This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft File: CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft (raw, json) Hash identifier: y8CHjyAX+SHTQMCvVfu8ZEguWUDVho2cB0F6Ou9FVsM= Subject key identifier: 09:D8:87:CD:15:8A:1D:67:D1:2F:97:16:07:D2:30:D7:86:4D:B6:5E Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89 Certificate issuer: /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89 Certificate serial: 019B3BA25E7B19F3452B4447DB2BAECDF37D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 12:00:55 +0000 Manifest this update: Sat 20 Dec 2025 12:00:55 +0000 Manifest next update: Sun 21 Dec 2025 12:00:55 +0000 Files and hashes: 1: CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl (hash: FhqRxr0JeiJCtgwruCePYJ+SVWIJPFLAUhtGG0Qv85s=) 2: eEiaQt6Ze9WxjrZL-d6aNqKJOCY.roa (hash: uCPWdRUrjQcc9uIJEuG8eyiVfoHC/vX0+wXoSm20VqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:5e:7b:19:f3:45:2b:44:47:db:2b:ae:cd:f3:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89 Validity Not Before: Dec 20 12:00:55 2025 GMT Not After : Dec 21 12:00:55 2025 GMT Subject: CN=09d887cd158a1d67d12f971607d230d7864db65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:ae:55:66:c8:b9:b0:29:83:49:4c:86:7b: 89:36:86:6c:60:aa:d8:39:fa:5f:1c:0f:8c:e5:df: 2f:fd:a8:16:aa:c1:e3:51:46:b3:c9:d8:43:aa:73: 1b:3b:f4:00:10:08:d9:e3:b4:a0:86:49:50:70:68: 93:b8:11:d2:0f:fe:4c:26:3d:d9:8b:32:e1:59:b0: 54:d6:e4:e1:74:69:3d:a5:fe:31:d1:b6:d4:94:e2: 7c:a2:ee:06:53:d0:24:47:3d:c1:6b:5b:c0:06:42: 87:e6:5e:82:d7:3a:d0:6f:0f:4f:c7:5c:50:67:d8: b0:68:75:08:7b:87:7b:ab:05:89:1b:91:1d:07:ce: 9d:76:1e:86:23:2f:f8:f3:d9:de:51:48:76:c0:d2: 7c:f6:1f:d0:2c:d7:3d:7f:b0:ae:8d:0d:33:02:95: 88:b9:f7:9a:d3:55:20:b8:91:08:6d:36:d6:b3:20: a1:cd:af:59:ce:7a:40:68:b1:0d:75:eb:97:01:2f: e4:8f:9d:46:74:72:b8:9d:62:15:a9:c6:d4:27:e9: 89:be:c5:6e:32:44:6b:58:a4:88:87:18:5b:2a:4b: c5:dd:f3:6f:31:04:cb:1a:98:67:89:09:ee:8b:ac: 84:70:6d:1b:22:67:0d:cd:1a:cd:0a:6e:c7:08:8a: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D8:87:CD:15:8A:1D:67:D1:2F:97:16:07:D2:30:D7:86:4D:B6:5E X509v3 Authority Key Identifier: keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:80:dd:5f:9f:71:ca:8f:a9:f0:53:39:3f:40:08:2b:8c:73: 19:8b:ea:a5:fb:76:ab:f6:b5:37:55:18:82:5b:5b:01:5b:f1: 73:ab:0f:7b:0e:f9:bf:93:7a:6c:b2:e4:15:e6:b3:ab:9e:6a: a5:ad:c9:92:23:8c:21:f3:7b:67:59:41:11:81:b1:e7:04:c1: bd:43:c3:57:13:8b:50:ac:ec:4f:a6:4a:ce:42:28:4a:79:fc: c5:02:10:f7:1c:89:2e:92:be:dd:68:1b:d3:0d:ee:69:01:9e: e0:cd:21:fd:4b:ae:77:df:3a:83:4d:c6:91:1f:07:44:53:db: a2:bf:b3:dc:8f:b6:48:4d:33:65:6b:92:56:b7:62:c5:df:33: 3e:29:8f:44:c0:57:e7:55:d4:87:ab:57:3c:ee:5b:e9:09:29: 53:02:50:a1:53:ac:91:95:49:09:97:ed:36:26:84:8d:03:47: 43:f7:ca:54:2a:7b:d3:d6:09:b6:c6:96:51:f8:c1:a7:9b:e6: dc:0f:60:48:0a:9c:31:aa:3c:23:85:5d:9e:3c:53:05:e1:33: 28:8b:06:75:f8:c7:fd:f8:05:38:bc:7a:ab:7d:99:37:06:6d: 7d:f0:5d:5a:ad:a0:ca:f5:4e:6f:e1:e6:33:79:14:b4:18:d9: f7:4b:c3:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ol57GfNFK0RH2yuuzfN9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NTdiMjNjODM3OTViYzM1YzMwYmMxMzY1YTMwZmRmMzM3 NWFjODkwHhcNMjUxMjIwMTIwMDU1WhcNMjUxMjIxMTIwMDU1WjAzMTEwLwYDVQQD EygwOWQ4ODdjZDE1OGExZDY3ZDEyZjk3MTYwN2QyMzBkNzg2NGRiNjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumKuVWbIubApg0lMhnuJNoZsYKrY OfpfHA+M5d8v/agWqsHjUUazydhDqnMbO/QAEAjZ47SghklQcGiTuBHSD/5MJj3Z izLhWbBU1uThdGk9pf4x0bbUlOJ8ou4GU9AkRz3Ba1vABkKH5l6C1zrQbw9Px1xQ Z9iwaHUIe4d7qwWJG5EdB86ddh6GIy/489neUUh2wNJ89h/QLNc9f7CujQ0zApWI ufea01UguJEIbTbWsyChza9ZznpAaLENdeuXAS/kj51GdHK4nWIVqcbUJ+mJvsVu MkRrWKSIhxhbKkvF3fNvMQTLGphniQnui6yEcG0bImcNzRrNCm7HCIpQqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnYh80Vih1n0S+XFgfSMNeGTbZeMB8GA1UdIwQY MBaAFAlXsjyDeVvDXDC8E2WjD98zdayJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZleVBJTjVXOE5jTUx3VFphTVAzek4xcklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NDk4NGQtYWU4Zi00Y2Y5LWEzYzMt MWU5MmM3YmRjNTgyLzEvQ1ZleVBJTjVXOE5jTUx3VFphTVAzek4xcklrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi82NDk4NGQtYWU4Zi00Y2Y5LWEzYzMtMWU5MmM3YmRjNTgy LzEvQ1ZleVBJTjVXOE5jTUx3VFphTVAzek4xcklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4DdX59x yo+p8FM5P0AIK4xzGYvqpft2q/a1N1UYgltbAVvxc6sPew75v5N6bLLkFeazq55q pa3JkiOMIfN7Z1lBEYGx5wTBvUPDVxOLUKzsT6ZKzkIoSnn8xQIQ9xyJLpK+3Wgb 0w3uaQGe4M0h/Uuud986g03GkR8HRFPbor+z3I+2SE0zZWuSVrdixd8zPimPRMBX 51XUh6tXPO5b6QkpUwJQoVOskZVJCZftNiaEjQNHQ/fKVCp709YJtsaWUfjBp5vm 3A9gSAqcMao8I4VdnjxTBeEzKIsGdfjH/fgFOLx6q32ZNwZtffBdWq2gyvVOb+Hm M3kUtBjZ90vDgg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:03:03 2025 by rpki-client