This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json) Hash identifier: Xp7dne4UhvKZ7/AntT9y0yS9goTPIMboDfWE6yWRb6o= Subject key identifier: 72:E8:56:58:64:F3:76:5E:EF:C7:9E:B7:03:74:45:49:32:7D:51:0F Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9 Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9 Certificate serial: 019B3BA200425E038B6780C8C0C404A5199F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft Manifest number: 0327 Signing time: Sat 20 Dec 2025 12:00:31 +0000 Manifest this update: Sat 20 Dec 2025 12:00:31 +0000 Manifest next update: Sun 21 Dec 2025 12:00:31 +0000 Files and hashes: 1: 5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa (hash: Ba0mjq3pimajTCvvrrrZyoHBHvgCNhQury7Kq+n9Wpw=) 2: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: 7xBiWM8DYNH6k0wo91h4xbn/pwFhshiyCVPn3f7ik1A=) 3: ejCYeubtEX2rMSmkNAwpyfa0Enw.roa (hash: 4hn9ccLxIO+b+OCd227Erjt+kM9+/9+bRDsSA2RYfoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:00:42:5e:03:8b:67:80:c8:c0:c4:04:a5:19:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9 Validity Not Before: Dec 20 12:00:31 2025 GMT Not After : Dec 21 12:00:31 2025 GMT Subject: CN=72e8565864f3765eefc79eb703744549327d510f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:b8:f3:29:48:18:d5:f0:19:2e:12:8f:f5: a1:01:8c:c6:c1:a8:96:3c:ad:f2:3d:47:bf:14:f4: 1b:22:3c:ff:a6:e5:8d:6d:71:ba:33:62:54:94:3d: 9c:4c:0c:e8:f6:6c:33:62:96:c1:89:fc:9b:52:df: aa:f6:28:95:50:71:80:06:60:07:1e:60:da:19:54: 5c:e4:2c:03:cb:68:65:4b:6b:a6:be:11:9a:b7:c7: 7d:a1:32:77:22:34:7e:06:15:3c:7d:c9:fc:59:52: a7:f4:38:2e:02:40:aa:4d:83:3e:1c:44:37:2d:10: 09:8e:56:08:f7:8e:74:6e:b3:5c:06:2c:65:02:57: 1d:e5:10:91:fc:95:3e:80:ba:6f:c5:be:1f:1e:d5: 95:12:ab:29:26:ae:30:94:ac:3d:b7:17:6e:62:ae: c2:9a:ab:25:c1:fd:54:1b:e3:4f:91:d5:6e:0f:f9: 20:b2:e3:96:13:97:99:d1:06:aa:0b:c8:ec:c9:b1: be:7e:9e:53:15:be:18:a5:da:14:ad:d3:fa:5b:91: 5c:15:01:b5:6d:36:9a:45:6f:86:f6:b3:01:ff:6f: c1:bf:5c:9f:54:c9:54:4b:d5:b8:1e:42:51:c5:d6: 88:99:6d:85:1f:e6:d7:a3:90:f0:b7:56:9c:d1:7b: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E8:56:58:64:F3:76:5E:EF:C7:9E:B7:03:74:45:49:32:7D:51:0F X509v3 Authority Key Identifier: keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:1e:35:7d:b6:b5:50:df:a2:ff:f5:3c:01:82:af:65:a8:9c: 30:73:a3:01:ce:b8:c3:50:94:f8:5e:d8:b9:aa:b8:20:5b:79: e5:bd:97:1f:86:1b:ed:48:8d:52:8c:50:92:d1:4b:24:48:15: 1a:0d:97:56:3e:82:b7:50:2d:95:e0:ce:0c:42:ae:46:b6:9f: 6e:f7:2b:10:57:31:e1:06:a3:81:1d:b1:02:08:9d:22:71:37: d8:d7:08:9f:f6:41:d5:5b:c6:8a:b4:bc:5b:cb:09:0e:c6:59: 10:b2:c1:23:09:e8:c0:1e:e0:a9:c2:82:80:d9:92:a9:9e:e8: 24:53:28:27:c9:08:06:8c:18:df:59:f0:a9:03:ab:6d:a5:96: 24:cd:19:81:23:20:1a:c3:29:eb:47:43:93:e8:20:41:be:7f: 0c:d8:7d:89:48:81:2e:39:4c:f2:6b:5d:74:0b:6e:ca:91:c9: 2e:3a:e3:ff:91:14:73:76:43:b1:3e:18:c1:bd:a5:6b:d4:94: 10:3b:e4:2b:5e:6b:00:44:8c:a9:72:a0:12:49:81:cb:d5:5f: d5:bd:6c:e0:63:fa:ed:37:fb:fb:b2:ab:97:74:6f:3c:3a:33: d6:b1:97:77:2c:02:a0:d3:cd:1e:4c:39:f9:ed:b8:2d:0d:d5: 69:09:23:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ogBCXgOLZ4DIwMQEpRmfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOTM0ZmMzY2FkYWRlNmYwNzkwN2FlYjZlMGJlNWE5ZWM0 NDA3YjkwHhcNMjUxMjIwMTIwMDMxWhcNMjUxMjIxMTIwMDMxWjAzMTEwLwYDVQQD Eyg3MmU4NTY1ODY0ZjM3NjVlZWZjNzllYjcwMzc0NDU0OTMyN2Q1MTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4i48ylIGNXwGS4Sj/WhAYzGwaiW PK3yPUe/FPQbIjz/puWNbXG6M2JUlD2cTAzo9mwzYpbBifybUt+q9iiVUHGABmAH HmDaGVRc5CwDy2hlS2umvhGat8d9oTJ3IjR+BhU8fcn8WVKn9DguAkCqTYM+HEQ3 LRAJjlYI9450brNcBixlAlcd5RCR/JU+gLpvxb4fHtWVEqspJq4wlKw9txduYq7C mqslwf1UG+NPkdVuD/kgsuOWE5eZ0QaqC8jsybG+fp5TFb4YpdoUrdP6W5FcFQG1 bTaaRW+G9rMB/2/Bv1yfVMlUS9W4HkJRxdaImW2FH+bXo5Dwt1ac0XvHuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLoVlhk83Ze78eetwN0RUkyfVEPMB8GA1UdIwQY MBaAFHKTT8PK2t5vB5B6624L5ansRAe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jNDlkMTktOGM3OS00Zjc3LWI0NTAt YzA4Y2YxOTdhMTBjLzEvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9jNDlkMTktOGM3OS00Zjc3LWI0NTAtYzA4Y2YxOTdhMTBj LzEvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmB41fba1 UN+i//U8AYKvZaicMHOjAc64w1CU+F7Yuaq4IFt55b2XH4Yb7UiNUoxQktFLJEgV Gg2XVj6Ct1AtleDODEKuRrafbvcrEFcx4QajgR2xAgidInE32NcIn/ZB1VvGirS8 W8sJDsZZELLBIwnowB7gqcKCgNmSqZ7oJFMoJ8kIBowY31nwqQOrbaWWJM0ZgSMg GsMp60dDk+ggQb5/DNh9iUiBLjlM8mtddAtuypHJLjrj/5EUc3ZDsT4Ywb2la9SU EDvkK15rAESMqXKgEkmBy9Vf1b1s4GP67Tf7+7Krl3RvPDoz1rGXdywCoNPNHkw5 +e24LQ3VaQkjRA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:46:07 2025 by rpki-client