: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: pvAtdK/0MBv68zNAbH/JcOqROReBbtFWfl+vC8Ut+R4=) 2: P2VGtgj0Ve3JifdhxGXEPs8bYHw.roa (hash: krJRUyY9FgbmyjCpGEy7bhvyTA1VoPtEkFekALAvh2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:43:a5:f5:67:94:91:c5:f1:9a:50:16:60:1d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9 Validity Not Before: Dec 19 16:01:29 2025 GMT Not After : Dec 20 16:01:29 2025 GMT Subject: CN=736bbf36af81cd6371a7626ec2f33ac7e43f022c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f2:cd:c9:85:e4:9e:ff:43:f2:93:e5:c4:79: 97:09:db:ab:0a:19:6f:0a:d0:ba:aa:d4:c6:43:8e: e9:88:22:51:6b:39:91:fd:12:df:5e:1e:05:36:f9: 51:b9:94:a1:f3:04:5c:3a:fa:4c:a8:dc:6f:ff:03: c7:0e:37:91:06:26:12:11:f0:26:00:f8:48:32:2e: 90:bd:0b:3e:14:78:87:7e:6b:f1:f7:2b:20:19:24: 12:85:75:df:36:e6:b1:a5:16:24:44:d2:74:57:19: ce:99:66:3b:92:54:63:82:78:32:22:23:08:55:36: c9:7d:57:ef:9e:e4:2e:84:1d:48:ee:a3:d3:6b:66: e3:f4:c1:6d:d8:19:ab:e8:a3:e8:28:d4:13:02:1b: aa:3b:a3:a6:14:3c:99:67:0a:be:ac:6e:49:3b:d5: c2:86:10:8c:9f:ed:a8:7c:11:42:ba:31:45:e3:fd: 3c:7d:64:83:9a:a9:39:d3:e9:81:2c:72:02:51:af: 58:a6:33:ac:42:56:c8:e6:a4:05:9d:2f:49:58:bc: b6:85:97:0a:b8:c5:6c:fd:15:44:df:c2:b7:a0:02: cf:4b:cb:2f:db:83:b6:17:29:64:1c:d4:9a:28:9c: c0:c7:d8:c4:79:85:06:9f:73:66:cd:15:b0:14:d4: 5b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6B:BF:36:AF:81:CD:63:71:A7:62:6E:C2:F3:3A:C7:E4:3F:02:2C X509v3 Authority Key Identifier: keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:ab:d4:29:e5:3b:2e:0e:ae:c8:8d:71:f8:a1:d0:47:b4:3f: f1:26:8e:af:4e:31:9a:12:69:18:06:0a:73:d5:40:81:dc:b4: 8c:95:96:d1:ec:d3:51:03:97:51:ea:2e:19:71:12:93:e2:f3: 89:f5:b7:78:b4:6a:80:e3:56:ef:0c:f3:99:d3:58:a2:bb:f0: 07:9e:82:a8:7d:9d:66:f9:31:bb:5d:c3:46:83:fb:87:c0:ea: 4b:34:55:d2:3f:aa:c8:7e:1f:45:f2:ba:89:9a:98:80:3f:73: f7:a2:20:6a:24:08:00:57:0d:26:d6:d5:71:74:ea:28:24:b5: b8:11:dd:c6:cc:a3:8c:3a:12:46:5a:af:c1:7b:69:c4:6c:64: fc:5c:3c:e8:af:47:2c:15:02:b1:4c:ea:fb:56:15:de:b2:db: 78:15:30:ee:f4:95:76:2b:5c:a2:0c:81:0c:bd:cb:3c:50:3f: 03:00:a5:5e:41:bf:79:7f:da:5e:4d:44:a1:25:b5:1f:11:34: 78:4b:f9:10:ca:1c:b0:93:12:fe:69:86:88:49:ed:79:ce:cf: 47:0f:69:df:d9:2d:43:59:6a:92:30:fd:c2:6d:f6:9a:13:7c: bf:dd:27:0d:7e:60:18:d0:5e:86:ec:5f:62:c4:eb:d3:04:66: 4c:ed:b8:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WEOl9WeUkcXxmlAWYB3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NTAyMjg5MDRiOWRiZWI0NzkyYTY5NzcyN2UzNmFhZmQ4 NGQyZTkwHhcNMjUxMjE5MTYwMTI5WhcNMjUxMjIwMTYwMTI5WjAzMTEwLwYDVQQD Eyg3MzZiYmYzNmFmODFjZDYzNzFhNzYyNmVjMmYzM2FjN2U0M2YwMjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/LNyYXknv9D8pPlxHmXCdurChlv CtC6qtTGQ47piCJRazmR/RLfXh4FNvlRuZSh8wRcOvpMqNxv/wPHDjeRBiYSEfAm APhIMi6QvQs+FHiHfmvx9ysgGSQShXXfNuaxpRYkRNJ0VxnOmWY7klRjgngyIiMI VTbJfVfvnuQuhB1I7qPTa2bj9MFt2Bmr6KPoKNQTAhuqO6OmFDyZZwq+rG5JO9XC hhCMn+2ofBFCujFF4/08fWSDmqk50+mBLHICUa9YpjOsQlbI5qQFnS9JWLy2hZcK uMVs/RVE38K3oALPS8sv24O2FylkHNSaKJzAx9jEeYUGn3NmzRWwFNRbHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNrvzavgc1jcadibsLzOsfkPwIsMB8GA1UdIwQY MBaAFAlQIokEudvrR5Kml3J+Nqr9hNLpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NGQ5MTAtOTQ1Yy00MmU4LWJiNDQt NjI4MjFjMmMyOTlmLzEvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82NGQ5MTAtOTQ1Yy00MmU4LWJiNDQtNjI4MjFjMmMyOTlm LzEvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKvUKeU7 Lg6uyI1x+KHQR7Q/8SaOr04xmhJpGAYKc9VAgdy0jJWW0ezTUQOXUeouGXESk+Lz ifW3eLRqgONW7wzzmdNYorvwB56CqH2dZvkxu13DRoP7h8DqSzRV0j+qyH4fRfK6 iZqYgD9z96IgaiQIAFcNJtbVcXTqKCS1uBHdxsyjjDoSRlqvwXtpxGxk/Fw86K9H LBUCsUzq+1YV3rLbeBUw7vSVditcogyBDL3LPFA/AwClXkG/eX/aXk1EoSW1HxE0 eEv5EMocsJMS/mmGiEntec7PRw9p39ktQ1lqkjD9wm32mhN8v90nDX5gGNBehuxf YsTr0wRmTO24Cw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:21:26 2025 by rpki-client