This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft File: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft (raw, json) Hash identifier: Eku6yShTN3FGGpWHHdP5bC7Tz21o8KLoNWPqQzE+ExY= Subject key identifier: 47:80:04:67:87:A8:4B:30:7B:84:4F:56:49:C0:1C:3D:C6:A7:46:A5 Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc Certificate serial: 019AF3F71F1156D09A94F63D9FEB5459D320 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 14:00:49 +0000 Manifest this update: Sat 06 Dec 2025 14:00:49 +0000 Manifest next update: Sun 07 Dec 2025 14:00:49 +0000 Files and hashes: 1: SCQLL9FrRwZS3_4QAQMFwFWEnMU.roa (hash: hA+a1SinlIIzAIvLt/cO3Kjqq6i5Xzb+bDE4vvr8VPM=) 2: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl (hash: fS7sMoG2S4nQ0vlxcArWITYbT4KnTGiqQRgf0LN8u9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:1f:11:56:d0:9a:94:f6:3d:9f:eb:54:59:d3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc Validity Not Before: Dec 6 14:00:49 2025 GMT Not After : Dec 7 14:00:49 2025 GMT Subject: CN=4780046787a84b307b844f5649c01c3dc6a746a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:1b:1b:da:6d:52:ab:65:25:0e:e6:8e:fd: 5b:34:a5:d3:ee:ce:3d:6d:bb:76:46:32:12:53:9b: 17:19:26:c6:6d:25:d8:34:95:36:e4:6f:0b:50:2e: 73:64:e7:62:05:bd:cb:1d:cd:7c:dd:ff:af:d3:0a: 27:a0:fb:24:cc:e6:59:ee:8a:ef:ab:d6:b9:a5:46: d7:9e:7f:1d:61:b8:b9:f6:32:ac:1e:8a:57:a8:c7: 39:c8:d4:6a:10:07:72:9a:03:a9:6c:11:8f:4f:ff: 75:dd:3b:d6:e5:31:b5:8e:82:0e:17:b7:1e:8c:af: cc:b3:b3:91:87:58:38:29:91:90:f2:10:dd:a4:b9: 46:5e:6d:04:57:bb:6e:b6:59:4e:d1:6a:f1:10:d3: 64:9b:80:2b:7f:e5:31:ae:ae:2a:1c:58:5f:1e:b8: 52:eb:63:9e:9b:42:7d:b2:2a:d8:09:a5:4b:a5:5c: 49:9d:1b:a9:f1:57:1d:74:7d:56:98:bb:cf:7d:8f: 83:8b:67:ee:58:6a:1c:e7:8f:03:18:39:e1:61:64: 1e:27:6a:76:6e:08:9f:79:8b:71:68:fe:9a:a0:1f: 65:28:8f:8e:67:59:87:01:3e:d4:43:fb:cd:88:87: 91:dc:ba:1a:a7:1f:ae:33:d7:24:8d:88:e6:ef:90: 5a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:80:04:67:87:A8:4B:30:7B:84:4F:56:49:C0:1C:3D:C6:A7:46:A5 X509v3 Authority Key Identifier: keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:23:75:fa:79:21:ba:3b:3e:81:45:56:6d:67:cd:ad:5d:54: 2b:a2:33:6e:bc:5b:1b:a3:22:77:6a:2e:7a:19:69:bf:cf:b4: a8:37:f9:c6:48:08:f9:a3:82:c6:b0:c2:f7:31:15:0d:72:0f: 8c:3a:41:97:5f:36:b2:e2:91:10:8c:6a:c1:b8:c0:df:0c:c3: 58:b1:fc:58:a2:dc:4a:cd:0c:4f:3d:4f:1d:97:a9:2a:4c:aa: cf:0c:ad:36:8a:61:a6:be:2c:4e:8e:d4:9f:1c:f2:38:92:39: e2:4d:b9:c6:4d:7d:6e:2d:3d:8f:c8:d8:60:bb:1d:71:3d:8b: d8:b5:92:1e:00:84:45:36:70:ed:57:34:ce:eb:08:00:8c:a7: e1:25:73:5f:f2:48:fc:3b:9c:2f:2b:e4:c2:29:89:83:f9:d4: ed:b1:5f:73:7c:9e:42:f7:52:e9:fe:72:92:c0:00:24:60:90: 46:f0:ff:45:b7:f4:c2:64:d1:ad:38:3f:14:55:c3:5b:14:f6: d4:00:a7:45:ad:6d:22:91:41:83:07:bd:ad:e7:e7:42:0b:4d: ba:0c:b7:3d:02:99:fd:99:f7:70:48:0e:63:6f:aa:97:63:4e: 1a:97:1a:6f:3d:29:b5:1e:12:87:9c:57:f5:68:b2:61:fc:fd: 23:5a:36:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9x8RVtCalPY9n+tUWdMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNzg3MDBmMTYxOWVjMWNkMzRkOTcwMDM5MjE1M2VjNGI2 MjMxZmMwHhcNMjUxMjA2MTQwMDQ5WhcNMjUxMjA3MTQwMDQ5WjAzMTEwLwYDVQQD Eyg0NzgwMDQ2Nzg3YTg0YjMwN2I4NDRmNTY0OWMwMWMzZGM2YTc0NmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVkbG9ptUqtlJQ7mjv1bNKXT7s49 bbt2RjISU5sXGSbGbSXYNJU25G8LUC5zZOdiBb3LHc183f+v0wonoPskzOZZ7orv q9a5pUbXnn8dYbi59jKsHopXqMc5yNRqEAdymgOpbBGPT/913TvW5TG1joIOF7ce jK/Ms7ORh1g4KZGQ8hDdpLlGXm0EV7tutllO0WrxENNkm4Arf+Uxrq4qHFhfHrhS 62Oem0J9sirYCaVLpVxJnRup8VcddH1WmLvPfY+Di2fuWGoc548DGDnhYWQeJ2p2 bgifeYtxaP6aoB9lKI+OZ1mHAT7UQ/vNiIeR3Loapx+uM9ckjYjm75BaVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeABGeHqEswe4RPVknAHD3Gp0alMB8GA1UdIwQY MBaAFHF4cA8WGewc002XADkhU+xLYjH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMt ZDFkOGRiMTQ4ZWMyLzEvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMtZDFkOGRiMTQ4ZWMy LzEvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSN1+nkh ujs+gUVWbWfNrV1UK6IzbrxbG6Mid2ouehlpv8+0qDf5xkgI+aOCxrDC9zEVDXIP jDpBl182suKREIxqwbjA3wzDWLH8WKLcSs0MTz1PHZepKkyqzwytNophpr4sTo7U nxzyOJI54k25xk19bi09j8jYYLsdcT2L2LWSHgCERTZw7Vc0zusIAIyn4SVzX/JI /DucLyvkwimJg/nU7bFfc3yeQvdS6f5yksAAJGCQRvD/Rbf0wmTRrTg/FFXDWxT2 1ACnRa1tIpFBgwe9refnQgtNugy3PQKZ/Zn3cEgOY2+ql2NOGpcabz0ptR4Sh5xX 9WiyYfz9I1o2fQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:21:30 2025 by rpki-client