This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft File: Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft (raw, json) Hash identifier: 45K3acyzmvEQU6E5HHtHQfgr5dKfjLn5I8l86zimOw4= Subject key identifier: 9B:50:2C:87:D0:DC:85:EF:B7:1C:6C:53:F2:52:92:AA:BA:D1:1C:4F Authority key identifier: 0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A Certificate issuer: /CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a Certificate serial: 019B329EEBF078B1431E656DD0B07EEBF75E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft Manifest number: 0C17 Signing time: Thu 18 Dec 2025 18:00:34 +0000 Manifest this update: Thu 18 Dec 2025 18:00:34 +0000 Manifest next update: Fri 19 Dec 2025 18:00:34 +0000 Files and hashes: 1: Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl (hash: ajNxpzGRfUbxQUWjj/guSQMqJtNbPlz9s3EHUbCZmA4=) 2: bscorJtE41igLaTAQbtgAQqBxz0.roa (hash: sGg8Ckzp0oPzFQ9Hy7BsC5B5QG6ZfSY1AxKv6j6SlLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:9e:eb:f0:78:b1:43:1e:65:6d:d0:b0:7e:eb:f7:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a Validity Not Before: Dec 18 18:00:34 2025 GMT Not After : Dec 19 18:00:34 2025 GMT Subject: CN=9b502c87d0dc85efb71c6c53f25292aabad11c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:20:c5:34:91:b7:00:a5:a9:a1:56:69:5a:82: 90:00:b2:08:89:91:93:83:9d:3c:e8:e5:0d:4d:97: 97:a6:69:06:a2:36:46:4e:98:e0:76:21:e8:46:98: 81:48:17:34:06:f0:a4:63:c0:00:4c:00:45:be:0f: f7:43:56:77:ab:91:5f:23:71:6e:38:50:d2:d6:9d: 4d:51:86:16:3c:d1:8a:e1:d4:c9:78:22:25:56:59: 5b:75:9d:4f:1e:15:61:a6:df:13:49:05:69:76:56: 90:74:b3:ce:a0:9b:1c:39:62:59:d1:a8:75:95:6a: 98:af:85:d5:56:e5:bd:ea:3e:ce:81:77:93:8a:bf: 49:0d:df:06:f0:0b:ad:da:d3:79:91:1e:68:54:df: 35:6f:a5:eb:83:5b:e4:ac:1b:02:34:b8:ee:67:dc: 27:5b:e0:66:16:3c:69:80:9c:a9:0d:ef:c2:cb:0c: 43:e3:17:ca:b6:bb:a2:89:e8:3b:06:62:67:94:4c: 4d:b0:5b:5a:54:47:f6:d3:92:cb:1b:c5:4f:2b:05: 19:e1:f2:bb:72:30:ae:7b:9e:83:9c:3f:40:4a:7f: d6:29:e5:4c:0f:9d:21:61:9b:3f:7e:21:4b:77:c5: 15:f5:6b:0b:67:0c:5f:ef:e0:92:46:3b:08:65:d4: 61:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:50:2C:87:D0:DC:85:EF:B7:1C:6C:53:F2:52:92:AA:BA:D1:1C:4F X509v3 Authority Key Identifier: keyid:0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:9b:af:cc:20:ec:7d:54:af:b6:b8:5e:89:d1:12:a7:21:a3: 86:25:fc:bd:9d:f8:ae:a6:48:48:b3:e2:00:73:54:56:04:9b: 47:b0:53:e5:e7:35:d7:f4:99:ba:04:4d:f9:12:de:a0:70:81: fd:c4:4e:5b:7f:ac:f6:cc:a6:00:e5:e4:f3:e7:d4:cb:b5:3d: d9:9e:79:3a:ca:7a:18:97:d7:3a:25:67:cf:32:5e:b1:98:34: 44:2a:73:d1:a9:68:bc:dc:c8:21:55:82:d7:a4:87:69:3e:8c: 67:96:0b:26:7f:ae:f8:fa:d2:ad:f8:16:25:77:6d:e0:f8:3e: 6b:58:f8:64:d9:fa:ed:63:78:e4:98:0a:b3:d5:1f:0b:dd:b9: d4:cb:78:60:ab:4b:47:cf:9b:d6:3c:a3:28:a1:56:36:65:d4: bc:08:17:24:0f:95:f7:7b:35:e3:25:01:2b:6e:b0:9b:9e:a1: 1e:be:3c:90:2a:37:6a:f7:86:74:cd:19:db:a0:69:1e:bc:bc: 30:e2:03:c4:28:06:b4:51:d3:bd:76:77:43:a1:9b:f3:5b:33: 61:f0:49:17:1f:70:18:02:3f:dd:c0:f7:e3:99:ed:34:b9:65: 8d:a6:b1:04:7b:26:0b:1f:12:90:a9:67:77:b7:66:26:20:ee: a5:c5:15:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsynuvweLFDHmVt0LB+6/deMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZmU5ZDY2NjU1YjVmZDI3YjJjMTdjYTk2ODU2NTBkNTNm M2JiMGEwHhcNMjUxMjE4MTgwMDM0WhcNMjUxMjE5MTgwMDM0WjAzMTEwLwYDVQQD Eyg5YjUwMmM4N2QwZGM4NWVmYjcxYzZjNTNmMjUyOTJhYWJhZDExYzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriDFNJG3AKWpoVZpWoKQALIIiZGT g5086OUNTZeXpmkGojZGTpjgdiHoRpiBSBc0BvCkY8AATABFvg/3Q1Z3q5FfI3Fu OFDS1p1NUYYWPNGK4dTJeCIlVllbdZ1PHhVhpt8TSQVpdlaQdLPOoJscOWJZ0ah1 lWqYr4XVVuW96j7OgXeTir9JDd8G8Aut2tN5kR5oVN81b6Xrg1vkrBsCNLjuZ9wn W+BmFjxpgJypDe/CywxD4xfKtruiieg7BmJnlExNsFtaVEf205LLG8VPKwUZ4fK7 cjCue56DnD9ASn/WKeVMD50hYZs/fiFLd8UV9WsLZwxf7+CSRjsIZdRhYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtQLIfQ3IXvtxxsU/JSkqq60RxPMB8GA1UdIwQY MBaAFAr+nWZlW1/SeywXypaFZQ1T87sKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3Y2ZFptVmJYOUo3TEJmS2xvVmxEVlB6dXdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84MWVmMmQtYWU2Ni00NzM5LThkZWIt YmRjMjQ4YTZmNTY1LzEvQ3Y2ZFptVmJYOUo3TEJmS2xvVmxEVlB6dXdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84MWVmMmQtYWU2Ni00NzM5LThkZWItYmRjMjQ4YTZmNTY1 LzEvQ3Y2ZFptVmJYOUo3TEJmS2xvVmxEVlB6dXdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJuvzCDs fVSvtrheidESpyGjhiX8vZ34rqZISLPiAHNUVgSbR7BT5ec11/SZugRN+RLeoHCB /cROW3+s9symAOXk8+fUy7U92Z55Osp6GJfXOiVnzzJesZg0RCpz0alovNzIIVWC 16SHaT6MZ5YLJn+u+PrSrfgWJXdt4Pg+a1j4ZNn67WN45JgKs9UfC9251Mt4YKtL R8+b1jyjKKFWNmXUvAgXJA+V93s14yUBK26wm56hHr48kCo3aveGdM0Z26BpHry8 MOIDxCgGtFHTvXZ3Q6Gb81szYfBJFx9wGAI/3cD345ntNLlljaaxBHsmCx8SkKln d7dmJiDupcUVhQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:26:49 2025 by rpki-client