This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json) Hash identifier: aYeJ6DFrsWhieWiX1WZPB99ccEqoJDIcttRKXrG30wQ= Subject key identifier: 59:F9:59:0A:AC:1F:FE:3B:68:42:0B:C5:03:43:84:12:D1:83:00:E4 Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa Certificate serial: 019B3C7F6E2EB3ABEAB7AB47FC3DFE9C6F9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 16:02:22 +0000 Manifest this update: Sat 20 Dec 2025 16:02:22 +0000 Manifest next update: Sun 21 Dec 2025 16:02:22 +0000 Files and hashes: 1: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: 90iXGGromcLRl645zIvcsIm0XsFKHC9pzxLre7i5EYg=) 2: dsLG2j4EWWmiv7tptAS2-fkcXU0.roa (hash: ADLTdWLJS9zEs/uQjjxNH0vaJWWshki3RYpjC8+gtcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:6e:2e:b3:ab:ea:b7:ab:47:fc:3d:fe:9c:6f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa Validity Not Before: Dec 20 16:02:22 2025 GMT Not After : Dec 21 16:02:22 2025 GMT Subject: CN=59f9590aac1ffe3b68420bc503438412d18300e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:e6:4d:24:9c:61:40:bf:55:83:05:0f:c8: 6c:2a:4c:2b:bf:21:c2:2f:fc:3c:c1:94:1d:1a:87: f8:73:5c:33:8f:f3:2d:74:3b:7f:26:f4:b1:42:9f: 9f:47:20:2a:dc:9d:e1:cd:a0:14:8b:6d:27:2f:e1: 82:33:b6:7e:8b:cc:7c:c5:bc:6e:d0:6f:93:ed:28: 18:56:5e:9b:55:2d:c0:f4:da:4a:de:fd:c1:f9:25: 9a:68:a9:0e:16:42:25:5c:10:a6:da:ca:34:e1:91: 23:2d:ef:23:d4:eb:57:e5:d9:20:ae:6d:d5:f7:0f: 1a:88:dd:48:ad:a6:cc:a2:c4:5b:cc:12:f8:7f:fd: d8:33:b5:54:c0:99:f2:80:f0:be:46:92:95:59:3e: 58:45:d5:d6:57:8e:cf:6a:e9:32:6a:46:63:83:5b: d5:bd:e0:2f:44:19:a2:6a:01:87:74:9d:b2:2b:89: ee:58:68:b9:2d:08:5e:88:1b:f2:a6:20:a7:9d:45: be:b5:ca:a0:49:12:9c:db:b3:12:1a:b7:87:9f:0a: ab:56:33:2f:83:9c:81:53:22:0c:c5:00:a6:a8:56: fa:52:3f:e5:4f:b4:07:78:d6:c5:7d:d1:27:5c:23: 1d:15:cf:85:aa:8a:14:19:13:4d:bc:e8:7b:4f:b0: 09:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F9:59:0A:AC:1F:FE:3B:68:42:0B:C5:03:43:84:12:D1:83:00:E4 X509v3 Authority Key Identifier: keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a3:f5:59:4a:3c:01:21:40:72:9f:fd:31:be:ae:e0:de:b5: 4d:40:df:a6:7c:b5:9a:e9:2e:d1:03:46:fa:4f:2e:cc:e3:79: da:98:95:e2:06:ea:fa:cd:d5:b8:59:54:69:78:03:e6:4c:c0: 24:ce:f0:91:4d:1b:f4:c0:4d:79:ec:7f:04:e9:3f:3e:99:51: e4:3f:c3:84:2b:66:ad:e9:73:5d:a4:63:c1:8a:ab:f7:2b:22: f3:a6:ba:78:37:91:9c:36:31:df:05:0d:4f:09:75:29:3a:db: 9f:71:5b:b9:a7:62:4c:84:c0:48:10:46:ee:9f:0e:24:e6:53: d4:cf:2c:73:55:8f:e4:f5:3f:aa:ed:42:fb:5c:f5:46:29:e6: 44:5a:59:e0:6e:78:e4:3c:33:ae:bc:ee:91:49:49:09:2d:71: f6:b2:84:8b:8e:f0:f4:9b:9d:ac:d2:83:43:69:49:cd:38:57: ac:a4:dc:b1:03:c6:8b:f5:d2:cc:3e:ec:14:9b:eb:1e:50:c5: 93:e0:ce:ad:16:e8:37:09:84:a8:fb:bf:f4:98:e4:fb:4f:e4: 15:9a:47:81:5a:07:28:b3:4a:7e:6b:3b:6c:e5:a9:a1:a1:b5: 8e:1f:4e:e7:71:63:79:f8:f8:e3:19:ab:5e:98:ee:ac:89:3d: 0a:d8:61:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f24us6vqt6tH/D3+nG+fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmNmMGVkNWI1Njc3YzExNTVmMmI3ODRjNmQ3M2Q4MDkz YWYxYWEwHhcNMjUxMjIwMTYwMjIyWhcNMjUxMjIxMTYwMjIyWjAzMTEwLwYDVQQD Eyg1OWY5NTkwYWFjMWZmZTNiNjg0MjBiYzUwMzQzODQxMmQxODMwMGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUjmTSScYUC/VYMFD8hsKkwrvyHC L/w8wZQdGof4c1wzj/MtdDt/JvSxQp+fRyAq3J3hzaAUi20nL+GCM7Z+i8x8xbxu 0G+T7SgYVl6bVS3A9NpK3v3B+SWaaKkOFkIlXBCm2so04ZEjLe8j1OtX5dkgrm3V 9w8aiN1IrabMosRbzBL4f/3YM7VUwJnygPC+RpKVWT5YRdXWV47PaukyakZjg1vV veAvRBmiagGHdJ2yK4nuWGi5LQheiBvypiCnnUW+tcqgSRKc27MSGreHnwqrVjMv g5yBUyIMxQCmqFb6Uj/lT7QHeNbFfdEnXCMdFc+FqooUGRNNvOh7T7AJ1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFn5WQqsH/47aEILxQNDhBLRgwDkMB8GA1UdIwQY MBaAFAj88O1bVnfBFV8reExtc9gJOvGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80OTNiOTgtN2Y1OS00ZjYxLTk5NDUt MWU4ZGRhZmUzYTE0LzEvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi80OTNiOTgtN2Y1OS00ZjYxLTk5NDUtMWU4ZGRhZmUzYTE0 LzEvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqP1WUo8 ASFAcp/9Mb6u4N61TUDfpny1muku0QNG+k8uzON52piV4gbq+s3VuFlUaXgD5kzA JM7wkU0b9MBNeex/BOk/PplR5D/DhCtmrelzXaRjwYqr9ysi86a6eDeRnDYx3wUN Twl1KTrbn3FbuadiTITASBBG7p8OJOZT1M8sc1WP5PU/qu1C+1z1RinmRFpZ4G54 5DwzrrzukUlJCS1x9rKEi47w9JudrNKDQ2lJzThXrKTcsQPGi/XSzD7sFJvrHlDF k+DOrRboNwmEqPu/9Jjk+0/kFZpHgVoHKLNKfms7bOWpoaG1jh9O53Fjefj44xmr XpjurIk9Cthhvw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:07:38 2025 by rpki-client