This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft File: 0cpnYQKGq3OPhs6TX99e1iDwLZY.mft (raw, json) Hash identifier: PyyPYkVF/bHVWMdmGuAMPiaI1Wjq9aCgRTZIReo6IdM= Subject key identifier: 73:9D:AD:97:35:08:49:37:8A:08:58:9F:37:FB:BB:7B:C0:CD:4A:34 Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96 Certificate issuer: /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96 Certificate serial: 019B37FC3E7F754C23B7355F282DEDF9BEB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft Manifest number: 067F Signing time: Fri 19 Dec 2025 19:00:36 +0000 Manifest this update: Fri 19 Dec 2025 19:00:36 +0000 Manifest next update: Sat 20 Dec 2025 19:00:36 +0000 Files and hashes: 1: 0cpnYQKGq3OPhs6TX99e1iDwLZY.crl (hash: H65+oxPWg1HdQAIJ4LMO+JUES7fS7AvwlRmbuNfsSFc=) 2: i5c6APAQbgFsu6nm48O6UWVFYT4.roa (hash: ZAolUlxg2dnxY02aKMKDXlvl6R7q63Rjwyr4KEJt+D8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:3e:7f:75:4c:23:b7:35:5f:28:2d:ed:f9:be:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96 Validity Not Before: Dec 19 19:00:36 2025 GMT Not After : Dec 20 19:00:36 2025 GMT Subject: CN=739dad97350849378a08589f37fbbb7bc0cd4a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:d8:31:a5:cc:45:df:37:a8:5c:7d:3e:26: f6:3c:33:30:89:aa:7d:d1:69:55:d2:2c:85:be:24: 4f:86:db:eb:0f:36:de:dd:d1:ce:c4:28:7a:66:bd: 49:ef:c2:e3:c0:e5:23:dc:cc:7c:92:ad:b4:eb:ab: 27:b1:b1:85:cc:7c:53:5f:0c:27:a5:e8:a0:b4:b6: c9:b3:37:13:e7:59:3f:05:be:1e:6a:a9:84:3b:d5: fc:5e:37:93:31:57:18:6e:10:06:02:34:3e:a6:6b: c9:c1:ba:68:11:eb:87:69:ca:9c:db:bb:d1:26:f3: be:e2:3a:83:83:51:03:92:09:23:d3:8e:0e:b5:b1: 3c:97:ca:7c:89:d3:59:61:35:5a:fc:f3:c3:92:e3: f0:7e:e9:9f:01:3a:89:9f:52:67:a3:40:68:57:26: 0a:95:c3:66:7f:70:81:12:bd:38:ac:52:12:d4:95: a4:b3:f4:1c:99:7d:79:e6:54:89:2d:33:6d:d1:89: 15:28:68:b1:7e:c0:8a:a3:fc:a4:44:06:d4:7e:da: 9b:34:ae:a8:f3:54:7e:d3:3b:f6:98:e6:0a:2b:ad: 3d:ec:05:ef:cc:58:85:f5:34:5f:6d:46:1a:4f:8b: 03:25:84:c3:c0:0e:47:8c:83:1d:1c:c7:69:00:f2: 16:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9D:AD:97:35:08:49:37:8A:08:58:9F:37:FB:BB:7B:C0:CD:4A:34 X509v3 Authority Key Identifier: keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:2b:b6:9c:93:c4:e0:57:4b:33:62:49:bf:62:03:b0:9a:c8: 31:08:43:a5:7c:4e:03:a3:e5:0e:d6:9b:b1:d8:fd:79:32:00: 68:ad:2b:0d:fb:2e:0f:e9:57:93:32:39:0a:59:78:9a:66:55: 61:8c:d3:29:39:91:d4:f0:15:4d:88:25:25:9f:3a:a1:b1:79: 84:52:4d:55:bb:a6:33:0e:f9:44:2a:07:40:e9:b0:fa:e5:9f: 8b:c1:df:1d:4b:dc:a0:fa:c0:79:69:b5:c8:64:86:5b:b0:20: 64:70:8d:e1:b0:da:b0:ad:53:1e:ab:43:88:0f:59:cf:6b:95: f5:82:a8:7a:5c:bb:e3:ee:22:20:3b:f8:d2:9c:34:b5:e0:c9: 28:18:d4:96:4b:79:66:f2:09:0f:4a:8f:d6:28:8a:0a:c0:7b: 3b:f3:65:27:7b:46:48:ad:5a:30:95:db:c7:7c:25:ce:6b:31: 57:19:62:c0:4d:e8:4a:c2:db:14:16:26:ab:e9:f2:9e:f3:80: 85:97:03:d6:7a:29:29:3e:31:fa:92:00:09:61:fc:3a:56:05: d2:1e:14:5b:72:e9:89:e8:84:be:e4:6c:14:bb:3d:99:af:74: f3:0d:ed:fd:54:34:b7:7a:b4:70:b7:c4:58:c9:9d:12:86:01: 7e:4e:82:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/D5/dUwjtzVfKC3t+b62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxY2E2NzYxMDI4NmFiNzM4Zjg2Y2U5MzVmZGY1ZWQ2MjBm MDJkOTYwHhcNMjUxMjE5MTkwMDM2WhcNMjUxMjIwMTkwMDM2WjAzMTEwLwYDVQQD Eyg3MzlkYWQ5NzM1MDg0OTM3OGEwODU4OWYzN2ZiYmI3YmMwY2Q0YTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCfYMaXMRd83qFx9Pib2PDMwiap9 0WlV0iyFviRPhtvrDzbe3dHOxCh6Zr1J78LjwOUj3Mx8kq2066snsbGFzHxTXwwn peigtLbJszcT51k/Bb4eaqmEO9X8XjeTMVcYbhAGAjQ+pmvJwbpoEeuHacqc27vR JvO+4jqDg1EDkgkj044OtbE8l8p8idNZYTVa/PPDkuPwfumfATqJn1Jno0BoVyYK lcNmf3CBEr04rFIS1JWks/QcmX155lSJLTNt0YkVKGixfsCKo/ykRAbUftqbNK6o 81R+0zv2mOYKK6097AXvzFiF9TRfbUYaT4sDJYTDwA5HjIMdHMdpAPIWLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOdrZc1CEk3ighYnzf7u3vAzUo0MB8GA1UdIwQY MBaAFNHKZ2EChqtzj4bOk1/fXtYg8C2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YTFhNjItZTQ4MS00YTE0LWFkNmUt MzViZmY5NmRhNGM1LzEvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83YTFhNjItZTQ4MS00YTE0LWFkNmUtMzViZmY5NmRhNGM1 LzEvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCu2nJPE 4FdLM2JJv2IDsJrIMQhDpXxOA6PlDtabsdj9eTIAaK0rDfsuD+lXkzI5Cll4mmZV YYzTKTmR1PAVTYglJZ86obF5hFJNVbumMw75RCoHQOmw+uWfi8HfHUvcoPrAeWm1 yGSGW7AgZHCN4bDasK1THqtDiA9Zz2uV9YKoely74+4iIDv40pw0teDJKBjUlkt5 ZvIJD0qP1iiKCsB7O/NlJ3tGSK1aMJXbx3wlzmsxVxliwE3oSsLbFBYmq+nynvOA hZcD1nopKT4x+pIACWH8OlYF0h4UW3LpieiEvuRsFLs9ma908w3t/VQ0t3q0cLfE WMmdEoYBfk6Ceg== -----END CERTIFICATE-----Generated at Sat Dec 20 03:29:27 2025 by rpki-client