This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json) Hash identifier: f1bx0g6nccets5FicOsaXvpGh+xRcCxGUtnf644VY5E= Subject key identifier: A3:95:F7:97:E9:01:A5:23:05:ED:48:B8:A2:59:8C:36:86:4E:E9:A9 Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa Certificate serial: 019B32D7E1895E98653692ABD19A7E237F2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft Manifest number: 1715 Signing time: Thu 18 Dec 2025 19:02:47 +0000 Manifest this update: Thu 18 Dec 2025 19:02:47 +0000 Manifest next update: Fri 19 Dec 2025 19:02:47 +0000 Files and hashes: 1: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: lUxYLJEp64REl0p5WTlFS40QFyK80T3QzrQPc8TqPU0=) 2: dsLG2j4EWWmiv7tptAS2-fkcXU0.roa (hash: ADLTdWLJS9zEs/uQjjxNH0vaJWWshki3RYpjC8+gtcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:e1:89:5e:98:65:36:92:ab:d1:9a:7e:23:7f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa Validity Not Before: Dec 18 19:02:47 2025 GMT Not After : Dec 19 19:02:47 2025 GMT Subject: CN=a395f797e901a52305ed48b8a2598c36864ee9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:24:2f:4d:b4:2e:5a:16:00:2f:52:d4:ae:38: a1:b2:b0:f2:91:6d:4e:aa:60:11:20:4b:44:ad:89: 60:e3:28:13:5a:45:2c:e1:c5:20:a5:79:21:e6:6b: 10:77:a3:2b:19:8a:02:81:22:66:aa:da:02:07:7e: bf:2c:20:06:bf:e2:4e:49:7c:e6:0e:e7:d1:65:6b: fc:a3:19:77:15:7f:b6:15:9c:f8:fa:53:a0:39:a0: 44:cd:ae:df:88:63:8c:15:56:b1:fd:43:4b:77:f6: ed:88:79:1f:3d:27:d6:15:e9:fb:40:69:2e:d1:d5: 0d:55:62:ff:8d:bb:84:b5:ed:f0:1a:8b:2b:f4:1b: 52:6e:9e:48:db:8a:ca:1d:3a:5d:8c:fd:6e:ab:a5: c9:3d:ab:f2:01:d9:17:55:47:34:85:8e:f7:50:22: 79:e0:fd:5d:4c:c4:ee:46:e2:4b:03:57:93:44:37: 91:c8:7f:88:ca:d2:a1:97:6c:bb:e4:d8:d3:5a:59: 0b:2b:f1:be:0e:f6:c7:30:da:a8:97:83:2e:32:be: 80:0e:f6:c4:ab:c2:84:1e:bd:0f:28:77:d1:20:07: dd:e7:01:f9:90:d2:de:41:ab:5b:aa:fb:1b:34:49: 36:b7:bb:bc:ab:f1:60:bd:f3:94:d1:71:1e:57:f5: 36:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:95:F7:97:E9:01:A5:23:05:ED:48:B8:A2:59:8C:36:86:4E:E9:A9 X509v3 Authority Key Identifier: keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:58:72:4d:e4:f9:e7:1e:1a:50:48:1a:81:50:7b:d4:13:3f: 25:71:85:60:a3:8c:82:81:f7:50:fc:25:3d:9c:4b:25:c1:d9: 82:28:4f:89:5c:32:72:9a:2d:1c:e8:45:86:bc:e0:92:60:a5: 9a:25:00:11:e3:c8:45:13:ce:90:6e:8d:83:6d:46:e4:b6:7c: 74:c2:4d:db:da:54:51:50:ec:b6:b9:50:20:c7:e4:da:d6:81: 15:26:de:ca:35:af:da:2b:81:5b:e1:a4:9d:6b:07:ae:e6:b8: 00:95:8f:7f:9e:d7:ed:a0:50:10:65:0f:50:49:ae:42:1f:d7: f1:3f:e0:00:24:78:4e:82:f6:0b:0c:b8:68:86:2d:c2:d0:89: cc:94:f3:c3:72:2d:0a:8b:8b:3c:c4:43:db:be:ea:68:e3:a9: 27:87:12:e8:f1:f8:7a:b6:b7:ba:fe:bf:d8:8b:18:22:a3:a2: 94:44:ed:4c:d7:03:6b:20:3f:ea:5e:71:0b:ab:c9:de:00:49: aa:dd:16:46:1c:74:e7:aa:27:5d:b8:da:83:26:b0:68:0b:f1: 4d:1a:85:28:6c:8b:33:f9:f0:dc:f2:47:17:bc:e4:e5:6f:ea: fe:a8:a6:fa:5c:08:c2:52:20:87:63:f4:e5:98:c1:e5:07:c0: 48:af:f5:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1+GJXphlNpKr0Zp+I38tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmNmMGVkNWI1Njc3YzExNTVmMmI3ODRjNmQ3M2Q4MDkz YWYxYWEwHhcNMjUxMjE4MTkwMjQ3WhcNMjUxMjE5MTkwMjQ3WjAzMTEwLwYDVQQD EyhhMzk1Zjc5N2U5MDFhNTIzMDVlZDQ4YjhhMjU5OGMzNjg2NGVlOWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiQvTbQuWhYAL1LUrjihsrDykW1O qmARIEtErYlg4ygTWkUs4cUgpXkh5msQd6MrGYoCgSJmqtoCB36/LCAGv+JOSXzm DufRZWv8oxl3FX+2FZz4+lOgOaBEza7fiGOMFVax/UNLd/btiHkfPSfWFen7QGku 0dUNVWL/jbuEte3wGosr9BtSbp5I24rKHTpdjP1uq6XJPavyAdkXVUc0hY73UCJ5 4P1dTMTuRuJLA1eTRDeRyH+IytKhl2y75NjTWlkLK/G+DvbHMNqol4MuMr6ADvbE q8KEHr0PKHfRIAfd5wH5kNLeQatbqvsbNEk2t7u8q/FgvfOU0XEeV/U2dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOV95fpAaUjBe1IuKJZjDaGTumpMB8GA1UdIwQY MBaAFAj88O1bVnfBFV8reExtc9gJOvGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80OTNiOTgtN2Y1OS00ZjYxLTk5NDUt MWU4ZGRhZmUzYTE0LzEvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi80OTNiOTgtN2Y1OS00ZjYxLTk5NDUtMWU4ZGRhZmUzYTE0 LzEvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjlhyTeT5 5x4aUEgagVB71BM/JXGFYKOMgoH3UPwlPZxLJcHZgihPiVwycpotHOhFhrzgkmCl miUAEePIRRPOkG6Ng21G5LZ8dMJN29pUUVDstrlQIMfk2taBFSbeyjWv2iuBW+Gk nWsHrua4AJWPf57X7aBQEGUPUEmuQh/X8T/gACR4ToL2Cwy4aIYtwtCJzJTzw3It CouLPMRD277qaOOpJ4cS6PH4era3uv6/2IsYIqOilETtTNcDayA/6l5xC6vJ3gBJ qt0WRhx056onXbjagyawaAvxTRqFKGyLM/nw3PJHF7zk5W/q/qim+lwIwlIgh2P0 5ZjB5QfASK/17w== -----END CERTIFICATE-----Generated at Thu Dec 18 23:37:01 2025 by rpki-client