This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft File: CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json) Hash identifier: 5pdEUpE9cLfivsBE7W1bjcYwc3QUulcnfUg6Y0HDxNg= Subject key identifier: 40:01:AF:AE:6C:E2:0B:35:CD:48:9C:D7:34:6D:5D:19:A5:E4:F9:7C Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df Certificate serial: 019AF2775A7CD93A7ACE65D0B155A6DE0779 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft Manifest number: 16FE Signing time: Sat 06 Dec 2025 07:01:39 +0000 Manifest this update: Sat 06 Dec 2025 07:01:39 +0000 Manifest next update: Sun 07 Dec 2025 07:01:39 +0000 Files and hashes: 1: 4R0hMhGbrDC4YVyzf1jrL8oQuI4.roa (hash: TLs9gVQTwy70mjzgj5kCuIcV2uNBgbxlOI07lSwnnow=) 2: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: 0l63/arZ8qRAS37duGhAA+pyvcdB/WmcGDLKwaI6NhQ=) 3: cIX-WWQe1eTYBa5AEDfKv3ZFbSs.roa (hash: KXI7i+vv4GJ48vExO8crdEraeejXsQsIm7BOAxvY6pM=) 4: noPcixLpgkxwJ1ZxZM_fxPf4Csw.roa (hash: BthsLkB+ZFXPf15eE+Y7pQxlaiPPySEZY4ss84bAVsM=) 5: pkrI6iaUdda-z9WYMFjdcxpmXjo.roa (hash: hMCs1gjsYAVaOoAjArkJ6N1TgykfFMKnI+aiOTGukGc=) 6: tV6sObvzgTfPgUJ_zmLWZJP23Js.roa (hash: ruAGmOYz2wd7CtdLjtd2pZCz/+RLCcgBY+LOgFhOP3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:5a:7c:d9:3a:7a:ce:65:d0:b1:55:a6:de:07:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df Validity Not Before: Dec 6 07:01:39 2025 GMT Not After : Dec 7 07:01:39 2025 GMT Subject: CN=4001afae6ce20b35cd489cd7346d5d19a5e4f97c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:d5:0e:de:9b:90:ed:2e:24:6c:2e:48:87: c1:6d:46:3a:94:91:31:5f:9e:6a:6d:45:6f:c1:0a: 35:89:11:fc:03:be:f4:89:10:24:01:a2:8b:58:e9: 13:98:0d:fa:06:73:41:db:9b:bd:45:67:a2:d2:41: 76:38:1f:2a:34:93:03:fe:12:b1:5c:ca:f4:d8:df: b5:53:83:bd:64:23:78:b0:55:1d:db:00:70:36:0f: d3:92:ab:38:99:9b:77:ff:54:73:d2:86:57:50:87: c1:a6:99:eb:c3:cd:f3:27:38:2a:ae:2d:20:3e:4d: 21:45:78:31:9e:dd:77:6e:bd:9a:01:05:59:82:75: e7:3a:0b:bc:c6:45:53:ae:b0:63:d0:96:db:5d:e9: ec:15:82:94:05:81:4f:c5:3f:6f:33:e2:5f:b6:61: 0b:fc:6b:19:67:12:06:83:3c:b8:8d:f6:7d:4b:f5: b0:c0:76:cd:b5:09:98:57:fb:e3:7d:4f:86:83:b0: 18:2c:2b:f6:4e:1f:d0:42:8c:49:c7:5a:2c:3e:9f: 59:16:c0:f5:86:37:5e:1a:ac:7c:e1:74:6c:fe:6a: b1:83:44:8b:e6:e6:89:38:eb:00:9e:8d:81:ac:d5: 63:4e:dc:6e:f9:7b:20:f3:57:7a:0a:5d:0e:32:0c: 93:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:01:AF:AE:6C:E2:0B:35:CD:48:9C:D7:34:6D:5D:19:A5:E4:F9:7C