This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft File: cpIiZWfact2GiDyt1fPeb_1bNXM.mft (raw, json) Hash identifier: +P8BFTiMUe7YK9N0Dk2gtPJ/nh1XGYTHeLJvOvZBMHU= Subject key identifier: AE:CD:F2:A7:D8:C4:B5:21:A7:6F:F8:96:4E:C1:A7:EC:56:81:E1:1A Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73 Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573 Certificate serial: 019B3CB4CF3F95B6470F09604D58725AEB1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 17:00:41 +0000 Manifest this update: Sat 20 Dec 2025 17:00:41 +0000 Manifest next update: Sun 21 Dec 2025 17:00:41 +0000 Files and hashes: 1: A2a55CFuU3rmZKWMjbnP0QRTKbw.roa (hash: h7ObFO2cHNspjyZ0BOSzsO0dobQTCK4BjzPiMYTX+dk=) 2: cpIiZWfact2GiDyt1fPeb_1bNXM.crl (hash: TGwuwCwItj5WQ2OxLADsXtYPnwOX4b5Q7kvVUSewL1g=) 3: hOIlW-rpHRc2nOKpMGO_mfzaetg.roa (hash: VUIEi5LXdhfGKiMndwB/BQwcKviQdKt6bC3rAVXouZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:cf:3f:95:b6:47:0f:09:60:4d:58:72:5a:eb:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573 Validity Not Before: Dec 20 17:00:41 2025 GMT Not After : Dec 21 17:00:41 2025 GMT Subject: CN=aecdf2a7d8c4b521a76ff8964ec1a7ec5681e11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:28:7b:51:ba:38:a7:75:d0:4d:da:ac:47:77: 85:d0:32:62:41:90:f7:3d:33:d4:0e:aa:9e:b2:01: fd:fb:4d:56:a5:5e:ec:6d:88:79:66:56:c4:0a:0d: fb:ed:e9:b6:a5:a3:47:ea:d5:c6:e3:8f:06:37:94: 0d:a9:f4:06:9e:88:a3:09:22:57:0c:f8:41:c5:86: 49:d9:39:18:a3:6b:7c:10:07:d2:5b:41:bc:08:ab: 03:f3:ca:eb:73:01:e0:97:25:e4:a4:71:95:ff:51: 7b:17:c2:09:f3:77:e7:c9:d9:d1:89:ed:94:ed:84: 07:92:bc:9f:c9:e4:95:36:44:90:56:32:96:c7:73: ab:00:73:43:60:9e:69:b0:e8:76:3a:5e:33:60:29: ab:31:f9:55:57:a7:ac:30:58:d1:fa:0b:dd:1a:e1: cb:de:9c:c3:24:5e:53:4e:db:46:c4:69:ef:fc:8b: 3a:0f:63:1e:b0:77:9f:26:12:6b:99:e6:fc:24:b8: 31:54:bd:3b:3d:1b:74:34:a9:42:20:b2:c5:49:bb: 97:9e:b7:a5:c5:6c:65:fc:32:bf:1b:75:fd:e6:63: 4b:93:6d:31:28:79:53:e8:a9:11:3d:d5:b8:e5:d4: 9a:ce:4e:6d:98:6a:80:55:72:c0:65:56:29:ca:ef: f8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CD:F2:A7:D8:C4:B5:21:A7:6F:F8:96:4E:C1:A7:EC:56:81:E1:1A X509v3 Authority Key Identifier: keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:45:01:a4:02:41:5e:a9:5c:92:ab:45:e2:81:a7:de:33:78: ae:b5:c7:32:f7:5e:47:29:84:11:b5:82:d5:60:5d:78:b5:5d: 