This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft File: CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft (raw, json) Hash identifier: RV21UUo0vKVPVLPtkMBtlfwaJWlZH5cn8z1NnHMe4mQ= Subject key identifier: 44:42:13:C7:6A:FB:65:FB:A8:D2:5E:C8:05:76:BC:D4:25:F7:66:F5 Authority key identifier: 09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90 Certificate issuer: /CN=097b5d1490b385a2f80c2a0324fe98e351091490 Certificate serial: 019AF1646066A11F7368001054E471EF9409 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft Manifest number: 0924 Signing time: Sat 06 Dec 2025 02:01:18 +0000 Manifest this update: Sat 06 Dec 2025 02:01:18 +0000 Manifest next update: Sun 07 Dec 2025 02:01:18 +0000 Files and hashes: 1: 4NykHTKnfSIJ0q7_RZtsAwpsqKA.roa (hash: w55fxLVLcagKRRaTKAUle3eBEN7JDI5LPLVo9zNJXVU=) 2: CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl (hash: v+R+8URb5keOfBOBACByWf1c2H1vnlCpgJJQNc6CdPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:60:66:a1:1f:73:68:00:10:54:e4:71:ef:94:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097b5d1490b385a2f80c2a0324fe98e351091490 Validity Not Before: Dec 6 02:01:18 2025 GMT Not After : Dec 7 02:01:18 2025 GMT Subject: CN=444213c76afb65fba8d25ec80576bcd425f766f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0c:b7:be:c7:46:3a:bb:df:c1:22:86:68:6e: 09:34:5a:f3:fa:e1:8c:ad:6e:51:bf:f7:2a:11:bd: 4d:11:2a:03:bc:bf:2b:ea:e6:01:6a:2d:16:fc:2d: 45:52:11:6f:69:9b:ce:98:e4:17:01:6e:ba:c3:67: 01:41:da:cc:1f:a5:0f:44:ce:9b:dc:97:ce:03:8e: 1e:1d:a0:55:43:ef:87:98:7f:94:02:8d:c1:b4:48: 52:71:9f:1b:b6:28:f8:6f:3a:48:62:cc:06:1b:9c: af:cb:ad:8a:0b:b2:4c:0d:36:79:26:15:28:83:d2: 7e:d3:05:6c:d3:c3:df:a1:8a:55:6f:23:a4:15:4c: ea:93:4d:eb:67:7a:fc:ae:23:73:06:90:7d:fd:a4: f3:0f:0a:59:af:3b:b3:4d:43:b2:ba:55:d9:0e:d0: c6:b6:15:7f:65:0e:3a:ed:76:f2:5c:91:f2:20:33: 82:5c:88:c1:5d:5d:3e:a7:76:ce:2f:50:0f:70:8b: 81:d3:0c:b1:26:ac:7f:42:56:15:a0:99:b1:7d:d4: 03:4a:63:36:bb:be:07:4c:42:93:89:52:59:f1:e3: 49:4c:84:77:02:d0:8a:95:b6:b6:cd:2f:6a:96:3b: bf:d1:f1:f0:bd:d8:22:98:25:3c:23:be:9a:25:85: c1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:42:13:C7:6A:FB:65:FB:A8:D2:5E:C8:05:76:BC:D4:25:F7:66:F5 X509v3 Authority Key Identifier: keyid:09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:04:dc:86:f6:88:a6:f3:d3:c1:99:d3:31:c1:30:15:c9:61: ac:e6:98:5d:57:8c:c2:be:70:0a:f1:f6:40:e9:be:2d:cb:72: 6d:03:5f:7a:ca:56:db:e7:3c:38:a5:9b:3b:b5:33:0e:85:ca: c1:70:dd:93:9b:46:4f:46:d7:92:6c:1c:1a:7e:7a:00:34:b1: fc:db:fc:93:a0:a8:26:00:09:b8:84:47:48:6f:eb:5c:b2:f2: 14:13:7e:63:b4:d5:48:76:2c:1a:18:e4:63:b1:3e:b9:4c:78: 7a:96:96:7e:c0:f8:a8:24:1d:89:e6:16:33:35:89:5c:50:f2: 58:32:b4:d7:a6:0a:4a:2c:63:6c:95:ab:28:e6:9c:f3:b2:50: e6:63:bd:38:5b:e8:cb:6f:73:9c:39:fe:e3:79:91:30:1c:3f: 04:62:21:2d:59:54:82:57:fe:be:96:c9:e2:4b:14:40:92:41: 05:43:ee:8f:75:b6:2e:7d:0f:88:fe:3f:28:75:6e:c4:25:35: 19:7f:26:3c:fa:8d:03:b1:7e:95:c7:78:0b:25:96:65:fc:a7: 82:63:03:4e:1c:34:2e:2e:36:88:0f:b2:88:b1:b7:be:87:dc: 3b:41:1d:b0:02:66:75:81:89:d3:60:59:09:72:f6:df:d5:ae: bc:d5:b4:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGBmoR9zaAAQVORx75QJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5N2I1ZDE0OTBiMzg1YTJmODBjMmEwMzI0ZmU5OGUzNTEw OTE0OTAwHhcNMjUxMjA2MDIwMTE4WhcNMjUxMjA3MDIwMTE4WjAzMTEwLwYDVQQD Eyg0NDQyMTNjNzZhZmI2NWZiYThkMjVlYzgwNTc2YmNkNDI1Zjc2NmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ay3vsdGOrvfwSKGaG4JNFrz+uGM rW5Rv/cqEb1NESoDvL8r6uYBai0W/C1FUhFvaZvOmOQXAW66w2cBQdrMH6UPRM6b 3JfOA44eHaBVQ++HmH+UAo3BtEhScZ8btij4bzpIYswGG5yvy62KC7JMDTZ5JhUo g9J+0wVs08PfoYpVbyOkFUzqk03rZ3r8riNzBpB9/aTzDwpZrzuzTUOyulXZDtDG thV/ZQ467XbyXJHyIDOCXIjBXV0+p3bOL1APcIuB0wyxJqx/QlYVoJmxfdQDSmM2 u74HTEKTiVJZ8eNJTIR3AtCKlba2zS9qlju/0fHwvdgimCU8I76aJYXBLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERCE8dq+2X7qNJeyAV2vNQl92b1MB8GA1UdIwQY MBaAFAl7XRSQs4Wi+AwqAyT+mONRCRSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1h0ZEZKQ3poYUw0RENvREpQNlk0MUVKRkpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83ZTM4MTYtOGM4ZS00N2EwLTk0ZWMt NGZjOWYwZDJhY2EzLzEvQ1h0ZEZKQ3poYUw0RENvREpQNlk0MUVKRkpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83ZTM4MTYtOGM4ZS00N2EwLTk0ZWMtNGZjOWYwZDJhY2Ez LzEvQ1h0ZEZKQ3poYUw0RENvREpQNlk0MUVKRkpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQTchvaI pvPTwZnTMcEwFclhrOaYXVeMwr5wCvH2QOm+LctybQNfespW2+c8OKWbO7UzDoXK wXDdk5tGT0bXkmwcGn56ADSx/Nv8k6CoJgAJuIRHSG/rXLLyFBN+Y7TVSHYsGhjk Y7E+uUx4epaWfsD4qCQdieYWMzWJXFDyWDK016YKSixjbJWrKOac87JQ5mO9OFvo y29znDn+43mRMBw/BGIhLVlUglf+vpbJ4ksUQJJBBUPuj3W2Ln0PiP4/KHVuxCU1 GX8mPPqNA7F+lcd4CyWWZfyngmMDThw0Li42iA+yiLG3vofcO0EdsAJmdYGJ02BZ CXL239WuvNW0ww== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:35 2025 by rpki-client