This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft File: cBxcPyilwHENvkgp0hbInpQu8Os.mft (raw, json) Hash identifier: rXbT1Slr7Ogj/InKzMxgX4AmMkkfpnXTj9fZpG5gZHU= Subject key identifier: 89:0C:08:90:4C:A4:96:5B:93:CB:38:BC:4E:54:02:13:40:9A:EF:C2 Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB Certificate issuer: /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb Certificate serial: 019B2B1D31DB02069513CAC990F3C1B223C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 07:01:31 +0000 Manifest this update: Wed 17 Dec 2025 07:01:31 +0000 Manifest next update: Thu 18 Dec 2025 07:01:31 +0000 Files and hashes: 1: Ke6BIcKr553RdNTHAAiP-pm7d4U.roa (hash: YC8hk6oKhl67AQI7JSOSYdAfbuzkCnLEvEUsrgjHG4c=) 2: cBxcPyilwHENvkgp0hbInpQu8Os.crl (hash: G5vvt3D2KuPRaSObP5tJiPxe7yjJ7uslIg36a0XUY4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:31:db:02:06:95:13:ca:c9:90:f3:c1:b2:23:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb Validity Not Before: Dec 17 07:01:31 2025 GMT Not After : Dec 18 07:01:31 2025 GMT Subject: CN=890c08904ca4965b93cb38bc4e540213409aefc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dc:79:16:e9:8d:da:a5:5c:84:ab:6e:0d:12: 87:60:29:63:8d:ac:d2:19:1c:1c:38:ba:32:d0:a1: 8f:25:c0:df:29:86:87:3b:31:0d:59:24:d2:84:61: 6b:a6:4d:44:ba:30:55:b4:89:e2:9d:1c:0f:52:4a: bc:bc:d8:62:7f:64:38:1b:8f:d4:16:e5:c2:4e:e4: d9:67:6b:34:f5:bc:99:1e:90:b4:32:bc:88:87:10: de:17:f8:60:b9:28:79:a6:29:cf:0d:06:7d:16:5c: 56:ca:77:bb:30:04:ca:76:db:fb:d7:23:cd:9f:6a: 0d:92:fa:3c:b1:53:33:2e:f9:8b:94:29:01:33:4c: a6:aa:70:1d:34:27:45:0e:03:1a:e0:a1:85:4a:a4: ad:93:81:bf:fd:2e:7a:bd:34:c5:27:28:ac:bd:e5: d2:5b:69:10:ca:8b:51:37:3d:84:bf:d0:8a:02:2e: 73:09:a4:ca:69:24:64:ce:53:34:19:fd:b9:c7:df: 1a:c1:e2:59:e5:90:36:66:28:e3:47:2e:26:9b:d8: d8:1c:4b:ea:04:2a:d0:eb:fb:d7:2d:4f:d5:5f:5b: 31:20:7f:9f:99:cf:1a:e3:ed:60:b0:f9:18:d0:7f: 93:92:94:5f:ad:b6:04:b9:9f:a6:6d:4a:fd:10:ab: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0C:08:90:4C:A4:96:5B:93:CB:38:BC:4E:54:02:13:40:9A:EF:C2 X509v3 Authority Key Identifier: keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:84:6c:be:b5:9f:2c:a1:83:d3:44:85:58:f2:b2:5b:25:6b: 56:9d:ec:81:9b:0e:60:7a:ec:71:ff:14:92:f9:be:71:8f:89: aa:a4:95:56:01:6c:29:a3:28:77:0c:e2:f2:56:a7:1d:39:35: 52:91:09:b6:7d:00:8f:af:ae:c0:19:c8:57:42:d1:47:51:1f: 29:82:23:0e:a7:02:23:77:89:8b:3d:e3:b9:d2:71:d3:77:16: c8:91:f7:46:f4:1a:f1:50:85:62:c0:6a:f1:a5:2b:78:51:49: 10:6b:c3:75:87:dc:aa:3a:5a:d0:25:27:38:ed:f1:8b:ab:ab: 69:43:81:cf:c8:6b:cc:89:3b:11:f4:f4:aa:4d:f5:b5:65:65: 8f:b0:30:1f:8e:06:1d:e3:14:37:5c:1e:a8:a1:6e:98:26:02: 69:d1:a1:92:0e:9e:18:d0:50:cb:8c:59:39:2e:51:76:4c:c5: 5e:dd:8e:e5:51:66:42:db:53:c6:b0:7d:11:29:67:20:fb:0f: b0:0a:e2:f8:8c:91:64:f5:7c:ec:33:6f:8f:77:f3:2a:50:06: 9e:bd:d8:1f:67:20:93:f1:e5:69:47:07:fa:ae:fb:7b:ba:c1: cd:a0:f1:26:01:b7:d1:22:b9:8f:5f:f5:4a:3f:65:bb:1c:0d: a8:8b:02:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHTHbAgaVE8rJkPPBsiPCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMWM1YzNmMjhhNWMwNzEwZGJlNDgyOWQyMTZjODllOTQy ZWYwZWIwHhcNMjUxMjE3MDcwMTMxWhcNMjUxMjE4MDcwMTMxWjAzMTEwLwYDVQQD Eyg4OTBjMDg5MDRjYTQ5NjViOTNjYjM4YmM0ZTU0MDIxMzQwOWFlZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNx5FumN2qVchKtuDRKHYCljjazS GRwcOLoy0KGPJcDfKYaHOzENWSTShGFrpk1EujBVtIninRwPUkq8vNhif2Q4G4/U FuXCTuTZZ2s09byZHpC0MryIhxDeF/hguSh5pinPDQZ9FlxWyne7MATKdtv71yPN n2oNkvo8sVMzLvmLlCkBM0ymqnAdNCdFDgMa4KGFSqStk4G//S56vTTFJyisveXS W2kQyotRNz2Ev9CKAi5zCaTKaSRkzlM0Gf25x98aweJZ5ZA2ZijjRy4mm9jYHEvq BCrQ6/vXLU/VX1sxIH+fmc8a4+1gsPkY0H+TkpRfrbYEuZ+mbUr9EKvctwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkMCJBMpJZbk8s4vE5UAhNAmu/CMB8GA1UdIwQY MBaAFHAcXD8opcBxDb5IKdIWyJ6ULvDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0J4Y1B5aWx3SEVOdmtncDBoYklucFF1OE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mYWM5MjEtZjU1Mi00YThhLThiNDkt NGZhOTg2MDFhZThjLzEvY0J4Y1B5aWx3SEVOdmtncDBoYklucFF1OE9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mYWM5MjEtZjU1Mi00YThhLThiNDktNGZhOTg2MDFhZThj LzEvY0J4Y1B5aWx3SEVOdmtncDBoYklucFF1OE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4RsvrWf LKGD00SFWPKyWyVrVp3sgZsOYHrscf8Ukvm+cY+JqqSVVgFsKaModwzi8lanHTk1 UpEJtn0Aj6+uwBnIV0LRR1EfKYIjDqcCI3eJiz3judJx03cWyJH3RvQa8VCFYsBq 8aUreFFJEGvDdYfcqjpa0CUnOO3xi6uraUOBz8hrzIk7EfT0qk31tWVlj7AwH44G HeMUN1weqKFumCYCadGhkg6eGNBQy4xZOS5RdkzFXt2O5VFmQttTxrB9ESlnIPsP sAri+IyRZPV87DNvj3fzKlAGnr3YH2cgk/HlaUcH+q77e7rBzaDxJgG30SK5j1/1 Sj9luxwNqIsCyA== -----END CERTIFICATE-----Generated at Wed Dec 17 16:50:03 2025 by rpki-client