This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft File: cpIiZWfact2GiDyt1fPeb_1bNXM.mft (raw, json) Hash identifier: crfc1bxzKgvix+e++w4GGhC99XIbMK01fwFz2gV1JMk= Subject key identifier: FC:E4:9E:71:43:09:42:12:10:4E:4C:06:54:8B:96:DA:32:29:0B:E5 Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73 Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573 Certificate serial: 019B330CD961AE8FF0C2342C3974BF292C35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 20:00:38 +0000 Manifest this update: Thu 18 Dec 2025 20:00:38 +0000 Manifest next update: Fri 19 Dec 2025 20:00:38 +0000 Files and hashes: 1: A2a55CFuU3rmZKWMjbnP0QRTKbw.roa (hash: h7ObFO2cHNspjyZ0BOSzsO0dobQTCK4BjzPiMYTX+dk=) 2: cpIiZWfact2GiDyt1fPeb_1bNXM.crl (hash: koDC0xCZprebXlLfXCHWhnWefk8pmh0BZ4N2VKEAF7s=) 3: hOIlW-rpHRc2nOKpMGO_mfzaetg.roa (hash: VUIEi5LXdhfGKiMndwB/BQwcKviQdKt6bC3rAVXouZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:d9:61:ae:8f:f0:c2:34:2c:39:74:bf:29:2c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573 Validity Not Before: Dec 18 20:00:38 2025 GMT Not After : Dec 19 20:00:38 2025 GMT Subject: CN=fce49e7143094212104e4c06548b96da32290be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4d:f3:8a:dd:c3:9e:eb:0b:bc:4e:e8:e3:29: a3:b6:7e:d0:29:55:0e:2c:f0:49:f0:19:76:d3:87: 8b:5e:6d:1f:3e:12:a5:d4:2d:b7:62:5f:ea:2d:b4: 5f:c6:5b:cd:34:23:92:9a:c6:c0:a4:fb:4c:c7:ac: bf:55:af:3e:18:cb:3f:f4:59:5e:28:6a:58:76:2d: 86:cc:23:18:45:51:43:bc:8a:32:54:13:42:18:00: f1:ce:18:0d:eb:bc:39:57:ef:07:4b:0d:99:a6:1a: eb:fc:cc:ef:c0:eb:9a:7e:c8:67:af:89:0f:f4:14: 6a:10:ba:f1:32:f5:9a:74:15:7c:1a:73:af:26:39: 1b:f4:16:99:2c:6c:ec:86:88:19:8e:1d:db:35:d7: 01:8d:e6:46:be:ec:d6:91:3e:b9:9b:22:54:cc:81: 0a:ae:b4:1c:55:76:65:e7:70:ba:5c:a3:d6:37:9e: 40:6e:8a:18:9c:05:8f:4a:14:ec:06:4a:3f:43:31: 00:77:5f:d4:7d:67:a1:08:17:2a:82:45:ad:7d:47: a4:66:90:af:6c:52:d1:e7:c2:c5:63:82:73:2d:55: ea:14:d5:f3:4a:33:b2:bf:12:64:fa:db:99:df:83: 2b:89:b8:21:01:3c:8d:24:16:f3:42:85:61:24:6a: 51:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E4:9E:71:43:09:42:12:10:4E:4C:06:54:8B:96:DA:32:29:0B:E5 X509v3 Authority Key Identifier: keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:cc:e9:cb:59:2c:f9:31:e3:75:4e:9d:4f:10:29:e9:52:88: 5a:34:41:1c:a4:88:3f:93:23:39:55:17:34:bf:ba:40:b0:48: