This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft File: CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json) Hash identifier: h2ayDOSbh8AMvz4gZ7388TZ/Pz8hNE43+wwGuJUEHpg= Subject key identifier: E1:D5:42:2B:31:AF:BF:E9:70:F4:C7:A4:19:D7:7F:37:E7:44:24:E0 Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38 Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138 Certificate serial: 019AF19A9CEC3EF77C6FA204511A8B251D59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:00:32 +0000 Manifest this update: Sat 06 Dec 2025 03:00:32 +0000 Manifest next update: Sun 07 Dec 2025 03:00:32 +0000 Files and hashes: 1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: HAAN180/Q8fF1GWiNaZK36goYH9fr2gYw8BLfW5NwX0=) 2: ugc9sZedf1kQim_ILlGgEqT8zEQ.roa (hash: il9YS8RE+T8nxwMQDbcqvrV75JMzYR3yLbUc6KCg+oU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:9c:ec:3e:f7:7c:6f:a2:04:51:1a:8b:25:1d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138 Validity Not Before: Dec 6 03:00:32 2025 GMT Not After : Dec 7 03:00:32 2025 GMT Subject: CN=e1d5422b31afbfe970f4c7a419d77f37e74424e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:81:2d:49:c7:e0:d1:be:66:06:9d:8d:d5:c8: 35:ab:4a:fa:5e:88:63:ae:d3:31:5a:5c:ed:d2:db: 2c:99:c4:a4:db:31:98:bf:b7:d0:38:59:4a:a2:a7: 87:5e:6d:f8:09:2e:c4:46:75:3f:4d:6c:56:1c:03: a3:5d:ae:7e:dd:16:3d:4b:5d:6f:e3:f9:f7:cd:9b: 4b:16:68:04:53:ee:ff:94:25:e7:cb:e6:d3:6b:14: a5:48:3b:ba:55:64:cb:9e:a5:ab:5b:81:86:08:72: 28:01:80:93:de:fc:33:fc:22:22:35:5c:27:26:00: a5:85:d4:a1:5a:eb:c0:95:d4:c9:93:64:b1:42:70: 41:bc:41:85:f0:0a:aa:cb:86:d4:8f:9c:ac:a8:69: a6:8f:52:1e:b8:cb:dd:25:da:10:21:37:85:63:54: 63:16:7f:db:c8:a0:8f:0c:b8:41:af:ed:e5:a2:35: 16:34:24:ea:3d:9c:5d:47:f4:1f:91:ed:d8:79:b3: 69:fd:79:be:47:af:bd:c7:7d:58:f1:a7:a9:cb:55: 86:b7:1c:f7:59:78:d6:e8:04:73:12:41:1b:f5:2a: fa:c6:27:8a:de:bb:48:4e:dc:eb:c1:2d:09:e8:6e: 08:d0:9a:b3:d6:ae:6e:09:b8:48:1c:4c:a0:65:c3: 51:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D5:42:2B:31:AF:BF:E9:70:F4:C7:A4:19:D7:7F:37:E7:44:24:E0 X509v3 Authority Key Identifier: keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ff:13:30:e9:f7:00:6e:7f:6d:8b:c1:b3:13:28:b1:36:81: fc:64:ed:eb:d3:0b:68:34:37:11:fe:0d:11:10:11:e6:4a:b2: 68:4f:ed:ba:02:2d:28:3e:3b:c4:04:b9:bb:59:01:74:dc:d6: ae:74:30:6c:f1:98:87:d5:47:61:c6:21:66:07:67:50:97:7b: bd:ec:b8:74:1e:22:7c:83:03:9e:7a:96:91:72:0c:af:59:86: 22:7f:c5:39:7a:d6:e7:56:d0:56:a4:02:b2:ec:ef:e9:85:62: bb:df:56:6c:20:17:9b:8a:4a:c0:3e:45:9a:0c:b2:8a:db:5a: f0:25:cc:ca:c9:72:e4:19:2f:a5:a7:20:b1:30:2a:7f:69:fc: 40:37:4d:f6:40:b3:90:7f:26:94:e8:97:ee:2f:eb:8a:18:c2: 38:02:2d:72:8a:8a:63:f7:8d:e9:29:dc:fa:2c:5b:5b:91:d5: 8a:f1:87:9a:ae:af:1e:84:6d:37:41:1a:38:49:de:21:ed:36: 84:42:43:e2:c4:ce:2b:34:3b:0f:6f:71:5e:3e:e5:ff:54:c2: 5c:4b:cd:a6:9e:ae:0d:ee:74:99:23:31:7d:a3:53:b7:f6:a5: e4:19:64:66:cf:0d:6b:a8:c1:a4:b5:99:1d:f6:2b:e4:41:e1: c1:21:4c:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpzsPvd8b6IEURqLJR1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMTAyN2FjZTE3ZjAwNjdmNjk3YzY1MzYxNDg4MTkyZWFm NjQxMzgwHhcNMjUxMjA2MDMwMDMyWhcNMjUxMjA3MDMwMDMyWjAzMTEwLwYDVQQD EyhlMWQ1NDIyYjMxYWZiZmU5NzBmNGM3YTQxOWQ3N2YzN2U3NDQyNGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4EtScfg0b5mBp2N1cg1q0r6Xohj rtMxWlzt0tssmcSk2zGYv7fQOFlKoqeHXm34CS7ERnU/TWxWHAOjXa5+3RY9S11v 4/n3zZtLFmgEU+7/lCXny+bTaxSlSDu6VWTLnqWrW4GGCHIoAYCT3vwz/CIiNVwn JgClhdShWuvAldTJk2SxQnBBvEGF8Aqqy4bUj5ysqGmmj1IeuMvdJdoQITeFY1Rj Fn/byKCPDLhBr+3lojUWNCTqPZxdR/Qfke3YebNp/Xm+R6+9x31Y8aepy1WGtxz3 WXjW6ARzEkEb9Sr6xieK3rtITtzrwS0J6G4I0Jqz1q5uCbhIHEygZcNRswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHVQisxr7/pcPTHpBnXfzfnRCTgMB8GA1UdIwQY MBaAFAsQJ6zhfwBn9pfGU2FIgZLq9kE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hBbnJPRl9BR2YybDhaVFlVaUJrdXIyUVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iMzExZDQtZTM1OC00NzIxLWFiOGQt NmU2YTVmMTcyYmUzLzEvQ3hBbnJPRl9BR2YybDhaVFlVaUJrdXIyUVRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9iMzExZDQtZTM1OC00NzIxLWFiOGQtNmU2YTVmMTcyYmUz LzEvQ3hBbnJPRl9BR2YybDhaVFlVaUJrdXIyUVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArv8TMOn3 AG5/bYvBsxMosTaB/GTt69MLaDQ3Ef4NERAR5kqyaE/tugItKD47xAS5u1kBdNzW rnQwbPGYh9VHYcYhZgdnUJd7vey4dB4ifIMDnnqWkXIMr1mGIn/FOXrW51bQVqQC suzv6YViu99WbCAXm4pKwD5Fmgyyitta8CXMysly5BkvpacgsTAqf2n8QDdN9kCz kH8mlOiX7i/rihjCOAItcoqKY/eN6Snc+ixbW5HVivGHmq6vHoRtN0EaOEneIe02 hEJD4sTOKzQ7D29xXj7l/1TCXEvNpp6uDe50mSMxfaNTt/al5BlkZs8Na6jBpLWZ HfYr5EHhwSFMFg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:11 2025 by rpki-client