This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft File: CANpo1iWH3KE-9WR6SdzfNsFw10.mft (raw, json) Hash identifier: QXMgxBW0NW9NNhJElXKXLs8fEPdOHcnqjZT+ecMGyqo= Subject key identifier: 34:5E:8C:5C:C6:C8:B3:93:0B:FE:AC:82:94:44:7B:86:9E:BA:74:9D Authority key identifier: 08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D Certificate issuer: /CN=080369a358961f7284fbd591e927737cdb05c35d Certificate serial: 019B28F7047104E2F6D791EB33C1019671A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft Manifest number: 1780 Signing time: Tue 16 Dec 2025 21:00:35 +0000 Manifest this update: Tue 16 Dec 2025 21:00:35 +0000 Manifest next update: Wed 17 Dec 2025 21:00:35 +0000 Files and hashes: 1: CANpo1iWH3KE-9WR6SdzfNsFw10.crl (hash: dxit03eHjwIQA0WYcaDsuTU2DqQr9I/jLGH3d1ee2CQ=) 2: GP2HIzJfCfnGM2MVlkSHwUHaN84.roa (hash: ETW1pgFwQtTKE9AFyJGtQ+Xl0Zj/E5KZv9xhDaWW5T8=) 3: qfVV9jSGkUSpTVAmIfthWu05Cnw.roa (hash: UbRHP3L39dp/ZkCYjMy0IuUuv/BT0urLDu7xXNtiXsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:f7:04:71:04:e2:f6:d7:91:eb:33:c1:01:96:71:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=080369a358961f7284fbd591e927737cdb05c35d Validity Not Before: Dec 16 21:00:35 2025 GMT Not After : Dec 17 21:00:35 2025 GMT Subject: CN=345e8c5cc6c8b3930bfeac8294447b869eba749d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d8:52:0c:91:b0:6b:81:06:35:4e:34:4d:c7: aa:a7:da:94:af:39:e3:10:f8:f5:a2:44:8f:a5:eb: c4:d2:d3:e3:ac:9e:7f:28:31:47:e1:6c:40:91:cb: db:bd:61:30:15:3f:90:97:85:40:e2:12:d2:da:1c: 68:68:5f:9c:bb:24:23:3c:0a:8c:70:fa:c2:61:fa: 62:b2:61:8f:68:85:a7:5e:62:a7:1a:b1:7d:2f:b9: 86:a0:bf:a4:0b:a1:ac:6b:86:be:f3:8f:17:64:a0: f0:15:6c:de:57:81:45:85:bb:7e:1f:77:27:78:a4: 4b:90:61:eb:81:6e:d6:a7:f1:ad:04:d7:22:1d:6c: 3d:4d:ac:5e:f7:3e:fc:fb:18:f9:60:c0:16:c8:f2: 7d:6a:72:a8:56:47:1c:0e:d6:1c:c3:d1:29:93:f3: bd:42:45:e2:73:6f:b3:19:0c:35:88:ab:ff:98:6c: 86:56:b8:0d:68:9c:2d:a8:90:9c:9d:be:11:c9:f5: 0b:db:cc:c2:90:ab:71:7e:8a:f4:db:f7:27:5e:d0: b5:37:32:5f:e5:2e:ed:a0:45:8b:b1:48:76:58:08: 67:30:33:ba:a7:86:2b:5e:72:a0:09:3d:9a:50:b6: d9:9e:73:25:3e:a3:b6:03:6a:15:e6:be:25:7c:e7: 98:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5E:8C:5C:C6:C8:B3:93:0B:FE:AC:82:94:44:7B:86:9E:BA:74:9D X509v3 Authority Key Identifier: keyid:08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b0:b0:df:b7:cd:22:93:ce:e9:14:5e:eb:d7:16:62:b3:70: 