This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft File: CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json) Hash identifier: gEuEXMOq07HoBeeCHATXAEfK6mMkASFD1z253WTQzxw= Subject key identifier: C8:14:5E:6F:84:0B:34:C3:82:6C:3A:79:00:65:A3:FF:2B:F7:C5:70 Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75 Certificate issuer: /CN=0979f537b09ebeaddf9878749d1f88753c540c75 Certificate serial: 019AF20916D2B92DE02923F75170632FDF02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 05:01:13 +0000 Manifest this update: Sat 06 Dec 2025 05:01:13 +0000 Manifest next update: Sun 07 Dec 2025 05:01:13 +0000 Files and hashes: 1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: c+N6qmJEkkniMRnwEZbXOHqcHVHwf6Ga0DPgw58rc0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:16:d2:b9:2d:e0:29:23:f7:51:70:63:2f:df:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75 Validity Not Before: Dec 6 05:01:13 2025 GMT Not After : Dec 7 05:01:13 2025 GMT Subject: CN=c8145e6f840b34c3826c3a790065a3ff2bf7c570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d6:e1:cf:c3:16:ac:6e:94:49:8a:32:03:bf: d7:42:ac:57:c2:1f:87:2b:bd:6d:cb:c1:48:0d:60: c4:c5:41:2e:74:38:f4:3c:86:3c:50:7e:56:ba:f1: 15:1b:7f:20:a7:b0:ac:e6:78:5f:72:a3:83:5e:ed: c3:d6:a3:87:73:a8:23:79:bb:19:5f:5d:55:1a:ce: fb:8c:7b:37:41:0f:71:9a:b9:1c:da:cd:b5:d3:1c: 42:ac:2e:11:59:8f:ea:bc:94:78:5e:94:eb:0d:24: de:02:c9:41:d4:28:6e:25:7f:44:9f:27:fe:d9:93: 39:a9:f9:84:a8:0b:4e:3d:ef:54:98:18:08:20:5e: 55:55:07:4d:ce:98:d8:da:22:ef:d2:72:cb:5d:e8: ba:ff:cb:ba:b4:2b:a2:9f:3e:06:62:73:99:aa:fd: e8:32:a3:30:bc:c3:61:9d:7f:31:35:2e:27:f2:1e: e5:f4:b2:e1:1e:6e:b0:52:4e:87:34:fc:e9:63:03: c6:71:ba:c5:ea:58:ff:f4:3e:42:db:74:2b:eb:42: 0e:00:e4:e1:f8:7f:1b:8a:4b:e6:c8:ca:51:2b:e5: 24:38:95:3d:49:98:6b:c3:90:78:28:93:4a:1a:21: fe:99:7a:e3:5d:45:4a:3c:4e:4a:d1:c5:b0:b6:48: bd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:14:5E:6F:84:0B:34:C3:82:6C:3A:79:00:65:A3:FF:2B:F7:C5:70 X509v3 Authority Key Identifier: keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:82:46:3b:41:7e:16:64:b0:51:12:76:15:8b:ca:a0:ff:8e: ab:b6:e6:79:23:67:94:1a:3f:f5:12:22:d3:6d:9c:5c:1e:91: 3d:60:f6:22:b6:65:5f:78:db:4d:94:0f:25:1b:04:49:ec:8d: b2:8c:65:90:f1:7f:b4:be:0e:9d:d7:6c:f5:c1:70:52:cb:7a: 7a:d9:0e:c6:9a:3c:ee:04:66:1e:d0:0d:89:68:5e:96:3e:31: 73:ff:e9:6d:a3:59:34:c6:63:b2:57:50:d1:2f:c9:cb:c5:b7: 78:67:e5:72:58:32:55:a7:85:6c:db:09:af:3a:7a:42:80:e9: 4b:83:8d:52:76:1f:1a:35:ba:a4:b2:5f:de:02:76:77:ca:81: a4:7a:74:a6:be:ac:57:24:cd:e0:e7:32:b7:e5:9e:7d:eb:af: 39:cf:2a:05:3c:f1:5f:3b:92:98:e4:8e:fc:d3:62:35:cb:d0: 94:68:82:01:e9:2b:0c:1a:13:d1:58:14:39:16:da:7d:c8:dc: f1:7c:de:ca:4d:14:38:34:d9:b5:9d:52:ac:7b:bf:43:7e:05: 48:b4:24:1e:fe:b6:ac:75:36:36:86:d4:13:9f:67:93:71:8a: d0:79:7f:2d:e3:4b:aa:0f:ba:5d:89:ec:21:52:d0:cb:85:5f: a4:15:ab:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRbSuS3gKSP3UXBjL98CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NzlmNTM3YjA5ZWJlYWRkZjk4Nzg3NDlkMWY4ODc1M2M1 NDBjNzUwHhcNMjUxMjA2MDUwMTEzWhcNMjUxMjA3MDUwMTEzWjAzMTEwLwYDVQQD EyhjODE0NWU2Zjg0MGIzNGMzODI2YzNhNzkwMDY1YTNmZjJiZjdjNTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNbhz8MWrG6USYoyA7/XQqxXwh+H K71ty8FIDWDExUEudDj0PIY8UH5WuvEVG38gp7Cs5nhfcqODXu3D1qOHc6gjebsZ X11VGs77jHs3QQ9xmrkc2s210xxCrC4RWY/qvJR4XpTrDSTeAslB1ChuJX9Enyf+ 2ZM5qfmEqAtOPe9UmBgIIF5VVQdNzpjY2iLv0nLLXei6/8u6tCuinz4GYnOZqv3o MqMwvMNhnX8xNS4n8h7l9LLhHm6wUk6HNPzpYwPGcbrF6lj/9D5C23Qr60IOAOTh +H8bikvmyMpRK+UkOJU9SZhrw5B4KJNKGiH+mXrjXUVKPE5K0cWwtki9CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgUXm+ECzTDgmw6eQBlo/8r98VwMB8GA1UdIwQY MBaAFAl59Tewnr6t35h4dJ0fiHU8VAx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1huMU43Q2V2cTNmbUhoMG5SLUlkVHhVREhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83ZDhhMWEtMDk1ZS00MTg2LTk1ZTAt MDgyYjY4YjJjMDJhLzEvQ1huMU43Q2V2cTNmbUhoMG5SLUlkVHhVREhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS83ZDhhMWEtMDk1ZS00MTg2LTk1ZTAtMDgyYjY4YjJjMDJh LzEvQ1huMU43Q2V2cTNmbUhoMG5SLUlkVHhVREhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4JGO0F+ FmSwURJ2FYvKoP+Oq7bmeSNnlBo/9RIi022cXB6RPWD2IrZlX3jbTZQPJRsESeyN soxlkPF/tL4Ondds9cFwUst6etkOxpo87gRmHtANiWhelj4xc//pbaNZNMZjsldQ 0S/Jy8W3eGflclgyVaeFbNsJrzp6QoDpS4ONUnYfGjW6pLJf3gJ2d8qBpHp0pr6s VyTN4Ocyt+WefeuvOc8qBTzxXzuSmOSO/NNiNcvQlGiCAekrDBoT0VgUORbafcjc 8Xzeyk0UODTZtZ1SrHu/Q34FSLQkHv62rHU2NobUE59nk3GK0Hl/LeNLqg+6XYns IVLQy4VfpBWrZA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:18 2025 by rpki-client