This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft File: CVZUSY4cx7-M4J6uF6zffIg9W0k.mft (raw, json) Hash identifier: FkfraDEzwTOpbI7r0SyYJTSLQSXlPVy97gBiejSNhn8= Subject key identifier: EB:8A:AC:E5:A9:C5:A6:55:DF:5B:50:34:7E:E9:75:90:9D:5B:CF:BB Authority key identifier: 09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49 Certificate issuer: /CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49 Certificate serial: 019B5975E245FAE16234EB1C58509C84F8B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft Manifest number: 01EA Signing time: Fri 26 Dec 2025 07:00:56 +0000 Manifest this update: Fri 26 Dec 2025 07:00:56 +0000 Manifest next update: Sat 27 Dec 2025 07:00:56 +0000 Files and hashes: 1: Bk_-tAtBQBDMWsFeWLzWEKqm6r8.roa (hash: WNJKvTpD/DoB8twbES4bI7LJ/l4C3v8zVuuorOHSnjs=) 2: CVZUSY4cx7-M4J6uF6zffIg9W0k.crl (hash: Sn6NGzjBnCvH03wHZX4hYxdZGdFVAYKPQLNGU8XjHdQ=) 3: QKYY4pu514sUmDk5ewMC9BudeYM.roa (hash: Xw/leKA1IBGEhTPQThy/3jPwmzjFadxqafY3h81jZnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:e2:45:fa:e1:62:34:eb:1c:58:50:9c:84:f8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49 Validity Not Before: Dec 26 07:00:56 2025 GMT Not After : Dec 27 07:00:56 2025 GMT Subject: CN=eb8aace5a9c5a655df5b50347ee975909d5bcfbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:91:62:4a:e7:c1:45:90:f2:75:7f:c7:64:1a: 1d:60:c9:b8:63:57:fd:88:b5:9e:46:c4:3b:84:b3: df:38:8f:e0:74:b1:34:de:d0:c8:e8:f6:2a:b5:f5: 9a:32:e3:8e:a7:60:9c:a8:99:61:a1:f0:7e:a8:1e: e4:94:54:99:aa:30:a0:5c:b1:b2:a0:28:0f:9b:c1: 0b:1d:78:96:4b:81:24:34:c1:4d:e7:76:0f:54:1a: d4:b3:75:0f:38:de:ec:5d:fb:02:98:81:e3:ac:57: 92:48:4b:06:08:84:f3:3a:19:88:bc:ee:9d:09:b2: 50:4d:8e:e6:03:80:ca:2e:77:b0:36:96:5d:5e:fa: d5:77:8a:8f:f4:9c:a1:a8:50:fb:b7:bb:f4:c7:90: b9:5c:be:da:d3:fa:99:3a:71:82:45:e2:17:84:5c: 13:5e:d3:08:d1:f7:26:20:28:93:24:12:a9:0d:53: e9:55:ed:69:a0:12:75:d3:14:4c:0c:86:b5:be:7e: ea:11:b1:31:00:cf:c7:4d:24:f9:55:cc:8d:43:9d: 26:ea:93:ee:12:55:28:42:03:57:6c:2e:86:ac:f7: 37:e4:ba:8d:c8:4d:3b:10:fe:7f:85:f7:a7:e8:28: 43:32:a0:14:4f:e6:e5:52:51:e5:e4:3b:0b:d1:9d: 98:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8A:AC:E5:A9:C5:A6:55:DF:5B:50:34:7E:E9:75:90:9D:5B:CF:BB X509v3 Authority Key Identifier: keyid:09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3f:96:ef:73:81:00:d6:56:9f:ed:b9:ef:30:59:fb:ba:59: