This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft File: CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json) Hash identifier: 92J2SCWgXlgxKHzuUJo6gAKdRtEguDj0n1uEHEOvsXs= Subject key identifier: FD:58:AB:FB:D3:10:DF:69:A2:3A:C8:F0:1B:A5:61:68:F6:DD:71:14 Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1 Certificate issuer: /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1 Certificate serial: 019AF12E4EB8B9AFCA01EBB1B479B23F1127 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft Manifest number: 08E6 Signing time: Sat 06 Dec 2025 01:02:15 +0000 Manifest this update: Sat 06 Dec 2025 01:02:15 +0000 Manifest next update: Sun 07 Dec 2025 01:02:15 +0000 Files and hashes: 1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: P/v1ccPcVL+9xaI21t2QUo5dhjvuALa4y6AACGaKJSI=) 2: DdnrFMVJaCyL71PqpfIa-rq-_TE.roa (hash: xbl0A24iKpXHLs/IpPryN8K2fvu9yKQgN1UENAxstjo=) 3: EWTxX8xHCQ-y0eC-O4N3o3QoyvM.roa (hash: dVuWzw7AA4Zse8atqpUG5cLLbJKhbiKvMBsraKeVoHo=) 4: MJmSheQwhqTa8TcshZRbeEjyzHg.roa (hash: Gp/YgLDeJmP+HyXt6WhUwXyvRtnPi/acuut1qwHPb1I=) 5: NK7GdHMYRv_hDeWPBmQND98lvj8.roa (hash: jBbpvQcqJ1jdxJjUVdSmEBEQDhr0KhV9KMUkwMQPtk8=) 6: mx1zhwHtw-uurdoc1Rs-ub83PY4.roa (hash: O6YFpkOTCBT8CmU8XHKba4R6Y/9CL3lbQUtfKViPzQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:4e:b8:b9:af:ca:01:eb:b1:b4:79:b2:3f:11:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1 Validity Not Before: Dec 6 01:02:15 2025 GMT Not After : Dec 7 01:02:15 2025 GMT Subject: CN=fd58abfbd310df69a23ac8f01ba56168f6dd7114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:f0:5f:be:70:fa:e3:6d:85:b1:2b:bf:6a: 26:c0:10:88:d4:e2:63:2d:a1:99:63:cc:39:ab:12: c7:01:1f:e1:dd:32:b3:13:54:d9:da:71:7b:8a:dc: a2:50:1d:ac:7d:c1:e1:f2:12:19:81:63:86:2b:c5: fb:fd:72:49:c7:62:7c:78:36:53:15:10:e9:32:96: 71:97:b5:19:d1:7f:2c:ee:d9:88:ff:50:7e:a9:6f: 9b:a3:01:1e:1e:81:66:ce:12:8c:b5:6b:24:18:26: 8d:a7:f9:15:de:0c:79:0c:39:66:86:00:60:7d:01: 36:1f:3d:61:5d:37:06:28:3e:ad:bb:b2:5e:45:52: 72:d5:16:dc:6d:7d:e5:f4:f3:06:57:60:56:58:b3: 6a:b4:2e:5f:b3:1e:d5:17:2c:1b:00:82:a0:bf:db: 2d:60:8c:bd:25:89:d1:da:3d:df:3e:ec:6e:e9:69: a7:4e:a2:8e:7f:3e:0e:69:b2:b2:ef:27:35:c5:6e: b1:19:7c:da:53:dc:57:e0:d9:50:8c:88:97:31:78: 72:51:04:50:76:e4:02:9d:a9:80:b5:28:55:a9:ff: 47:6c:50:25:27:fa:fc:23:3a:00:16:59:a1:3d:c9: 7b:0d:86:3c:be:0f:70:9d:e8:ca:de:dc:4f:b3:c4: