This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json) Hash identifier: 8UeaB5YsmMVGcCHMCab6eczelAq2a6CvxV5jNI53n6E= Subject key identifier: 28:3C:40:8D:5F:7F:4C:5D:8C:1E:F8:AE:5C:C8:79:24:C7:DB:6A:86 Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae Certificate serial: 019AF19ACC53E968B001B490702D3F905229 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:00:45 +0000 Manifest this update: Sat 06 Dec 2025 03:00:45 +0000 Manifest next update: Sun 07 Dec 2025 03:00:45 +0000 Files and hashes: 1: _Z-p7KxUVg6ghEbeseFL-OOEudI.roa (hash: su5vjqQnoBgVAVEbXkHU+T0GhwXhzdquZDKzgBwrhQ4=) 2: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: OK6drbNTBI73LOH+ok5KBIyg0mh2wx+HjlfAY+JcEUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:cc:53:e9:68:b0:01:b4:90:70:2d:3f:90:52:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae Validity Not Before: Dec 6 03:00:45 2025 GMT Not After : Dec 7 03:00:45 2025 GMT Subject: CN=283c408d5f7f4c5d8c1ef8ae5cc87924c7db6a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:29:2b:27:ef:a6:2d:f9:86:23:d4:1e:1d:fc: 28:a6:5a:3c:75:0d:e4:3e:1c:e6:a1:46:50:33:c5: 3d:13:b7:67:95:e1:79:56:22:6c:69:77:3e:dd:32: 3c:8f:35:b1:00:7c:10:bb:8e:17:91:c2:51:e2:29: d2:5f:8d:e1:96:c8:6a:58:37:e7:80:c1:e5:d0:64: b2:5a:df:5b:20:49:f5:26:cf:c4:36:1e:67:02:02: 96:45:bb:22:de:8b:99:98:bd:dc:e0:0d:be:59:0b: 99:c4:ec:48:92:c0:76:60:2d:db:38:81:1a:3e:a6: e3:05:ef:a1:b0:b6:42:7a:73:5e:eb:9c:1c:81:e7: 01:6e:db:ac:99:4c:67:7a:d8:dd:21:6e:54:de:08: 47:ba:5d:4b:72:84:80:30:4d:e5:63:28:ec:ef:ee: 74:47:55:a0:c6:37:78:c3:e1:1f:19:2c:06:a3:9a: d0:49:3a:0e:4d:9a:69:03:e6:f7:ad:83:cb:fa:16: 19:3e:89:12:27:e3:df:e3:20:0c:d7:74:b6:57:77: ef:96:aa:44:d9:6d:24:06:d9:29:0f:78:18:3f:55: 23:75:2c:f8:84:1a:58:d4:12:3b:5b:5e:d4:f4:fd: bb:ba:48:c9:22:af:d5:a9:63:0a:2b:31:24:1f:d0: 24:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3C:40:8D:5F:7F:4C:5D:8C:1E:F8:AE:5C:C8:79:24:C7:DB:6A:86 X509v3 Authority Key Identifier: keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:cd:e1:d2:a2:f0:1b:d3:2c:e4:5f:93:87:f4:0b:d4:98:4a: 4c:11:e3:99:ed:60:31:bd:06:4c:77:b9:15:d1:e5:c5:20:54: 7d:bb:51:a0:25:7c:fd:af:67:e9:8e:0a:57:1d:58:dd:89:0c: 01:ae:66:f0:01:08:1d:5c:f4:29:40:74:ce:b8:75:7b:b8:5f: c0:26:0f:ab:39:a6:f7:00:04:86:a3:4d:fc:9b:59:71:b4:5b: 99:20:b7:b7:a7:ea:dc:83:5d:88:db:69:db:db:d0:b6:37:73: 41:0f:68:ca:75:54:81:74:6e:4a:28:54:4e:db:a4:11:1c:49: 67:eb:25:d2:c9:01:f3:b9:8f:a8:26:30:a0:ac:2f:64:22:64: 72:fd:36:14:c5:77:dc:f8:8f:2f:12:10:c8:f0:97:82:24:7d: fb:47:5e:5a:2f:b6:ff:4c:fe:a5:2b:73:a5:cb:7c:34:b0:46: 7c:f8:67:14:17:0a:87:78:ee:10:be:95:0d:27:cf:99:f7:3d: 01:99:db:b8:fe:48:79:2e:aa:8c:31:22:4f:0b:38:2d:1a:32: 05:02:e2:13:a2:d6:3a:26:e8:c4:9f:c9:e4:f1:36:4f:d9:cf: c9:59:f8:f8:5e:ce:8a:96:90:15:be:f4:35:90:cf:82:d9:80: b0:45:e7:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsxT6WiwAbSQcC0/kFIpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNzFkOGI0Y2Y2NzczYjU5ZjA3MzJlMGU5ZThkMjVhOWI3 NzNmYWUwHhcNMjUxMjA2MDMwMDQ1WhcNMjUxMjA3MDMwMDQ1WjAzMTEwLwYDVQQD EygyODNjNDA4ZDVmN2Y0YzVkOGMxZWY4YWU1Y2M4NzkyNGM3ZGI2YTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ikrJ++mLfmGI9QeHfwoplo8dQ3k PhzmoUZQM8U9E7dnleF5ViJsaXc+3TI8jzWxAHwQu44XkcJR4inSX43hlshqWDfn gMHl0GSyWt9bIEn1Js/ENh5nAgKWRbsi3ouZmL3c4A2+WQuZxOxIksB2YC3bOIEa PqbjBe+hsLZCenNe65wcgecBbtusmUxnetjdIW5U3ghHul1LcoSAME3lYyjs7+50 R1Wgxjd4w+EfGSwGo5rQSToOTZppA+b3rYPL+hYZPokSJ+Pf4yAM13S2V3fvlqpE 2W0kBtkpD3gYP1UjdSz4hBpY1BI7W17U9P27ukjJIq/VqWMKKzEkH9Ak8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCg8QI1ff0xdjB74rlzIeSTH22qGMB8GA1UdIwQY MBaAFHFx2LTPZ3O1nwcy4Ono0lqbdz+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85Nzc4YjYtZGMyYi00NTg2LTkxZGUt NTNhMDczNjhiOWVhLzEvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy85Nzc4YjYtZGMyYi00NTg2LTkxZGUtNTNhMDczNjhiOWVh LzEvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHc3h0qLw G9Ms5F+Th/QL1JhKTBHjme1gMb0GTHe5FdHlxSBUfbtRoCV8/a9n6Y4KVx1Y3YkM Aa5m8AEIHVz0KUB0zrh1e7hfwCYPqzmm9wAEhqNN/JtZcbRbmSC3t6fq3INdiNtp 29vQtjdzQQ9oynVUgXRuSihUTtukERxJZ+sl0skB87mPqCYwoKwvZCJkcv02FMV3 3PiPLxIQyPCXgiR9+0deWi+2/0z+pStzpct8NLBGfPhnFBcKh3juEL6VDSfPmfc9 AZnbuP5IeS6qjDEiTws4LRoyBQLiE6LWOiboxJ/J5PE2T9nPyVn4+F7OipaQFb70 NZDPgtmAsEXnKg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:02:37 2025 by rpki-client