This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json) Hash identifier: XKbSdhnkS/uYxtgyfi3R28AgUgbp0xPxGVADp/Tkaj8= Subject key identifier: AB:7D:D9:6A:A0:F8:9D:D3:2A:DA:9E:50:97:31:84:2A:7D:00:96:51 Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5 Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5 Certificate serial: 019B4FCE9402728C0442BB369A6107658934 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft Manifest number: 1796 Signing time: Wed 24 Dec 2025 10:01:36 +0000 Manifest this update: Wed 24 Dec 2025 10:01:36 +0000 Manifest next update: Thu 25 Dec 2025 10:01:36 +0000 Files and hashes: 1: 1NnPIelPhTu2KqOrRaVheTjGDtA.roa (hash: rysz73IInmOVJuH+riwA3J47+EGtI1eXu44kPUE1b4E=) 2: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: ec+9DWHHFAfP7a0uYhZeO0enhyyGZfTjkuax39SZ2iI=) 3: FSxkv144AbC5PzM8dG4BNoPhaic.asa (hash: 03r5BEM2yZSr1vAPxFAZ56oxX+2rQMHlRynV2W59QMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:94:02:72:8c:04:42:bb:36:9a:61:07:65:89:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5 Validity Not Before: Dec 24 10:01:36 2025 GMT Not After : Dec 25 10:01:36 2025 GMT Subject: CN=ab7dd96aa0f89dd32ada9e509731842a7d009651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:22:27:62:bf:87:e0:4c:82:d8:d3:bd:d5:7c: 8c:19:31:b2:74:25:36:99:33:f6:f3:c5:af:43:10: 9d:bd:c3:4e:0b:5e:ec:41:51:68:da:c6:d5:b4:51: 83:69:f5:37:30:45:15:22:47:30:14:b4:7f:46:5d: 0d:7e:9d:f1:d0:fe:73:ac:18:c0:68:28:b1:38:c7: 96:74:29:89:63:2b:82:fb:35:af:97:55:4a:6e:69: 05:31:2a:c0:6a:67:d0:3e:29:f0:15:ac:7a:d9:b4: 59:4f:5f:44:bc:56:fa:2d:19:cb:3d:51:49:8b:29: 19:b4:99:3b:9d:8d:42:d2:06:64:c9:69:04:cc:cb: be:0d:5e:2c:8b:32:05:80:0e:41:a3:e2:52:55:a2: 8a:5d:ac:a2:44:ab:a2:1d:0a:2e:ed:ba:f6:ad:34: 28:fc:0e:e6:ab:8a:2d:83:2c:47:79:91:32:db:ce: a4:dd:64:f3:bb:4c:00:f4:5c:d9:27:37:1c:93:b3: 18:28:08:f0:14:56:2d:20:07:4d:f1:09:c0:0c:5b: 81:dd:b7:7c:ec:ec:a1:f9:1b:cc:f1:08:77:b6:32: 3f:a1:ee:67:5d:04:24:c6:04:11:a5:f3:4d:a3:c4: a4:32:a3:75:1c:ae:a9:3d:61:0a:54:93:53:f2:2d: 6f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7D:D9:6A:A0:F8:9D:D3:2A:DA:9E:50:97:31:84:2A:7D:00:96:51 X509v3 Authority Key Identifier: keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:06:b7:2e:ef:b5:86:98:4f:c7:f2:9f:9c:b5:43:8e:26:6a: 65:c9:e8:6a:ed:7a:f7:26:5e:70:49:ac:36:d2:dc:c1:a1:65: 02:dd:f6:77:a5:09:cd:c7:9b:52:53:39:09:d1:b7:0e:86:eb: 8e:4d:40:10:ac:f1:d0:ab:85:2b:99:8e:5f:64:eb:28:16:79: 3a:5d:44:e6:11:4b:54:1c:b3:49:f4:47:f3:0a:c2:82:29:62: ae:a5:b4:2a:b8:8d:e4:4e:84:bb:eb:06:48:ca:0e:fe:d6:d1: 67:78:30:c0:45:3f:8d:e0:5a:cb:d2:22:15:28:d6:49:36:48: 4e:db:17:69:01:f8:c4:11:f2:45:ba:85:ef:b4:24:3c:b6:ea: b5:d8:f2:d1:45:25:c1:65:b5:8f:ce:2e:52:cb:81:1d:af:0e: f8:bb:b2:f9:2e:15:35:7c:7e:5b:ab:51:5b:7f:49:7c:12:41: 7d:c3:a9:d7:ce:f2:5d:63:bf:65:b2:45:5f:a8:c7:1d:a0:8d: b6:de:93:92:ad:f6:e2:76:4a:94:8c:2d:cc:65:af:56:31:c2: 17:8a:42:47:b8:73:2e:7a:db:98:78:e2:a1:a0:0c:29:59:92: 88:f9:c6:b4:b4:2f:e7:25:3e:ae:13:b1:0d:4d:29:37:a3:5d: 34:47:27:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzpQCcowEQrs2mmEHZYk0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NTkwZWVmOWUxZDFhZjhiNzJlNTE4ZWM2Y2NmNTljZDdm NzUxZjUwHhcNMjUxMjI0MTAwMTM2WhcNMjUxMjI1MTAwMTM2WjAzMTEwLwYDVQQD EyhhYjdkZDk2YWEwZjg5ZGQzMmFkYTllNTA5NzMxODQyYTdkMDA5NjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiInYr+H4EyC2NO91XyMGTGydCU2 mTP288WvQxCdvcNOC17sQVFo2sbVtFGDafU3MEUVIkcwFLR/Rl0Nfp3x0P5zrBjA aCixOMeWdCmJYyuC+zWvl1VKbmkFMSrAamfQPinwFax62bRZT19EvFb6LRnLPVFJ iykZtJk7nY1C0gZkyWkEzMu+DV4sizIFgA5Bo+JSVaKKXayiRKuiHQou7br2rTQo /A7mq4otgyxHeZEy286k3WTzu0wA9FzZJzcck7MYKAjwFFYtIAdN8QnADFuB3bd8 7Oyh+RvM8Qh3tjI/oe5nXQQkxgQRpfNNo8SkMqN1HK6pPWEKVJNT8i1vHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKt92Wqg+J3TKtqeUJcxhCp9AJZRMB8GA1UdIwQY MBaAFAlZDu+eHRr4ty5RjsbM9ZzX91H1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83N2YyYzUtNDEyYS00ZTRkLThjYmYt ZTRkOGNmNzMzZWM5LzEvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83N2YyYzUtNDEyYS00ZTRkLThjYmYtZTRkOGNmNzMzZWM5 LzEvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQa3Lu+1 hphPx/KfnLVDjiZqZcnoau169yZecEmsNtLcwaFlAt32d6UJzcebUlM5CdG3Dobr jk1AEKzx0KuFK5mOX2TrKBZ5Ol1E5hFLVByzSfRH8wrCgilirqW0KriN5E6Eu+sG SMoO/tbRZ3gwwEU/jeBay9IiFSjWSTZITtsXaQH4xBHyRbqF77QkPLbqtdjy0UUl wWW1j84uUsuBHa8O+Luy+S4VNXx+W6tRW39JfBJBfcOp187yXWO/ZbJFX6jHHaCN tt6Tkq324nZKlIwtzGWvVjHCF4pCR7hzLnrbmHjioaAMKVmSiPnGtLQv5yU+rhOx DU0pN6NdNEcngA== -----END CERTIFICATE-----Generated at Wed Dec 24 18:05:30 2025 by rpki-client