This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft File: cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft (raw, json) Hash identifier: 5hdB7vxOVGWiK0Ja2b8XuB3b8TmuBHxpSWneNmHY/p4= Subject key identifier: 25:17:D8:0B:38:53:F8:38:DA:D7:0C:CE:C8:FB:04:04:03:26:72:BB Authority key identifier: 73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1 Certificate issuer: /CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1 Certificate serial: 019AF19BA08BAAAB95E134EDB3B672FF2D39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:39 +0000 Manifest this update: Sat 06 Dec 2025 03:01:39 +0000 Manifest next update: Sun 07 Dec 2025 03:01:39 +0000 Files and hashes: 1: 5j4kigVKwcUINFkbJ3xSgMqflUw.roa (hash: kVxN2YetN80jXaobnulfC7lyMJ7WxoaWB7joRYX4FHo=) 2: cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl (hash: 0nhHb94a36RrDobmIwBSz4AHAw2F1JLRvpaIDzqEClM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a0:8b:aa:ab:95:e1:34:ed:b3:b6:72:ff:2d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1 Validity Not Before: Dec 6 03:01:39 2025 GMT Not After : Dec 7 03:01:39 2025 GMT Subject: CN=2517d80b3853f838dad70ccec8fb0404032672bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:98:f7:60:7b:e0:4d:d8:9b:f5:d6:93:b2:cd: 5d:9d:a4:96:f2:c5:49:ee:ba:3d:b6:16:13:a4:a6: f3:7d:e6:ee:ca:09:bc:4f:47:50:8b:4a:b0:1f:85: 9f:2f:e8:5c:d5:52:7b:5a:f9:a6:e6:ca:67:3b:06: 49:1b:d3:6c:e1:61:db:9d:0a:22:05:44:bc:d3:cd: 7b:47:41:c6:ac:71:d7:2b:e7:ba:06:fe:64:72:00: 2e:f1:43:ac:19:1e:c6:98:c7:b1:ed:26:1f:33:a4: 3b:ce:75:6d:1c:f6:78:11:5b:5c:2a:af:ac:26:7e: 24:12:13:b0:fe:11:94:1d:47:a0:64:9c:e7:34:be: 5e:e0:bf:f5:7f:9e:9e:e6:1c:70:a7:f5:a8:11:2f: fa:13:0b:65:d9:57:fe:82:5d:fb:79:ae:19:ea:03: ca:c4:e6:31:a5:a2:78:c6:54:c1:f5:36:fa:17:0c: a6:3d:06:f8:e8:c3:a2:d4:47:2e:4e:45:86:8c:d0: 92:43:1d:18:d8:4e:f8:f7:1c:89:4c:c1:28:a5:5e: 2b:ee:64:0d:c3:09:68:8c:a0:b1:2c:5b:56:7e:c2: b5:39:f9:19:a9:76:6e:7c:c7:0d:79:31:44:b7:f2: d3:d5:b9:25:af:97:cf:6d:e8:80:15:f2:60:16:27: e5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:17:D8:0B:38:53:F8:38:DA:D7:0C:CE:C8:FB:04:04:03:26:72:BB X509v3 Authority Key Identifier: keyid:73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:1e:a0:2c:e2:fc:29:6f:09:0c:3f:46:6e:83:13:97:5f:18: 86:39:a8:91:93:4c:7c:ac:ef:d9:29:b7:cc:c2:ce:6d:b1:32: ed:c3:a2:49:f3:be:35:79:ff:a7:a7:d3:69:77:3c:b1:21:68: c9:29:8d:b5:db:51:8e:b2:b6:90:5f:e4:e9:4f:d6:8e:90:06: da:d8:c1:c7:aa:a2:26:e1:d7:2f:75:b1:8e:0d:35:45:43:3c: 69:54:11:4f:c6:f9:fb:81:8d:fa:76:f2:8d:ea:4f:77:36:93: a4:02:01:67:c2:5e:df:72:d0:b0:9a:b6:7a:88:6e:7d:02:a9: 5a:9d:0d:f2:e0:b5:1b:2a:54:61:ab:d7:f6:e7:b6:1e:66:f3: 1e:8f:d1:39:6a:72:50:8f:77:75:a7:83:1e:5f:20:64:d9:0d: b6:02:ba:d3:0c:7e:7e:83:da:b1:d3:4d:33:31:bb:23:10:7f: 09:56:e8:d8:93:5a:03:05:65:2e:2d:de:a7:89:49:4e:5e:09: 9c:1f:32:3c:7e:dc:8d:35:d6:fc:c4:5d:9b:20:8f:47:f1:b2: 28:4b:62:c2:34:c5:a2:44:92:93:25:84:9f:5c:c3:e7:cc:f1: 75:55:c2:68:56:ba:b5:3f:c3:58:31:a5:09:7f:74:ea:52:1b: 37:22:3c:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6CLqquV4TTts7Zy/y05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMTg5ZDI2YmFlN2Y4NWNiNGUwNmFiNWFiNTM2ZGU1YTgw YzE2YTEwHhcNMjUxMjA2MDMwMTM5WhcNMjUxMjA3MDMwMTM5WjAzMTEwLwYDVQQD EygyNTE3ZDgwYjM4NTNmODM4ZGFkNzBjY2VjOGZiMDQwNDAzMjY3MmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Jj3YHvgTdib9daTss1dnaSW8sVJ 7ro9thYTpKbzfebuygm8T0dQi0qwH4WfL+hc1VJ7Wvmm5spnOwZJG9Ns4WHbnQoi BUS80817R0HGrHHXK+e6Bv5kcgAu8UOsGR7GmMex7SYfM6Q7znVtHPZ4EVtcKq+s Jn4kEhOw/hGUHUegZJznNL5e4L/1f56e5hxwp/WoES/6Ewtl2Vf+gl37ea4Z6gPK xOYxpaJ4xlTB9Tb6FwymPQb46MOi1EcuTkWGjNCSQx0Y2E749xyJTMEopV4r7mQN wwlojKCxLFtWfsK1OfkZqXZufMcNeTFEt/LT1bklr5fPbeiAFfJgFiflSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUX2As4U/g42tcMzsj7BAQDJnK7MB8GA1UdIwQY MBaAFHMYnSa65/hctOBqtatTbeWoDBahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3hpZEpycm4tRnkwNEdxMXExTnQ1YWdNRnFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zNjBhOWQtYjEyMS00NWFlLTgzMGQt MDY2YjYzMjM3ZDg1LzEvY3hpZEpycm4tRnkwNEdxMXExTnQ1YWdNRnFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8zNjBhOWQtYjEyMS00NWFlLTgzMGQtMDY2YjYzMjM3ZDg1 LzEvY3hpZEpycm4tRnkwNEdxMXExTnQ1YWdNRnFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJB6gLOL8 KW8JDD9GboMTl18YhjmokZNMfKzv2Sm3zMLObbEy7cOiSfO+NXn/p6fTaXc8sSFo ySmNtdtRjrK2kF/k6U/WjpAG2tjBx6qiJuHXL3Wxjg01RUM8aVQRT8b5+4GN+nby jepPdzaTpAIBZ8Je33LQsJq2eohufQKpWp0N8uC1GypUYavX9ue2HmbzHo/ROWpy UI93daeDHl8gZNkNtgK60wx+foPasdNNMzG7IxB/CVbo2JNaAwVlLi3ep4lJTl4J nB8yPH7cjTXW/MRdmyCPR/GyKEtiwjTFokSSkyWEn1zD58zxdVXCaFa6tT/DWDGl CX906lIbNyI8Sg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:23 2025 by rpki-client