This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft File: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft (raw, json) Hash identifier: uP0CZnT3hV35N/kqLB/ynXjwXv11Dox6yLFX+fIIypA= Subject key identifier: 07:E9:11:B4:03:01:34:D1:60:98:C8:15:66:27:0E:DE:A0:7F:A1:76 Authority key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24 Certificate issuer: /CN=08f2eb8fb02e87e7184337b245af99e3133ef524 Certificate serial: 019B1E73B7CA2A41B8502F1F1F951B5D06A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft Manifest number: 1776 Signing time: Sun 14 Dec 2025 20:00:58 +0000 Manifest this update: Sun 14 Dec 2025 20:00:58 +0000 Manifest next update: Mon 15 Dec 2025 20:00:58 +0000 Files and hashes: 1: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl (hash: Ky0AgBrRZcw3nULgkjrBj6xcBS29+Li7NpFsoGvGidk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:73:b7:ca:2a:41:b8:50:2f:1f:1f:95:1b:5d:06:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08f2eb8fb02e87e7184337b245af99e3133ef524 Validity Not Before: Dec 14 20:00:58 2025 GMT Not After : Dec 15 20:00:58 2025 GMT Subject: CN=07e911b4030134d16098c81566270edea07fa176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7a:e8:c6:6f:af:db:bb:20:21:31:bb:df:34: 13:af:cf:9d:19:7f:23:b6:a1:26:be:cd:d7:01:ce: f0:eb:05:ae:ee:33:c0:99:3e:e2:cf:30:2f:43:a6: d8:33:cd:be:1f:6e:91:d8:56:42:dd:64:ea:05:48: ef:ed:b1:c0:e4:c7:45:74:56:cb:fd:64:98:68:8f: a3:3c:fb:c6:6d:b9:f6:ca:02:95:4d:3f:97:df:76: 3d:b3:04:96:6d:39:23:af:ce:91:f0:5e:f5:c5:1b: e3:62:f2:4f:7f:92:e8:26:f4:10:c8:a0:47:4c:19: a6:87:37:12:c1:1d:e0:c4:a8:98:b8:0b:5f:5d:fe: c2:49:b1:50:55:78:49:be:9e:8c:a0:e5:e5:42:5b: 4c:bf:41:f2:1d:40:5b:4f:81:52:56:61:c7:8d:c5: 96:72:5e:a6:11:6e:bb:4f:66:28:e9:fd:24:6f:01: f0:c6:07:db:cf:78:36:95:f4:c9:62:07:14:10:5a: b8:47:2f:ad:3d:96:31:ba:37:df:e5:60:fe:b1:0b: c9:29:58:c6:2c:a1:04:ff:2a:7a:99:27:37:f4:24: 14:3f:18:90:2e:45:e1:e1:eb:59:15:6a:79:e8:86: 5a:14:d4:a7:74:26:c0:a0:c9:25:a6:e9:3f:4a:4b: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E9:11:B4:03:01:34:D1:60:98:C8:15:66:27:0E:DE:A0:7F:A1:76 X509v3 Authority Key Identifier: keyid:08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:9f:3f:0f:5c:be:f0:fd:e5:1b:69:62:c2:44:73:60:91:46: 0a:39:7b:aa:0f:ab:af:28:f6:16:c7:5a:e0:22:83:82:37:df: d2:5c:33:c4:5c:0f:4d:02:23:48:4a:c1:ea:d0:33:e5:d5:19: e0:26:bc:2d:14:54:0c:72:68:c3:5a:93:60:ac:aa:f5:69:85: e8:ea:e7:b5:ce:21:46:61:e4:f6:1d:66:32:83:ed:51:d9:84: 4d:32:f7:96:32:47:6d:aa:1d:92:a2:ec:fa:91:84:08:5a:cc: 75:81:35:d6:4d:fd:78:7b:7c:99:09:f5:06:7b:52:49:72:b3: 49:5c:f5:2d:f7:df:92:62:a1:0f:2a:e4:bb:26:e4:cb:b7:c1: d9:e8:dc:3a:79:d7:e3:71:77:13:37:4c:6f:ed:09:cd:43:62: 54:f6:5c:04:29:43:77:bd:12:8c:41:02:62:eb:ed:84:0e:e6: 39:2f:ee:9b:bb:eb:7d:b4:2c:47:af:0b:6d:40:44:ab:39:bc: 96:da:52:b6:72:c2:20:4a:53:9a:58:a3:e1:f3:b3:2e:d3:9b: b0:b0:64:4e:7f:21:39:9c:f7:b4:66:52:17:be:73:91:a6:9e: 99:a4:45:03:02:50:d0:39:15:80:cb:7d:74:41:c8:a4:9d:00: 9b:77:5e:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsec7fKKkG4UC8fH5UbXQajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZjJlYjhmYjAyZTg3ZTcxODQzMzdiMjQ1YWY5OWUzMTMz ZWY1MjQwHhcNMjUxMjE0MjAwMDU4WhcNMjUxMjE1MjAwMDU4WjAzMTEwLwYDVQQD EygwN2U5MTFiNDAzMDEzNGQxNjA5OGM4MTU2NjI3MGVkZWEwN2ZhMTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXroxm+v27sgITG73zQTr8+dGX8j tqEmvs3XAc7w6wWu7jPAmT7izzAvQ6bYM82+H26R2FZC3WTqBUjv7bHA5MdFdFbL /WSYaI+jPPvGbbn2ygKVTT+X33Y9swSWbTkjr86R8F71xRvjYvJPf5LoJvQQyKBH TBmmhzcSwR3gxKiYuAtfXf7CSbFQVXhJvp6MoOXlQltMv0HyHUBbT4FSVmHHjcWW cl6mEW67T2Yo6f0kbwHwxgfbz3g2lfTJYgcUEFq4Ry+tPZYxujff5WD+sQvJKVjG LKEE/yp6mSc39CQUPxiQLkXh4etZFWp56IZaFNSndCbAoMklpuk/SkueBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfpEbQDATTRYJjIFWYnDt6gf6F2MB8GA1UdIwQY MBaAFAjy64+wLofnGEM3skWvmeMTPvUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NWVhNDgtYzNlZC00ZTQ3LWJkMTIt NmNkZWNkNGRiOGI1LzEvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85NWVhNDgtYzNlZC00ZTQ3LWJkMTItNmNkZWNkNGRiOGI1 LzEvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZ8/D1y+ 8P3lG2liwkRzYJFGCjl7qg+rryj2Fsda4CKDgjff0lwzxFwPTQIjSErB6tAz5dUZ 4Ca8LRRUDHJow1qTYKyq9WmF6Orntc4hRmHk9h1mMoPtUdmETTL3ljJHbaodkqLs +pGECFrMdYE11k39eHt8mQn1BntSSXKzSVz1LfffkmKhDyrkuybky7fB2ejcOnnX 43F3EzdMb+0JzUNiVPZcBClDd70SjEECYuvthA7mOS/um7vrfbQsR68LbUBEqzm8 ltpStnLCIEpTmlij4fOzLtObsLBkTn8hOZz3tGZSF75zkaaemaRFAwJQ0DkVgMt9 dEHIpJ0Am3deWQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:54:17 2025 by rpki-client