This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json) Hash identifier: rdWY0bev8GBNYBuYzsW51qCuWML1E6vEviLa2TPRnX0= Subject key identifier: 71:4A:FF:2C:D1:46:69:06:8D:D8:F1:6D:EB:69:F3:F7:7F:C2:BE:86 Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Certificate serial: 019B5260F9E0AF5DD6F9D3E2FF5A6463039E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft Manifest number: 1482 Signing time: Wed 24 Dec 2025 22:00:45 +0000 Manifest this update: Wed 24 Dec 2025 22:00:45 +0000 Manifest next update: Thu 25 Dec 2025 22:00:45 +0000 Files and hashes: 1: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (hash: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=) 2: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: NJVKAX7np9SqpMe1h6Wf8bBI3IMtHxblXSptr40UeG8=) 3: HtV3FEKPYRYDY8G-1hRWsnLwlC0.roa (hash: Fe1/XdGKNSuTPZCZpZdJHVC5upZbn8MH26YO1cQpOgY=) 4: MK8eqrMP3j5ymuZ4qk999b-iSkQ.roa (hash: nNhLpGCxsknDRkcaORpA6GPvezr0Frk5rCO7fQ7CtRw=) 5: R8GgH67MzGYrmtUBlZ44LYdM_44.roa (hash: eNGVD5qiBokWARwlEPYWPW2sMCzs8hQrScOks2RkSK0=) 6: XUbpg-tBDuOM-uZKqtdsmxOB38M.roa (hash: tw+hhnN/+elfL/3HxAjHoQN99yUqRR6yBg96qTz78+M=) 7: bKr8UWW3-RF_D0B7S4TpF3ssvtc.roa (hash: kYFW2by3SyFaWc3VlVXDw0SIgIp3P05RN26zndjXy/k=) 8: mtdclY8O-xs5gcnHoOhafDFUgKI.roa (hash: rbz7XQGehDM4qlCCC493lW8PFTdkUVLafneGpzVymQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:60:f9:e0:af:5d:d6:f9:d3:e2:ff:5a:64:63:03:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Validity Not Before: Dec 24 22:00:45 2025 GMT Not After : Dec 25 22:00:45 2025 GMT Subject: CN=714aff2cd14669068dd8f16deb69f3f77fc2be86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5b:5b:e8:29:0a:68:90:96:ce:94:ed:ff:12: 78:1f:22:fd:57:2f:3c:8e:b6:57:2b:be:da:cc:b7: 57:9b:3c:83:5d:bf:02:b8:08:3a:88:af:e3:a8:b7: 59:c2:d5:cc:95:c1:ec:5e:79:2f:7a:78:01:90:cc: 35:38:0f:90:3f:29:7d:71:39:3a:54:66:f3:30:ba: da:c2:ba:27:eb:87:92:95:c0:ab:f6:29:bf:98:42: 6c:bd:94:6e:5e:6f:f3:78:52:d0:de:ec:03:1e:af: db:de:77:ea:c7:ff:05:30:21:56:fa:7c:83:8f:57: cb:43:e8:3a:46:88:e9:5f:95:ef:72:4a:f1:35:4a: d0:54:0f:cd:ab:b2:9f:d8:7b:07:b6:b8:70:79:67: 6a:dc:76:3d:39:26:92:ee:20:09:15:f2:27:79:d4: 68:c0:db:8c:74:0e:d1:22:f7:8b:ff:84:1a:c0:72: 99:72:d9:c2:e5:19:c4:7d:c9:7a:8d:b1:bb:e0:69: 9e:29:51:78:1e:ce:71:3e:80:5b:7e:1f:94:74:4c: 54:c2:36:9c:df:6d:fb:cf:42:66:c9:1d:5e:67:19: cd:47:e7:7e:70:1d:b8:2b:ae:b6:7d:6e:23:4f:a1: 78:3e:73:57:b9:b9:cd:6e:ab:d9:f6:30:f4:1e:fd: 77:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4A:FF:2C:D1:46:69:06:8D:D8:F1:6D:EB:69:F3:F7:7F:C2:BE:86 X509v3 Authority Key Identifier: keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:0c:10:82:45:f4:51:8c:ae:b4:27:d0:fe:3c:a2:34:77:cf: ba:d8:94:e6:f9:c3:e5:04:58:1c:cc:9d:09:a6:d2:34:a6:cb: ae:b4:a2:5a:28:73:2d:e7:05:eb:e6:25:9c:f1:dd:80:86:50: a3:89:f9:70:35:46:3d:b3:ad:2f:5a:c6:66:12:f5:c2:90:69: af:4a:08:53:6c:82:76:38:96:db:94:f8:dd:06:90:53:a4:63: d1:e7:5e:2c:78:c4:1e:40:28:c8:b9:ac:32:8d:36:71:54:fd: a9:fc:2f:fd:52:15:0f:16:2f:7d:ff:57:ab:53:0c:18:82:da: 49:c7:c0:b6:ae:b6:eb:03:42:9b:8f:1a:ba:24:99:0d:6f:b8: 34:56:39:73:7b:e2:1d:82:ef:15:1f:ec:c4:50:36:4e:69:c7: 4b:1c:f0:fe:eb:57:a5:17:95:09:ef:e0:1c:ed:bb:5a:3b:a0: a0:25:b5:ad:e6:a7:01:d1:1f:a7:dc:05:08:72:ba:b9:0b:32: 5a:59:a9:d2:d9:f6:22:ab:9e:d7:a4:70:cb:9b:57:f1:f3:d4: 86:50:2d:48:17:67:fa:d2:81:97:d2:df:f2:29:61:75:2d:03: b5:52:a3:71:c9:5a:c5:e5:3b:5e:16:87:1b:94:51:16:6e:21: 53:59:7f:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYPngr13W+dPi/1pkYwOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZjYxNzk4ZGQxODk2NWMwMjdhZmE3ZjkzYWUwMzBmZjVl MWQ3NmUwHhcNMjUxMjI0MjIwMDQ1WhcNMjUxMjI1MjIwMDQ1WjAzMTEwLwYDVQQD Eyg3MTRhZmYyY2QxNDY2OTA2OGRkOGYxNmRlYjY5ZjNmNzdmYzJiZTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVtb6CkKaJCWzpTt/xJ4HyL9Vy88 jrZXK77azLdXmzyDXb8CuAg6iK/jqLdZwtXMlcHsXnkvengBkMw1OA+QPyl9cTk6 VGbzMLrawron64eSlcCr9im/mEJsvZRuXm/zeFLQ3uwDHq/b3nfqx/8FMCFW+nyD j1fLQ+g6RojpX5XvckrxNUrQVA/Nq7Kf2HsHtrhweWdq3HY9OSaS7iAJFfInedRo wNuMdA7RIveL/4QawHKZctnC5RnEfcl6jbG74GmeKVF4Hs5xPoBbfh+UdExUwjac 3237z0JmyR1eZxnNR+d+cB24K662fW4jT6F4PnNXubnNbqvZ9jD0Hv135wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFK/yzRRmkGjdjxbetp8/d/wr6GMB8GA1UdIwQY MBaAFAr2F5jdGJZcAnr6f5OuAw/14dduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEt ZDZlMWUzNDdmOWM3LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEtZDZlMWUzNDdmOWM3 LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgwQgkX0 UYyutCfQ/jyiNHfPutiU5vnD5QRYHMydCabSNKbLrrSiWihzLecF6+YlnPHdgIZQ o4n5cDVGPbOtL1rGZhL1wpBpr0oIU2yCdjiW25T43QaQU6Rj0edeLHjEHkAoyLms Mo02cVT9qfwv/VIVDxYvff9Xq1MMGILaScfAtq626wNCm48auiSZDW+4NFY5c3vi HYLvFR/sxFA2TmnHSxzw/utXpReVCe/gHO27WjugoCW1reanAdEfp9wFCHK6uQsy Wlmp0tn2Ique16Rwy5tX8fPUhlAtSBdn+tKBl9Lf8ilhdS0DtVKjcclaxeU7XhaH G5RRFm4hU1l/Fw== -----END CERTIFICATE-----Generated at Thu Dec 25 05:15:25 2025 by rpki-client