This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json) Hash identifier: NeFAIyOWr/PaqQG+5+MJjtUfR9uwxnCODA8JLZ4Fl1Q= Subject key identifier: 23:7C:CA:14:99:21:9A:AF:D9:B6:A5:AD:C3:E5:B5:C6:82:6C:35:83 Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b Certificate serial: 019B3E6C4E91A31175B5C6B7EFC3B3E0A0BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft Manifest number: 0E69 Signing time: Sun 21 Dec 2025 01:00:43 +0000 Manifest this update: Sun 21 Dec 2025 01:00:43 +0000 Manifest next update: Mon 22 Dec 2025 01:00:43 +0000 Files and hashes: 1: 5kFz87V3cREdddc3AsaZImesrc4.roa (hash: GMf/VeYSaAQLAvigW84goiaYuSw8QRXcx94y9RzK0U8=) 2: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: 2STKskazA46hAkM/JeaP6xqPh0zlDy5+9wN/QnUA+lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:4e:91:a3:11:75:b5:c6:b7:ef:c3:b3:e0:a0:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b Validity Not Before: Dec 21 01:00:43 2025 GMT Not After : Dec 22 01:00:43 2025 GMT Subject: CN=237cca1499219aafd9b6a5adc3e5b5c6826c3583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a1:97:f3:42:4c:82:f9:00:d1:2f:65:45:28: 31:d4:38:02:73:4a:b1:fd:af:bf:6f:88:ce:cd:90: f3:ad:05:67:5a:66:80:1d:2d:8b:4b:4d:1a:22:6e: 10:57:f9:f7:10:01:08:10:f5:47:80:df:f1:b2:26: c0:a2:3f:78:38:1f:92:ad:6d:6f:76:3d:99:0f:c4: 2e:8b:94:c5:12:8b:8d:d6:71:49:ee:98:b6:47:20: 32:f0:f2:76:a0:d4:07:95:70:c3:47:c8:05:60:7e: 2b:c8:cd:6f:94:56:5a:8f:2f:f8:8b:8b:58:e0:4a: 6b:44:45:d3:3d:5e:54:13:e2:19:b2:90:7e:b9:1c: eb:b9:d0:9c:59:0b:2c:ce:05:cf:54:4d:36:49:36: 1f:40:4e:81:49:d9:9d:44:40:81:db:10:d9:f8:29: 5f:9e:81:f1:03:ca:ed:47:50:5e:63:d4:23:74:5f: aa:64:a4:fd:2b:02:c9:ae:f7:1a:b6:39:60:12:43: 2a:4b:56:7e:17:6c:1e:5b:2e:8a:b6:03:0c:80:d0: 65:1e:1b:91:c2:ec:ac:4d:8d:ac:67:33:cb:75:28: 88:eb:40:80:c2:0d:ed:a4:16:de:21:b3:72:19:c8: 33:91:8b:cf:ff:1b:cd:d9:1f:cd:07:e6:f4:75:32: 8b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7C:CA:14:99:21:9A:AF:D9:B6:A5:AD:C3:E5:B5:C6:82:6C:35:83 X509v3 Authority Key Identifier: keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c9:c7:50:59:b4:2b:ab:96:fe:61:8a:9a:e4:63:7e:65:1f: 26:75:33:25:73:88:9a:70:0d:2f:64:0b:a2:2d:55:fa:74:48: b2:d4:32:6f:db:7e:f3:7b:a5:b3:e2:50:0f:4e:c8:02:a7:27: 2b:ad:ab:9e:a6:f9:57:2e:90:ea:27:50:e5:b6:17:34:fe:20: 2f:56:3d:55:1a:af:97:85:2b:a0:99:20:b6:63:5f:d0:ce:32: c4:2a:71:1b:52:ce:9a:37:c0:c8:3b:63:bb:32:1b:df:7a:6d: 39:e5:e9:f9:b6:00:94:f5:1c:16:08:d0:fb:ba:c6:3b:f5:0a: 8d:fb:99:73:a4:8d:d6:85:0d:ce:ef:0f:39:6c:15:48:e7:d7: ec:01:98:a5:f9:3b:8d:f4:60:ca:a4:ea:8b:32:7a:3b:38:63: 9b:3c:51:89:df:b2:c3:b8:5e:44:7d:6e:3c:3a:f0:b5:96:c9: fa:0a:a2:0d:0c:ad:54:e7:d8:60:3f:a4:f4:97:91:26:fe:ec: ea:15:8c:9a:0d:0d:25:13:32:f2:39:15:03:af:e6:80:fb:86: dd:19:63:1d:8e:60:f4:4b:6a:e2:67:45:6c:1a:24:b8:60:5e: be:77:cb:60:ce:e1:76:b2:6c:47:9a:f3:2d:25:6d:21:81:57: 04:ed:30:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bE6RoxF1tca378Oz4KC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NThiNTRiZmVlOTg5NmM0YWRhN2RjMThiM2I3Zjk3MTlk YTA0NmIwHhcNMjUxMjIxMDEwMDQzWhcNMjUxMjIyMDEwMDQzWjAzMTEwLwYDVQQD EygyMzdjY2ExNDk5MjE5YWFmZDliNmE1YWRjM2U1YjVjNjgyNmMzNTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKGX80JMgvkA0S9lRSgx1DgCc0qx /a+/b4jOzZDzrQVnWmaAHS2LS00aIm4QV/n3EAEIEPVHgN/xsibAoj94OB+SrW1v dj2ZD8Qui5TFEouN1nFJ7pi2RyAy8PJ2oNQHlXDDR8gFYH4ryM1vlFZajy/4i4tY 4EprREXTPV5UE+IZspB+uRzrudCcWQsszgXPVE02STYfQE6BSdmdRECB2xDZ+Clf noHxA8rtR1BeY9QjdF+qZKT9KwLJrvcatjlgEkMqS1Z+F2weWy6KtgMMgNBlHhuR wuysTY2sZzPLdSiI60CAwg3tpBbeIbNyGcgzkYvP/xvN2R/NB+b0dTKL6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCN8yhSZIZqv2balrcPltcaCbDWDMB8GA1UdIwQY MBaAFAlYtUv+6YlsStp9wYs7f5cZ2gRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEt ZmY0YzcxODMwMjRmLzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEtZmY0YzcxODMwMjRm LzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcnHUFm0 K6uW/mGKmuRjfmUfJnUzJXOImnANL2QLoi1V+nRIstQyb9t+83uls+JQD07IAqcn K62rnqb5Vy6Q6idQ5bYXNP4gL1Y9VRqvl4UroJkgtmNf0M4yxCpxG1LOmjfAyDtj uzIb33ptOeXp+bYAlPUcFgjQ+7rGO/UKjfuZc6SN1oUNzu8POWwVSOfX7AGYpfk7 jfRgyqTqizJ6OzhjmzxRid+yw7heRH1uPDrwtZbJ+gqiDQytVOfYYD+k9JeRJv7s 6hWMmg0NJRMy8jkVA6/mgPuG3RljHY5g9Etq4mdFbBokuGBevnfLYM7hdrJsR5rz LSVtIYFXBO0wAQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:12:44 2025 by rpki-client