This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft File: _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft (raw, json) Hash identifier: +m3vkU9DTyFtO8gaC95kB29UZc3f/ebbsYmrOxq6FGE= Subject key identifier: F4:C9:B9:7F:1C:A5:E0:4B:BE:FA:2A:A1:8A:5F:33:ED:3C:94:3A:86 Authority key identifier: FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91 Certificate issuer: /CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91 Certificate serial: 019B5305F1E8BA691563388E76A88ECF8B4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft Manifest number: 1798 Signing time: Thu 25 Dec 2025 01:00:57 +0000 Manifest this update: Thu 25 Dec 2025 01:00:57 +0000 Manifest next update: Fri 26 Dec 2025 01:00:57 +0000 Files and hashes: 1: 5o12bWwrOgNj5T2QC_xsDzw2auo.roa (hash: z+dRGRfQAE/aaRQhADQq91xi62QWjaX7M/KM35XckmU=) 2: _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl (hash: P87uP/Shh1Go8dAm8IK6KzM3rXqShudkmYFvV7TYLec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:f1:e8:ba:69:15:63:38:8e:76:a8:8e:cf:8b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91 Validity Not Before: Dec 25 01:00:57 2025 GMT Not After : Dec 26 01:00:57 2025 GMT Subject: CN=f4c9b97f1ca5e04bbefa2aa18a5f33ed3c943a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bf:21:0b:fd:d1:dd:46:22:5e:67:9a:51:3b: 70:4e:ab:c6:72:88:83:bb:8c:97:15:c0:74:6f:51: a0:0b:f0:62:b3:a2:ea:f4:e0:aa:48:55:99:45:d0: 90:8e:50:74:bf:75:96:03:f1:b3:41:58:dd:4c:ed: 97:b7:c4:8c:6d:88:fe:cf:3e:d0:57:8d:9c:32:e3: 6c:c6:23:b7:ca:96:0e:69:ee:01:a0:a6:d8:80:7f: 23:e5:c3:54:e1:95:53:bb:3d:be:36:84:6c:7a:9a: ee:4c:c2:85:7c:79:23:b6:01:14:3e:c2:0b:bd:bb: 5f:74:26:ed:5a:b4:ff:46:30:1c:a9:0a:9a:cd:f1: 02:45:18:a6:9d:00:e7:c7:03:32:66:1d:d6:80:0d: 42:73:92:fb:b9:9f:b8:fb:58:82:00:78:55:b0:8b: 64:1e:63:d5:f3:9d:90:4f:1f:9e:4d:c4:82:31:e4: c1:e5:aa:95:4a:dd:eb:a2:5a:5a:5c:c9:a7:53:60: e1:84:c7:e6:9e:cb:0e:30:c3:2b:a6:49:a3:6f:75: e7:01:7b:ed:8b:45:4a:4b:be:b0:fe:d3:cd:d1:8c: 82:4c:c1:da:45:f8:dd:56:50:57:59:f5:fa:9d:b7: 9e:15:56:e6:93:b5:87:c6:76:90:6d:69:eb:36:66: 41:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C9:B9:7F:1C:A5:E0:4B:BE:FA:2A:A1:8A:5F:33:ED:3C:94:3A:86 X509v3 Authority Key Identifier: keyid:FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:39:98:43:8b:25:cd:17:83:60:1d:c9:c1:eb:c1:34:96:70: 0a:5b:44:ae:50:92:3c:bd:33:83:3b:f2:33:43:63:28:98:ce: