This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft File: cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json) Hash identifier: As886WfLcOP4MonFiGBhXjLLDGKEYcEAAop+1Zoyi4w= Subject key identifier: AB:DC:CE:3D:88:C7:A5:F6:F9:1D:18:83:BD:99:46:46:8E:EC:D7:9F Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8 Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8 Certificate serial: 019AF509AC856A42DEE5C48874CE0734F269 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft Manifest number: 08C0 Signing time: Sat 06 Dec 2025 19:00:42 +0000 Manifest this update: Sat 06 Dec 2025 19:00:42 +0000 Manifest next update: Sun 07 Dec 2025 19:00:42 +0000 Files and hashes: 1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: 9+rwKcct5s/gnJNSqsZ+38uH9AWKhQqRLc62SSwQFjs=) 2: xsLt5XL-OWIaNdR6BZ8HbsppEGM.roa (hash: fVuO1qpyondG1qElrhxFzaCfBXaBgOTcL+nbs40PcY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ac:85:6a:42:de:e5:c4:88:74:ce:07:34:f2:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8 Validity Not Before: Dec 6 19:00:42 2025 GMT Not After : Dec 7 19:00:42 2025 GMT Subject: CN=abdcce3d88c7a5f6f91d1883bd9946468eecd79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e9:28:08:e6:b5:86:8b:d0:e2:d9:bb:20:c2: e1:2e:5c:85:bb:89:ad:01:ab:65:5c:46:2a:5b:a2: 2b:6e:ba:a8:bd:34:76:fd:11:30:fb:3e:f2:b8:a3: 35:f6:32:3a:3c:c5:58:50:cf:71:4b:c0:a3:72:58: ea:63:94:79:7d:2a:48:44:fc:aa:1b:e5:96:b8:75: c6:f7:2e:3d:2b:17:e1:f3:6d:f1:6e:98:89:5b:04: b0:e1:bd:ea:0c:dc:03:32:dc:8f:5c:c6:4d:cb:50: ba:5a:0d:0f:50:12:62:cb:4c:57:2f:30:fc:97:82: b5:b6:eb:36:6e:d0:87:7d:c6:33:ea:2e:b1:e1:ef: 72:9e:b9:33:30:87:f0:3a:f4:ba:53:3f:da:20:c2: 6b:50:3e:5c:e6:c4:b2:6f:fd:05:d7:cf:23:af:27: cd:ea:7e:9e:b5:51:f7:5a:32:59:8b:61:b5:32:dd: a3:b7:61:ac:ce:1b:47:41:7c:87:55:d6:60:cc:c3: 03:51:a4:c7:4a:87:39:31:8a:89:ba:90:0a:ec:ad: 02:87:d3:9f:90:b5:f5:3a:e3:83:97:6b:76:ed:51: 74:40:de:71:02:65:a9:eb:ac:fb:44:7a:6b:37:a6: ce:44:b5:14:78:5c:1b:3a:a3:27:93:14:f4:e1:59: b2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:DC:CE:3D:88:C7:A5:F6:F9:1D:18:83:BD:99:46:46:8E:EC:D7:9F X509v3 Authority Key Identifier: keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:3c:22:47:c3:b3:ce:97:ae:bb:4e:b4:67:33:a7:b5:1f:14: 71:cf:a6:a9:dd:a9:5d:6a:f5:2e:91:93:da:42:eb:dc:b4:0e: a6:55:03:b6:1f:12:58:6c:af:17:ac:2a:fc:22:76:4c:82:d1: 62:69:d2:82:4c:8e:a3:e3:78:e9:d1:02:fb:db:5d:0c:ad:1f: 42:72:1a:eb:87:bd:7b:24:c1:ee:86:cc:e1:c2:82:52:aa:db: 1f:ff:1e:60:fc:36:85:82:d7:5a:83:11:32:4d:6d:2d:7c:54: b2:45:95:33:c2:28:5e:66:36:08:6b:0f:49:b2:1e:d6:1c:e9: 78:f7:b4:d2:87:ae:2c:15:dc:62:a9:36:f1:ab:57:f3:30:63: a1:4a:bf:5f:0b:ec:7d:03:bd:d9:be:86:95:c4:1a:fc:c0:b1: e4:5d:fc:03:43:39:0d:27:10:bc:8a:35:10:05:ab:c4:e9:5f: a4:d4:74:01:4e:1b:28:88:4b:97:3f:26:ce:67:a5:3e:aa:3a: 66:d3:6b:70:5f:f1:0e:b7:08:6d:76:c5:06:7a:1f:6e:01:80: bd:39:26:93:e1:43:df:17:10:03:7c:31:f3:5a:a4:51:ac:25: 9c:4a:ad:77:a5:41:b6:d3:ca:18:fb:7b:c3:3b:37:b4:a3:db: de:b7:f0:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CayFakLe5cSIdM4HNPJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMWMxMzgyODU4YjBkYzk1YTlhZGJlYTQ3MjhiMzFmOWUy MmMwZDgwHhcNMjUxMjA2MTkwMDQyWhcNMjUxMjA3MTkwMDQyWjAzMTEwLwYDVQQD EyhhYmRjY2UzZDg4YzdhNWY2ZjkxZDE4ODNiZDk5NDY0NjhlZWNkNzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ukoCOa1hovQ4tm7IMLhLlyFu4mt AatlXEYqW6IrbrqovTR2/REw+z7yuKM19jI6PMVYUM9xS8CjcljqY5R5fSpIRPyq G+WWuHXG9y49Kxfh823xbpiJWwSw4b3qDNwDMtyPXMZNy1C6Wg0PUBJiy0xXLzD8 l4K1tus2btCHfcYz6i6x4e9ynrkzMIfwOvS6Uz/aIMJrUD5c5sSyb/0F188jryfN 6n6etVH3WjJZi2G1Mt2jt2GszhtHQXyHVdZgzMMDUaTHSoc5MYqJupAK7K0Ch9Of kLX1OuODl2t27VF0QN5xAmWp66z7RHprN6bORLUUeFwbOqMnkxT04VmyMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvczj2Ix6X2+R0Yg72ZRkaO7NefMB8GA1UdIwQY MBaAFHMcE4KFiw3JWprb6kcosx+eIsDYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xNzJlMGItOGNiYi00MDJlLThmMmMt ODU5NWI0NTAwODg0LzEvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xNzJlMGItOGNiYi00MDJlLThmMmMtODU5NWI0NTAwODg0 LzEvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2TwiR8Oz zpeuu060ZzOntR8Ucc+mqd2pXWr1LpGT2kLr3LQOplUDth8SWGyvF6wq/CJ2TILR YmnSgkyOo+N46dEC+9tdDK0fQnIa64e9eyTB7obM4cKCUqrbH/8eYPw2hYLXWoMR Mk1tLXxUskWVM8IoXmY2CGsPSbIe1hzpePe00oeuLBXcYqk28atX8zBjoUq/Xwvs fQO92b6GlcQa/MCx5F38A0M5DScQvIo1EAWrxOlfpNR0AU4bKIhLlz8mzmelPqo6 ZtNrcF/xDrcIbXbFBnofbgGAvTkmk+FD3xcQA3wx81qkUawlnEqtd6VBttPKGPt7 wzs3tKPb3rfw6A== -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:34 2025 by rpki-client