This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json) Hash identifier: kTT0oSBLmG1uI4iFvusIvD0nFL2kxLDMjlO698rHfPI= Subject key identifier: 5A:88:A0:58:3E:CA:0B:B0:97:1E:5B:72:CD:4B:16:CC:01:EC:45:81 Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f Certificate serial: 019AF12E5DD249429EDB30294DCF1837C9ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft Manifest number: 1192 Signing time: Sat 06 Dec 2025 01:02:18 +0000 Manifest this update: Sat 06 Dec 2025 01:02:18 +0000 Manifest next update: Sun 07 Dec 2025 01:02:18 +0000 Files and hashes: 1: 5kIp4bFmAr9lOCjBtU4-CSX7D0w.roa (hash: zS6XZLioq/dFM9rTCOe5dC9siPtnmQmcYc9glHbFesE=) 2: WZoVc8N-YD-8FMKAITneTMD8_4k.roa (hash: d546sm0t0rb46HppUnfY7MCyS/rnnp2kV23n3HY9/us=) 3: bZJxdCs0gWqYryxwQS8EGlLZ93c.roa (hash: ZMF+prTjcHa6DFcnagp286MUC0TlcS1uVKhgY1MMJNc=) 4: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: MQNTHXyD+zmQEDvq2JuwBWIxJxaaaejjds0/uoAdf4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:5d:d2:49:42:9e:db:30:29:4d:cf:18:37:c9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f Validity Not Before: Dec 6 01:02:18 2025 GMT Not After : Dec 7 01:02:18 2025 GMT Subject: CN=5a88a0583eca0bb0971e5b72cd4b16cc01ec4581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d8:f6:e9:dd:63:61:f2:ff:45:a5:59:4b:91: 02:fc:42:2d:c0:91:d6:14:f4:41:f6:7a:09:4c:31: 82:72:81:31:98:23:5e:e4:c2:e3:e6:51:07:4a:af: 7a:b0:44:ec:f5:9e:c6:65:ed:c5:f6:99:8f:b7:e8: e3:d1:94:c2:da:ae:1e:60:0b:83:16:5a:67:71:5f: dd:0d:b2:33:cf:ab:6e:f2:b9:78:44:3d:3e:78:46: b2:91:16:f1:91:1e:f9:b8:90:de:02:65:06:09:60: 93:db:ba:8a:ed:a4:30:51:8c:e6:ab:8e:51:83:49: dc:50:fd:64:73:c6:aa:14:2f:eb:dd:af:d4:28:84: 47:62:c5:55:76:6e:f8:2d:e4:61:10:43:cd:03:3e: c2:68:d1:f1:3f:e2:39:5b:d1:41:5a:72:11:3d:6a: 0c:01:29:88:be:27:58:98:32:96:e7:bf:42:07:df: 70:e3:e8:91:1a:f1:47:c4:92:be:7b:ae:c4:26:71: 3a:9c:f8:3a:93:9e:b4:3f:1b:01:eb:28:0d:f1:7c: d0:5c:eb:70:70:23:b2:69:3c:cf:47:68:ad:78:55: c1:e2:39:3f:7c:11:7d:47:d1:34:c2:5b:0f:35:ce: 10:82:c1:2c:6b:bf:dc:1f:1b:81:c8:48:89:24:19: 64:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:88:A0:58:3E:CA:0B:B0:97:1E:5B:72:CD:4B:16:CC:01:EC:45:81 X509v3 Authority Key Identifier: keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:61:cf:0b:3f:ea:17:ce:b9:db:dc:21:aa:67:13:f2:da:54: 08:2b:58:c6:fb:c2:71:1c:90:29:37:17:34:3f:c1:f2:9b:5d: 81:de:72:d9:f9:e3:47:4c:b7:ce:3e:dc:ed:72:65:48:a7:8e: 32:1d:6b:7f:19:17:66:6b:ca:77:9f:16:7e:7f:45:72:96:c3: 2a:07:7e:92:76:76:f7:9c:05:43:58:43:ae:8d:4c:78:64:83: ef:5e:34:d3:9f:c7:ac:b6:42:e2:16:66:ee:ca:11:59:da:a7: 44:91:c8:4c:0c:78:44:db:97:c5:97:b7:e8:ba:85:b5:e4:be: 9b:f4:f6:1e:cf:bc:94:8a:77:b2:6c:35:6d:a4:2b:96:3d:ed: 7f:3d:83:bc:30:8a:b8:66:6f:27:99:b8:a1:96:18:18:95:0b: 58:fa:96:ee:3f:df:37:f9:33:49:cd:92:d9:e0:09:c0:86:6e: a7:49:13:c3:b8:db:da:d5:52:09:96:0e:ad:de:4a:1e:58:78: f9:c6:cc:5d:1d:ce:a8:17:6a:31:f4:3a:77:94:69:3a:e2:e8: 55:b6:fe:2f:64:17:1e:26:bd:7b:0c:af:a7:69:05:b6:32:da: 6c:b9:d3:e9:fd:65:68:ad:85:17:f8:9b:f5:7d:5b:de:00:e2: 5a:3c:2a:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLl3SSUKe2zApTc8YN8ntMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMWQ5YWQ0MDRlY2RhZmE3MGVhOWE0YzlkMTBiOTgwMTgy OWVhMWYwHhcNMjUxMjA2MDEwMjE4WhcNMjUxMjA3MDEwMjE4WjAzMTEwLwYDVQQD Eyg1YTg4YTA1ODNlY2EwYmIwOTcxZTViNzJjZDRiMTZjYzAxZWM0NTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldj26d1jYfL/RaVZS5EC/EItwJHW FPRB9noJTDGCcoExmCNe5MLj5lEHSq96sETs9Z7GZe3F9pmPt+jj0ZTC2q4eYAuD FlpncV/dDbIzz6tu8rl4RD0+eEaykRbxkR75uJDeAmUGCWCT27qK7aQwUYzmq45R g0ncUP1kc8aqFC/r3a/UKIRHYsVVdm74LeRhEEPNAz7CaNHxP+I5W9FBWnIRPWoM ASmIvidYmDKW579CB99w4+iRGvFHxJK+e67EJnE6nPg6k560PxsB6ygN8XzQXOtw cCOyaTzPR2iteFXB4jk/fBF9R9E0wlsPNc4QgsEsa7/cHxuByEiJJBlkuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqIoFg+yguwlx5bcs1LFswB7EWBMB8GA1UdIwQY MBaAFHMdmtQE7Nr6cOqaTJ0QuYAYKeofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYt ZTIwYTY1NGZjYTk1LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYtZTIwYTY1NGZjYTk1 LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2HPCz/q F86529whqmcT8tpUCCtYxvvCcRyQKTcXND/B8ptdgd5y2fnjR0y3zj7c7XJlSKeO Mh1rfxkXZmvKd58Wfn9FcpbDKgd+knZ295wFQ1hDro1MeGSD714005/HrLZC4hZm 7soRWdqnRJHITAx4RNuXxZe36LqFteS+m/T2Hs+8lIp3smw1baQrlj3tfz2DvDCK uGZvJ5m4oZYYGJULWPqW7j/fN/kzSc2S2eAJwIZup0kTw7jb2tVSCZYOrd5KHlh4 +cbMXR3OqBdqMfQ6d5RpOuLoVbb+L2QXHia9ewyvp2kFtjLabLnT6f1laK2FF/ib 9X1b3gDiWjwqUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:37:05 2025 by rpki-client