This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json) Hash identifier: XtOEdky0sJU8OjoxFXcNvvTxqZq5xmfIEPtOiuHiye4= Subject key identifier: A7:C7:E2:BF:A8:0C:8A:F9:23:55:09:A6:C2:DB:2B:03:54:D0:79:3F Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5 Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5 Certificate serial: 019AF5788842C71F358D49350B9ED9C12040 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 21:01:48 +0000 Manifest this update: Sat 06 Dec 2025 21:01:48 +0000 Manifest next update: Sun 07 Dec 2025 21:01:48 +0000 Files and hashes: 1: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: W8uWMqtvVi8O8s/htyoVIJ2jSnUgV5O2Hdn4mNbnZ4c=) 2: TO80eqDFXQYl6CGIoinTDRQ723A.roa (hash: s5/qxS+QcBwb4YurVep+bFST0F2tBLYaOg/4Lpz+Qgk=) 3: bQ7_HzmWbxe1bpqsnmG8t2z9J54.roa (hash: uTKgZb6MWbd79qCA3p5te2MUGcoD6xRmcaj1CluWZYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:88:42:c7:1f:35:8d:49:35:0b:9e:d9:c1:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5 Validity Not Before: Dec 6 21:01:48 2025 GMT Not After : Dec 7 21:01:48 2025 GMT Subject: CN=a7c7e2bfa80c8af9235509a6c2db2b0354d0793f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:8b:8f:5a:3a:fa:04:23:25:3b:f2:b0:51: dd:f1:da:c1:cb:f7:0d:76:7f:33:73:02:29:c5:7a: fa:c0:8a:c0:bb:d8:7a:af:cf:be:5f:16:ab:dd:7f: 0f:41:d7:75:01:2a:f8:33:47:74:e4:e2:67:85:17: b7:18:ab:cc:c6:00:11:b6:1d:57:c6:62:e4:34:21: 2f:ba:fc:f9:7d:87:6d:e6:6c:d0:b8:c0:87:53:cb: 3c:45:7c:dc:99:d6:0a:e1:12:3a:23:96:76:22:4d: 83:a5:ef:8c:2c:be:49:5a:b0:3c:55:3e:88:da:59: 8c:41:fc:98:28:36:cc:a3:fd:6a:43:e5:6a:b4:bf: 33:8b:21:62:6d:db:f1:b7:f5:84:bf:6a:bf:80:e0: b1:45:9b:e5:15:05:61:7b:c1:9c:8e:a1:a2:b5:c2: 34:c7:b1:b0:e9:b9:e4:bc:1a:27:ef:f0:fb:87:cb: f8:03:8c:e0:2c:eb:2f:b6:01:24:f5:d8:c1:45:3a: d8:95:7f:4d:2b:0d:8b:83:75:96:83:bd:a7:77:5d: eb:bb:64:6b:ae:68:da:7a:5a:4e:c3:90:bf:0a:da: 60:33:b6:ba:4a:29:6c:6d:5b:04:d0:9f:e9:20:90: b1:1d:b1:a4:79:93:57:da:fc:f1:c1:47:33:a3:fc: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C7:E2:BF:A8:0C:8A:F9:23:55:09:A6:C2:DB:2B:03:54:D0:79:3F X509v3 Authority Key Identifier: keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b9:4c:aa:08:ef:35:67:ac:9a:ae:9a:02:e3:a3:f0:2d:e5: 14:bb:5d:77:b1:d1:ad:50:58:79:ea:2c:b0:af:b0:0d:de:ab: da:8c:bf:cf:62:52:f0:0c:e0:c8:7c:3b:19:ca:01:e0:ed:bf: 52:9f:38:ed:88:aa:6d:d5:1c:16:d5:e3:02:da:27:ca:03:20: e0:fd:61:71:b6:79:0d:8d:56:da:25:2c:68:3d:11:3b:26:72: a4:52:24:6a:92:6c:c4:12:94:36:e7:30:60:2f:74:8c:d5:b5: ac:2c:4f:1b:49:bf:b2:50:bd:5f:36:90:c1:05:2d:9f:cd:93: b7:4d:95:d4:02:da:59:e1:00:e0:c7:0f:7f:83:31:93:99:10: ce:8d:92:63:4e:63:9b:85:f0:eb:1e:39:9b:dc:a5:f5:e9:f5: 4d:b4:12:89:37:fd:43:9d:fa:1a:6d:e9:be:0c:30:b5:05:9c: 7c:2b:7f:df:e0:96:12:02:b6:6c:c7:5b:f2:87:1a:77:6a:60: 41:52:7c:51:f2:2f:db:48:80:56:65:e0:02:39:9a:40:84:c6: dd:51:7b:9d:f5:d8:08:af:cb:ef:ed:fd:d1:27:41:1a:23:12: c8:e1:19:0c:1b:10:09:bf:81:8e:bc:1c:f4:f9:2f:9a:30:98: d8:b6:2b:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eIhCxx81jUk1C57ZwSBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWIzMThlNTA1N2ExYzEwMzQxNjA3Y2RkZGRhZGI0NmQ3 MWFiZjUwHhcNMjUxMjA2MjEwMTQ4WhcNMjUxMjA3MjEwMTQ4WjAzMTEwLwYDVQQD EyhhN2M3ZTJiZmE4MGM4YWY5MjM1NTA5YTZjMmRiMmIwMzU0ZDA3OTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTqLj1o6+gQjJTvysFHd8drBy/cN dn8zcwIpxXr6wIrAu9h6r8++Xxar3X8PQdd1ASr4M0d05OJnhRe3GKvMxgARth1X xmLkNCEvuvz5fYdt5mzQuMCHU8s8RXzcmdYK4RI6I5Z2Ik2Dpe+MLL5JWrA8VT6I 2lmMQfyYKDbMo/1qQ+VqtL8ziyFibdvxt/WEv2q/gOCxRZvlFQVhe8GcjqGitcI0 x7Gw6bnkvBon7/D7h8v4A4zgLOsvtgEk9djBRTrYlX9NKw2Lg3WWg72nd13ru2Rr rmjaelpOw5C/CtpgM7a6SilsbVsE0J/pIJCxHbGkeZNX2vzxwUczo/wnSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfH4r+oDIr5I1UJpsLbKwNU0Hk/MB8GA1UdIwQY MBaAFAsbMY5QV6HBA0FgfN3drbRtcav1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2Yt NTllNmE2ZDRkNTc2LzEvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2YtNTllNmE2ZDRkNTc2 LzEvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLlMqgjv NWesmq6aAuOj8C3lFLtdd7HRrVBYeeossK+wDd6r2oy/z2JS8AzgyHw7GcoB4O2/ Up847YiqbdUcFtXjAtonygMg4P1hcbZ5DY1W2iUsaD0ROyZypFIkapJsxBKUNucw YC90jNW1rCxPG0m/slC9XzaQwQUtn82Tt02V1ALaWeEA4McPf4Mxk5kQzo2SY05j m4Xw6x45m9yl9en1TbQSiTf9Q536Gm3pvgwwtQWcfCt/3+CWEgK2bMdb8ocad2pg QVJ8UfIv20iAVmXgAjmaQITG3VF7nfXYCK/L7+390SdBGiMSyOEZDBsQCb+Bjrwc 9PkvmjCY2LYr8Q== -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:33 2025 by rpki-client