This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json) Hash identifier: NxaVtYMCVE1wqkFdxUQk/nhbIkrkAI2HKY/g7xUHi88= Subject key identifier: CF:D3:83:60:A5:CA:B2:CB:18:13:21:F6:4C:49:12:CB:3A:A5:E0:C1 Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae Certificate serial: 019B33446D3C5BF9458A500CACB679898A5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 21:01:20 +0000 Manifest this update: Thu 18 Dec 2025 21:01:20 +0000 Manifest next update: Fri 19 Dec 2025 21:01:20 +0000 Files and hashes: 1: _Z-p7KxUVg6ghEbeseFL-OOEudI.roa (hash: su5vjqQnoBgVAVEbXkHU+T0GhwXhzdquZDKzgBwrhQ4=) 2: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: jbuCW1aa0oPwD3tj4/7l6w4XRfbSYDFlseXt73NxQ/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:6d:3c:5b:f9:45:8a:50:0c:ac:b6:79:89:8a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae Validity Not Before: Dec 18 21:01:20 2025 GMT Not After : Dec 19 21:01:20 2025 GMT Subject: CN=cfd38360a5cab2cb181321f64c4912cb3aa5e0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:46:2f:b1:6d:77:86:31:d6:f8:f5:d6:31:fd: cd:7e:4e:6a:c5:85:4f:77:dc:3a:b2:1d:23:eb:c5: 43:63:2b:64:2c:c7:0c:1f:be:03:a8:f6:20:a5:af: 04:8b:78:32:af:fd:b6:08:bc:62:22:db:f9:6a:b0: f7:62:ef:9b:ab:21:83:47:fa:86:a8:8d:3e:8b:de: 08:0e:93:2c:f7:4a:9a:93:54:81:a8:5d:a1:9b:5f: 06:29:3e:ba:46:77:2e:d6:b9:d4:5b:c6:35:0b:fb: 13:26:80:9c:ad:0f:f5:07:d4:e4:f8:a5:80:7f:7b: ed:13:6a:f5:b2:d2:49:44:8d:5c:a3:28:13:8a:fb: 6a:99:ec:d7:84:d2:bc:8f:90:0d:4d:a5:dc:08:a8: 82:25:31:c3:e1:1b:9c:c3:f0:15:da:c0:da:8f:9a: 4c:2a:61:fd:8f:e5:51:22:98:54:a7:2d:19:a5:fd: a7:79:b9:87:34:f7:f5:22:0d:40:e7:a8:2a:1e:e8: 4f:5a:09:a0:01:b4:55:f3:3b:8a:6e:29:5d:9b:ee: 9c:4a:a8:ac:9e:a3:eb:22:13:76:1c:82:b2:ab:81: 9f:33:6c:2e:8c:82:6e:0f:86:98:be:b8:f6:25:71: 25:7c:c1:40:4f:30:8a:56:1d:6e:04:87:4e:41:f3: 1c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D3:83:60:A5:CA:B2:CB:18:13:21:F6:4C:49:12:CB:3A:A5:E0:C1 X509v3 Authority Key Identifier: keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:d5:7d:97:db:5b:c3:75:98:70:e3:d3:c8:79:03:4a:7b:b4: a9:db:29:b1:8a:1a:7b:c9:bb:cc:95:b6:9f:97:eb:f3:b6:ef: 4d:f1:68:0c:27:ff:d6:b9:1b:48:f3:43:36:9e:80:be:d4:d8: 6e:e8:fb:67:bd:b5:94:1b:10:71:c6:8f:72:62:25:c8:6a:eb: 69:31:8a:c7:d1:41:3b:66:91:41:28:9a:27:c5:21:dd:71:32: d6:64:0f:71:5b:81:9c:bf:b6:a9:ec:62:bd:b0:47:fb:93:67: 0c:64:60:7b:fe:bc:14:5e:39:a1:d0:ac:bc:94:06:73:1e:03: 5c:b0:8a:2a:88:2a:e2:6a:73:70:e5:15:9f:52:05:84:7b:99: 18:60:77:2f:c7:5b:8e:c5:4b:65:c4:83:3e:f0:54:02:20:6d: aa:f3:9d:a1:04:fa:7d:20:65:d8:f5:35:82:78:c0:d6:b3:a9: e9:00:f7:10:60:bc:dc:b6:a0:2c:b8:6e:66:76:25:a6:70:f4: f1:63:b9:67:8f:cc:77:fa:96:b5:af:fb:53:b9:39:1c:d1:a1: 40:5c:2f:e2:dc:f3:ba:c9:06:ee:4f:58:9c:1b:fa:48:9c:d6: b9:4f:bd:8a:c3:dc:2e:06:17:63:35:5b:cd:64:4c:e2:66:a5: 0e:b6:2e:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRG08W/lFilAMrLZ5iYpdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNzFkOGI0Y2Y2NzczYjU5ZjA3MzJlMGU5ZThkMjVhOWI3 NzNmYWUwHhcNMjUxMjE4MjEwMTIwWhcNMjUxMjE5MjEwMTIwWjAzMTEwLwYDVQQD EyhjZmQzODM2MGE1Y2FiMmNiMTgxMzIxZjY0YzQ5MTJjYjNhYTVlMGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+0YvsW13hjHW+PXWMf3Nfk5qxYVP d9w6sh0j68VDYytkLMcMH74DqPYgpa8Ei3gyr/22CLxiItv5arD3Yu+bqyGDR/qG qI0+i94IDpMs90qak1SBqF2hm18GKT66Rncu1rnUW8Y1C/sTJoCcrQ/1B9Tk+KWA f3vtE2r1stJJRI1coygTivtqmezXhNK8j5ANTaXcCKiCJTHD4Rucw/AV2sDaj5pM KmH9j+VRIphUpy0Zpf2nebmHNPf1Ig1A56gqHuhPWgmgAbRV8zuKbildm+6cSqis nqPrIhN2HIKyq4GfM2wujIJuD4aYvrj2JXElfMFATzCKVh1uBIdOQfMcAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/Tg2ClyrLLGBMh9kxJEss6peDBMB8GA1UdIwQY MBaAFHFx2LTPZ3O1nwcy4Ono0lqbdz+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85Nzc4YjYtZGMyYi00NTg2LTkxZGUt NTNhMDczNjhiOWVhLzEvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy85Nzc4YjYtZGMyYi00NTg2LTkxZGUtNTNhMDczNjhiOWVh LzEvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxtV9l9tb w3WYcOPTyHkDSnu0qdspsYoae8m7zJW2n5fr87bvTfFoDCf/1rkbSPNDNp6AvtTY buj7Z721lBsQccaPcmIlyGrraTGKx9FBO2aRQSiaJ8Uh3XEy1mQPcVuBnL+2qexi vbBH+5NnDGRge/68FF45odCsvJQGcx4DXLCKKogq4mpzcOUVn1IFhHuZGGB3L8db jsVLZcSDPvBUAiBtqvOdoQT6fSBl2PU1gnjA1rOp6QD3EGC83LagLLhuZnYlpnD0 8WO5Z4/Md/qWta/7U7k5HNGhQFwv4tzzuskG7k9YnBv6SJzWuU+9isPcLgYXYzVb zWRM4malDrYuLg== -----END CERTIFICATE-----Generated at Fri Dec 19 06:26:43 2025 by rpki-client