This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json) Hash identifier: PDSkCRPjZCVq3rIuk/w7R8x9DJfpQUOqaFAdqu+kJHI= Subject key identifier: A7:FF:D8:0B:1F:41:F8:4E:F1:4D:74:7D:2D:70:57:9B:76:73:23:EA Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5 Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5 Certificate serial: 019B59764BF5B727B0FC322512A7047C6FB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft Manifest number: 179B Signing time: Fri 26 Dec 2025 07:01:23 +0000 Manifest this update: Fri 26 Dec 2025 07:01:23 +0000 Manifest next update: Sat 27 Dec 2025 07:01:23 +0000 Files and hashes: 1: 1NnPIelPhTu2KqOrRaVheTjGDtA.roa (hash: rysz73IInmOVJuH+riwA3J47+EGtI1eXu44kPUE1b4E=) 2: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: wdZE0m50MgYv/vk7oAp4kmfQim3QzvZja5zPzw5JccU=) 3: FSxkv144AbC5PzM8dG4BNoPhaic.asa (hash: 03r5BEM2yZSr1vAPxFAZ56oxX+2rQMHlRynV2W59QMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:4b:f5:b7:27:b0:fc:32:25:12:a7:04:7c:6f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5 Validity Not Before: Dec 26 07:01:23 2025 GMT Not After : Dec 27 07:01:23 2025 GMT Subject: CN=a7ffd80b1f41f84ef14d747d2d70579b767323ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:44:4d:82:a5:20:bc:cf:84:4f:33:be:07:5c: 6b:fb:f0:f6:e7:30:af:39:b9:2b:6e:2d:de:f6:5d: fe:6b:89:d0:6e:50:2e:22:91:28:09:56:cf:fb:69: 69:58:8f:b6:da:63:c6:93:ef:1d:c0:1a:6b:ab:12: 4b:fd:07:8c:70:d5:73:fb:fe:ed:32:c4:14:0a:f3: f4:cc:89:68:96:ef:b8:3e:70:2e:ad:33:4a:82:17: 9a:05:98:53:b7:f8:06:05:ce:a5:e8:c6:e9:d1:aa: f4:67:72:5e:42:f1:65:78:a3:26:20:de:32:a2:7f: 2a:59:ad:a3:46:45:0f:3f:ad:44:3a:11:d4:fb:b1: af:03:91:30:e9:95:8e:7d:19:29:7c:2d:76:0e:d4: 8f:bd:ce:a1:0c:37:07:f8:fd:e7:47:1c:c9:33:ee: 20:76:72:57:ac:3c:ae:c1:11:81:2f:3e:f9:30:de: d9:23:e0:73:55:1a:b2:e6:d1:2b:f4:9f:c5:f0:53: 07:77:02:30:23:41:6a:40:af:cb:c5:38:7f:52:99: ee:f9:87:dc:e7:2d:e2:0f:0c:0a:58:93:15:49:3b: 1a:c6:45:78:60:d9:fd:6f:5b:1b:eb:1e:81:a4:d1: b9:24:4f:9d:6f:e5:28:b4:8e:21:05:da:1f:40:06: 3f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FF:D8:0B:1F:41:F8:4E:F1:4D:74:7D:2D:70:57:9B:76:73:23:EA X509v3 Authority Key Identifier: keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:15:b6:86:53:ec:b2:dc:da:41:64:84:5d:41:cd:7b:38:d1: 5a:1a:6f:a0:c1:e2:79:7f:5f:70:79:ab:3c:ab:88:6b:70:58: f1:8a:a9:73:3a:13:56:c3:48:2c:b6:84:c7:1e:4d:41:ed:3a: 1f:fc:9b:45:76:41:a3:78:c9:6c:a2:4f:80:5f:d0:b7:a4:53: b1:4a:72:4a:cc:93:fa:4b:f6:19:bc:8d:52:62:44:2d:e7:0d: be:93:5d:13:65:6a:3f:42:b8:c7:8e:14:75:1c:fb:3c:6c:80: 57:7a:e1:70:d6:23:9f:95:82:d8:e6:d6:bd:1a:da:a1:74:5d: 10:81:42:37:e9:f9:1b:9d:b3:a5:0b:50:82:74:1b:76:bc:d0: 58:e7:83:45:64:c0:57:cb:50:97:47:a1:0b:01:de:d7:8b:74: a7:b0:aa:28:34:ff:06:3d:b0:55:af:bb:27:30:90:d3:52:df: 5a:46:57:f3:8e:b2:b3:99:4a:87:d3:f1:47:0a:96:47:58:cf: 60:5f:28:0c:b9:50:c6:7a:8c:26:03:12:45:dd:a4:bf:60:f2: 48:66:06:97:4b:14:b8:4e:40:a5:78:f9:d8:54:dd:23:c6:be: 19:85:92:c0:37:b3:95:7f:ed:0c:7d:95:04:d9:b4:f1:59:19: 84:b9:54:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdkv1tyew/DIlEqcEfG+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NTkwZWVmOWUxZDFhZjhiNzJlNTE4ZWM2Y2NmNTljZDdm NzUxZjUwHhcNMjUxMjI2MDcwMTIzWhcNMjUxMjI3MDcwMTIzWjAzMTEwLwYDVQQD EyhhN2ZmZDgwYjFmNDFmODRlZjE0ZDc0N2QyZDcwNTc5Yjc2NzMyM2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2URNgqUgvM+ETzO+B1xr+/D25zCv Obkrbi3e9l3+a4nQblAuIpEoCVbP+2lpWI+22mPGk+8dwBprqxJL/QeMcNVz+/7t MsQUCvP0zIlolu+4PnAurTNKgheaBZhTt/gGBc6l6Mbp0ar0Z3JeQvFleKMmIN4y on8qWa2jRkUPP61EOhHU+7GvA5Ew6ZWOfRkpfC12DtSPvc6hDDcH+P3nRxzJM+4g dnJXrDyuwRGBLz75MN7ZI+BzVRqy5tEr9J/F8FMHdwIwI0FqQK/LxTh/Upnu+Yfc 5y3iDwwKWJMVSTsaxkV4YNn9b1sb6x6BpNG5JE+db+UotI4hBdofQAY/mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKf/2AsfQfhO8U10fS1wV5t2cyPqMB8GA1UdIwQY MBaAFAlZDu+eHRr4ty5RjsbM9ZzX91H1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83N2YyYzUtNDEyYS00ZTRkLThjYmYt ZTRkOGNmNzMzZWM5LzEvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83N2YyYzUtNDEyYS00ZTRkLThjYmYtZTRkOGNmNzMzZWM5 LzEvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhW2hlPs stzaQWSEXUHNezjRWhpvoMHieX9fcHmrPKuIa3BY8YqpczoTVsNILLaExx5NQe06 H/ybRXZBo3jJbKJPgF/Qt6RTsUpySsyT+kv2GbyNUmJELecNvpNdE2VqP0K4x44U dRz7PGyAV3rhcNYjn5WC2ObWvRraoXRdEIFCN+n5G52zpQtQgnQbdrzQWOeDRWTA V8tQl0ehCwHe14t0p7CqKDT/Bj2wVa+7JzCQ01LfWkZX846ys5lKh9PxRwqWR1jP YF8oDLlQxnqMJgMSRd2kv2DySGYGl0sUuE5ApXj52FTdI8a+GYWSwDezlX/tDH2V BNm08VkZhLlU6g== -----END CERTIFICATE-----Generated at Fri Dec 26 09:23:35 2025 by rpki-client