This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft File: cX9V88YAexy91-ggiQVpAGdXs2Y.mft (raw, json) Hash identifier: Cqf05nlQwc8ShS0nnFGBAeRIP7LrNvK9kuROSTxH/bc= Subject key identifier: C2:80:52:65:B7:0F:88:50:04:38:22:93:31:1F:7C:8F:4E:FD:A7:F2 Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66 Certificate issuer: /CN=717f55f3c6007b1cbdd7e820890569006757b366 Certificate serial: 019AF31B6D94173319B7AE535FEE4D49C170 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft Manifest number: 0EF1 Signing time: Sat 06 Dec 2025 10:00:52 +0000 Manifest this update: Sat 06 Dec 2025 10:00:52 +0000 Manifest next update: Sun 07 Dec 2025 10:00:52 +0000 Files and hashes: 1: BNamB5vKS8VYoQEENNZLcbAD0yY.roa (hash: AZc2M6A0pF1sMbjRSCCXbLIDgidX2dUycGenbS2p6qA=) 2: cX9V88YAexy91-ggiQVpAGdXs2Y.crl (hash: BTIHm1TSp7xAiWORahc3BHl//Wl/6BO+jFZCGw7yGwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:6d:94:17:33:19:b7:ae:53:5f:ee:4d:49:c1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366 Validity Not Before: Dec 6 10:00:52 2025 GMT Not After : Dec 7 10:00:52 2025 GMT Subject: CN=c2805265b70f885004382293311f7c8f4efda7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3f:91:f4:ba:fb:55:63:f6:4d:2e:93:89:67: 15:8b:f0:28:75:fc:d3:2e:ce:56:34:55:1d:43:c1: 07:c1:df:e3:00:4a:51:6c:bf:fc:97:b7:f9:f3:27: cb:8d:2b:5a:b0:90:08:11:84:7f:d5:ed:b8:1c:31: c3:ee:9a:e1:fd:aa:12:35:c7:1b:f1:27:b5:f1:19: 4d:18:7a:09:7b:9e:b4:4a:8f:00:fd:3b:42:d5:e5: 5c:94:7c:2a:13:58:5a:4c:b3:f3:db:d7:fa:0b:09: 37:53:42:be:a3:9e:aa:95:2c:21:11:be:ce:f8:a4: 1e:91:8e:37:52:42:44:aa:25:a3:ec:b4:eb:3f:9e: 1e:3d:01:f6:d7:80:2a:75:7c:97:d2:2f:0d:fa:99: 70:38:59:26:10:f2:cd:64:c3:21:a7:9e:52:a3:4a: 87:51:ae:07:ee:61:58:24:c8:8d:84:35:b0:46:79: 2c:56:36:69:3b:d0:ca:9d:8c:63:10:53:ed:6e:36: cc:a6:bc:4a:40:e3:30:99:b9:ee:0a:f9:c6:37:f6: d4:2e:e0:33:40:e5:57:31:36:e0:0b:82:c6:66:c5: 47:ce:d3:c2:6b:35:07:4c:be:31:ab:8e:13:ad:67: 2c:95:b9:e9:72:29:ab:b7:9e:f8:a8:f4:f2:a8:1a: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:80:52:65:B7:0F:88:50:04:38:22:93:31:1F:7C:8F:4E:FD:A7:F2 X509v3 Authority Key Identifier: keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:f9:f7:0e:ff:e1:1d:2e:47:ad:08:33:c9:d7:01:10:18:8d: 63:5f:e3:1d:c1:ef:3a:02:19:d4:a7:cc:7b:6c:61:80:28:9b: 25:71:fc:d8:59:fa:01:e7:ab:de:f2:70:29:fb:3f:cd:c0:0d: 69:57:48:c5:f0:5b:f6:85:83:85:15:8c:54:38:a8:81:76:4f: c5:77:d1:f7:9b:1d:d5:db:53:dd:df:af:03:6c:18:7c:43:2c: 4e:4e:cd:c4:83:26:59:15:64:bd:1e:3d:b0:18:a0:48:da:5f: 68:e8:80:1e:4d:29:63:81:c1:fd:e6:91:db:75:c6:1b:78:60: 04:a3:93:f7:22:61:9e:81:de:0d:49:d5:b2:02:21:5b:46:e5: c2:00:53:96:08:77:24:a8:c6:59:99:86:35:d5:0c:22:ed:2e: c0:78:13:23:12:12:b0:1b:ab:14:2e:d4:e7:78:16:cd:b3:7f: 33:f4:9f:7a:85:a6:a1:80:83:8d:40:4c:08:f2:2d:24:22:36: e8:e2:25:64:ab:c1:69:93:84:f1:32:16:fa:0f:b0:b1:96:af: c5:79:96:f7:df:cf:36:0d:50:9f:c0:37:7e:44:10:ab:dc:9c: 71:e3:9e:d0:a6:ce:5a:d3:b6:e1:e4:bb:70:58:00:22:36:fa: 9d:f0:c5:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG22UFzMZt65TX+5NScFwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxN2Y1NWYzYzYwMDdiMWNiZGQ3ZTgyMDg5MDU2OTAwNjc1 N2IzNjYwHhcNMjUxMjA2MTAwMDUyWhcNMjUxMjA3MTAwMDUyWjAzMTEwLwYDVQQD EyhjMjgwNTI2NWI3MGY4ODUwMDQzODIyOTMzMTFmN2M4ZjRlZmRhN2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD+R9Lr7VWP2TS6TiWcVi/AodfzT Ls5WNFUdQ8EHwd/jAEpRbL/8l7f58yfLjStasJAIEYR/1e24HDHD7prh/aoSNccb 8Se18RlNGHoJe560So8A/TtC1eVclHwqE1haTLPz29f6Cwk3U0K+o56qlSwhEb7O +KQekY43UkJEqiWj7LTrP54ePQH214AqdXyX0i8N+plwOFkmEPLNZMMhp55So0qH Ua4H7mFYJMiNhDWwRnksVjZpO9DKnYxjEFPtbjbMprxKQOMwmbnuCvnGN/bULuAz QOVXMTbgC4LGZsVHztPCazUHTL4xq44TrWcslbnpcimrt574qPTyqBrWgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKAUmW3D4hQBDgikzEffI9O/afyMB8GA1UdIwQY MBaAFHF/VfPGAHscvdfoIIkFaQBnV7NmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgt NjczNjQwMjMzNjY1LzEvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgtNjczNjQwMjMzNjY1 LzEvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPn3Dv/h HS5HrQgzydcBEBiNY1/jHcHvOgIZ1KfMe2xhgCibJXH82Fn6Aeer3vJwKfs/zcAN aVdIxfBb9oWDhRWMVDiogXZPxXfR95sd1dtT3d+vA2wYfEMsTk7NxIMmWRVkvR49 sBigSNpfaOiAHk0pY4HB/eaR23XGG3hgBKOT9yJhnoHeDUnVsgIhW0blwgBTlgh3 JKjGWZmGNdUMIu0uwHgTIxISsBurFC7U53gWzbN/M/SfeoWmoYCDjUBMCPItJCI2 6OIlZKvBaZOE8TIW+g+wsZavxXmW99/PNg1Qn8A3fkQQq9ycceOe0KbOWtO24eS7 cFgAIjb6nfDFdw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:31:09 2025 by rpki-client