fb:ee:c1:e2:68:78:f7:72:a4:2e:f7:de:11:6f:ee:06:c2:dd: 83:a7:90:b7:30:0d:54:15:32:b7:ec:82:41:98:45:33:05:7e: dc:bb:25:97:13:27:07:a5:24:7f:21:0f:4c:cb:d1:b1:35:3d: 5e:ce:42:ab:cb:cd:11:6b:76:25:63:81:5a:2a:e9:75:12:25: 5b:f3:1e:b3:49:5a:1b:0c:2f:47:fe:23:51:d4:6b:96:ee:fb: ef:32:ff:c2:be:bb:24:23:25:86:d6:21:d9:96:ad:53:62:1f: 79:a5:7f:c8:6b:68:1f:46:d0:16:da:97:66:e4:6f:4f:7f:45: 43:fe:88:1a:4e:ea:ed:f5:d3:67:ab:4f:49:7f:3e:ef:3f:24: a0:72:24:6c:02:44:50:32:37:6b:13:9a:5b:5c:39:21:61:8f: d7:b6:ae:8a:13:8d:16:13:7c:81:d1:e2:a4:46:b0:8d:11:e0: 6f:83:ef:15:9f:6f:5d:23:b2:a4:e0:5d:de:4b:85:e6:59:a6: cf:88:58:4e:74:bd:6e:0f:8c:d5:fb:7a:65:27:4e:16:6b:1b: d6:9e:5c:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBfHoumkVYziOdqiOz4tPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMmE2MzQ3YjUzMWUzMGY1NTU1MWQwYjZlZGY2MGRjOGI4 MDhiOTEwHhcNMjUxMjI1MDEwMDU3WhcNMjUxMjI2MDEwMDU3WjAzMTEwLwYDVQQD EyhmNGM5Yjk3ZjFjYTVlMDRiYmVmYTJhYTE4YTVmMzNlZDNjOTQzYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA678hC/3R3UYiXmeaUTtwTqvGcoiD u4yXFcB0b1GgC/Bis6Lq9OCqSFWZRdCQjlB0v3WWA/GzQVjdTO2Xt8SMbYj+zz7Q V42cMuNsxiO3ypYOae4BoKbYgH8j5cNU4ZVTuz2+NoRsepruTMKFfHkjtgEUPsIL vbtfdCbtWrT/RjAcqQqazfECRRimnQDnxwMyZh3WgA1Cc5L7uZ+4+1iCAHhVsItk HmPV852QTx+eTcSCMeTB5aqVSt3rolpaXMmnU2DhhMfmnssOMMMrpkmjb3XnAXvt i0VKS76w/tPN0YyCTMHaRfjdVlBXWfX6nbeeFVbmk7WHxnaQbWnrNmZBBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTJuX8cpeBLvvoqoYpfM+08lDqGMB8GA1UdIwQY MBaAFPwqY0e1MeMPVVUdC27fYNyLgIuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NwalI3VXg0dzlWVlIwTGJ0OWczSXVBaTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zNTQ1ZTYtOGNkZS00NTMzLTk2MDUt ZmFmMmI5ZjA0ZGVmLzEvX0NwalI3VXg0dzlWVlIwTGJ0OWczSXVBaTVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zNTQ1ZTYtOGNkZS00NTMzLTk2MDUtZmFmMmI5ZjA0ZGVm LzEvX0NwalI3VXg0dzlWVlIwTGJ0OWczSXVBaTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDmYQ4sl zReDYB3JwevBNJZwCltErlCSPL0zgzvyM0NjKJjO++7B4mh493KkLvfeEW/uBsLd g6eQtzANVBUyt+yCQZhFMwV+3LsllxMnB6UkfyEPTMvRsTU9Xs5Cq8vNEWt2JWOB WirpdRIlW/Mes0laGwwvR/4jUdRrlu777zL/wr67JCMlhtYh2ZatU2IfeaV/yGto H0bQFtqXZuRvT39FQ/6IGk7q7fXTZ6tPSX8+7z8koHIkbAJEUDI3axOaW1w5IWGP 17auihONFhN8gdHipEawjRHgb4PvFZ9vXSOypOBd3kuF5lmmz4hYTnS9bg+M1ft6 ZSdOFmsb1p5cbw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:38:52 2025 by rpki-client