This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json) Hash identifier: t+RHA+5s/Oix0ERziIzj1m8EuRaNpa+CisYNvsQUWQc= Subject key identifier: 4D:CE:DA:84:3F:68:C4:76:E7:28:BC:6F:21:6A:1F:75:CB:E8:E5:12 Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9 Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9 Certificate serial: 019AF6F8706DFFC7C561A432D82ECB36049E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft Manifest number: 0724 Signing time: Sun 07 Dec 2025 04:01:08 +0000 Manifest this update: Sun 07 Dec 2025 04:01:08 +0000 Manifest next update: Mon 08 Dec 2025 04:01:08 +0000 Files and hashes: 1: 4vVSxg0KLKszb_U4S9rSdoaFOw8.roa (hash: RPAXRjtOt5jMNeEYJ4PrQAbbA73WZ8/bw4emEczQVts=) 2: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: l3RzQgx4junoqgh4DfizjoukLCtIMbKpEh/XSUXdDFQ=) 3: t3uXJVNYIcETNH2wbIt0kGmTa3E.roa (hash: TpjYWQB/dEWPF8i95tLxQWL3noXfiwIkXuk9Gm2aR3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:70:6d:ff:c7:c5:61:a4:32:d8:2e:cb:36:04:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9 Validity Not Before: Dec 7 04:01:08 2025 GMT Not After : Dec 8 04:01:08 2025 GMT Subject: CN=4dceda843f68c476e728bc6f216a1f75cbe8e512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:2e:ff:bb:0d:a6:cd:29:26:c6:1c:d3:00: a5:86:71:ce:28:c3:6a:5c:e7:4b:00:21:53:b7:f1: 27:dc:2f:81:86:21:86:e9:ac:1a:69:88:a3:02:e5: eb:dc:6a:aa:ef:ec:da:ca:ca:89:c5:fd:b1:ac:ff: ff:ba:93:af:d4:98:8d:09:04:fb:71:46:02:d0:86: 10:32:0f:40:33:ab:c2:77:5c:71:4c:93:83:18:63: 4d:e3:02:8b:ae:2c:17:75:28:35:89:0c:20:ac:ea: b9:cb:18:52:a7:e0:83:96:0f:5b:c5:63:e6:b6:72: f3:00:8a:21:1b:3b:92:ba:c0:e2:d4:dd:bb:3b:91: 73:8e:d2:cf:27:ea:1e:59:a0:be:cd:bf:38:8a:7d: 0a:1f:03:1a:dc:17:ed:4a:a9:c8:a5:79:d5:89:4b: 82:6b:9c:02:96:8c:b4:49:4c:b0:b6:80:7c:10:e5: 4a:77:23:f0:6d:8d:b7:a0:11:56:aa:81:12:69:8d: b5:34:cf:ff:57:c2:a5:f0:e7:ba:7d:e6:08:9a:62: e6:78:f7:07:f6:bd:ff:c1:e1:38:5c:10:b2:02:0d: 18:28:f1:dc:03:f6:46:c2:67:ce:6d:52:b3:a7:a2: 21:e8:a8:15:13:11:87:f9:0e:fc:81:54:5a:7d:00: bb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CE:DA:84:3F:68:C4:76:E7:28:BC:6F:21:6A:1F:75:CB:E8:E5:12 X509v3 Authority Key Identifier: keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:fa:9e:2b:90:32:51:ea:eb:78:3b:bb:d6:5a:1b:d7:89:47: db:a5:59:70:ab:a9:0d:02:2a:38:4d:b2:28:41:33:30:5c:13: 