This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft File: cpnOZKDxYk17stKWnlwRrbqlSFw.mft (raw, json) Hash identifier: qwtO73rasJZ/I4ZeDN0rVHY3LxVwOOWYaqKzqT7/St4= Subject key identifier: 3C:63:AE:CA:54:0A:10:42:DB:99:FB:DF:A7:EF:B5:3C:AE:71:DD:9E Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C Certificate issuer: /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c Certificate serial: 019B27E4B9DA17D1900CBF8BCB186F857E15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft Manifest number: 0BA5 Signing time: Tue 16 Dec 2025 16:00:59 +0000 Manifest this update: Tue 16 Dec 2025 16:00:59 +0000 Manifest next update: Wed 17 Dec 2025 16:00:59 +0000 Files and hashes: 1: cpnOZKDxYk17stKWnlwRrbqlSFw.crl (hash: +oLNYNCAi3DH0KBitYA97LgvNjMQzzZJzWIIUb33EV8=) 2: hGLXMAJyrLLUknw2I4rIa47GY5A.roa (hash: 2PfIq+E4/YZaE6ygL6f+ygB4E8ocD+aiVc7FkOqVsVA=) 3: vbTBxrwzB75awQdnuHxvUmGSxrI.roa (hash: BNvntPsh9Cs3tqn2zXlS+7ZhQF3J782Zk6D2d5jtV8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:b9:da:17:d1:90:0c:bf:8b:cb:18:6f:85:7e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c Validity Not Before: Dec 16 16:00:59 2025 GMT Not After : Dec 17 16:00:59 2025 GMT Subject: CN=3c63aeca540a1042db99fbdfa7efb53cae71dd9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4e:40:b1:59:85:4e:38:c1:ba:ce:5a:c6:a4: 11:81:68:bf:11:ce:fe:d8:40:38:f0:67:03:fe:53: e3:30:18:07:9d:73:76:ca:a4:f5:7f:e8:61:d9:0b: d0:38:e5:e1:54:f3:4e:a4:cc:1d:3f:7a:48:33:77: eb:71:a3:34:fd:87:b8:9e:74:17:bd:11:2e:f6:c7: f3:91:fc:c0:9b:a4:56:57:43:2d:45:1a:da:04:21: 4a:2a:62:9d:2a:8f:0b:7a:be:6c:be:eb:11:de:a5: b5:71:45:b6:70:b7:a0:8f:93:59:8d:f8:a0:65:58: 48:7f:51:e2:3d:17:cf:d3:97:f2:60:86:11:2e:ce: 90:c8:a3:35:b6:11:a2:e2:41:03:95:67:f1:df:94: a1:dd:87:13:b0:5d:ee:24:25:3a:ad:20:1f:f3:1d: fb:f8:79:a7:a6:3c:d4:37:8e:57:41:9a:cb:fc:b5: 23:e6:9f:dd:62:46:8a:fc:85:ff:68:12:34:25:4c: 30:b4:1d:ba:5d:c5:00:7d:bd:60:f8:c6:0f:e2:1f: bb:0d:7f:2a:ef:b3:7b:8a:d2:83:9a:28:dd:43:87: 00:41:8b:40:f5:b5:fd:21:9d:9b:55:2a:31:db:92: 17:56:1a:0c:0c:c7:ec:be:9f:d8:15:52:21:23:29: 88:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:63:AE:CA:54:0A:10:42:DB:99:FB:DF:A7:EF:B5:3C:AE:71:DD:9E X509v3 Authority Key Identifier: keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0b:d0:41:c0:fe:d0:04:03:a5:68:1b:b8:20:ab:6e:f3:88: