This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json) Hash identifier: 10oLP/RD7zhIfoKdtzVFbaUjX+Z5QOjmLjRuqnsGmmU= Subject key identifier: AE:CA:E2:53:BD:BF:39:4E:89:A2:0F:C8:85:86:73:03:75:AD:C7:CC Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9 Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9 Certificate serial: 019B3E357AE5EC936CF4CECC0780D8FA94E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft Manifest number: 0E98 Signing time: Sun 21 Dec 2025 00:00:50 +0000 Manifest this update: Sun 21 Dec 2025 00:00:50 +0000 Manifest next update: Mon 22 Dec 2025 00:00:50 +0000 Files and hashes: 1: 9aAyo6rprahdH9ZSUtgycjgaaNQ.asa (hash: jHUBARdI8pSANeu1sJwWAig2I7vT4TtQr3+sXIljZgg=) 2: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: YOgv7D0X1EHddiH3cruMeifS25SioThWWIFMllBLElc=) 3: a9IIp-lXURHEn6uSzx2MIUjwzYE.roa (hash: YetmOWjx1SbjgITF8TkhpSIqAkvzS7Zo40g3IaxEfoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:7a:e5:ec:93:6c:f4:ce:cc:07:80:d8:fa:94:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9 Validity Not Before: Dec 21 00:00:50 2025 GMT Not After : Dec 22 00:00:50 2025 GMT Subject: CN=aecae253bdbf394e89a20fc88586730375adc7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:6c:b0:c1:3b:fb:f0:e9:83:58:0f:a7:91: 57:73:ad:9a:c6:6b:42:70:3d:69:ce:4c:9c:1a:4e: 7a:3d:c0:2a:23:50:c5:2f:42:80:a4:dd:b2:17:9a: b5:84:82:40:b0:94:51:cd:90:67:5b:8f:b1:a7:88: d8:28:16:58:c5:46:4c:e7:1b:b4:0c:5f:fc:e8:d6: 86:e8:2e:22:f2:5d:a7:3f:1d:e8:eb:03:72:86:c6: d7:fc:e0:ad:94:a2:aa:43:6c:c9:07:a2:76:c5:45: fb:74:58:87:2f:c9:ad:56:63:5c:5d:da:14:db:a7: 56:e3:fa:c1:32:d7:0e:dc:70:35:77:af:42:6b:3f: ee:5b:ae:57:70:3d:30:84:fc:d7:4b:91:bb:12:b0: 5f:a2:15:cf:fe:80:6a:ff:d4:d9:68:c4:ce:25:06: e5:21:b4:4a:d7:e0:cb:eb:71:c8:16:94:00:e7:b5: f1:0e:10:9e:21:f3:c3:5c:39:33:5b:2c:ba:14:90: 6e:b5:6e:f5:c0:f7:6c:57:19:fe:52:1e:50:25:70: 48:b9:bf:3a:62:a0:dd:11:a1:b4:50:5a:b9:59:ab: a5:30:ad:9e:b1:3f:da:04:25:2e:f9:5c:a5:32:21: 7f:b3:63:f0:29:f4:8d:1f:77:ce:52:5d:9c:e8:91: e6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CA:E2:53:BD:BF:39:4E:89:A2:0F:C8:85:86:73:03:75:AD:C7:CC X509v3 Authority Key Identifier: keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:65:ec:f6:70:5b:5a:ac:99:66:ae:5c:ef:4f:d4:86:e0:ef: 32:04:f0:46:61:4b:83:6e:54:6b:98:e1:df:0f:20:79:c2:d2: ff:73:bf:46:9f:75:9f:39:25:07:2b:19:f2:d6:d8:db:29:d2: 80:16:92:12:98:a3:0e:51:e8:84:2b:64:00:f4:b7:fc:7f:d4: 26:c7:d0:11:be:70:fb:b7:3c:22:45:2d:5f:f7:76:05:48:6e: 38:7d:0d:5a:29:31:18:a4:21:75:7a:19:c8:c6:5f:dc:d0:4e: 10:5f:e2:5f:98:85:73:39:90:29:75:de:90:fb:b7:bb:cf:ca: 02:62:1d:c5:66:09:c6:55:1b:1a:ac:00:99:c9:d4:71:d9:92: a6:f9:c2:de:da:2d:48:ef:69:df:89:6e:cc:9b:47:37:85:98: 49:a9:87:bf:32:ca:68:c5:89:5d:c5:1d:33:6c:a6:a1:80:4a: ea:08:55:b6:44:3c:37:ad:09:c0:9f:d8:1d:ae:b1:e8:c7:97: ab:99:af:12:6e:2f:b1:63:0f:62:22:12:7e:64:2d:17:10:0a: ef:26:4e:a9:2a:01:eb:af:8a:b6:47:a7:80:18:d1:ac:4b:ec: 27:50:89:e3:eb:8e:66:99:c7:fe:12:ec:a3:d9:c0:ed:6f:ac: 8f:28:0e:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NXrl7JNs9M7MB4DY+pTmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmNhYWY4ZDE3ZGQxYTY1Nzk1ZjcxNGIyNjdmMWJjZTIx OTM4YjkwHhcNMjUxMjIxMDAwMDUwWhcNMjUxMjIyMDAwMDUwWjAzMTEwLwYDVQQD EyhhZWNhZTI1M2JkYmYzOTRlODlhMjBmYzg4NTg2NzMwMzc1YWRjN2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJhssME7+/Dpg1gPp5FXc62axmtC cD1pzkycGk56PcAqI1DFL0KApN2yF5q1hIJAsJRRzZBnW4+xp4jYKBZYxUZM5xu0 DF/86NaG6C4i8l2nPx3o6wNyhsbX/OCtlKKqQ2zJB6J2xUX7dFiHL8mtVmNcXdoU 26dW4/rBMtcO3HA1d69Caz/uW65XcD0whPzXS5G7ErBfohXP/oBq/9TZaMTOJQbl IbRK1+DL63HIFpQA57XxDhCeIfPDXDkzWyy6FJButW71wPdsVxn+Uh5QJXBIub86 YqDdEaG0UFq5WaulMK2esT/aBCUu+VylMiF/s2PwKfSNH3fOUl2c6JHm+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7K4lO9vzlOiaIPyIWGcwN1rcfMMB8GA1UdIwQY MBaAFAj8qvjRfdGmV5X3FLJn8bziGTi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgt NzdlZWVhZjcxZDA4LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgtNzdlZWVhZjcxZDA4 LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGXs9nBb WqyZZq5c70/UhuDvMgTwRmFLg25Ua5jh3w8gecLS/3O/Rp91nzklBysZ8tbY2ynS gBaSEpijDlHohCtkAPS3/H/UJsfQEb5w+7c8IkUtX/d2BUhuOH0NWikxGKQhdXoZ yMZf3NBOEF/iX5iFczmQKXXekPu3u8/KAmIdxWYJxlUbGqwAmcnUcdmSpvnC3tot SO9p34luzJtHN4WYSamHvzLKaMWJXcUdM2ymoYBK6ghVtkQ8N60JwJ/YHa6x6MeX q5mvEm4vsWMPYiISfmQtFxAK7yZOqSoB66+KtkengBjRrEvsJ1CJ4+uOZpnH/hLs o9nA7W+sjygOHg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:01:30 2025 by rpki-client