X509v3 Authority Key Identifier: keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:07:da:ca:dd:f8:12:cb:82:16:d9:75:7e:a5:36:1f:c9:d8: 54:01:4d:ca:01:f8:ca:a9:91:08:2e:80:f6:33:f4:4a:29:14: c9:1d:e2:02:98:65:af:27:e3:11:7b:c4:83:dd:a7:69:a0:bd: c8:38:65:f1:f0:3b:a9:7b:72:e2:c8:58:a7:b6:7d:d0:fd:c8: 96:c5:97:c2:9b:56:1c:f1:7e:3a:57:7f:2f:07:4e:32:0e:dd: ed:ae:59:58:cd:73:9a:92:9e:22:9b:b0:50:5d:06:fb:cf:8d: 1d:04:c0:e4:db:22:dc:6a:ce:e5:ea:2f:99:48:db:27:92:52: 39:2d:64:47:3a:2d:e3:13:19:04:d8:fa:7a:8b:23:ec:09:bd: ca:2f:12:fc:5d:14:cb:fe:b8:4c:ae:7b:05:00:8c:c4:95:56: 34:a4:33:7c:35:df:fb:45:46:a2:d4:c2:ad:2a:f1:90:3c:e3: 4f:7f:82:05:80:ed:f6:8e:b6:37:20:ec:bc:88:5f:46:9b:1a: 2d:35:45:5c:0a:b9:4c:1b:bd:8b:70:e6:fa:3e:47:4b:de:e9: 24:dc:33:be:cb:fa:d5:a1:9d:49:0a:c8:c9:5c:4f:fe:94:97: a5:b7:36:02:7d:9c:04:aa:d7:42:01:b4:99:72:e4:cc:e7:1f: d6:de:c1:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryd1p82Tp6zmXQsVWm3gd5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMTg3MGM5NmVmMDk3MjM4MTFmYjg5MjUwZWVhNmViYTk2 M2MwZGYwHhcNMjUxMjA2MDcwMTM5WhcNMjUxMjA3MDcwMTM5WjAzMTEwLwYDVQQD Eyg0MDAxYWZhZTZjZTIwYjM1Y2Q0ODljZDczNDZkNWQxOWE1ZTRmOTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNrVDt6bkO0uJGwuSIfBbUY6lJEx X55qbUVvwQo1iRH8A770iRAkAaKLWOkTmA36BnNB25u9RWei0kF2OB8qNJMD/hKx XMr02N+1U4O9ZCN4sFUd2wBwNg/Tkqs4mZt3/1Rz0oZXUIfBppnrw83zJzgqri0g Pk0hRXgxnt13br2aAQVZgnXnOgu8xkVTrrBj0JbbXensFYKUBYFPxT9vM+JftmEL /GsZZxIGgzy4jfZ9S/WwwHbNtQmYV/vjfU+Gg7AYLCv2Th/QQoxJx1osPp9ZFsD1 hjdeGqx84XRs/mqxg0SL5uaJOOsAno2BrNVjTtxu+Xsg81d6Cl0OMgyT1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEABr65s4gs1zUic1zRtXRml5Pl8MB8GA1UdIwQY MBaAFAsYcMlu8JcjgR+4klDupuupY8DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMt YTJlMjRmOTgwYjNmLzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMtYTJlMjRmOTgwYjNm LzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgfayt34 EsuCFtl1fqU2H8nYVAFNygH4yqmRCC6A9jP0SikUyR3iAphlryfjEXvEg92naaC9 yDhl8fA7qXty4shYp7Z90P3IlsWXwptWHPF+Old/LwdOMg7d7a5ZWM1zmpKeIpuw UF0G+8+NHQTA5Nsi3GrO5eovmUjbJ5JSOS1kRzot4xMZBNj6eosj7Am9yi8S/F0U y/64TK57BQCMxJVWNKQzfDXf+0VGotTCrSrxkDzjT3+CBYDt9o62NyDsvIhfRpsa LTVFXAq5TBu9i3Dm+j5HS97pJNwzvsv61aGdSQrIyVxP/pSXpbc2An2cBKrXQgG0 mXLkzOcf1t7BOg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:49 2025 by rpki-client