23:0f:55:85:a3:93:c4:4c:97:b6:1b:0a:8c:eb:7b:18:d9:a7: 96:b5:3a:e8:cf:55:4f:88:02:97:88:8d:a5:4c:04:29:a7:2b: 9a:d6:39:4d:10:f4:b0:84:07:63:2a:76:01:6d:02:a5:a7:ea: ab:20:a8:93:e3:a0:ef:5d:b1:de:c7:aa:8d:40:fd:97:5d:23: ea:2a:2f:a4:84:c4:2e:81:64:36:72:19:a2:61:23:22:bf:e5: 6c:87:de:95:ad:bc:42:fd:5d:35:ef:44:ef:f2:28:7e:6c:54: 33:b3:27:bf:b4:24:c5:43:82:a0:ea:00:6c:02:4b:70:ea:8b: 3b:78:0b:9f:32:3c:59:9e:37:0b:99:f3:44:13:b4:23:d0:83: 6d:f8:2c:90:cd:51:8c:60:7a:2b:7b:9c:e3:dd:56:24:43:48: e3:b1:2b:2e:c7:e6:8c:8e:8a:bc:6f:ba:c6:7f:53:7f:9f:83: 1b:1d:6d:1d:1d:af:d4:8a:1e:c9:96:9c:68:10:61:49:41:95: d3:68:34:97:0a:6d:2f:17:96:d2:1b:dc:41:7e:c7:91:76:35: d4:13:0c:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+HBt/8fFYaQy2C7LNgSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMTkzNjI4MWI4NjcwN2EwNWQ1NWEwMWY4OGIyZTY1M2Q3 YjNlZTkwHhcNMjUxMjA3MDQwMTA4WhcNMjUxMjA4MDQwMTA4WjAzMTEwLwYDVQQD Eyg0ZGNlZGE4NDNmNjhjNDc2ZTcyOGJjNmYyMTZhMWY3NWNiZThlNTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl40u/7sNps0pJsYc0wClhnHOKMNq XOdLACFTt/En3C+BhiGG6awaaYijAuXr3Gqq7+zaysqJxf2xrP//upOv1JiNCQT7 cUYC0IYQMg9AM6vCd1xxTJODGGNN4wKLriwXdSg1iQwgrOq5yxhSp+CDlg9bxWPm tnLzAIohGzuSusDi1N27O5FzjtLPJ+oeWaC+zb84in0KHwMa3BftSqnIpXnViUuC a5wCloy0SUywtoB8EOVKdyPwbY23oBFWqoESaY21NM//V8Kl8Oe6feYImmLmePcH 9r3/weE4XBCyAg0YKPHcA/ZGwmfObVKzp6Ih6KgVExGH+Q78gVRafQC7OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3O2oQ/aMR25yi8byFqH3XL6OUSMB8GA1UdIwQY MBaAFAsZNigbhnB6BdVaAfiLLmU9ez7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hrMktCdUdjSG9GMVZvQi1Jc3VaVDE3UHVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84NWVlMDItNmY0My00OTI3LWFiNWQt ZWQ1N2IyNGI0NDY1LzEvQ3hrMktCdUdjSG9GMVZvQi1Jc3VaVDE3UHVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi84NWVlMDItNmY0My00OTI3LWFiNWQtZWQ1N2IyNGI0NDY1 LzEvQ3hrMktCdUdjSG9GMVZvQi1Jc3VaVDE3UHVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvqeK5Ay UerreDu71lob14lH26VZcKupDQIqOE2yKEEzMFwTIw9VhaOTxEyXthsKjOt7GNmn lrU66M9VT4gCl4iNpUwEKacrmtY5TRD0sIQHYyp2AW0CpafqqyCok+Og712x3seq jUD9l10j6iovpITELoFkNnIZomEjIr/lbIfela28Qv1dNe9E7/IofmxUM7Mnv7Qk xUOCoOoAbAJLcOqLO3gLnzI8WZ43C5nzRBO0I9CDbfgskM1RjGB6K3uc491WJENI 47ErLsfmjI6KvG+6xn9Tf5+DGx1tHR2v1IoeyZacaBBhSUGV02g0lwptLxeW0hvc QX7HkXY11BMMrA== -----END CERTIFICATE-----Generated at Sun Dec 7 09:46:43 2025 by rpki-client