This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft File: cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json) Hash identifier: ncP+fh6uBNVpAPcaOn3FH84qIYRHvjQYQPfxJ1XxVho= Subject key identifier: 1E:CE:D7:8C:7C:8C:A2:36:F6:20:02:13:AD:1E:7B:A9:6F:0F:3B:5F Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46 Certificate issuer: /CN=7316772efce2a133fb7f8720929d0560cef1db46 Certificate serial: 019AF42E1DB740B71D22DAF3884A5420A297 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft Manifest number: 056C Signing time: Sat 06 Dec 2025 15:00:54 +0000 Manifest this update: Sat 06 Dec 2025 15:00:54 +0000 Manifest next update: Sun 07 Dec 2025 15:00:54 +0000 Files and hashes: 1: OFaqwNs5Dyg1d88HTW2H4gncFRI.roa (hash: wFSS58IXWFEAJ1x0fwOpm9Nk9TzQ4SMDP5LPnSI+dzw=) 2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: UPI5oimJ5qG7IykmAs7Hhqss7J5e/EX8TQqjIY+9K5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:1d:b7:40:b7:1d:22:da:f3:88:4a:54:20:a2:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46 Validity Not Before: Dec 6 15:00:54 2025 GMT Not After : Dec 7 15:00:54 2025 GMT Subject: CN=1eced78c7c8ca236f6200213ad1e7ba96f0f3b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9e:97:00:92:8b:36:75:07:68:0b:80:a5:82: e6:64:15:12:4c:a9:aa:54:3f:9f:b7:1b:f8:ee:dc: 71:f8:67:ae:17:fc:10:1a:25:07:1a:6e:c9:36:c0: 73:14:20:4c:68:05:03:8e:d1:85:2f:ae:1e:18:14: 2a:8e:ac:f4:ec:5f:6b:55:71:09:bd:41:50:da:7f: bc:7f:2e:3c:51:12:e8:06:28:7b:16:92:cc:54:8c: e7:10:38:b4:cc:05:b7:82:8b:e2:49:37:02:4b:a2: fa:52:6a:99:41:1c:19:34:07:46:13:02:9c:81:12: 60:ac:e0:43:78:7e:d5:7f:cf:40:98:6f:b4:af:79: 50:6f:1a:b9:51:fb:61:65:fc:2b:e7:c0:b3:be:92: 88:2f:cd:0b:47:31:ef:af:ac:db:3b:0b:79:d4:d2: 12:22:f4:b4:e2:20:e0:e7:c9:9a:15:fc:28:c5:ba: 1d:ca:08:3b:ed:42:a2:37:a9:6a:4d:8b:5f:f9:82: 1b:17:b4:21:60:96:04:58:1b:e0:65:ea:55:7f:94: 17:45:a8:a0:cf:7d:97:26:96:7e:cd:19:e8:31:fa: f6:e0:8f:32:12:f2:da:71:a9:49:1d:a1:a1:48:de: 83:d8:67:96:ee:86:56:78:42:04:16:f6:9a:5d:e9: 12:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CE:D7:8C:7C:8C:A2:36:F6:20:02:13:AD:1E:7B:A9:6F:0F:3B:5F X509v3 Authority Key Identifier: keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:6e:4c:e6:55:3c:b4:31:2d:fa:73:56:86:cf:c1:1f:4c:eb: f4:27:3e:c7:a7:7b:6e:1c:b3:56:08:a1:89:dd:35:c1:5a:94: 6b:b4:df:11:04:9e:42:4b:65:21:b2:92:bc:b3:59:34:d9:b6: 14:11:3a:bf:92:e8:bc:b5:d2:95:da:45:8e:97:98:bf:65:ac: 64:e3:01:47:b5:80:d4:b6:bd:db:f3:d0:70:8d:5f:7e:e8:c7: 26:d7:92:84:0e:5d:f3:f0:7f:ab:6e:1e:d2:0e:97:45:b6:85: 97:7e:e0:ba:8e:51:c0:5d:d5:65:af:0d:20:83:d1:1b:ef:37: b6:78:6d:88:ee:ee:f3:91:5c:3d:7d:18:09:0c:b6:1a:c1:a5: 26:58:08:ef:f2:a7:45:96:20:7d:5c:45:fd:30:6d:01:04:e7: 82:55:b1:3f:74:52:44:ab:1a:c2:57:c1:7f:56:d7:1b:e0:90: 50:2f:2d:ce:e8:97:4e:f8:60:b6:5a:ab:db:9d:9c:46:6e:b1: 09:6d:a0:9e:fd:84:30:0d:9e:6e:2a:b3:c9:05:f2:52:0d:50: a7:86:0e:49:d7:e7:7f:b6:9a:ac:02:b5:c2:b0:24:cd:77:51: ca:ff:23:83:ee:bf:66:3c:ea:f8:23:71:fc:dd:9e:7f:b4:df: da:be:cf:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lh23QLcdItrziEpUIKKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMTY3NzJlZmNlMmExMzNmYjdmODcyMDkyOWQwNTYwY2Vm MWRiNDYwHhcNMjUxMjA2MTUwMDU0WhcNMjUxMjA3MTUwMDU0WjAzMTEwLwYDVQQD EygxZWNlZDc4YzdjOGNhMjM2ZjYyMDAyMTNhZDFlN2JhOTZmMGYzYjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ6XAJKLNnUHaAuApYLmZBUSTKmq VD+ftxv47txx+GeuF/wQGiUHGm7JNsBzFCBMaAUDjtGFL64eGBQqjqz07F9rVXEJ vUFQ2n+8fy48URLoBih7FpLMVIznEDi0zAW3goviSTcCS6L6UmqZQRwZNAdGEwKc gRJgrOBDeH7Vf89AmG+0r3lQbxq5UfthZfwr58CzvpKIL80LRzHvr6zbOwt51NIS IvS04iDg58maFfwoxbodygg77UKiN6lqTYtf+YIbF7QhYJYEWBvgZepVf5QXRaig z32XJpZ+zRnoMfr24I8yEvLacalJHaGhSN6D2GeW7oZWeEIEFvaaXekSxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7O14x8jKI29iACE60ee6lvDztfMB8GA1UdIwQY MBaAFHMWdy784qEz+3+HIJKdBWDO8dtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80ZThkNTctNTNjYS00OWM1LTk3ZWYt MWM4NzZkYjQ0ZmUyLzEvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80ZThkNTctNTNjYS00OWM1LTk3ZWYtMWM4NzZkYjQ0ZmUy LzEvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFm5M5lU8 tDEt+nNWhs/BH0zr9Cc+x6d7bhyzVgihid01wVqUa7TfEQSeQktlIbKSvLNZNNm2 FBE6v5LovLXSldpFjpeYv2WsZOMBR7WA1La92/PQcI1ffujHJteShA5d8/B/q24e 0g6XRbaFl37guo5RwF3VZa8NIIPRG+83tnhtiO7u85FcPX0YCQy2GsGlJlgI7/Kn RZYgfVxF/TBtAQTnglWxP3RSRKsawlfBf1bXG+CQUC8tzuiXTvhgtlqr252cRm6x CW2gnv2EMA2ebiqzyQXyUg1Qp4YOSdfnf7aarAK1wrAkzXdRyv8jg+6/Zjzq+CNx /N2ef7Tf2r7PgA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:43:38 2025 by rpki-client