This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json) Hash identifier: VyAgbyK6GV0Ofx+xqz2zc6aQl6eawmf4LRtg9AWCjDg= Subject key identifier: 7B:A0:CF:1A:FD:D3:1F:F4:ED:9E:2B:50:DC:AF:60:99:39:26:A4:37 Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8 Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8 Certificate serial: 019B3D908F8748DA74523A1BA664C418C55E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 21:00:42 +0000 Manifest this update: Sat 20 Dec 2025 21:00:42 +0000 Manifest next update: Sun 21 Dec 2025 21:00:42 +0000 Files and hashes: 1: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: lu1Op1TI9liGZs9zZEoSB4OjQJCdYPZ7JjIbDH+tugA=) 2: IXCtEaMNeIUhqXl8Lx3l8-Dir_Q.roa (hash: ZiR3KjxwRefwM+SxQhOx2wRJ2km2w6JI0EvTFa0nnZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:8f:87:48:da:74:52:3a:1b:a6:64:c4:18:c5:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8 Validity Not Before: Dec 20 21:00:42 2025 GMT Not After : Dec 21 21:00:42 2025 GMT Subject: CN=7ba0cf1afdd31ff4ed9e2b50dcaf60993926a437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:62:b9:a5:da:19:8d:72:a0:49:fe:59:e2:de: c3:0b:f0:f6:96:8e:a8:29:1f:c8:06:38:ce:bd:f3: 1c:b6:73:be:b2:67:66:1f:5d:d7:95:c6:21:f2:b0: 9d:dd:a9:c7:f9:56:03:2c:40:5f:34:c1:c5:22:cc: 01:b6:07:bf:26:05:ba:3c:06:a7:7f:d4:b6:33:a9: 5b:a6:87:72:dd:de:e0:fe:0b:41:2d:28:c1:f9:bc: 06:42:45:2a:38:55:46:f8:1c:e4:64:00:30:0e:f6: b5:de:9e:b9:9f:5e:f0:a7:8c:fc:8e:67:03:6c:57: 6f:e5:a8:7e:9a:93:57:f3:be:60:07:a4:10:58:65: d9:a2:64:1d:84:0a:41:59:86:91:3b:64:7d:ca:ce: dd:41:b9:a4:4c:fe:32:2a:f1:1e:a2:3f:9b:4f:a7: 55:ff:79:04:68:7b:68:71:29:97:6b:5d:0b:cb:d2: ec:1e:e1:89:a8:84:34:ce:81:32:b4:80:85:42:c3: d1:4c:0d:4e:1f:9c:50:f1:db:fb:c5:b2:cc:05:0c: 17:2b:05:f0:9f:9f:8e:80:82:ad:33:77:cb:a2:2a: 19:40:42:19:3d:be:dc:d5:eb:1a:dd:a9:8a:04:a3: 60:f1:d3:79:7d:91:42:1c:cf:cf:53:d5:81:67:23: 73:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A0:CF:1A:FD:D3:1F:F4:ED:9E:2B:50:DC:AF:60:99:39:26:A4:37 X509v3 Authority Key Identifier: keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d9:14:30:bc:ce:f9:1c:5e:b1:da:0e:34:4b:57:e5:ed:ef: 0a:92:2e:d4:b9:99:71:5b:cc:51:10:6f:b7:2b:74:6c:97:09: 20:dc:1a:db:d3:1a:47:87:d8:31:17:0e:ce:84:42:c8:e6:00: 78:23:75:8e:0c:c9:72:0d:90:7b:22:d0:20:66:f6:55:fe:a2: 04:bc:1c:81:64:49:0e:a2:73:91:30:99:5e:a7:e3:80:59:3f: dc:f9:ad:b7:25:29:5f:32:e7:bc:ee:80:17:50:32:79:4a:82: 10:5d:7e:9f:5f:a0:20:34:c7:43:11:79:00:82:a1:73:e9:7e: 89:ff:8e:c5:a6:4b:91:9c:f6:76:78:89:f3:14:ef:82:48:37: 96:70:d6:e2:38:dc:bc:78:e6:c3:84:ac:a2:6e:74:fe:b6:aa: 1c:ce:19:72:63:d7:37:f2:a4:0f:bc:27:84:2e:11:60:15:ad: d9:a1:41:c2:6c:5d:96:75:92:00:22:9f:a8:1b:4b:a3:8f:28: 38:72:4e:63:f7:6e:6f:ec:e2:73:54:f5:70:3e:bc:02:d7:4f: c3:c6:11:28:76:4d:15:ff:71:a8:7b:87:07:15:f4:3b:a8:b8: 11:ba:5f:5a:07:48:73:44:cd:74:88:4e:73:bc:ae:aa:12:b9: 08:59:ee:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kI+HSNp0UjobpmTEGMVeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZjEyMzgxMDAzNzBhMmMwNWZiMDY4MDBhZmRlNjkwNmRh YWYyZDgwHhcNMjUxMjIwMjEwMDQyWhcNMjUxMjIxMjEwMDQyWjAzMTEwLwYDVQQD Eyg3YmEwY2YxYWZkZDMxZmY0ZWQ5ZTJiNTBkY2FmNjA5OTM5MjZhNDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2K5pdoZjXKgSf5Z4t7DC/D2lo6o KR/IBjjOvfMctnO+smdmH13XlcYh8rCd3anH+VYDLEBfNMHFIswBtge/JgW6PAan f9S2M6lbpody3d7g/gtBLSjB+bwGQkUqOFVG+BzkZAAwDva13p65n17wp4z8jmcD bFdv5ah+mpNX875gB6QQWGXZomQdhApBWYaRO2R9ys7dQbmkTP4yKvEeoj+bT6dV /3kEaHtocSmXa10Ly9LsHuGJqIQ0zoEytICFQsPRTA1OH5xQ8dv7xbLMBQwXKwXw n5+OgIKtM3fLoioZQEIZPb7c1esa3amKBKNg8dN5fZFCHM/PU9WBZyNz2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHugzxr90x/07Z4rUNyvYJk5JqQ3MB8GA1UdIwQY MBaAFArxI4EANwosBfsGgAr95pBtqvLYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ZFamdRQTNDaXdGLXdhQUN2M21rRzJxOHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85YzFiMDgtYjVhYy00YmJkLWI4YzMt MGUwZmQwM2IxMTA0LzEvQ3ZFamdRQTNDaXdGLXdhQUN2M21rRzJxOHRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy85YzFiMDgtYjVhYy00YmJkLWI4YzMtMGUwZmQwM2IxMTA0 LzEvQ3ZFamdRQTNDaXdGLXdhQUN2M21rRzJxOHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdkUMLzO +RxesdoONEtX5e3vCpIu1LmZcVvMURBvtyt0bJcJINwa29MaR4fYMRcOzoRCyOYA eCN1jgzJcg2QeyLQIGb2Vf6iBLwcgWRJDqJzkTCZXqfjgFk/3PmttyUpXzLnvO6A F1AyeUqCEF1+n1+gIDTHQxF5AIKhc+l+if+OxaZLkZz2dniJ8xTvgkg3lnDW4jjc vHjmw4Ssom50/raqHM4ZcmPXN/KkD7wnhC4RYBWt2aFBwmxdlnWSACKfqBtLo48o OHJOY/dub+zic1T1cD68AtdPw8YRKHZNFf9xqHuHBxX0O6i4EbpfWgdIc0TNdIhO c7yuqhK5CFnu7w== -----END CERTIFICATE-----Generated at Sun Dec 21 04:22:50 2025 by rpki-client