de:04:11:9f:8c:cc:e4:5a:b0:85:99:39:b3:33:5b:b8:dd:44: 46:d0:1c:38:7f:6b:ff:a3:94:f3:d1:3e:73:6c:b6:9f:88:47: c1:3b:3a:aa:86:fc:e0:1e:b5:4d:3c:8a:be:00:24:f6:5f:88: 23:ed:a2:54:37:be:ca:a8:e4:99:37:23:0f:80:aa:d0:2a:5c: e5:fd:a1:47:e3:de:c6:bc:b4:7e:8c:b7:32:94:d1:2b:2c:50: 99:3c:f4:12:b1:3f:f7:5e:90:40:2a:3a:28:7a:02:8c:82:35: 95:5a:6b:21:be:39:25:1b:7c:cd:73:b4:d1:bf:bb:4c:85:3c: e8:56:d6:a0:4e:17:9f:1d:3a:da:e2:ca:17:27:ab:86:b6:54: 71:82:8e:23:41:70:75:f1:88:14:37:e4:f3:f1:b3:44:d8:48: c9:67:f5:d8:d7:3a:3e:d3:fa:a1:04:d7:93:66:ee:ee:d4:a9: fa:2e:13:5d:77:17:5e:17:fc:e8:a2:25:92:0b:88:05:5f:c6: ff:4b:7f:31:af:cc:ae:c1:3c:88:a2:fd:60:09:5d:48:0f:07: ee:cd:bc:10:b2:69:1b:86:8b:57:a7:08:b4:dd:10:84:2d:5f: 6c:b2:2b:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdeJF+uFiNOscWFCchPi4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NTY1NDQ5OGUxY2M3YmY4Y2UwOWVhZTE3YWNkZjdjODgz ZDViNDkwHhcNMjUxMjI2MDcwMDU2WhcNMjUxMjI3MDcwMDU2WjAzMTEwLwYDVQQD EyhlYjhhYWNlNWE5YzVhNjU1ZGY1YjUwMzQ3ZWU5NzU5MDlkNWJjZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15FiSufBRZDydX/HZBodYMm4Y1f9 iLWeRsQ7hLPfOI/gdLE03tDI6PYqtfWaMuOOp2CcqJlhofB+qB7klFSZqjCgXLGy oCgPm8ELHXiWS4EkNMFN53YPVBrUs3UPON7sXfsCmIHjrFeSSEsGCITzOhmIvO6d CbJQTY7mA4DKLnewNpZdXvrVd4qP9JyhqFD7t7v0x5C5XL7a0/qZOnGCReIXhFwT XtMI0fcmICiTJBKpDVPpVe1poBJ10xRMDIa1vn7qEbExAM/HTST5VcyNQ50m6pPu ElUoQgNXbC6GrPc35LqNyE07EP5/hfen6ChDMqAUT+blUlHl5DsL0Z2Y+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuKrOWpxaZV31tQNH7pdZCdW8+7MB8GA1UdIwQY MBaAFAlWVEmOHMe/jOCerhes33yIPVtJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZaVVNZNGN4Ny1NNEo2dUY2emZmSWc5VzBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMmRhYTQtMDg3NC00ZjNkLWJmMjIt ZDFhZDU0ZDBjMDUzLzEvQ1ZaVVNZNGN4Ny1NNEo2dUY2emZmSWc5VzBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMmRhYTQtMDg3NC00ZjNkLWJmMjItZDFhZDU0ZDBjMDUz LzEvQ1ZaVVNZNGN4Ny1NNEo2dUY2emZmSWc5VzBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAED+W73OB ANZWn+257zBZ+7pZ3gQRn4zM5FqwhZk5szNbuN1ERtAcOH9r/6OU89E+c2y2n4hH wTs6qob84B61TTyKvgAk9l+II+2iVDe+yqjkmTcjD4Cq0Cpc5f2hR+Pexry0foy3 MpTRKyxQmTz0ErE/916QQCo6KHoCjII1lVprIb45JRt8zXO00b+7TIU86FbWoE4X nx062uLKFyerhrZUcYKOI0FwdfGIFDfk8/GzRNhIyWf12Nc6PtP6oQTXk2bu7tSp +i4TXXcXXhf86KIlkguIBV/G/0t/Ma/MrsE8iKL9YAldSA8H7s28ELJpG4aLV6cI tN0QhC1fbLIrHg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:24 2025 by rpki-client