This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft File: cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft (raw, json) Hash identifier: IRvl1gL6ztY7W52ImhPjx7BOQXLnmOvCd1rl5cInGgs= Subject key identifier: A5:80:DC:82:2F:7E:81:B9:3F:9F:A2:AD:9E:51:BC:72:7A:E7:93:41 Authority key identifier: 72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E Certificate issuer: /CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e Certificate serial: 019B05C6821E64D270321D84A1CB6CB90A2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft Manifest number: 176C Signing time: Wed 10 Dec 2025 01:00:54 +0000 Manifest this update: Wed 10 Dec 2025 01:00:54 +0000 Manifest next update: Thu 11 Dec 2025 01:00:54 +0000 Files and hashes: 1: cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl (hash: XAtAnUs9/8jMj/skAOub4K7gfKrVPjWLA9Y+v/jqYq8=) 2: wfmRA1o816NK2nebior9nQRqs6I.roa (hash: WsRrqYQ4pFa/JlBicKV1hWW2cLlAeaKvafPxPghqGUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:c6:82:1e:64:d2:70:32:1d:84:a1:cb:6c:b9:0a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e Validity Not Before: Dec 10 01:00:54 2025 GMT Not After : Dec 11 01:00:54 2025 GMT Subject: CN=a580dc822f7e81b93f9fa2ad9e51bc727ae79341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:42:d3:52:21:be:a4:83:18:59:e9:2b:4c: 2c:62:0d:87:e0:02:dc:14:07:90:e2:f7:57:f5:c0: f7:b5:dc:ad:29:d4:dd:af:7a:94:3d:8e:52:dd:f0: ea:0d:ae:dc:b9:b5:22:22:bc:4f:76:0e:ee:b4:70: 5a:c3:c8:a5:d2:7a:13:f1:50:df:14:6f:00:c3:ac: 1f:6e:57:ae:d5:a3:ba:bc:4a:13:e4:e9:fe:26:58: 5c:50:56:17:7b:7b:61:72:37:cc:b9:ac:fd:db:76: 15:67:d7:61:98:26:1b:25:2b:78:79:94:14:18:64: 1c:f1:d5:e9:18:88:fd:28:10:ef:84:75:95:aa:b0: 22:de:88:61:64:d1:85:ee:b5:11:e0:c5:94:a3:1e: 78:b9:38:c0:a1:46:84:f6:a2:57:5f:3f:79:ce:d4: ef:73:d5:1f:34:7e:23:65:8a:74:b7:b8:f1:20:e2: 09:0b:9c:3e:21:5b:39:ae:ab:dd:6c:cd:5b:96:91: 84:ac:36:01:78:c9:64:ef:6c:17:a2:ff:ba:7f:81: 19:f5:71:bf:46:71:e0:16:f5:d4:80:28:b5:74:39: a9:14:22:47:42:cf:2d:e8:25:5f:a2:0e:f7:65:11: f0:b8:96:18:2b:42:e3:49:1e:19:81:a0:6c:84:d3: 74:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:80:DC:82:2F:7E:81:B9:3F:9F:A2:AD:9E:51:BC:72:7A:E7:93:41 X509v3 Authority Key Identifier: keyid:72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3b:ba:70:88:6e:34:9b:54:7a:62:0a:a3:70:c4:b7:9f:a3: 47:0c:eb:bf:2f:77:03:69:d3:9e:b3:1e:53:3c:c3:81:1e:89: bd:40:f2:0d:a6:c2:cb:fe:0e:59:30:13:67:04:eb:b7:ef:9b: db:30:99:24:5c:e8:d8:20:40:09:c3:db:fe:01:ae:3b:4f:3d: 07:11:18:fb:97:f3:89:9b:15:0f:79:a3:b0:7c:1d:8e:3b:32: a2:c8:dd:6b:a1:7a:78:7f:57:32:26:e4:1b:ea:7b:8e:09:be: fe:44:b5:3c:17:e1:85:3d:87:6b:a4:90:6d:90:93:32:78:1e: af:b8:ee:10:82:ff:06:0f:23:c6:a2:d5:d2:1f:2d:8b:51:35: 67:9a:c0:08:44:13:65:80:d6:44:06:9f:36:d3:60:df:0e:8b: cf:ed:e4:81:e7:dd:54:1c:10:75:2d:5d:3f:db:a7:42:35:47: 82:31:15:98:aa:14:82:fe:0b:bc:4b:af:42:52:37:e8:8d:38: 83:16:6b:9e:cb:13:62:db:59:bb:07:db:cb:fd:b6:95:ea:31: 3a:d9:54:82:84:0b:05:7b:7e:5c:7e:1f:5f:96:20:c7:f5:e7: 0d:e1:49:1c:52:0b:d9:10:19:12:25:a3:55:39:1a:9c:97:0d: 8a:f0:3f:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFxoIeZNJwMh2EoctsuQosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOWZhMTMwOTVkM2U3ZjA5ZmQ4ZjYxYWM1MDg0YzNiYzUx OTRhMGUwHhcNMjUxMjEwMDEwMDU0WhcNMjUxMjExMDEwMDU0WjAzMTEwLwYDVQQD EyhhNTgwZGM4MjJmN2U4MWI5M2Y5ZmEyYWQ5ZTUxYmM3MjdhZTc5MzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqppC01IhvqSDGFnpK0wsYg2H4ALc FAeQ4vdX9cD3tdytKdTdr3qUPY5S3fDqDa7cubUiIrxPdg7utHBaw8il0noT8VDf FG8Aw6wfbleu1aO6vEoT5On+JlhcUFYXe3thcjfMuaz923YVZ9dhmCYbJSt4eZQU GGQc8dXpGIj9KBDvhHWVqrAi3ohhZNGF7rUR4MWUox54uTjAoUaE9qJXXz95ztTv c9UfNH4jZYp0t7jxIOIJC5w+IVs5rqvdbM1blpGErDYBeMlk72wXov+6f4EZ9XG/ RnHgFvXUgCi1dDmpFCJHQs8t6CVfog73ZRHwuJYYK0LjSR4ZgaBshNN0ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWA3IIvfoG5P5+irZ5RvHJ655NBMB8GA1UdIwQY MBaAFHKfoTCV0+fwn9j2GsUITDvFGUoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3AtaE1KWFQ1X0NmMlBZYXhRaE1POFVaU2c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC81ZDU1OTMtNzdmYi00NGE1LWE2MGMt YTdiNWY5NTM1OGJmLzEvY3AtaE1KWFQ1X0NmMlBZYXhRaE1POFVaU2c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC81ZDU1OTMtNzdmYi00NGE1LWE2MGMtYTdiNWY5NTM1OGJm LzEvY3AtaE1KWFQ1X0NmMlBZYXhRaE1POFVaU2c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUju6cIhu NJtUemIKo3DEt5+jRwzrvy93A2nTnrMeUzzDgR6JvUDyDabCy/4OWTATZwTrt++b 2zCZJFzo2CBACcPb/gGuO089BxEY+5fziZsVD3mjsHwdjjsyosjda6F6eH9XMibk G+p7jgm+/kS1PBfhhT2Ha6SQbZCTMnger7juEIL/Bg8jxqLV0h8ti1E1Z5rACEQT ZYDWRAafNtNg3w6Lz+3kgefdVBwQdS1dP9unQjVHgjEVmKoUgv4LvEuvQlI36I04 gxZrnssTYttZuwfby/22leoxOtlUgoQLBXt+XH4fX5Ygx/XnDeFJHFIL2RAZEiWj VTkanJcNivA/jw== -----END CERTIFICATE-----Generated at Wed Dec 10 06:05:04 2025 by rpki-client