This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft File: CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft (raw, json) Hash identifier: uR/n3dgJywu5fm7pgnP+YrjJQfA10JaUKDxpKhWUcoE= Subject key identifier: 3A:7F:B3:41:13:AE:8B:A1:7E:95:3B:5E:F7:77:76:1B:29:4F:57:1F Authority key identifier: 08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05 Certificate issuer: /CN=08f234563be959822df42f8d7274fe547c0b2f05 Certificate serial: 019B59E39FAEC995E9C91E863A5E46ED93C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft Manifest number: 0130 Signing time: Fri 26 Dec 2025 09:00:48 +0000 Manifest this update: Fri 26 Dec 2025 09:00:48 +0000 Manifest next update: Sat 27 Dec 2025 09:00:48 +0000 Files and hashes: 1: CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl (hash: 86RuJm+N/6i2iKcCbHRMl13kUqO7rw5VhCCj6IrZYmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:9f:ae:c9:95:e9:c9:1e:86:3a:5e:46:ed:93:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08f234563be959822df42f8d7274fe547c0b2f05 Validity Not Before: Dec 26 09:00:48 2025 GMT Not After : Dec 27 09:00:48 2025 GMT Subject: CN=3a7fb34113ae8ba17e953b5ef777761b294f571f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:83:27:fd:61:a1:b5:af:e7:96:25:17:80: 50:da:5f:bc:ca:89:33:7c:f4:4c:ce:9b:30:6c:e8: e6:ea:5e:13:7d:71:f1:f9:50:8a:ea:7d:be:c0:53: c6:d3:63:ec:ea:28:b0:06:84:de:bc:d0:07:4d:46: 82:c0:f8:9d:12:05:81:02:09:c3:4c:d4:60:00:47: f1:72:cc:7c:55:eb:40:cb:dc:88:a7:da:df:9a:fd: 2a:85:28:88:94:60:02:5b:f0:87:24:df:52:a8:79: 36:af:66:e6:12:88:7e:59:3b:36:e8:79:56:d6:ba: 12:57:a0:61:50:ca:94:f2:9c:d3:8d:61:bd:86:1f: 32:90:22:fa:7f:f8:e4:b2:36:cc:c7:52:40:e7:97: e4:73:bc:f2:21:3e:0c:52:8f:7e:6f:79:74:99:73: e5:52:46:bb:f9:a8:b0:f8:bf:77:88:85:85:5d:b5: df:dc:60:08:47:83:da:f8:89:49:3f:30:46:41:59: 48:a1:60:d5:97:17:03:4c:8f:f6:c0:52:08:58:87: fb:b2:da:81:ec:09:29:04:0d:41:13:c9:62:eb:07: 8b:ae:a6:d9:91:2f:bc:0f:bd:81:8e:ff:7f:b5:0f: 64:49:f3:b5:bf:5c:70:8a:7a:d3:49:2f:99:4d:45: 38:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7F:B3:41:13:AE:8B:A1:7E:95:3B:5E:F7:77:76:1B:29:4F:57:1F X509v3 Authority Key Identifier: keyid:08:F2:34:56:3B:E9:59:82:2D:F4:2F:8D:72:74:FE:54:7C:0B:2F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPI0VjvpWYIt9C-NcnT-VHwLLwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1337bb-b5f6-468f-b96a-63fe7265b718/1/CPI0VjvpWYIt9C-NcnT-VHwLLwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:32:3d:9f:59:9e:18:f5:bf:23:1a:ba:cb:e8:3c:8d:dc:86: 