dc:95:10:1e:a7:87:7f:7c:72:58:76:9c:0b:9a:d6:ab:75:0e: 4b:75:74:4a:77:56:fd:da:1b:72:ff:56:bc:f5:7b:29:00:ec: 71:d7:9d:93:73:25:b6:3d:9b:de:9e:1f:c2:bf:f6:83:ef:2e: 60:94:90:85:38:f0:04:2b:3a:8e:df:01:3b:3d:2c:89:6d:41: 0b:13:3b:7f:07:27:bd:40:52:f0:c5:3c:0a:b3:54:67:a3:95: 0a:c0:5f:8c:87:8d:56:84:d7:8e:ee:4f:ec:71:25:2e:d8:9a: 8e:f2:ad:e1:db:32:a1:18:e5:61:9c:73:dd:27:ca:3b:1d:2e: 68:14:96:cb:b2:cd:8d:f0:0d:41:2c:06:50:a2:0a:b8:f4:21: ff:f6:a5:7d:dd:fd:a3:75:bc:8b:28:e3:f9:0e:71:71:04:f7: 2d:18:e2:5e:37:c7:40:7b:b7:30:94:ba:4e:74:d5:62:06:95: 26:ff:dd:cb:31:e1:35:e8:7d:ba:7c:5f:41:45:28:2d:b2:98: e3:52:62:85:2a:29:c3:94:47:f8:5c:72:15:5c:3b:3e:1a:e4: 19:9c:04:8f:64:52:6d:d2:2a:51:28:43:ff:35:35:de:ac:b6: 86:1c:8c:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5LnaF9GQDL+LyxhvhX4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOTljZTY0YTBmMTYyNGQ3YmIyZDI5NjllNWMxMWFkYmFh NTQ4NWMwHhcNMjUxMjE2MTYwMDU5WhcNMjUxMjE3MTYwMDU5WjAzMTEwLwYDVQQD EygzYzYzYWVjYTU0MGExMDQyZGI5OWZiZGZhN2VmYjUzY2FlNzFkZDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU5AsVmFTjjBus5axqQRgWi/Ec7+ 2EA48GcD/lPjMBgHnXN2yqT1f+hh2QvQOOXhVPNOpMwdP3pIM3frcaM0/Ye4nnQX vREu9sfzkfzAm6RWV0MtRRraBCFKKmKdKo8Ler5svusR3qW1cUW2cLegj5NZjfig ZVhIf1HiPRfP05fyYIYRLs6QyKM1thGi4kEDlWfx35Sh3YcTsF3uJCU6rSAf8x37 +HmnpjzUN45XQZrL/LUj5p/dYkaK/IX/aBI0JUwwtB26XcUAfb1g+MYP4h+7DX8q 77N7itKDmijdQ4cAQYtA9bX9IZ2bVSox25IXVhoMDMfsvp/YFVIhIymIVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxjrspUChBC25n736fvtTyucd2eMB8GA1UdIwQY MBaAFHKZzmSg8WJNe7LSlp5cEa26pUhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jMjBmYmEtNWI2Ny00MzhjLWFiMDAt YzdlYjM0ZTJkY2E2LzEvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jMjBmYmEtNWI2Ny00MzhjLWFiMDAtYzdlYjM0ZTJkY2E2 LzEvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQvQQcD+ 0AQDpWgbuCCrbvOI3JUQHqeHf3xyWHacC5rWq3UOS3V0SndW/dobcv9WvPV7KQDs cdedk3Mltj2b3p4fwr/2g+8uYJSQhTjwBCs6jt8BOz0siW1BCxM7fwcnvUBS8MU8 CrNUZ6OVCsBfjIeNVoTXju5P7HElLtiajvKt4dsyoRjlYZxz3SfKOx0uaBSWy7LN jfANQSwGUKIKuPQh//alfd39o3W8iyjj+Q5xcQT3LRjiXjfHQHu3MJS6TnTVYgaV Jv/dyzHhNeh9unxfQUUoLbKY41JihSopw5RH+FxyFVw7PhrkGZwEj2RSbdIqUShD /zU13qy2hhyMYQ== -----END CERTIFICATE-----Generated at Tue Dec 16 23:19:52 2025 by rpki-client