This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft File: cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft (raw, json) Hash identifier: /23L4zWSzcJMPDbLpCXZ+0n7W030QzV5OMHD4q2y4nU= Subject key identifier: 50:2F:9E:4A:5F:AB:02:A5:FC:1E:6A:1F:95:79:C9:A8:26:16:C1:3E Authority key identifier: 72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B Certificate issuer: /CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b Certificate serial: 019B74B5AA8B40E3D40D5B1FCD96FC11C30A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft Manifest number: 1204 Signing time: Wed 31 Dec 2025 14:00:21 +0000 Manifest this update: Wed 31 Dec 2025 14:00:21 +0000 Manifest next update: Thu 01 Jan 2026 14:00:21 +0000 Files and hashes: 1: cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl (hash: QfdBjhiYG20yxVvrCDd7gg53Ca2EfCu7p/3UsW6r75w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 14:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:b5:aa:8b:40:e3:d4:0d:5b:1f:cd:96:fc:11:c3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b Validity Not Before: Dec 31 14:00:21 2025 GMT Not After : Jan 1 14:00:21 2026 GMT Subject: CN=502f9e4a5fab02a5fc1e6a1f9579c9a82616c13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:de:29:67:11:e2:0a:04:65:36:7a:e4:e4:d2: 51:de:98:32:f2:f6:b7:b9:92:f0:72:51:08:18:88: 67:88:10:3a:66:03:b3:28:67:10:3c:ad:48:3d:aa: 72:2c:dc:b8:a9:5f:8e:31:c1:87:c8:8a:a6:0e:9b: 5f:58:08:f2:89:3c:4d:cd:1a:31:58:f9:51:af:af: 92:87:04:eb:90:d9:00:0a:2b:92:82:f8:7c:b6:52: 97:82:0c:a6:9a:cc:4e:bd:d7:44:ac:e7:92:8a:e5: 78:d7:05:a1:b5:7e:e0:c9:59:58:54:f0:ed:57:a2: 80:5e:f6:18:f4:f8:00:6e:6d:ff:1a:d5:9a:e5:f1: 8c:ca:a9:ad:37:4e:b9:74:ce:8d:9f:83:da:ca:e5: 09:e5:77:b6:68:55:92:6d:27:1b:75:b4:0b:a9:41: 15:ca:23:1e:00:2b:7d:ed:e6:fc:6f:03:ae:2f:90: 71:02:b6:7d:d0:8f:a2:54:b3:2c:90:98:fa:fc:92: ef:8b:91:fa:26:41:e9:84:46:18:88:1d:87:39:fd: e0:92:69:40:67:67:28:df:20:83:d9:76:33:a0:be: 1f:0f:c7:b6:45:4a:8d:c1:2e:0e:45:ee:2c:11:c6: 36:f9:4d:9a:bd:3d:d4:5a:b2:66:2d:c6:ee:cd:21: ec:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2F:9E:4A:5F:AB:02:A5:FC:1E:6A:1F:95:79:C9:A8:26:16:C1:3E X509v3 Authority Key Identifier: keyid:72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:99:e2:2c:0c:26:19:76:c6:af:41:95:3f:04:08:03:6d:91: 0f:e5:0b:96:9b:e7:47:a1:63:8f:c8:b8:6c:f7:46:f4:2e:19: bb:8e:e2:51:fc:a6:bb:8d:9e:b7:fd:90:d6:59:49:cc:7c:c4: c2:0d:b5:f3:5c:db:64:25:2d:85:50:0b:a1:67:76:ad:ae:9e: d3:3b:f0:57:a5:5e:32:0b:7a:58:eb:e8:54:59:8c:5f:58:ca: 4a:aa:4f:b2:b4:e6:e3:14:5b:90:ba:34:e3:2e:ac:04:5a:4e: d8:67:6b:7d:99:49:4b:5d:9f:16:f0:e2:96:6a:11:7f:e3:ea: bd:95:46:79:dd:a1:53:0a:78:3d:aa:a9:f8:4b:58:6b:ad:2b: 73:42:56:87:c4:e2:d8:e9:b2:13:ef:09:13:56:9c:0a:20:43: c3:a2:08:87:ee:0e:87:23:0f:19:45:67:c7:cf:20:f4:9c:e1: b4:00:3e:43:cd:9a:50:bc:f4:dc:43:70:68:8f:5a:72:fa:6b: f0:6a:c5:38:43:85:fa:62:25:f0:4b:7c:41:c2:7e:e4:a8:61: b0:48:f3:6f:ae:ce:ea:1d:f9:d5:ca:57:91:99:2e:9d:dd:df: 67:9c:be:02:f8:22:c2:10:34:46:8e:6a:9f:e8:3a:03:0f:00: 76:e4:b4:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0taqLQOPUDVsfzZb8EcMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNmJkZjZkZmE2NDk5ZTJjNGFhZGVlZTEwNjY0M2RhMDFj MGZmOGIwHhcNMjUxMjMxMTQwMDIxWhcNMjYwMTAxMTQwMDIxWjAzMTEwLwYDVQQD Eyg1MDJmOWU0YTVmYWIwMmE1ZmMxZTZhMWY5NTc5YzlhODI2MTZjMTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA794pZxHiCgRlNnrk5NJR3pgy8va3 uZLwclEIGIhniBA6ZgOzKGcQPK1IPapyLNy4qV+OMcGHyIqmDptfWAjyiTxNzRox WPlRr6+ShwTrkNkACiuSgvh8tlKXggymmsxOvddErOeSiuV41wWhtX7gyVlYVPDt V6KAXvYY9PgAbm3/GtWa5fGMyqmtN065dM6Nn4PayuUJ5Xe2aFWSbScbdbQLqUEV yiMeACt97eb8bwOuL5BxArZ90I+iVLMskJj6/JLvi5H6JkHphEYYiB2HOf3gkmlA Z2co3yCD2XYzoL4fD8e2RUqNwS4ORe4sEcY2+U2avT3UWrJmLcbuzSHsrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAvnkpfqwKl/B5qH5V5yagmFsE+MB8GA1UdIwQY MBaAFHJr3236ZJnixKre7hBmQ9oBwP+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMDVmMjAtNjM1Zi00ZTI1LThiNmEt NzViNTQ5ZThiYjRkLzEvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMDVmMjAtNjM1Zi00ZTI1LThiNmEtNzViNTQ5ZThiYjRk LzEvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJniLAwm GXbGr0GVPwQIA22RD+ULlpvnR6Fjj8i4bPdG9C4Zu47iUfymu42et/2Q1llJzHzE wg2181zbZCUthVALoWd2ra6e0zvwV6VeMgt6WOvoVFmMX1jKSqpPsrTm4xRbkLo0 4y6sBFpO2GdrfZlJS12fFvDilmoRf+PqvZVGed2hUwp4Paqp+EtYa60rc0JWh8Ti 2OmyE+8JE1acCiBDw6IIh+4OhyMPGUVnx88g9JzhtAA+Q82aULz03ENwaI9acvpr 8GrFOEOF+mIl8Et8QcJ+5KhhsEjzb67O6h351cpXkZkund3fZ5y+AvgiwhA0Ro5q n+g6Aw8AduS0ow== -----END CERTIFICATE-----Generated at Wed Dec 31 21:05:36 2025 by rpki-client