6f:26:b3:d7:9a:d2:95:e8:4c:e7:4b:74:f8:f0:a3:47:a0:d7: 9f:a4:ae:10:82:b4:a6:ce:db:73:a8:7a:b3:73:25:bd:9a:9d: 3a:75:77:67:83:af:a4:d9:c3:79:34:cb:d8:74:40:b6:55:61: 96:24:b7:43:b4:4a:d7:4a:a2:ba:32:6d:05:5b:fe:40:01:13: b8:77:88:f7:a3:30:ad:0e:be:14:93:dc:96:45:09:30:d6:be: b5:74:de:45:16:8b:b0:58:1d:90:ed:4a:ea:c4:c0:07:12:d5: 6f:fc:82:91:e2:5c:bb:8f:0c:69:8d:9e:25:be:a8:7e:df:12: 1f:c5:de:9b:95:ab:bf:d4:e6:07:bb:49:06:55:c9:36:c9:e8: b5:d5:47:c3:3e:ac:f0:e6:97:2e:48:ef:de:f6:51:19:9c:77: 6d:6f:07:39:b0:81:ac:93:a7:b5:31:eb:7e:e1:8e:6b:02:6b: 33:1e:e4:77:81:61:8d:56:98:f4:c7:a2:8c:e5:02:4a:f5:05: 2b:16:87:2e:ad:fc:32:7f:e2:11:79:90:25:a1:af:b8:d2:68: f9:ea:f8:6a:5a:7c:0b:47:85:28:70:ce:9a:22:61:8f:be:b5: 39:92:f1:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ45+uyZXpyR6GOl5G7ZPEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZjIzNDU2M2JlOTU5ODIyZGY0MmY4ZDcyNzRmZTU0N2Mw YjJmMDUwHhcNMjUxMjI2MDkwMDQ4WhcNMjUxMjI3MDkwMDQ4WjAzMTEwLwYDVQQD EygzYTdmYjM0MTEzYWU4YmExN2U5NTNiNWVmNzc3NzYxYjI5NGY1NzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkmDJ/1hobWv55YlF4BQ2l+8yokz fPRMzpswbOjm6l4TfXHx+VCK6n2+wFPG02Ps6iiwBoTevNAHTUaCwPidEgWBAgnD TNRgAEfxcsx8VetAy9yIp9rfmv0qhSiIlGACW/CHJN9SqHk2r2bmEoh+WTs26HlW 1roSV6BhUMqU8pzTjWG9hh8ykCL6f/jksjbMx1JA55fkc7zyIT4MUo9+b3l0mXPl Uka7+aiw+L93iIWFXbXf3GAIR4Pa+IlJPzBGQVlIoWDVlxcDTI/2wFIIWIf7stqB 7AkpBA1BE8li6weLrqbZkS+8D72Bjv9/tQ9kSfO1v1xwinrTSS+ZTUU4DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDp/s0ETrouhfpU7Xvd3dhspT1cfMB8GA1UdIwQY MBaAFAjyNFY76VmCLfQvjXJ0/lR8Cy8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1BJMFZqdnBXWUl0OUMtTmNuVC1WSHdMTHdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMzM3YmItYjVmNi00NjhmLWI5NmEt NjNmZTcyNjViNzE4LzEvQ1BJMFZqdnBXWUl0OUMtTmNuVC1WSHdMTHdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xMzM3YmItYjVmNi00NjhmLWI5NmEtNjNmZTcyNjViNzE4 LzEvQ1BJMFZqdnBXWUl0OUMtTmNuVC1WSHdMTHdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejI9n1me GPW/Ixq6y+g8jdyGbyaz15rSlehM50t0+PCjR6DXn6SuEIK0ps7bc6h6s3MlvZqd OnV3Z4OvpNnDeTTL2HRAtlVhliS3Q7RK10qiujJtBVv+QAETuHeI96MwrQ6+FJPc lkUJMNa+tXTeRRaLsFgdkO1K6sTABxLVb/yCkeJcu48MaY2eJb6oft8SH8Xem5Wr v9TmB7tJBlXJNsnotdVHwz6s8OaXLkjv3vZRGZx3bW8HObCBrJOntTHrfuGOawJr Mx7kd4FhjVaY9MeijOUCSvUFKxaHLq38Mn/iEXmQJaGvuNJo+er4alp8C0eFKHDO miJhj761OZLxSA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:37 2025 by rpki-client