c6:68:72:7e:e1:22:09:3d:d3:a2:c3:37:77:62:22:7b:50:8a: 2a:0f:30:2e:e0:50:d2:e6:4d:12:50:53:b4:72:8c:8d:2c:75: 7f:68:98:b4:bd:ef:f5:56:72:ee:89:d6:bc:cb:e0:7f:27:fc: 73:01:0e:b4:22:2f:1a:17:8f:6e:67:f0:7c:e8:95:af:e9:79: 2e:70:00:c1:db:fb:77:58:d2:61:f5:a5:46:56:ff:1a:29:ef: fc:ba:4e:be:15:0b:72:11:1d:f2:bc:07:02:0d:c2:16:7a:4e: b6:5e:2e:05:70:53:3c:7e:2d:24:11:fc:54:e9:ea:09:8a:d0: b2:5c:3f:38:b6:14:98:24:1f:da:ad:fc:d3:9e:25:b4:b6:75: 16:2c:52:17:eb:67:1d:8f:85:f8:c8:1b:6e:2e:14:e9:7a:9f: 7d:55:db:9e:8e:28:2d:52:bb:b8:46:f9:ff:f3:63:de:c8:9d: a7:9d:7e:4e:cc:cf:8f:c4:33:89:7e:3c:c5:5b:73:83:43:48: dc:76:c6:0d:ef:4f:b8:64:b6:33:45:7c:ed:b8:be:ba:32:e4: 04:34:45:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDNlhro/wwjQsOXS/KSw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOTIyMjY1NjdkYTcyZGQ4Njg4M2NhZGQ1ZjNkZTZmZmQ1 YjM1NzMwHhcNMjUxMjE4MjAwMDM4WhcNMjUxMjE5MjAwMDM4WjAzMTEwLwYDVQQD EyhmY2U0OWU3MTQzMDk0MjEyMTA0ZTRjMDY1NDhiOTZkYTMyMjkwYmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU3zit3DnusLvE7o4ymjtn7QKVUO LPBJ8Bl204eLXm0fPhKl1C23Yl/qLbRfxlvNNCOSmsbApPtMx6y/Va8+GMs/9Fle KGpYdi2GzCMYRVFDvIoyVBNCGADxzhgN67w5V+8HSw2Zphrr/MzvwOuafshnr4kP 9BRqELrxMvWadBV8GnOvJjkb9BaZLGzshogZjh3bNdcBjeZGvuzWkT65myJUzIEK rrQcVXZl53C6XKPWN55AbooYnAWPShTsBko/QzEAd1/UfWehCBcqgkWtfUekZpCv bFLR58LFY4JzLVXqFNXzSjOyvxJk+tuZ34MribghATyNJBbzQoVhJGpRvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzknnFDCUISEE5MBlSLltoyKQvlMB8GA1UdIwQY MBaAFHKSImVn2nLdhog8rdXz3m/9WzVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3BJaVpXZmFjdDJHaUR5dDFmUGViXzFiTlhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80ZWMyMTctZThkNy00ZTgwLTg3Y2Qt MDM5ZGU3ODRkOTQxLzEvY3BJaVpXZmFjdDJHaUR5dDFmUGViXzFiTlhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC80ZWMyMTctZThkNy00ZTgwLTg3Y2QtMDM5ZGU3ODRkOTQx LzEvY3BJaVpXZmFjdDJHaUR5dDFmUGViXzFiTlhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8zpy1ks +THjdU6dTxAp6VKIWjRBHKSIP5MjOVUXNL+6QLBIxmhyfuEiCT3TosM3d2Iie1CK Kg8wLuBQ0uZNElBTtHKMjSx1f2iYtL3v9VZy7onWvMvgfyf8cwEOtCIvGhePbmfw fOiVr+l5LnAAwdv7d1jSYfWlRlb/Ginv/LpOvhULchEd8rwHAg3CFnpOtl4uBXBT PH4tJBH8VOnqCYrQslw/OLYUmCQf2q38054ltLZ1FixSF+tnHY+F+Mgbbi4U6Xqf fVXbno4oLVK7uEb5//Nj3sidp51+TszPj8QziX48xVtzg0NI3HbGDe9PuGS2M0V8 7bi+ujLkBDRFoQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:55:08 2025 by rpki-client