This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft File: CPRr-iBG-8mOYn9ANIMnESO-ygo.mft (raw, json) Hash identifier: 0Dk9a+s7WFvTKLhQ1xeKY1gLtjLx6urKehXmLvEHsTM= Subject key identifier: 02:EF:88:7A:EF:D6:62:BB:8B:EF:CB:3F:5B:7D:FF:03:76:03:68:AF Authority key identifier: 08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A Certificate issuer: /CN=08f46bfa2046fbc98e627f403483271123beca0a Certificate serial: 019AF01AA125D5E3271E6BCBEE278C897A7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft Manifest number: 32 Signing time: Fri 05 Dec 2025 20:01:08 +0000 Manifest this update: Fri 05 Dec 2025 20:01:08 +0000 Manifest next update: Sat 06 Dec 2025 20:01:08 +0000 Files and hashes: 1: A406_tfLInjDBVSbBQ7mKFBN-JE.roa (hash: E+hB0yuwu5D4hH5rECO553wANZ9LShkCcSEX/+zvqLQ=) 2: CPRr-iBG-8mOYn9ANIMnESO-ygo.crl (hash: c2e7t7CiRfNXmxkBqsa5uZUkLG9c2FCDTVsm1yrVa4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:1a:a1:25:d5:e3:27:1e:6b:cb:ee:27:8c:89:7a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08f46bfa2046fbc98e627f403483271123beca0a Validity Not Before: Dec 5 20:01:08 2025 GMT Not After : Dec 6 20:01:08 2025 GMT Subject: CN=02ef887aefd662bb8befcb3f5b7dff03760368af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:3c:68:2c:8c:58:5f:50:ef:74:30:78:14: b1:38:08:0b:4f:e3:01:5d:34:43:5b:a0:a2:7d:d8: 95:01:c2:6e:d4:11:e8:08:3b:07:83:cb:f0:57:5d: 50:64:22:90:c1:56:f4:0b:f5:9b:6b:9c:b7:22:b6: e3:79:a7:b4:a0:27:99:aa:63:91:86:6c:5b:4c:c6: 3d:08:b9:5a:ce:60:77:3e:cf:22:a3:2a:4a:6e:48: e8:36:ba:fd:66:6b:17:83:11:a9:97:1a:12:e6:86: 5c:19:a3:44:4d:8f:3b:60:3f:13:bb:db:1b:a6:d1: 0e:46:19:69:05:d3:53:c8:2a:1e:7a:b1:70:8d:be: 6d:28:22:ff:09:71:c7:d9:82:60:48:61:b1:07:2d: b8:03:2c:f8:7c:fa:16:36:fd:ff:ef:87:2b:3b:2d: d1:a7:52:8b:88:02:54:7c:d1:99:ff:ec:9e:07:2e: 93:15:96:e6:a1:c0:5c:ea:74:e1:bf:ac:59:01:f5: 7a:c5:99:1f:95:8d:c0:fb:99:25:50:62:81:40:30: 0b:76:e7:ea:7d:8e:89:0c:4a:07:4a:c7:cd:1f:88: b5:96:d3:63:4a:a2:92:9e:34:79:86:bd:c3:47:fc: 8c:7c:d6:7d:28:e0:75:f3:04:8f:37:24:db:9c:d5: 29:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EF:88:7A:EF:D6:62:BB:8B:EF:CB:3F:5B:7D:FF:03:76:03:68:AF X509v3 Authority Key Identifier: keyid:08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ab:b4:57:78:cc:b8:ae:bf:72:5e:b9:0a:b4:95:6a:1a:7c: 