This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft File: CPRr-iBG-8mOYn9ANIMnESO-ygo.mft (raw, json) Hash identifier: UrH/smIPXDn7/Ifgk3qraPM4I/LNunnoKX0XG/5R6zk= Subject key identifier: 1F:28:DA:B0:D2:9E:6D:24:25:8F:03:DF:C8:43:FA:C5:FC:99:E9:E0 Authority key identifier: 08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A Certificate issuer: /CN=08f46bfa2046fbc98e627f403483271123beca0a Certificate serial: 019B2A0A5932030A1C7DE6B444CA6F540107 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft Manifest number: 50 Signing time: Wed 17 Dec 2025 02:01:19 +0000 Manifest this update: Wed 17 Dec 2025 02:01:19 +0000 Manifest next update: Thu 18 Dec 2025 02:01:19 +0000 Files and hashes: 1: A406_tfLInjDBVSbBQ7mKFBN-JE.roa (hash: E+hB0yuwu5D4hH5rECO553wANZ9LShkCcSEX/+zvqLQ=) 2: CPRr-iBG-8mOYn9ANIMnESO-ygo.crl (hash: qQJAtuFqjhwMIonXAmHctG755SyKSUGncA928EXQRE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 02:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:0a:59:32:03:0a:1c:7d:e6:b4:44:ca:6f:54:01:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08f46bfa2046fbc98e627f403483271123beca0a Validity Not Before: Dec 17 02:01:19 2025 GMT Not After : Dec 18 02:01:19 2025 GMT Subject: CN=1f28dab0d29e6d24258f03dfc843fac5fc99e9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:16:5a:05:65:39:7a:e6:d7:2a:cd:66:8b:37: d5:08:16:2d:3c:fc:47:82:65:d7:29:78:d5:e7:be: 32:98:63:76:10:44:01:22:cb:a2:dc:20:4f:03:84: 4c:33:31:f5:b3:a8:6a:06:db:1d:56:9e:51:8c:b7: f2:1e:da:7c:6a:c8:32:a8:28:20:6a:71:da:d4:24: 66:6f:fe:6e:65:59:71:4a:e2:a9:ad:25:41:80:69: ba:60:9c:d3:25:16:c2:89:8f:63:58:58:79:e8:f4: fd:6b:02:f0:d3:36:cf:e1:bd:e3:6e:de:9c:2b:bd: f2:dd:ae:b6:0e:14:c8:3a:5d:f2:06:d8:6d:e6:71: d6:3f:ae:b6:4b:d6:5c:cd:3a:ed:63:5d:03:00:98: d5:b8:95:90:d1:6a:99:91:4d:d0:9c:09:af:36:5e: 37:63:a0:af:54:90:85:a8:05:e6:2a:e3:3a:68:38: 9a:b9:36:5a:63:cb:24:99:9f:47:ea:79:d0:55:15: 8e:08:c1:b9:75:b7:98:af:92:78:65:c2:9c:4d:38: 6b:83:f7:b6:8d:a0:a6:f5:29:20:43:02:e1:8f:4d: 9d:0c:e9:18:7f:60:5d:b8:fa:45:b8:74:67:70:a9: 49:f3:84:8f:8e:f3:f2:87:af:d8:9f:6a:75:e7:da: 0c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:28:DA:B0:D2:9E:6D:24:25:8F:03:DF:C8:43:FA:C5:FC:99:E9:E0 X509v3 Authority Key Identifier: