This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft File: cV2dGCxjrtg5f743LjYA9D2-62o.mft (raw, json) Hash identifier: lsUuy57agRgqfljh96RWfimZoxhEeaI+JGVYcb18MLs= Subject key identifier: 84:46:3D:4A:02:F9:3F:B7:7E:3B:A3:E6:85:6A:02:9B:F0:3A:8A:C5 Authority key identifier: 71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A Certificate issuer: /CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a Certificate serial: 019B4438681B9472EF176DB651BA775C115C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft Manifest number: 171D Signing time: Mon 22 Dec 2025 04:01:45 +0000 Manifest this update: Mon 22 Dec 2025 04:01:45 +0000 Manifest next update: Tue 23 Dec 2025 04:01:45 +0000 Files and hashes: 1: cV2dGCxjrtg5f743LjYA9D2-62o.crl (hash: Sg3h08P39fyI4P7BmrgBkccyetFz3COjNjldFHzlAKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:68:1b:94:72:ef:17:6d:b6:51:ba:77:5c:11:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a Validity Not Before: Dec 22 04:01:45 2025 GMT Not After : Dec 23 04:01:45 2025 GMT Subject: CN=84463d4a02f93fb77e3ba3e6856a029bf03a8ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2c:92:75:dd:48:0d:02:83:dd:3e:db:2e:5a: 42:c9:9a:f0:3b:cf:d6:26:76:fb:d3:74:5b:80:53: 9e:ce:c2:3d:17:c5:87:cf:ba:b0:d4:a1:a0:00:46: cd:c4:54:cd:2b:6d:7c:9d:83:74:b2:a9:2d:4c:2f: 42:23:a4:cb:dd:75:a0:f9:99:60:fb:4c:21:1b:2d: 9d:fa:9b:df:b8:70:fb:3d:66:ba:67:9c:4c:6d:e0: 60:59:92:21:c0:40:ce:48:e2:cb:29:bb:80:0c:14: 25:94:b9:79:c8:a5:04:ab:e7:7b:f0:f2:64:79:8e: fa:9c:19:d0:54:06:bb:c8:47:60:fd:53:55:29:6c: 45:bd:28:33:a5:fc:f2:a5:4f:c5:99:17:9c:ec:f1: a2:9f:7e:ce:10:15:14:00:e0:e6:ec:82:b3:d6:26: 26:92:0b:13:74:1a:44:c7:f3:c4:91:b1:99:16:72: f8:9e:1b:0a:60:44:8e:33:cf:1a:40:ca:42:42:d2: ee:a2:4e:5f:8e:50:d9:38:25:e4:ce:93:b8:ba:ba: cd:55:ef:1b:b8:7b:93:21:82:06:b7:a4:e6:a9:6c: 62:f5:68:62:c9:c5:0c:22:54:48:2a:ca:ed:a6:0d: 9f:6a:6a:9f:07:04:33:0e:a6:ab:4a:89:1f:58:de: 70:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:46:3D:4A:02:F9:3F:B7:7E:3B:A3:E6:85:6A:02:9B:F0:3A:8A:C5 X509v3 Authority Key Identifier: keyid:71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:e4:ea:b3:09:88:76:79:5d:5c:23:20:41:38:3c:41:7d:8c: 9a:d5:9b:9c:c6:b9:9a:3c:dd:c1:73:b5:d6:6b:24:69:35:81: e5:aa:6a:72:a5:58:84:9f:cd:8c:73:d4:7b:3f:e8:7e:72:75: 39:9c:36:a6:75:00:9f:17:fe:e2:23:a4:a7:77:bc:6f:7b:20: eb:9b:ab:47:d8:80:40:d4:e4:c4:9c:7e:ad:df:49:19:64:19: ed:dc:71:a6:3c:ae:0f:dd:3a:d7:fe:70:d5:3e:d9:56:3a:49: 7e:0d:35:8e:c8:4f:d9:04:71:45:18:3a:3f:21:8a:18:38:e3: 0b:0b:70:26:3f:37:ab:6e:7f:95:33:82:d2:2b:0b:8b:71:83: 34:a5:86:67:04:04:53:ce:84:cc:52:72:31:9f:76:2e:58:3b: 19:80:a0:c9:ab:22:73:f8:d3:5c:da:34:28:3a:08:49:69:a8: 3e:dd:c7:bc:1a:72:27:ae:a7:6d:69:fa:7e:09:0d:2e:1f:c1: 18:b7:65:7e:46:85:6d:f1:3c:b3:63:9d:b3:c8:1c:6c:25:d6: 64:04:04:9e:44:a9:18:b5:c8:e2:7b:4d:29:49:89:98:6e:c6: c6:ca:3c:c4:47:69:2a:8d:e0:3e:88:29:d9:15:ae:29:8e:f5: ea:65:9f:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOGgblHLvF222Ubp3XBFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNWQ5ZDE4MmM2M2FlZDgzOTdmYmUzNzJlMzYwMGY0M2Ri ZWViNmEwHhcNMjUxMjIyMDQwMTQ1WhcNMjUxMjIzMDQwMTQ1WjAzMTEwLwYDVQQD Eyg4NDQ2M2Q0YTAyZjkzZmI3N2UzYmEzZTY4NTZhMDI5YmYwM2E4YWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSySdd1IDQKD3T7bLlpCyZrwO8/W Jnb703RbgFOezsI9F8WHz7qw1KGgAEbNxFTNK218nYN0sqktTC9CI6TL3XWg+Zlg +0whGy2d+pvfuHD7PWa6Z5xMbeBgWZIhwEDOSOLLKbuADBQllLl5yKUEq+d78PJk eY76nBnQVAa7yEdg/VNVKWxFvSgzpfzypU/FmRec7PGin37OEBUUAODm7IKz1iYm kgsTdBpEx/PEkbGZFnL4nhsKYESOM88aQMpCQtLuok5fjlDZOCXkzpO4urrNVe8b uHuTIYIGt6TmqWxi9WhiycUMIlRIKsrtpg2famqfBwQzDqarSokfWN5wYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRGPUoC+T+3fjuj5oVqApvwOorFMB8GA1UdIwQY MBaAFHFdnRgsY67YOX++Ny42APQ9vutqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1YyZEdDeGpydGc1Zjc0M0xqWUE5RDItNjJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi80YmJhMWEtZWQwOC00ZmQ2LTlmYjgt ZTQzM2NmYzcyNDc3LzEvY1YyZEdDeGpydGc1Zjc0M0xqWUE5RDItNjJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi80YmJhMWEtZWQwOC00ZmQ2LTlmYjgtZTQzM2NmYzcyNDc3 LzEvY1YyZEdDeGpydGc1Zjc0M0xqWUE5RDItNjJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROTqswmI dnldXCMgQTg8QX2MmtWbnMa5mjzdwXO11mskaTWB5apqcqVYhJ/NjHPUez/ofnJ1 OZw2pnUAnxf+4iOkp3e8b3sg65urR9iAQNTkxJx+rd9JGWQZ7dxxpjyuD9061/5w 1T7ZVjpJfg01jshP2QRxRRg6PyGKGDjjCwtwJj83q25/lTOC0isLi3GDNKWGZwQE U86EzFJyMZ92Llg7GYCgyasic/jTXNo0KDoISWmoPt3HvBpyJ66nbWn6fgkNLh/B GLdlfkaFbfE8s2Ods8gcbCXWZAQEnkSpGLXI4ntNKUmJmG7Gxso8xEdpKo3gPogp 2RWuKY716mWfsg== -----END CERTIFICATE-----Generated at Mon Dec 22 08:06:26 2025 by rpki-client