1d:9c:17:04:84:6e:3d:74:01:b3:4d:03:08:f4:01:28:0d:a8: e1:86:03:7d:be:1e:66:57:5e:38:b9:ae:11:2b:b1:2a:c3:93: cf:50:45:8f:cf:64:eb:da:6e:9a:09:d8:f2:64:8d:81:08:39: 53:1b:84:ff:3c:6a:8b:52:8f:e0:cb:4d:62:2f:8c:65:71:a4: 56:13:b0:f8:e6:b9:95:33:4a:8f:2a:25:b8:0c:f5:5c:f5:30: 61:e1:89:f9:06:79:c3:f6:43:74:16:d1:b9:6a:60:cd:5a:07: ec:81:93:44:de:3e:9c:2c:5b:77:7d:46:8c:65:d5:9f:e4:66: 4b:d4:17:0a:73:48:e6:c6:b5:68:35:c7:a9:6b:d3:c7:b1:2f: d4:8c:0e:97:29:e9:9a:a0:e9:ca:f3:4f:5a:a7:6f:f9:4f:b7: a0:d8:ba:27:ba:d0:f0:32:8f:38:2a:83:fc:6d:a4:f3:68:71: e7:c9:cc:fc:db:6b:c8:9b:4b:92:1a:3c:55:89:5d:b8:81:8f: 85:f5:8e:d1:45:b2:01:29:5e:94:bf:09:88:5d:0d:3f:4d:ab: 52:16:14:ae:3b:8f:44:d5:de:97:10:47:cd:f0:ac:a4:6e:aa: b6:69:2c:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZso9wRxBOL215HrM8EBlnGlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDM2OWEzNTg5NjFmNzI4NGZiZDU5MWU5Mjc3MzdjZGIw NWMzNWQwHhcNMjUxMjE2MjEwMDM1WhcNMjUxMjE3MjEwMDM1WjAzMTEwLwYDVQQD EygzNDVlOGM1Y2M2YzhiMzkzMGJmZWFjODI5NDQ0N2I4NjllYmE3NDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NhSDJGwa4EGNU40Tceqp9qUrznj EPj1okSPpevE0tPjrJ5/KDFH4WxAkcvbvWEwFT+Ql4VA4hLS2hxoaF+cuyQjPAqM cPrCYfpismGPaIWnXmKnGrF9L7mGoL+kC6Gsa4a+848XZKDwFWzeV4FFhbt+H3cn eKRLkGHrgW7Wp/GtBNciHWw9Taxe9z78+xj5YMAWyPJ9anKoVkccDtYcw9Epk/O9 QkXic2+zGQw1iKv/mGyGVrgNaJwtqJCcnb4RyfUL28zCkKtxfor02/cnXtC1NzJf 5S7toEWLsUh2WAhnMDO6p4YrXnKgCT2aULbZnnMlPqO2A2oV5r4lfOeYVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRejFzGyLOTC/6sgpREe4aeunSdMB8GA1UdIwQY MBaAFAgDaaNYlh9yhPvVkeknc3zbBcNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FOcG8xaVdIM0tFLTlXUjZTZHpmTnNGdzEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMWFhYzMtYmNlOS00ZDdlLWE1ZmMt M2YxYjE2YzZjZDYzLzEvQ0FOcG8xaVdIM0tFLTlXUjZTZHpmTnNGdzEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8wMWFhYzMtYmNlOS00ZDdlLWE1ZmMtM2YxYjE2YzZjZDYz LzEvQ0FOcG8xaVdIM0tFLTlXUjZTZHpmTnNGdzEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrCw37fN IpPO6RRe69cWYrNwHZwXBIRuPXQBs00DCPQBKA2o4YYDfb4eZldeOLmuESuxKsOT z1BFj89k69pumgnY8mSNgQg5UxuE/zxqi1KP4MtNYi+MZXGkVhOw+Oa5lTNKjyol uAz1XPUwYeGJ+QZ5w/ZDdBbRuWpgzVoH7IGTRN4+nCxbd31GjGXVn+RmS9QXCnNI 5sa1aDXHqWvTx7Ev1IwOlynpmqDpyvNPWqdv+U+3oNi6J7rQ8DKPOCqD/G2k82hx 58nM/NtryJtLkho8VYlduIGPhfWO0UWyASlelL8JiF0NP02rUhYUrjuPRNXelxBH zfCspG6qtmksrw== -----END CERTIFICATE-----Generated at Tue Dec 16 23:15:32 2025 by rpki-client