This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json) Hash identifier: vWSC8J7Fty2GL81a0nX3YR32AJinHKVGRURn/SC87VQ= Subject key identifier: F9:9C:FC:87:56:2F:B7:B7:59:6D:D0:DA:90:0D:20:82:BF:5A:F5:CF Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9 Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9 Certificate serial: 019B6F587D13BFC3107A1013B8D5DD2C399F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft Manifest number: 0EB6 Signing time: Tue 30 Dec 2025 13:00:28 +0000 Manifest this update: Tue 30 Dec 2025 13:00:28 +0000 Manifest next update: Wed 31 Dec 2025 13:00:28 +0000 Files and hashes: 1: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: NgHNcZPbOGALGEl1cANwriigW8mjoSM635u3Y2rBgvg=) 2: P2VGtgj0Ve3JifdhxGXEPs8bYHw.roa (hash: krJRUyY9FgbmyjCpGEy7bhvyTA1VoPtEkFekALAvh2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:58:7d:13:bf:c3:10:7a:10:13:b8:d5:dd:2c:39:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9 Validity Not Before: Dec 30 13:00:28 2025 GMT Not After : Dec 31 13:00:28 2025 GMT Subject: CN=f99cfc87562fb7b7596dd0da900d2082bf5af5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:25:97:b3:75:dd:48:d0:79:35:d9:8c:b9: 4f:1d:dd:4e:f0:ff:10:1c:e1:5e:bb:0a:b4:ed:85: 66:cc:06:f7:03:42:09:60:d5:4b:cd:09:28:cf:ce: 60:b7:31:e6:48:48:71:ad:63:87:74:fa:47:4c:d1: 09:84:6d:07:5a:17:08:b6:b5:4f:ce:6d:a1:7f:78: ad:d3:ab:f6:f5:01:0c:0e:9b:48:ca:98:d9:35:98: 86:73:00:e9:af:7c:44:d3:c2:ff:02:dd:45:8f:a1: 31:dc:be:0e:d0:f8:77:e3:0e:f8:86:58:e4:30:c8: d7:cd:98:df:52:ea:4f:79:8a:e8:c4:c9:6e:e6:a2: ce:34:cb:22:ab:f8:95:fb:cd:b7:04:4a:7d:6f:1d: cd:aa:f8:70:f3:20:36:33:91:60:74:bd:82:85:8f: 8a:54:52:d7:e2:45:b2:55:00:f3:d2:94:d7:68:6e: a6:44:f3:e6:54:cc:e6:6e:ba:aa:44:71:8c:99:c4: 4f:d8:f2:c1:9e:46:bd:9b:6b:a9:4e:47:00:a2:bb: 32:bd:ff:5b:a2:4d:97:df:31:ad:41:be:4f:4f:55: e1:5c:bb:a1:3f:13:04:29:c2:db:00:a7:02:a8:67: 18:f6:23:18:04:4a:4a:c1:84:ed:11:e8:e8:4e:a2: d0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9C:FC:87:56:2F:B7:B7:59:6D:D0:DA:90:0D:20:82:BF:5A:F5:CF X509v3 Authority Key Identifier: keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:4c:90:f3:b8:ae:0c:30:ef:e8:be:79:6c:2e:db:a4:6a:b9: 39:42:94:e1:c5:c0:af:47:a9:1d:a4:af:64:98:c7:a0:6b:b8: 42:e0:f0:f5:68:31:2f:8e:20:c7:43:22:33:1e:04:03:33:da: ee:69:03:b5:c7:8a:84:95:c9:5e:26:2f:4e:1d:9a:78:3f:be: 7a:f5:20:f0:25:01:2d:b1:e0:cb:68:ab:0a:c5:ca:9a:3f:95: ed:35:e1:94:ff:d1:c2:96:54:77:05:18:4f:3f:17:ba:1f:5a: 83:7a:1f:12:97:21:96:34:28:55:a6:69:1b:7d:d5:3b:81:fc: a4:ba:9a:d8:59:db:06:ca:54:94:b3:a6:31:37:b4:25:25:d2: e5:a2:bc:87:bb:58:d8:18:75:24:e1:8e:7f:40:aa:73:f4:b1: 30:66:b9:38:c0:b8:ad:83:6d:6e:9d:3f:e0:09:89:ae:11:26: bd:54:f2:a6:15:c2:e3:7c:3a:0b:eb:1e:9a:96:e2:33:18:b8: a1:ab:05:ee:1b:d4:00:ff:20:4e:55:e8:5f:49:0d:52:e9:14: c8:f6:5a:ca:50:e6:6f:4c:e9:ec:60:5c:cd:c3:86:b2:53:2a: bd:19:9b:76:6e:56:51:ca:a7:35:ac:c7:c2:51:db:c3:f9:cb: ba:c1:94:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvWH0Tv8MQehATuNXdLDmfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NTAyMjg5MDRiOWRiZWI0NzkyYTY5NzcyN2UzNmFhZmQ4 NGQyZTkwHhcNMjUxMjMwMTMwMDI4WhcNMjUxMjMxMTMwMDI4WjAzMTEwLwYDVQQD EyhmOTljZmM4NzU2MmZiN2I3NTk2ZGQwZGE5MDBkMjA4MmJmNWFmNWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiIll7N13UjQeTXZjLlPHd1O8P8Q HOFeuwq07YVmzAb3A0IJYNVLzQkoz85gtzHmSEhxrWOHdPpHTNEJhG0HWhcItrVP zm2hf3it06v29QEMDptIypjZNZiGcwDpr3xE08L/At1Fj6Ex3L4O0Ph34w74hljk MMjXzZjfUupPeYroxMlu5qLONMsiq/iV+823BEp9bx3Nqvhw8yA2M5FgdL2ChY+K VFLX4kWyVQDz0pTXaG6mRPPmVMzmbrqqRHGMmcRP2PLBnka9m2upTkcAorsyvf9b ok2X3zGtQb5PT1XhXLuhPxMEKcLbAKcCqGcY9iMYBEpKwYTtEejoTqLQkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmc/IdWL7e3WW3Q2pANIIK/WvXPMB8GA1UdIwQY MBaAFAlQIokEudvrR5Kml3J+Nqr9hNLpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NGQ5MTAtOTQ1Yy00MmU4LWJiNDQt NjI4MjFjMmMyOTlmLzEvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82NGQ5MTAtOTQ1Yy00MmU4LWJiNDQtNjI4MjFjMmMyOTlm LzEvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApEyQ87iu DDDv6L55bC7bpGq5OUKU4cXAr0epHaSvZJjHoGu4QuDw9WgxL44gx0MiMx4EAzPa 7mkDtceKhJXJXiYvTh2aeD++evUg8CUBLbHgy2irCsXKmj+V7TXhlP/RwpZUdwUY Tz8Xuh9ag3ofEpchljQoVaZpG33VO4H8pLqa2FnbBspUlLOmMTe0JSXS5aK8h7tY 2Bh1JOGOf0Cqc/SxMGa5OMC4rYNtbp0/4AmJrhEmvVTyphXC43w6C+sempbiMxi4 oasF7hvUAP8gTlXoX0kNUukUyPZaylDmb0zp7GBczcOGslMqvRmbdm5WUcqnNazH wlHbw/nLusGUqw== -----END CERTIFICATE-----Generated at Tue Dec 30 14:55:15 2025 by rpki-client