This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json) Hash identifier: ZRei4bgnaOX7JV9g732n0J3Ms/rn+mtZCKEYXYk1BJY= Subject key identifier: 24:91:9E:01:F4:DF:11:D3:E9:C0:CF:7B:83:6B:13:02:B8:9D:C4:BC Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3 Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3 Certificate serial: 019B36B4533DB15D08041683C403B8419296 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 13:02:25 +0000 Manifest this update: Fri 19 Dec 2025 13:02:25 +0000 Manifest next update: Sat 20 Dec 2025 13:02:25 +0000 Files and hashes: 1: 5eRiGQx5boAqRAuznUmYz2xfqMQ.roa (hash: zDFWtpJ7+CfToiZs8AAMHmyitJykUodCcfEyyz3iDfc=) 2: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: scoDsE/sqQBN0LkaN3uT4D9fmi/I27yzRkM/40BMu8o=) 3: FuRu0xLu2HvckUxx6CKawcRdyGM.roa (hash: X0KwYGhpxludEjFHlw9/03BXtRT7Yd1fekWuVBjCvVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:53:3d:b1:5d:08:04:16:83:c4:03:b8:41:92:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3 Validity Not Before: Dec 19 13:02:25 2025 GMT Not After : Dec 20 13:02:25 2025 GMT Subject: CN=24919e01f4df11d3e9c0cf7b836b1302b89dc4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:54:60:1c:4e:61:fb:be:27:c7:77:f0:88:40: 04:7e:12:39:0b:33:fe:79:6f:21:2b:7e:bb:d8:f6: 84:53:1b:0b:79:98:8f:cc:aa:f9:1a:2a:92:d8:07: a2:30:ea:4e:f9:14:51:4c:19:6e:c9:17:51:9e:ce: 62:a8:14:e4:7f:bd:c7:db:2b:97:e3:aa:37:23:09: cb:68:0e:ba:70:4f:45:ea:85:74:5a:0f:77:73:ab: 0b:be:9e:54:a0:68:84:4d:19:e0:e2:c1:71:ce:ba: be:ef:42:3e:14:67:45:e0:b4:19:13:4d:14:da:4b: f2:ec:e8:c0:49:00:60:28:52:59:23:d0:94:1d:7f: 8a:97:f4:a4:94:42:c5:a9:cf:43:18:e1:14:0b:05: c3:3c:bc:b7:44:0d:ab:87:42:50:d3:68:ee:f3:1e: 03:5f:c3:cf:fd:ff:ec:2d:be:03:ea:50:b2:b7:1b: 77:0f:a8:34:e6:59:96:46:54:e3:0c:74:e2:06:33: 9b:ad:7b:6f:a6:33:ff:0a:52:e7:3d:82:c3:1a:96: 4b:f2:9a:c5:d9:49:a0:21:f1:e3:25:74:97:90:b9: c2:de:43:cd:03:5d:e1:17:31:29:eb:14:81:f9:27: 9e:4c:12:50:ee:38:51:81:b0:08:ec:d1:00:5d:84: db:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:91:9E:01:F4:DF:11:D3:E9:C0:CF:7B:83:6B:13:02:B8:9D:C4:BC X509v3 Authority Key Identifier: keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:fa:44:3f:8a:a6:c1:06:2f:ed:52:f0:a5:0a:0d:34:9d:83: 04:4e:10:9a:ed:8d:45:9f:0c:d8:e5:0c:ae:65:be:9b:dc:83: 40:16:c1:94:ee:c1:ca:8a:32:d4:75:e0:8c:76:5c:a8:1a:f7: 41:b8:50:a9:b3:5f:65:d3:ae:1a:58:03:37:c3:d6:58:7e:2c: 14:15:09:35:fa:b0:5f:63:c7:ff:27:7a:0d:14:41:0b:9e:b4: 74:84:84:59:d4:7c:0f:bc:d6:5c:c0:70:d7:1e:2e:f0:7b:f7: db:27:0b:f2:47:65:3f:5a:3f:73:75:7d:79:b9:83:fc:64:ab: 58:f5:94:28:5d:02:fa:b2:3c:22:97:ce:7c:9f:6d:88:6a:63: bd:1b:51:7e:aa:c3:4d:db:0c:6d:be:d2:3f:09:07:34:46:ea: 26:79:b4:1f:72:86:21:9c:e8:e0:8d:f3:0a:62:dd:71:8b:a3: 29:43:54:91:30:52:e4:ca:1d:34:bf:28:31:9f:b3:f2:33:48: 76:5b:54:03:76:f3:c7:8b:b2:6b:c5:46:51:d7:d0:08:1d:fd: ba:ed:d9:6e:45:83:f4:84:51:25:70:85:36:2e:ed:65:f2:2c: 26:b5:74:9a:a9:42:e0:64:30:24:7d:1a:88:cb:07:ac:cf:14: 43:44:62:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tFM9sV0IBBaDxAO4QZKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmNiYzM0MWM4NzQzM2QwM2U0ZGQ2MTViN2YzNDUzMTY0 MzQ0YjMwHhcNMjUxMjE5MTMwMjI1WhcNMjUxMjIwMTMwMjI1WjAzMTEwLwYDVQQD EygyNDkxOWUwMWY0ZGYxMWQzZTljMGNmN2I4MzZiMTMwMmI4OWRjNGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VRgHE5h+74nx3fwiEAEfhI5CzP+ eW8hK3672PaEUxsLeZiPzKr5GiqS2AeiMOpO+RRRTBluyRdRns5iqBTkf73H2yuX 46o3IwnLaA66cE9F6oV0Wg93c6sLvp5UoGiETRng4sFxzrq+70I+FGdF4LQZE00U 2kvy7OjASQBgKFJZI9CUHX+Kl/SklELFqc9DGOEUCwXDPLy3RA2rh0JQ02ju8x4D X8PP/f/sLb4D6lCytxt3D6g05lmWRlTjDHTiBjObrXtvpjP/ClLnPYLDGpZL8prF 2UmgIfHjJXSXkLnC3kPNA13hFzEp6xSB+SeeTBJQ7jhRgbAI7NEAXYTbTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSRngH03xHT6cDPe4NrEwK4ncS8MB8GA1UdIwQY MBaAFAj8vDQch0M9A+TdYVt/NFMWQ0SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQt YzEwMGE5ODZiYzVjLzEvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQtYzEwMGE5ODZiYzVj LzEvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3vpEP4qm wQYv7VLwpQoNNJ2DBE4Qmu2NRZ8M2OUMrmW+m9yDQBbBlO7Byooy1HXgjHZcqBr3 QbhQqbNfZdOuGlgDN8PWWH4sFBUJNfqwX2PH/yd6DRRBC560dISEWdR8D7zWXMBw 1x4u8Hv32ycL8kdlP1o/c3V9ebmD/GSrWPWUKF0C+rI8IpfOfJ9tiGpjvRtRfqrD TdsMbb7SPwkHNEbqJnm0H3KGIZzo4I3zCmLdcYujKUNUkTBS5ModNL8oMZ+z8jNI dltUA3bzx4uya8VGUdfQCB39uu3ZbkWD9IRRJXCFNi7tZfIsJrV0mqlC4GQwJH0a iMsHrM8UQ0Riog== -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:26 2025 by rpki-client