keyid:08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:87:da:79:7b:ab:87:40:fc:35:be:46:b3:27:f8:6f:65:ee: 4c:9c:d8:94:0e:03:81:35:d3:fb:80:fa:9f:bd:67:ae:9b:18: ae:b0:6b:0d:cc:3a:ef:5c:18:a6:82:b9:7d:e1:a2:6c:bd:33: d3:0a:ec:55:31:8e:2f:7f:e6:4f:6b:0f:b9:32:d8:f9:b2:21: 36:99:4c:65:86:f6:ff:d7:69:e7:be:fa:6f:c3:fd:09:6a:5f: 95:53:89:60:31:4b:b0:7a:63:ff:fa:fb:99:ce:dc:81:a5:54: 92:18:e4:17:07:7a:4f:a1:8d:4b:f4:55:87:c2:e2:56:7c:20: ab:77:9e:a9:91:b1:f5:e0:60:bb:21:ba:56:a9:24:d0:0c:dc: 87:7c:35:54:fc:fa:67:59:96:9e:34:fa:8f:eb:45:4f:23:5f: 8b:26:1e:2e:97:31:26:af:d5:2a:33:49:2e:61:46:87:b6:17: 75:a8:4b:52:e5:02:b5:bc:62:02:bf:8c:9a:87:36:ee:9c:dc: 8e:4c:1a:44:f9:12:d8:49:db:ca:56:22:35:9b:79:22:07:fd: c9:eb:a6:47:3f:3b:4f:4f:09:43:96:93:f9:76:8c:6d:f2:dd: 04:1d:cf:34:2b:2a:dd:8f:2f:78:83:5f:c3:7f:8d:68:b1:a2: 43:7c:8f:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqClkyAwocfea0RMpvVAEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZjQ2YmZhMjA0NmZiYzk4ZTYyN2Y0MDM0ODMyNzExMjNi ZWNhMGEwHhcNMjUxMjE3MDIwMTE5WhcNMjUxMjE4MDIwMTE5WjAzMTEwLwYDVQQD EygxZjI4ZGFiMGQyOWU2ZDI0MjU4ZjAzZGZjODQzZmFjNWZjOTllOWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBZaBWU5eubXKs1mizfVCBYtPPxH gmXXKXjV574ymGN2EEQBIsui3CBPA4RMMzH1s6hqBtsdVp5RjLfyHtp8asgyqCgg anHa1CRmb/5uZVlxSuKprSVBgGm6YJzTJRbCiY9jWFh56PT9awLw0zbP4b3jbt6c K73y3a62DhTIOl3yBtht5nHWP662S9ZczTrtY10DAJjVuJWQ0WqZkU3QnAmvNl43 Y6CvVJCFqAXmKuM6aDiauTZaY8skmZ9H6nnQVRWOCMG5dbeYr5J4ZcKcTThrg/e2 jaCm9SkgQwLhj02dDOkYf2BduPpFuHRncKlJ84SPjvPyh6/Yn2p159oMkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8o2rDSnm0kJY8D38hD+sX8mengMB8GA1UdIwQY MBaAFAj0a/ogRvvJjmJ/QDSDJxEjvsoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS82ZWUyZjUtOWY2MC00N2RjLThjZDkt Y2Q1MjU1NzMzMzA0LzEvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS82ZWUyZjUtOWY2MC00N2RjLThjZDktY2Q1MjU1NzMzMzA0 LzEvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4faeXur h0D8Nb5Gsyf4b2XuTJzYlA4DgTXT+4D6n71nrpsYrrBrDcw671wYpoK5feGibL0z 0wrsVTGOL3/mT2sPuTLY+bIhNplMZYb2/9dp5776b8P9CWpflVOJYDFLsHpj//r7 mc7cgaVUkhjkFwd6T6GNS/RVh8LiVnwgq3eeqZGx9eBguyG6Vqkk0Azch3w1VPz6 Z1mWnjT6j+tFTyNfiyYeLpcxJq/VKjNJLmFGh7YXdahLUuUCtbxiAr+Mmoc27pzc jkwaRPkS2EnbylYiNZt5Igf9yeumRz87T08JQ5aT+XaMbfLdBB3PNCsq3Y8veINf w3+NaLGiQ3yPww== -----END CERTIFICATE-----Generated at Wed Dec 17 12:57:37 2025 by rpki-client