02:1c:8e:50:6f:fb:0a:60:df:85:14:d7:e8:e8:9c:59:8d:58: 8f:97:10:2d:13:cd:9f:58:72:28:90:56:d0:fd:31:c2:8a:e8: 15:97:d7:8e:db:66:43:bb:9c:0d:10:f7:f8:64:19:13:42:84: eb:6d:71:8a:13:92:68:56:9b:3d:47:d4:ff:54:23:e8:23:35: cc:96:9c:55:81:4c:11:76:d7:e3:cb:2d:9c:80:b2:25:4b:e7: 27:16:30:0a:c3:3b:ad:ea:47:5f:a0:ad:80:11:e2:ef:49:fe: f2:7d:ce:e4:0c:ad:f7:ea:cc:ab:40:e9:ee:9e:ad:90:6e:2a: c0:7d:44:2a:50:fc:99:1a:e8:10:88:db:43:38:d4:6d:05:bf: c3:a6:51:a4:db:08:8d:e4:55:c9:07:d0:d9:80:b1:ae:ce:54: ad:e3:55:34:17:b4:ce:85:c2:b4:f0:1b:ac:77:d5:c9:ad:55: 9b:d0:87:c2:b2:46:ff:36:60:13:b5:b4:30:cf:c6:e6:de:85: 35:e4:03:19:f0:18:f7:f4:34:c6:b7:5a:8a:f5:3a:b1:3e:de: 82:1e:34:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tM8/lbZHDwlgTVhyWusaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOTIyMjY1NjdkYTcyZGQ4Njg4M2NhZGQ1ZjNkZTZmZmQ1 YjM1NzMwHhcNMjUxMjIwMTcwMDQxWhcNMjUxMjIxMTcwMDQxWjAzMTEwLwYDVQQD EyhhZWNkZjJhN2Q4YzRiNTIxYTc2ZmY4OTY0ZWMxYTdlYzU2ODFlMTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyh7Ubo4p3XQTdqsR3eF0DJiQZD3 PTPUDqqesgH9+01WpV7sbYh5ZlbECg377em2paNH6tXG448GN5QNqfQGnoijCSJX DPhBxYZJ2TkYo2t8EAfSW0G8CKsD88rrcwHglyXkpHGV/1F7F8IJ83fnydnRie2U 7YQHkryfyeSVNkSQVjKWx3OrAHNDYJ5psOh2Ol4zYCmrMflVV6esMFjR+gvdGuHL 3pzDJF5TTttGxGnv/Is6D2MesHefJhJrmeb8JLgxVL07PRt0NKlCILLFSbuXnrel xWxl/DK/G3X95mNLk20xKHlT6KkRPdW45dSazk5tmGqAVXLAZVYpyu/4mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7N8qfYxLUhp2/4lk7Bp+xWgeEaMB8GA1UdIwQY MBaAFHKSImVn2nLdhog8rdXz3m/9WzVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3BJaVpXZmFjdDJHaUR5dDFmUGViXzFiTlhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80ZWMyMTctZThkNy00ZTgwLTg3Y2Qt MDM5ZGU3ODRkOTQxLzEvY3BJaVpXZmFjdDJHaUR5dDFmUGViXzFiTlhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC80ZWMyMTctZThkNy00ZTgwLTg3Y2QtMDM5ZGU3ODRkOTQx LzEvY3BJaVpXZmFjdDJHaUR5dDFmUGViXzFiTlhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEUBpAJB XqlckqtF4oGn3jN4rrXHMvdeRymEEbWC1WBdeLVdAhyOUG/7CmDfhRTX6OicWY1Y j5cQLRPNn1hyKJBW0P0xworoFZfXjttmQ7ucDRD3+GQZE0KE621xihOSaFabPUfU /1Qj6CM1zJacVYFMEXbX48stnICyJUvnJxYwCsM7repHX6CtgBHi70n+8n3O5Ayt 9+rMq0Dp7p6tkG4qwH1EKlD8mRroEIjbQzjUbQW/w6ZRpNsIjeRVyQfQ2YCxrs5U reNVNBe0zoXCtPAbrHfVya1Vm9CHwrJG/zZgE7W0MM/G5t6FNeQDGfAY9/Q0xrda ivU6sT7egh40sA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:26:22 2025 by rpki-client