67:33:ea:e4:d3:64:9d:c7:29:9c:a1:ae:03:cf:36:f2:64:82: 5f:9a:2c:fb:37:19:37:1b:f3:cc:38:12:e5:d2:4c:e4:6f:fe: 6a:62:ae:44:0f:90:ab:6e:a8:b0:e1:20:5a:23:18:e5:68:28: 7f:0c:b1:bd:7f:51:58:d1:78:57:ab:7f:46:ff:02:c1:62:d0: 89:87:46:af:f9:9c:da:38:21:2f:6f:b7:75:9f:db:1d:07:cc: 92:03:b4:5b:7c:e5:7a:95:97:1a:1a:68:3c:4f:0f:33:d1:59: fb:42:18:e6:60:e5:74:de:88:ff:fe:e8:63:e3:75:68:31:19: 8c:9d:bf:8e:04:54:c8:47:84:bf:f2:06:b7:df:82:cd:65:4b: 09:f6:11:4f:7c:4d:0a:85:5d:b5:59:9e:ad:85:a7:d5:4b:aa: d1:b4:17:cb:e1:23:88:6f:e6:ab:69:76:d0:c9:b0:9d:cf:42: df:00:25:04:64:61:ac:28:6b:55:8e:2b:5b:88:68:4d:57:f5: 6b:ab:8e:ed:58:a4:83:b3:b3:fe:23:da:ae:db:f8:f7:a5:c5: 48:eb:a0:21:b8:26:ce:c9:2f:e9:10:ab:30:46:be:e1:c6:88: cd:a4:61:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwGqEl1eMnHmvL7ieMiXp9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZjQ2YmZhMjA0NmZiYzk4ZTYyN2Y0MDM0ODMyNzExMjNi ZWNhMGEwHhcNMjUxMjA1MjAwMTA4WhcNMjUxMjA2MjAwMTA4WjAzMTEwLwYDVQQD EygwMmVmODg3YWVmZDY2MmJiOGJlZmNiM2Y1YjdkZmYwMzc2MDM2OGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqc8aCyMWF9Q73QweBSxOAgLT+MB XTRDW6CifdiVAcJu1BHoCDsHg8vwV11QZCKQwVb0C/Wba5y3Irbjeae0oCeZqmOR hmxbTMY9CLlazmB3Ps8ioypKbkjoNrr9ZmsXgxGplxoS5oZcGaNETY87YD8Tu9sb ptEORhlpBdNTyCoeerFwjb5tKCL/CXHH2YJgSGGxBy24Ayz4fPoWNv3/74crOy3R p1KLiAJUfNGZ/+yeBy6TFZbmocBc6nThv6xZAfV6xZkflY3A+5klUGKBQDALdufq fY6JDEoHSsfNH4i1ltNjSqKSnjR5hr3DR/yMfNZ9KOB18wSPNyTbnNUp5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALviHrv1mK7i+/LP1t9/wN2A2ivMB8GA1UdIwQY MBaAFAj0a/ogRvvJjmJ/QDSDJxEjvsoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS82ZWUyZjUtOWY2MC00N2RjLThjZDkt Y2Q1MjU1NzMzMzA0LzEvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS82ZWUyZjUtOWY2MC00N2RjLThjZDktY2Q1MjU1NzMzMzA0 LzEvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqu0V3jM uK6/cl65CrSVahp8ZzPq5NNknccpnKGuA8828mSCX5os+zcZNxvzzDgS5dJM5G/+ amKuRA+Qq26osOEgWiMY5WgofwyxvX9RWNF4V6t/Rv8CwWLQiYdGr/mc2jghL2+3 dZ/bHQfMkgO0W3zlepWXGhpoPE8PM9FZ+0IY5mDldN6I//7oY+N1aDEZjJ2/jgRU yEeEv/IGt9+CzWVLCfYRT3xNCoVdtVmerYWn1Uuq0bQXy+EjiG/mq2l20Mmwnc9C 3wAlBGRhrChrVY4rW4hoTVf1a6uO7Vikg7Oz/iPartv496XFSOugIbgmzskv6RCr MEa+4caIzaRhcg== -----END CERTIFICATE-----Generated at Sat Dec 6 02:43:14 2025 by rpki-client