This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft File: CXa-2b-5b_oZgiBViqPVuMj5zT0.mft (raw, json) Hash identifier: 92Q1m+gpIvrlngpi8Fuxl8GyHaiLoR22QcB5245pLaI= Subject key identifier: 72:73:DB:25:81:FF:02:A2:94:88:A4:B3:7B:71:02:DC:B0:14:85:A6 Authority key identifier: 09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D Certificate issuer: /CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d Certificate serial: 019AF46523F4402CECCE682DED1A17590825 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft Manifest number: 01CA Signing time: Sat 06 Dec 2025 16:01:00 +0000 Manifest this update: Sat 06 Dec 2025 16:01:00 +0000 Manifest next update: Sun 07 Dec 2025 16:01:00 +0000 Files and hashes: 1: CXa-2b-5b_oZgiBViqPVuMj5zT0.crl (hash: U97xHadq87Ll01Gu4kCMq9cIBLtqaKZRIi8CyNKf8JQ=) 2: aBpP3bYzGKuR6nhWBmH2ZNVu5M0.roa (hash: GDuJcoE/4sB2mx00j2kfWz5EyEq+Z7H0hLsLa7O17eM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:23:f4:40:2c:ec:ce:68:2d:ed:1a:17:59:08:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d Validity Not Before: Dec 6 16:01:00 2025 GMT Not After : Dec 7 16:01:00 2025 GMT Subject: CN=7273db2581ff02a29488a4b37b7102dcb01485a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cd:02:ea:f0:f7:45:67:31:0e:f6:22:85:a7: 3d:0c:82:0b:83:ee:36:c0:91:e1:49:74:85:56:a8: a4:bc:c0:dd:3f:eb:e6:5f:f0:cd:c5:43:3b:89:ab: f5:d0:fb:f6:fc:e5:df:61:03:c5:10:0b:55:8d:39: d4:46:6f:6a:a9:12:ac:f5:31:b7:25:c6:00:f0:55: fb:00:89:00:ac:70:13:b7:89:e2:96:ce:fc:fe:54: 0b:85:60:71:3a:38:a0:6c:85:ea:a5:d7:af:f0:d6: f4:27:c1:11:3c:aa:a6:9f:4c:45:68:ac:26:00:e4: 3e:2b:03:ee:67:1a:9c:5d:82:7e:42:f9:4b:b9:fd: 5b:8c:64:e5:17:60:b7:09:df:d5:12:c0:2b:37:3a: 77:ad:48:87:46:82:6d:64:43:b9:28:4f:9c:02:f5: 73:f8:43:96:55:a7:dc:d2:d3:68:30:c5:57:40:7c: 08:50:dc:ec:d9:bf:84:bb:cd:09:ec:ed:37:bb:de: e0:15:d8:a3:5a:7d:05:81:31:7c:36:37:27:85:22: 1e:48:b3:47:c3:f5:25:da:dc:8e:15:77:f6:27:9b: 46:9c:ef:d8:85:3d:64:e1:d7:8b:5c:13:1c:4f:b7: 28:c6:b5:cf:2b:8c:63:4b:88:11:69:e6:a1:1f:b1: ee:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:73:DB:25:81:FF:02:A2:94:88:A4:B3:7B:71:02:DC:B0:14:85:A6 X509v3 Authority Key Identifier: keyid:09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:5e:db:c4:78:a9:ef:87:55:90:a8:92:a7:a4:c1:b3:ca:c8: fe:e1:ac:8c:b3:43:9c:90:0a:39:18:ad:41:81:01:85:c8:d8: