This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft File: cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft (raw, json) Hash identifier: txPefIIxcQ1DUk09TiKZg/smcjUG1RGge6MnJtrzvx4= Subject key identifier: 91:69:B1:7D:4E:4E:E0:B7:62:22:9A:E7:8E:1B:F8:A6:7D:78:0F:24 Authority key identifier: 72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4 Certificate issuer: /CN=720c6323cf730930a03b0e44607f6fedf527a8c4 Certificate serial: 019AF19B57ABE309066CBC4AEC2B2D389508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft Manifest number: 7E Signing time: Sat 06 Dec 2025 03:01:20 +0000 Manifest this update: Sat 06 Dec 2025 03:01:20 +0000 Manifest next update: Sun 07 Dec 2025 03:01:20 +0000 Files and hashes: 1: cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl (hash: 1tjnZdmhgi0ZRE6Ds1G3oECMsnWj/zLOzZ5pgrSfQKc=) 2: jf136iTXxi12Hjt-tW87j6RLunU.roa (hash: Y2zqrXOARQyWLcKRC6gUKA6rctKZc3uE4RdzoYUkrrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:57:ab:e3:09:06:6c:bc:4a:ec:2b:2d:38:95:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=720c6323cf730930a03b0e44607f6fedf527a8c4 Validity Not Before: Dec 6 03:01:20 2025 GMT Not After : Dec 7 03:01:20 2025 GMT Subject: CN=9169b17d4e4ee0b762229ae78e1bf8a67d780f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0b:55:17:1e:1f:6e:ae:c1:9a:fb:55:20:40: de:c1:e9:ee:b7:92:57:21:9d:0d:d3:09:c4:f7:ed: be:66:a0:e6:ca:6c:f1:7b:b6:34:eb:8c:35:c7:90: 48:a2:c7:9d:33:5e:0a:37:13:e6:c3:d5:0a:3d:d7: 9c:68:50:46:c0:04:1b:10:df:52:71:26:c9:30:13: e3:c9:7f:73:1d:e8:1b:74:41:04:0a:2c:65:05:64: 6b:2b:17:13:3f:56:b9:4d:93:12:08:fb:a6:fe:d8: 43:f7:d2:3f:7d:8e:cc:ad:8f:40:03:74:78:db:71: ab:b6:54:42:2e:68:33:dd:28:22:b9:f8:73:d3:b3: f4:fe:50:0f:51:bb:02:ec:b8:d2:13:a2:d0:d8:ea: dc:e3:83:ce:ad:c4:11:a8:40:11:67:74:41:f6:b5: 9c:c6:f2:6a:a0:e0:0d:43:39:23:93:28:0b:ef:96: 33:88:b1:e0:68:fc:8a:ef:51:2b:d2:28:c6:b1:55: a2:42:c0:23:83:1d:85:2d:13:8c:c7:8f:d5:e0:3b: bf:8a:64:c9:07:16:64:78:40:e1:3b:37:72:08:a5: 4c:c3:41:b3:4b:8c:bb:c0:aa:90:a3:fe:50:5e:61: 4f:c7:59:63:fa:90:98:a7:dc:45:6b:95:f2:83:b1: 00:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:69:B1:7D:4E:4E:E0:B7:62:22:9A:E7:8E:1B:F8:A6:7D:78:0F:24 X509v3 Authority Key Identifier: keyid:72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1a:22:bd:33:fc:73:74:b8:fb:4f:56:e0:a6:49:68:fb:35: 5f:5b:5c:cf:78:d6:f5:a6:51:c6:11:98:cd:89:7e:86:a3:23: 49:d7:93:d0:18:1b:3e:28:94:3a:cd:56:d0:ef:9d:3c:77:72: fa:bb:84:41:67:29:66:0e:f5:07:fa:14:63:a4:35:5d:ff:df: 7d:56:76:af:e7:49:66:d1:dd:62:97:5b:00:31:e7:62:0f:d0: 00:f7:91:d9:4f:3e:71:fd:a1:ea:c3:80:6e:fc:98:4e:15:0a: b2:85:43:6c:6e:a8:20:57:1c:6c:b7:0a:86:7e:fe:80:d2:30: 34:30:87:f3:ac:c4:e9:2a:d6:44:62:13:52:3c:f8:3f:cf:33: 6d:69:3f:d0:ca:cd:10:45:40:ba:aa:2e:d6:d3:b7:07:5e:cb: fd:90:21:e4:13:71:68:9c:71:a6:fa:e9:37:46:42:42:e2:dd: 32:d4:11:cb:47:06:34:81:74:7b:7e:02:4c:ba:0f:4d:f3:6b: 69:ec:d0:0e:10:3c:d6:6d:72:f4:7f:c0:0a:e9:c5:3e:c6:fe: 5d:d2:ee:a2:da:cd:af:f3:4a:93:2e:fe:01:21:97:bf:db:85: 3c:2a:41:72:83:b9:ab:6a:dd:44:3c:6c:08:6f:84:79:22:32: 69:ce:ce:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1er4wkGbLxK7CstOJUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMGM2MzIzY2Y3MzA5MzBhMDNiMGU0NDYwN2Y2ZmVkZjUy N2E4YzQwHhcNMjUxMjA2MDMwMTIwWhcNMjUxMjA3MDMwMTIwWjAzMTEwLwYDVQQD Eyg5MTY5YjE3ZDRlNGVlMGI3NjIyMjlhZTc4ZTFiZjhhNjdkNzgwZjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQtVFx4fbq7BmvtVIEDewenut5JX IZ0N0wnE9+2+ZqDmymzxe7Y064w1x5BIosedM14KNxPmw9UKPdecaFBGwAQbEN9S cSbJMBPjyX9zHegbdEEECixlBWRrKxcTP1a5TZMSCPum/thD99I/fY7MrY9AA3R4 23GrtlRCLmgz3Sgiufhz07P0/lAPUbsC7LjSE6LQ2Orc44POrcQRqEARZ3RB9rWc xvJqoOANQzkjkygL75YziLHgaPyK71Er0ijGsVWiQsAjgx2FLROMx4/V4Du/imTJ BxZkeEDhOzdyCKVMw0GzS4y7wKqQo/5QXmFPx1lj+pCYp9xFa5Xyg7EAlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFpsX1OTuC3YiKa544b+KZ9eA8kMB8GA1UdIwQY MBaAFHIMYyPPcwkwoDsORGB/b+31J6jEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNmRhZTgtZDk4ZS00YWEwLWI0YWQt NDI4MWUzOGE5YmYyLzEvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNmRhZTgtZDk4ZS00YWEwLWI0YWQtNDI4MWUzOGE5YmYy LzEvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhoivTP8 c3S4+09W4KZJaPs1X1tcz3jW9aZRxhGYzYl+hqMjSdeT0BgbPiiUOs1W0O+dPHdy +ruEQWcpZg71B/oUY6Q1Xf/ffVZ2r+dJZtHdYpdbADHnYg/QAPeR2U8+cf2h6sOA bvyYThUKsoVDbG6oIFccbLcKhn7+gNIwNDCH86zE6SrWRGITUjz4P88zbWk/0MrN EEVAuqou1tO3B17L/ZAh5BNxaJxxpvrpN0ZCQuLdMtQRy0cGNIF0e34CTLoPTfNr aezQDhA81m1y9H/ACunFPsb+XdLuotrNr/NKky7+ASGXv9uFPCpBcoO5q2rdRDxs CG+EeSIyac7OPw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:06 2025 by rpki-client