This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json) Hash identifier: SPaUPH5qjrXGj3baK2oDLDmn0aQo7KfcXkoaB6uF8E4= Subject key identifier: C7:CF:2B:58:24:FF:9D:1B:D8:CD:08:FD:4B:88:FB:DB:A6:F7:2E:60 Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5 Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5 Certificate serial: 019B3E6CE99535D6801F52BE603B6C026ABE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 01:01:23 +0000 Manifest this update: Sun 21 Dec 2025 01:01:23 +0000 Manifest next update: Mon 22 Dec 2025 01:01:23 +0000 Files and hashes: 1: 1NnPIelPhTu2KqOrRaVheTjGDtA.roa (hash: rysz73IInmOVJuH+riwA3J47+EGtI1eXu44kPUE1b4E=) 2: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: GBRhK/m5Rhf1k2d7MKE8Ijr1NAXgHtAAcpQbxgxJFss=) 3: FSxkv144AbC5PzM8dG4BNoPhaic.asa (hash: 03r5BEM2yZSr1vAPxFAZ56oxX+2rQMHlRynV2W59QMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:e9:95:35:d6:80:1f:52:be:60:3b:6c:02:6a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5 Validity Not Before: Dec 21 01:01:23 2025 GMT Not After : Dec 22 01:01:23 2025 GMT Subject: CN=c7cf2b5824ff9d1bd8cd08fd4b88fbdba6f72e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c3:05:af:02:0c:c6:6c:58:47:78:38:19:f2: 64:f8:d9:b6:15:08:6d:e7:f1:cb:b8:b1:2e:fa:0c: af:81:d7:a2:7e:cc:2b:24:09:ad:41:ee:d5:a2:0d: 98:47:9c:88:64:db:d4:0d:f0:19:d5:6d:bb:66:71: 4a:aa:17:f0:11:32:2d:00:8d:09:83:57:37:0b:04: d9:0b:df:99:d7:55:71:61:f6:84:c6:54:26:11:3a: f9:37:82:35:2d:1e:9f:db:c0:93:e2:50:b2:7f:3b: 9b:ca:a5:15:bb:16:72:3b:15:01:93:45:ef:08:6b: 61:15:54:a1:5a:8b:6b:1c:d9:99:8d:09:ae:0d:b8: 06:ff:95:ff:01:8f:28:c5:21:7e:72:73:a9:58:9c: 5e:c6:f1:90:4a:e2:b2:03:ca:f7:d5:c4:a1:c6:00: 7b:36:4a:a3:79:2b:c4:ac:78:13:cc:47:cb:6a:13: 10:77:c6:b3:e6:0b:da:ee:8d:c4:bb:14:71:df:40: d4:52:e2:2f:5b:dd:e4:56:24:58:c2:e4:ba:53:f6: b1:05:39:20:ad:1f:37:28:f4:1f:91:8d:b5:e3:15: 34:43:3e:97:49:09:38:e2:1b:16:d4:44:22:ea:03: 2a:6e:00:bf:73:73:eb:42:23:b3:03:b3:22:61:79: 8c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CF:2B:58:24:FF:9D:1B:D8:CD:08:FD:4B:88:FB:DB:A6:F7:2E:60 X509v3 Authority Key Identifier: keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:8c:d4:a2:d6:8d:a4:0a:aa:22:e6:03:f0:03:6d:ec:5b:92: ea:e3:56:cf:d0:5c:f3:0a:24:b6:80:7c:d3:2e:0f:c6:d6:0f: 90:3e:f1:15:26:ad:72:f2:ab:53:85:16:de:87:6b:63:5e:56: 35:dd:4d:de:f3:07:96:e5:74:6e:6d:b5:d2:e6:7c:12:53:46: 8d:1e:22:99:44:85:a1:cc:10:0e:43:6c:13:13:fa:f2:75:e1: 59:a8:ba:54:fa:30:0d:2c:4e:18:9b:96:e6:93:89:db:66:99: 0e:ee:9d:f2:90:32:dc:9b:9c:19:78:d6:cf:0f:63:29:f2:8b: 73:c1:a2:0c:c8:19:31:bd:28:85:62:c8:1a:0c:98:24:62:44: 0e:ac:f8:5d:16:05:86:37:fb:3a:18:36:85:a0:54:29:bf:c2: 9c:92:75:89:6c:29:a3:b2:07:eb:32:64:8f:2e:55:2c:eb:f4: de:23:d6:48:97:6d:88:f4:4e:4c:a4:b5:5a:5e:1e:96:eb:fa: aa:3e:f9:34:41:e2:84:92:f2:9c:b6:3b:05:c7:19:97:1e:a1: 03:1d:63:2d:d0:9c:a3:bf:1f:cb:bf:86:95:36:9b:23:30:2a: fc:b7:b0:1e:c7:27:7c:36:9c:89:2b:ae:95:8e:2f:a2:fa:aa: 87:2f:4b:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bOmVNdaAH1K+YDtsAmq+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NTkwZWVmOWUxZDFhZjhiNzJlNTE4ZWM2Y2NmNTljZDdm NzUxZjUwHhcNMjUxMjIxMDEwMTIzWhcNMjUxMjIyMDEwMTIzWjAzMTEwLwYDVQQD EyhjN2NmMmI1ODI0ZmY5ZDFiZDhjZDA4ZmQ0Yjg4ZmJkYmE2ZjcyZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8MFrwIMxmxYR3g4GfJk+Nm2FQht 5/HLuLEu+gyvgdeifswrJAmtQe7Vog2YR5yIZNvUDfAZ1W27ZnFKqhfwETItAI0J g1c3CwTZC9+Z11VxYfaExlQmETr5N4I1LR6f28CT4lCyfzubyqUVuxZyOxUBk0Xv CGthFVShWotrHNmZjQmuDbgG/5X/AY8oxSF+cnOpWJxexvGQSuKyA8r31cShxgB7 NkqjeSvErHgTzEfLahMQd8az5gva7o3EuxRx30DUUuIvW93kViRYwuS6U/axBTkg rR83KPQfkY214xU0Qz6XSQk44hsW1EQi6gMqbgC/c3PrQiOzA7MiYXmMNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfPK1gk/50b2M0I/UuI+9um9y5gMB8GA1UdIwQY MBaAFAlZDu+eHRr4ty5RjsbM9ZzX91H1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83N2YyYzUtNDEyYS00ZTRkLThjYmYt ZTRkOGNmNzMzZWM5LzEvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83N2YyYzUtNDEyYS00ZTRkLThjYmYtZTRkOGNmNzMzZWM5 LzEvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArozUotaN pAqqIuYD8ANt7FuS6uNWz9Bc8woktoB80y4PxtYPkD7xFSatcvKrU4UW3odrY15W Nd1N3vMHluV0bm210uZ8ElNGjR4imUSFocwQDkNsExP68nXhWai6VPowDSxOGJuW 5pOJ22aZDu6d8pAy3JucGXjWzw9jKfKLc8GiDMgZMb0ohWLIGgyYJGJEDqz4XRYF hjf7Ohg2haBUKb/CnJJ1iWwpo7IH6zJkjy5VLOv03iPWSJdtiPROTKS1Wl4eluv6 qj75NEHihJLynLY7BccZlx6hAx1jLdCco78fy7+GlTabIzAq/LewHscnfDaciSuu lY4vovqqhy9LHA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:18:10 2025 by rpki-client