cc:9f:7c:77:38:87:06:de:f0:bb:41:57:5b:a1:9d:16:9f:42: bb:3b:46:a9:56:27:8a:39:bb:77:ed:9e:33:58:ef:0b:a3:70: 1d:81:70:9a:44:f1:33:5d:12:e0:cc:6a:d6:a8:0a:42:f4:0e: 5d:b4:f9:da:a2:39:ef:69:96:ae:e0:6b:e5:ec:5b:93:e0:2b: b7:99:8e:72:56:1f:06:b4:f1:be:20:32:b0:45:c1:fb:00:45: cf:c8:e2:3b:4c:d7:a3:f3:95:30:ed:1e:0f:33:f5:0c:d3:34: cc:d6:eb:4d:e2:bf:e1:93:7e:c4:77:04:0f:00:40:f7:73:01: 9a:2c:99:30:fb:57:51:a2:58:10:25:13:d8:76:64:7e:91:92: 23:d2:60:09:03:0f:22:b8:8f:35:ed:03:e2:67:b8:84:ab:03: e3:37:98:df:4b:06:81:39:60:4b:30:74:ac:8d:7a:0b:0d:0b: 57:60:b7:b3:1d:ec:7d:16:78:bd:fb:df:07:53:ee:82:c4:7e: d6:49:15:7a:40:ea:30:58:87:9c:ad:50:b4:d8:cf:01:5b:a6: 79:f4:6e:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZSP0QCzszmgt7RoXWQglMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NzZiZWQ5YmZiOTZmZmExOTgyMjA1NThhYTNkNWI4Yzhm OWNkM2QwHhcNMjUxMjA2MTYwMTAwWhcNMjUxMjA3MTYwMTAwWjAzMTEwLwYDVQQD Eyg3MjczZGIyNTgxZmYwMmEyOTQ4OGE0YjM3YjcxMDJkY2IwMTQ4NWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6c0C6vD3RWcxDvYihac9DIILg+42 wJHhSXSFVqikvMDdP+vmX/DNxUM7iav10Pv2/OXfYQPFEAtVjTnURm9qqRKs9TG3 JcYA8FX7AIkArHATt4nils78/lQLhWBxOjigbIXqpdev8Nb0J8ERPKqmn0xFaKwm AOQ+KwPuZxqcXYJ+QvlLuf1bjGTlF2C3Cd/VEsArNzp3rUiHRoJtZEO5KE+cAvVz +EOWVafc0tNoMMVXQHwIUNzs2b+Eu80J7O03u97gFdijWn0FgTF8NjcnhSIeSLNH w/Ul2tyOFXf2J5tGnO/YhT1k4deLXBMcT7coxrXPK4xjS4gRaeahH7HuhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJz2yWB/wKilIiks3txAtywFIWmMB8GA1UdIwQY MBaAFAl2vtm/uW/6GYIgVYqj1bjI+c09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1hhLTJiLTViX29aZ2lCVmlxUFZ1TWo1elQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lY2MyY2YtZWNjMC00Y2JiLTk2MzUt MTY2YzZhM2QzZWNmLzEvQ1hhLTJiLTViX29aZ2lCVmlxUFZ1TWo1elQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9lY2MyY2YtZWNjMC00Y2JiLTk2MzUtMTY2YzZhM2QzZWNm LzEvQ1hhLTJiLTViX29aZ2lCVmlxUFZ1TWo1elQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtF7bxHip 74dVkKiSp6TBs8rI/uGsjLNDnJAKORitQYEBhcjYzJ98dziHBt7wu0FXW6GdFp9C uztGqVYnijm7d+2eM1jvC6NwHYFwmkTxM10S4Mxq1qgKQvQOXbT52qI572mWruBr 5exbk+Art5mOclYfBrTxviAysEXB+wBFz8jiO0zXo/OVMO0eDzP1DNM0zNbrTeK/ 4ZN+xHcEDwBA93MBmiyZMPtXUaJYECUT2HZkfpGSI9JgCQMPIriPNe0D4me4hKsD 4zeY30sGgTlgSzB0rI16Cw0LV2C3sx3sfRZ4vfvfB1PugsR+1kkVekDqMFiHnK1Q tNjPAVumefRujA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:11:15 2025 by rpki-client