This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json) Hash identifier: s87yKQJgeA87luicNOAv3BUDQBlO49qNyA3WblY3aLY= Subject key identifier: 3B:EB:26:C7:1B:C1:0B:3A:29:E2:38:09:3B:B4:85:4D:6B:DF:A7:17 Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9 Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9 Certificate serial: 019B5B2D49673AC26DE7C4A9693FF2AFE135 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft Manifest number: 0EA7 Signing time: Fri 26 Dec 2025 15:00:53 +0000 Manifest this update: Fri 26 Dec 2025 15:00:53 +0000 Manifest next update: Sat 27 Dec 2025 15:00:53 +0000 Files and hashes: 1: 9aAyo6rprahdH9ZSUtgycjgaaNQ.asa (hash: jHUBARdI8pSANeu1sJwWAig2I7vT4TtQr3+sXIljZgg=) 2: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: NL1GMxzizdbJQta/LXesrqBFasFvTaDM7vLIItK26r4=) 3: a9IIp-lXURHEn6uSzx2MIUjwzYE.roa (hash: YetmOWjx1SbjgITF8TkhpSIqAkvzS7Zo40g3IaxEfoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:2d:49:67:3a:c2:6d:e7:c4:a9:69:3f:f2:af:e1:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9 Validity Not Before: Dec 26 15:00:53 2025 GMT Not After : Dec 27 15:00:53 2025 GMT Subject: CN=3beb26c71bc10b3a29e238093bb4854d6bdfa717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:65:0e:59:c3:57:dd:80:d5:5b:66:23:46:a9: 9c:d6:8b:59:e7:12:7b:ed:1d:c1:e6:bb:ad:73:a7: 8b:18:a9:30:38:e1:a1:51:43:da:10:4d:08:49:13: 9f:ba:d4:68:fb:5e:db:0f:00:3d:30:41:1a:9f:56: e1:b9:c1:15:cd:52:01:24:3d:43:a9:13:6a:1e:74: b8:99:e5:54:ed:51:04:3b:5b:89:25:1e:8c:e3:b2: f4:52:05:97:2b:fd:31:c5:36:a3:2b:45:21:69:43: 1b:ba:2e:95:31:6c:2c:30:b7:0f:2c:e5:52:02:b0: 25:8e:f9:85:a3:8b:cf:63:27:c9:ac:a7:63:f8:68: 8d:ff:9f:d1:14:c6:bb:a8:77:2e:27:67:14:3f:84: 55:ee:27:2c:71:d8:25:11:9b:20:e5:a9:d4:46:01: af:d8:13:4e:74:2f:7a:a4:de:2a:ea:bd:30:28:62: 73:38:07:09:48:d3:59:60:e2:de:b0:cf:1a:3c:3c: 25:dc:72:e3:5e:8a:84:2d:ef:5a:91:11:d4:73:30: a0:e5:5a:b4:d7:72:54:6e:4b:5e:2a:75:ba:71:a5: ba:06:b3:6f:22:35:c0:0f:27:6f:d6:0c:90:e7:c6: 2e:84:6c:0a:60:a5:ba:0c:64:e6:4d:3c:87:0f:54: f3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EB:26:C7:1B:C1:0B:3A:29:E2:38:09:3B:B4:85:4D:6B:DF:A7:17 X509v3 Authority Key Identifier: keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:82:f0:d2:a6:04:0b:65:60:8d:c4:8e:5b:0f:61:03:1e:07: f6:e2:46:42:5a:28:55:e5:6c:c0:61:bb:c6:a7:8c:af:a7:d6: 44:9c:1f:ea:44:6f:8f:7e:43:53:41:4c:73:ea:6e:88:3c:f3: 71:8e:25:47:3e:2c:19:d7:2d:35:13:56:3e:df:bd:4e:89:26: a5:2a:fb:73:e4:6c:f1:d0:26:fc:4b:84:30:ad:cd:85:ae:ca: ba:d3:f8:c8:e1:88:5d:25:81:95:5b:49:ec:85:82:7a:cd:3f: 1a:c9:8e:fe:0b:bc:c3:56:b6:66:42:68:ae:ff:ac:7e:d9:f2: 12:94:49:6f:62:c1:69:a3:bf:ea:7a:d7:43:a9:dc:61:c4:0c: 1a:1c:17:c9:75:b4:af:1a:20:da:e8:59:74:76:72:6d:6a:3d: 36:ba:84:57:1e:51:40:06:ae:22:6c:dd:e2:4d:6b:b6:67:2d: 69:13:ce:1c:2b:77:8e:5c:84:b3:cf:30:03:56:f3:9b:66:47: 48:72:51:ff:a0:65:ef:37:62:e9:c7:02:1f:7a:ce:c8:6a:91: a9:2b:b3:80:49:3f:56:c1:d2:53:3c:58:cc:c6:71:9c:8a:13: 04:84:aa:ac:31:6a:ac:48:88:44:26:7a:fb:66:f7:57:d0:92: a8:c2:7c:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbLUlnOsJt58SpaT/yr+E1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmNhYWY4ZDE3ZGQxYTY1Nzk1ZjcxNGIyNjdmMWJjZTIx OTM4YjkwHhcNMjUxMjI2MTUwMDUzWhcNMjUxMjI3MTUwMDUzWjAzMTEwLwYDVQQD EygzYmViMjZjNzFiYzEwYjNhMjllMjM4MDkzYmI0ODU0ZDZiZGZhNzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2UOWcNX3YDVW2YjRqmc1otZ5xJ7 7R3B5rutc6eLGKkwOOGhUUPaEE0ISROfutRo+17bDwA9MEEan1bhucEVzVIBJD1D qRNqHnS4meVU7VEEO1uJJR6M47L0UgWXK/0xxTajK0UhaUMbui6VMWwsMLcPLOVS ArAljvmFo4vPYyfJrKdj+GiN/5/RFMa7qHcuJ2cUP4RV7icscdglEZsg5anURgGv 2BNOdC96pN4q6r0wKGJzOAcJSNNZYOLesM8aPDwl3HLjXoqELe9akRHUczCg5Vq0 13JUbkteKnW6caW6BrNvIjXADydv1gyQ58YuhGwKYKW6DGTmTTyHD1TzZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvrJscbwQs6KeI4CTu0hU1r36cXMB8GA1UdIwQY MBaAFAj8qvjRfdGmV5X3FLJn8bziGTi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgt NzdlZWVhZjcxZDA4LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgtNzdlZWVhZjcxZDA4 LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4Lw0qYE C2VgjcSOWw9hAx4H9uJGQlooVeVswGG7xqeMr6fWRJwf6kRvj35DU0FMc+puiDzz cY4lRz4sGdctNRNWPt+9TokmpSr7c+Rs8dAm/EuEMK3Nha7KutP4yOGIXSWBlVtJ 7IWCes0/GsmO/gu8w1a2ZkJorv+sftnyEpRJb2LBaaO/6nrXQ6ncYcQMGhwXyXW0 rxog2uhZdHZybWo9NrqEVx5RQAauImzd4k1rtmctaRPOHCt3jlyEs88wA1bzm2ZH SHJR/6Bl7zdi6ccCH3rOyGqRqSuzgEk/VsHSUzxYzMZxnIoTBISqrDFqrEiIRCZ6 +2b3V9CSqMJ8RA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:51 2025 by rpki-client