This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json) Hash identifier: 8q6oziI9oIAW8Vv9P0HxxEa4Mrft54nXhy4qTULrO/I= Subject key identifier: 02:2D:CB:24:9E:86:DF:8A:9A:D7:16:6E:39:E2:5C:70:8D:88:D1:D8 Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Certificate serial: 019B3B350FB4237EE83F3E84EE734DB6C9E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft Manifest number: 1476 Signing time: Sat 20 Dec 2025 10:01:31 +0000 Manifest this update: Sat 20 Dec 2025 10:01:31 +0000 Manifest next update: Sun 21 Dec 2025 10:01:31 +0000 Files and hashes: 1: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (hash: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=) 2: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: 1C5/w+IWFJrkmcIvEHtqlzu48EM4gaPe5uysrcFqrG8=) 3: HtV3FEKPYRYDY8G-1hRWsnLwlC0.roa (hash: Fe1/XdGKNSuTPZCZpZdJHVC5upZbn8MH26YO1cQpOgY=) 4: MK8eqrMP3j5ymuZ4qk999b-iSkQ.roa (hash: nNhLpGCxsknDRkcaORpA6GPvezr0Frk5rCO7fQ7CtRw=) 5: R8GgH67MzGYrmtUBlZ44LYdM_44.roa (hash: eNGVD5qiBokWARwlEPYWPW2sMCzs8hQrScOks2RkSK0=) 6: XUbpg-tBDuOM-uZKqtdsmxOB38M.roa (hash: tw+hhnN/+elfL/3HxAjHoQN99yUqRR6yBg96qTz78+M=) 7: bKr8UWW3-RF_D0B7S4TpF3ssvtc.roa (hash: kYFW2by3SyFaWc3VlVXDw0SIgIp3P05RN26zndjXy/k=) 8: mtdclY8O-xs5gcnHoOhafDFUgKI.roa (hash: rbz7XQGehDM4qlCCC493lW8PFTdkUVLafneGpzVymQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:0f:b4:23:7e:e8:3f:3e:84:ee:73:4d:b6:c9:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Validity Not Before: Dec 20 10:01:31 2025 GMT Not After : Dec 21 10:01:31 2025 GMT Subject: CN=022dcb249e86df8a9ad7166e39e25c708d88d1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f3:e4:15:e4:93:c8:db:c1:f5:3c:45:4f:f2: c8:ed:17:8a:cc:a7:1e:72:6d:3a:77:bb:53:90:0c: 21:2f:62:15:98:ac:a9:07:56:00:1f:24:0f:e4:05: 0e:f1:81:d9:1f:a1:27:a0:c5:07:5e:69:98:19:c0: 2a:9a:17:8f:3a:99:3b:60:de:7e:6b:34:b4:c4:81: 03:d7:65:e3:e8:85:b6:2c:fd:03:51:bb:43:ca:78: f0:b6:72:b9:63:b2:cd:89:cf:41:53:4a:31:5c:4d: 9d:c4:14:90:ab:fc:67:53:85:39:63:20:d3:3f:ec: fc:1d:01:3b:7e:7d:2b:fe:a2:30:8c:4a:b1:b8:3d: f7:4c:85:23:a9:ae:33:50:c0:b2:10:e3:05:7f:48: 2d:7e:85:86:0f:04:06:ac:38:6d:47:c8:44:6d:cd: 5a:ad:01:99:17:96:04:68:ca:2c:f4:5a:f8:77:9f: e1:0a:ff:00:94:78:34:37:8a:0c:b3:6d:b1:72:f7: 59:5a:ac:2e:4f:e4:0c:79:74:11:33:f6:66:c1:0e: 6b:cf:3a:11:49:32:6e:f8:b5:41:ee:73:12:a7:c6: 23:26:31:e0:1e:0c:9b:49:a5:59:c0:87:66:c8:3d: 14:52:1b:7d:29:5b:d4:c8:a7:53:7f:f9:14:02:3d: 75:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2D:CB:24:9E:86:DF:8A:9A:D7:16:6E:39:E2:5C:70:8D:88:D1:D8 X509v3 Authority Key Identifier: keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d6:5a:2e:7f:40:26:1d:64:be:de:0c:88:00:91:2a:47:0b: 3e:10:52:97:30:5a:be:af:3f:81:cd:4e:f5:78:6b:01:b0:b6: aa:8a:a6:2d:8e:7c:e7:54:30:fc:b8:8c:8a:d2:f8:65:32:04: 7e:b7:c7:28:1c:c1:4e:f5:8d:9e:85:fe:c9:41:d6:50:21:3d: 32:2c:e1:4d:e3:b6:04:02:4a:ef:7d:52:ba:79:2a:0b:85:b9: 90:7d:2d:99:8b:a1:f0:a4:c4:f8:4c:6b:7d:79:30:90:71:af: 5d:b7:a8:1b:5a:32:8d:60:07:fd:7e:01:bc:1b:74:d4:f4:6e: 30:b4:ef:b4:6a:62:d4:f9:ee:73:12:2d:f3:8b:2c:04:70:0f: 4b:7f:e0:51:ef:cd:ec:e0:a3:b9:94:59:4c:81:32:48:2c:b6: 0c:68:b5:1f:08:9a:88:a5:0e:b2:91:1f:a1:c6:28:11:15:2f: 10:2f:a9:4d:72:3f:f8:04:69:25:9a:6b:ba:2d:e2:b8:f6:92: 82:86:b9:92:18:0a:99:63:14:23:a7:9a:a7:e4:91:6c:24:54: ff:7f:3e:4a:b9:7e:45:72:2b:c8:cd:7f:66:e6:c0:e5:0c:93: 9c:eb:d7:02:6b:f3:33:5d:e9:c1:02:63:e1:ff:6a:ea:0e:fa: e2:10:d3:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NQ+0I37oPz6E7nNNtsnnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZjYxNzk4ZGQxODk2NWMwMjdhZmE3ZjkzYWUwMzBmZjVl MWQ3NmUwHhcNMjUxMjIwMTAwMTMxWhcNMjUxMjIxMTAwMTMxWjAzMTEwLwYDVQQD EygwMjJkY2IyNDllODZkZjhhOWFkNzE2NmUzOWUyNWM3MDhkODhkMWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfPkFeSTyNvB9TxFT/LI7ReKzKce cm06d7tTkAwhL2IVmKypB1YAHyQP5AUO8YHZH6EnoMUHXmmYGcAqmhePOpk7YN5+ azS0xIED12Xj6IW2LP0DUbtDynjwtnK5Y7LNic9BU0oxXE2dxBSQq/xnU4U5YyDT P+z8HQE7fn0r/qIwjEqxuD33TIUjqa4zUMCyEOMFf0gtfoWGDwQGrDhtR8hEbc1a rQGZF5YEaMos9Fr4d5/hCv8AlHg0N4oMs22xcvdZWqwuT+QMeXQRM/ZmwQ5rzzoR STJu+LVB7nMSp8YjJjHgHgybSaVZwIdmyD0UUht9KVvUyKdTf/kUAj11FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAItyySeht+KmtcWbjniXHCNiNHYMB8GA1UdIwQY MBaAFAr2F5jdGJZcAnr6f5OuAw/14dduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEt ZDZlMWUzNDdmOWM3LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEtZDZlMWUzNDdmOWM3 LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdZaLn9A Jh1kvt4MiACRKkcLPhBSlzBavq8/gc1O9XhrAbC2qoqmLY5851Qw/LiMitL4ZTIE frfHKBzBTvWNnoX+yUHWUCE9MizhTeO2BAJK731SunkqC4W5kH0tmYuh8KTE+Exr fXkwkHGvXbeoG1oyjWAH/X4BvBt01PRuMLTvtGpi1PnucxIt84ssBHAPS3/gUe/N 7OCjuZRZTIEySCy2DGi1HwiaiKUOspEfocYoERUvEC+pTXI/+ARpJZprui3iuPaS goa5khgKmWMUI6eap+SRbCRU/38+Srl+RXIryM1/ZubA5QyTnOvXAmvzM13pwQJj 4f9q6g764hDT4g== -----END CERTIFICATE-----Generated at Sat Dec 20 11:42:26 2025 by rpki-client