This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json) Hash identifier: u+AwhF74Xb3C60r47XZz7bsod3Cb3zUFo4OmSLMati8= Subject key identifier: 1C:C1:6F:07:89:1E:40:DE:6A:87:3B:C6:43:4D:0B:99:84:2A:30:E7 Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48 Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48 Certificate serial: 019AF12D99038EDCBDD15C07D592E050FFC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft Manifest number: 1072 Signing time: Sat 06 Dec 2025 01:01:28 +0000 Manifest this update: Sat 06 Dec 2025 01:01:28 +0000 Manifest next update: Sun 07 Dec 2025 01:01:28 +0000 Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: vx9zSGOblRXGn8iiYIR/JEFvGQikv9XL0r26Ysd/DLg=) 2: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (hash: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:99:03:8e:dc:bd:d1:5c:07:d5:92:e0:50:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48 Validity Not Before: Dec 6 01:01:28 2025 GMT Not After : Dec 7 01:01:28 2025 GMT Subject: CN=1cc16f07891e40de6a873bc6434d0b99842a30e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f5:33:07:76:2a:be:6c:21:2c:a5:04:9a:a5: 0d:30:a2:f8:6e:14:7f:ab:5f:3f:c1:ef:85:2a:38: 0d:9f:3e:0a:44:79:48:d4:bc:65:de:50:10:91:96: 13:1d:1d:a1:a8:1f:a8:d6:cf:fd:70:7c:16:75:44: d5:71:7c:c8:48:1c:fd:5b:17:d1:05:fe:02:ea:3b: 34:4b:fe:e4:b9:c5:50:64:42:0d:e8:f8:46:11:68: 28:b3:64:60:69:66:bc:a0:d9:9d:4f:e4:c1:50:37: 35:b3:08:db:bc:87:4c:75:8b:1f:c2:3d:6d:e4:b9: a3:9a:88:f6:17:b7:2f:3b:56:13:5e:26:e7:06:fa: ed:ab:56:ed:e8:01:b6:50:f1:db:47:5e:89:c9:8b: c2:22:44:80:59:98:ba:2c:68:29:35:46:de:03:e0: 1e:a1:e1:90:0b:85:45:73:c2:67:b6:87:a8:8e:98: 64:c3:62:bc:5a:ab:d6:d6:5f:93:49:ea:30:8f:f6: a8:e7:c4:57:53:5e:48:5b:57:c6:8c:35:f6:a7:ac: ac:c4:b5:b8:0a:25:2c:55:93:cd:d0:b7:88:9c:a8: 05:c1:16:6f:f4:56:40:f1:a3:05:5a:7d:60:8e:e3: ea:d3:00:00:3d:66:4e:1e:f1:66:80:e4:b0:9b:6a: 0b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C1:6F:07:89:1E:40:DE:6A:87:3B:C6:43:4D:0B:99:84:2A:30:E7 X509v3 Authority Key Identifier: keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:01:69:e0:f9:21:84:20:c9:dc:8c:ea:16:f2:c0:22:9e:cc: 32:4b:ab:16:0d:09:73:aa:48:71:ef:1d:c9:2b:93:36:e2:54: 8c:32:35:1d:7f:c2:81:a6:4f:21:d2:ac:cc:6b:cf:88:57:dc: bb:96:de:22:ba:96:fd:a7:8c:75:a8:a7:28:c2:31:53:b0:e3: 86:2b:d4:bd:36:32:06:2f:c9:96:4b:36:3a:f2:ce:c8:d9:1f: 52:96:a2:f5:31:79:89:ea:25:af:0f:ba:fb:11:82:da:5e:79: c4:1a:cc:c5:c6:9a:3c:15:2f:f4:09:c2:d8:5c:a9:50:13:ac: 13:d4:35:68:d6:14:a4:4b:39:87:77:8d:f5:02:46:d9:aa:50: 70:78:7f:6b:7a:dd:1b:b6:4c:51:23:c1:b3:e8:5d:a5:37:41: 3e:e5:41:4e:b9:6d:c5:ad:d5:90:83:a6:7a:2b:a7:19:35:f4: 53:f9:23:7b:0f:49:02:13:b7:0c:ab:f8:d8:03:94:16:01:3b: 07:27:02:a0:2e:6a:67:ea:5c:68:6e:61:ed:e1:9c:09:3f:63: ef:64:ba:f5:96:b4:78:12:a0:bb:ce:09:ef:6c:c3:10:ec:ad: 0b:0a:86:c2:a8:eb:a8:e0:9d:3e:21:e3:82:b1:c5:6b:d3:60: a5:bc:c2:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZkDjty90VwH1ZLgUP/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YWFkMTdiMTA2Nzc1ZTQ4NGY2MWViYjVlYzEwNGMyN2Mx ODdlNDgwHhcNMjUxMjA2MDEwMTI4WhcNMjUxMjA3MDEwMTI4WjAzMTEwLwYDVQQD EygxY2MxNmYwNzg5MWU0MGRlNmE4NzNiYzY0MzRkMGI5OTg0MmEzMGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fUzB3YqvmwhLKUEmqUNMKL4bhR/ q18/we+FKjgNnz4KRHlI1Lxl3lAQkZYTHR2hqB+o1s/9cHwWdUTVcXzISBz9WxfR Bf4C6js0S/7kucVQZEIN6PhGEWgos2RgaWa8oNmdT+TBUDc1swjbvIdMdYsfwj1t 5Lmjmoj2F7cvO1YTXibnBvrtq1bt6AG2UPHbR16JyYvCIkSAWZi6LGgpNUbeA+Ae oeGQC4VFc8Jntoeojphkw2K8WqvW1l+TSeowj/ao58RXU15IW1fGjDX2p6ysxLW4 CiUsVZPN0LeInKgFwRZv9FZA8aMFWn1gjuPq0wAAPWZOHvFmgOSwm2oLRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzBbweJHkDeaoc7xkNNC5mEKjDnMB8GA1UdIwQY MBaAFAmq0XsQZ3XkhPYeu17BBMJ8GH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS84MmZiMWQtZjRmNC00MzZhLWE5OTMt YjRhMTcwMGYyMTcyLzEvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS84MmZiMWQtZjRmNC00MzZhLWE5OTMtYjRhMTcwMGYyMTcy LzEvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgFp4Pkh hCDJ3IzqFvLAIp7MMkurFg0Jc6pIce8dySuTNuJUjDI1HX/CgaZPIdKszGvPiFfc u5beIrqW/aeMdainKMIxU7DjhivUvTYyBi/Jlks2OvLOyNkfUpai9TF5ieolrw+6 +xGC2l55xBrMxcaaPBUv9AnC2FypUBOsE9Q1aNYUpEs5h3eN9QJG2apQcHh/a3rd G7ZMUSPBs+hdpTdBPuVBTrltxa3VkIOmeiunGTX0U/kjew9JAhO3DKv42AOUFgE7 BycCoC5qZ+pcaG5h7eGcCT9j72S69Za0eBKgu84J72zDEOytCwqGwqjrqOCdPiHj grHFa9NgpbzCkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:19 2025 by rpki-client