e4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:58:AB:FB:D3:10:DF:69:A2:3A:C8:F0:1B:A5:61:68:F6:DD:71:14 X509v3 Authority Key Identifier: keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:75:60:c7:5d:26:95:5e:bf:40:87:42:1f:a2:26:d8:44:dc: 75:2d:9f:9e:1f:91:5c:74:92:ed:26:32:2b:a2:d8:9a:73:32: ba:7a:c4:4c:a6:98:7b:0f:d5:93:9c:ba:ca:5d:2a:40:3d:f7: fc:7d:b4:78:96:2d:08:ac:6e:63:9a:90:e3:4e:00:84:3b:ee: d6:e5:96:9f:b7:bd:59:2a:dd:8a:c3:92:da:b4:dc:72:40:3d: 5c:e2:5a:05:1e:b3:44:ce:47:9a:fd:0d:ee:e5:b0:4e:71:3a: 48:cf:db:cc:b2:dd:19:2b:44:0c:e9:ce:ba:61:b4:85:b7:b9: bd:25:04:09:bd:51:98:65:7a:0c:1f:33:09:09:df:8b:1f:44: 66:5f:33:a3:17:ec:30:ea:7d:20:93:36:b7:88:d8:94:3a:72: fe:8a:80:84:85:16:5d:01:13:0d:b8:93:22:33:b7:47:34:94: df:52:eb:30:6f:da:fc:c6:f1:aa:38:a2:4c:c0:ed:c8:3e:64: 5c:6f:8c:ce:90:45:cd:61:35:97:d9:4d:07:89:b8:7b:51:5f: e5:47:4e:15:d9:49:7b:ce:44:a9:39:54:81:80:de:6a:2b:e6: 73:a1:ca:47:ef:63:e7:0f:04:ab:88:7b:40:39:72:46:f5:74: 54:8f:7c:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLk64ua/KAeuxtHmyPxEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWM2ZDBkZTcwY2M1MTgwNWI2M2E1ZTIzMjc2MjI1MjVk MDc1YjEwHhcNMjUxMjA2MDEwMjE1WhcNMjUxMjA3MDEwMjE1WjAzMTEwLwYDVQQD EyhmZDU4YWJmYmQzMTBkZjY5YTIzYWM4ZjAxYmE1NjE2OGY2ZGQ3MTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkDwX75w+uNthbErv2omwBCI1OJj LaGZY8w5qxLHAR/h3TKzE1TZ2nF7ityiUB2sfcHh8hIZgWOGK8X7/XJJx2J8eDZT FRDpMpZxl7UZ0X8s7tmI/1B+qW+bowEeHoFmzhKMtWskGCaNp/kV3gx5DDlmhgBg fQE2Hz1hXTcGKD6tu7JeRVJy1RbcbX3l9PMGV2BWWLNqtC5fsx7VFywbAIKgv9st YIy9JYnR2j3fPuxu6WmnTqKOfz4OabKy7yc1xW6xGXzaU9xX4NlQjIiXMXhyUQRQ duQCnamAtShVqf9HbFAlJ/r8IzoAFlmhPcl7DYY8vg9wnejK3txPs8Tk9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1Yq/vTEN9pojrI8BulYWj23XEUMB8GA1UdIwQY MBaAFAscbQ3nDMUYBbY6XiMnYiUl0HWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAt Zjc3NGYxZWFmYmZmLzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAtZjc3NGYxZWFmYmZm LzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHVgx10m lV6/QIdCH6Im2ETcdS2fnh+RXHSS7SYyK6LYmnMyunrETKaYew/Vk5y6yl0qQD33 /H20eJYtCKxuY5qQ404AhDvu1uWWn7e9WSrdisOS2rTcckA9XOJaBR6zRM5Hmv0N 7uWwTnE6SM/bzLLdGStEDOnOumG0hbe5vSUECb1RmGV6DB8zCQnfix9EZl8zoxfs MOp9IJM2t4jYlDpy/oqAhIUWXQETDbiTIjO3RzSU31LrMG/a/MbxqjiiTMDtyD5k XG+MzpBFzWE1l9lNB4m4e1Ff5UdOFdlJe85EqTlUgYDeaivmc6HKR+9j5w8Eq4h7 QDlyRvV0VI98Gw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:27 2025 by rpki-client