This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json) Hash identifier: GRU8N9fwEQenJA68ox5AyW0qvCcwjFzxrPc3Gz6Mwno= Subject key identifier: F8:D8:DC:B6:A4:43:10:58:77:B0:65:3D:7C:86:39:61:3E:5B:01:0D Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f Certificate serial: 019B3A8F8B83060B7EBD6FF9314F86AF5D8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft Manifest number: 11B8 Signing time: Sat 20 Dec 2025 07:00:44 +0000 Manifest this update: Sat 20 Dec 2025 07:00:44 +0000 Manifest next update: Sun 21 Dec 2025 07:00:44 +0000 Files and hashes: 1: 5kIp4bFmAr9lOCjBtU4-CSX7D0w.roa (hash: zS6XZLioq/dFM9rTCOe5dC9siPtnmQmcYc9glHbFesE=) 2: WZoVc8N-YD-8FMKAITneTMD8_4k.roa (hash: d546sm0t0rb46HppUnfY7MCyS/rnnp2kV23n3HY9/us=) 3: bZJxdCs0gWqYryxwQS8EGlLZ93c.roa (hash: ZMF+prTjcHa6DFcnagp286MUC0TlcS1uVKhgY1MMJNc=) 4: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: imsw2dYP4HStoCyS+KRBhFnKNmdIW2JXTUf5h/0rDyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:8b:83:06:0b:7e:bd:6f:f9:31:4f:86:af:5d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f Validity Not Before: Dec 20 07:00:44 2025 GMT Not After : Dec 21 07:00:44 2025 GMT Subject: CN=f8d8dcb6a443105877b0653d7c8639613e5b010d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:23:63:06:27:e2:6a:12:9f:7e:3a:4d:f8:31: a7:34:01:85:cb:f6:8d:e2:87:d7:22:58:6e:d9:c8: 54:7f:20:2a:f6:e8:5d:68:82:7c:b0:bd:4d:f0:33: b0:fb:2b:1f:06:3b:7c:f4:3c:75:a8:1f:36:e6:06: e1:a8:2b:c2:94:39:67:eb:a1:63:78:02:69:17:4a: 93:32:29:e7:d3:ef:57:86:91:a7:83:8e:e8:cf:71: 45:f0:ac:81:90:4f:07:07:dc:84:2c:f7:db:d0:4b: 7a:df:88:4d:6f:b7:11:40:8f:cb:6c:7c:e8:bd:e1: 74:78:0d:a0:a5:3d:4d:48:92:b4:9b:a0:fb:7d:4d: 7e:29:92:bc:67:de:1c:e4:71:2b:e3:65:75:8c:8f: 7b:53:c9:93:74:47:f4:fa:fb:a8:65:fc:4d:ef:d7: ec:23:76:e4:ca:64:ba:7b:5f:d0:f5:59:d1:73:a1: b4:c5:fa:67:30:f5:de:42:18:3c:c9:96:0c:1c:c0: 15:15:e3:50:dc:4a:d4:af:f3:20:7b:89:6c:f3:75: e3:2b:96:1d:8a:de:07:06:d1:b7:e7:0e:ab:d2:51: f1:ee:ce:36:46:c7:34:fe:e6:a5:5f:f9:24:78:e9: cf:ef:e2:b3:fc:69:9b:dc:fe:b8:3e:b8:1a:04:a9: cb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D8:DC:B6:A4:43:10:58:77:B0:65:3D:7C:86:39:61:3E:5B:01:0D X509v3 Authority Key Identifier: keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:32:db:06:d9:df:40:6e:db:b7:c1:37:86:90:ba:84:27:e8: ff:ef:8f:e2:ec:c8:20:71:57:98:56:51:57:b5:2b:f9:94:2b: 36:93:43:31:10:dd:d7:54:ac:65:92:34:fb:16:ef:c4:24:f4: 66:30:42:fd:98:c5:ef:cd:3b:7a:5b:92:68:f8:f9:af:3d:9a: 05:15:8c:9b:4f:71:ba:fb:27:cf:1f:38:7a:7c:ad:23:28:30: 11:2a:2d:17:41:6d:7a:b3:ab:fd:77:d8:98:77:97:61:d9:3d: 29:dd:e2:16:22:d3:fb:a7:c7:19:ff:d4:61:df:32:e8:a6:88: b2:c4:a0:26:f3:15:ef:02:bc:9e:1a:1f:de:cc:db:33:6d:9f: 41:51:5d:35:73:38:2e:bb:58:5e:82:33:6a:53:54:9c:91:17: 7c:35:8f:d3:74:90:20:94:55:8c:d8:dc:4c:c3:ba:70:f9:68: e7:a3:60:6f:60:43:bf:d6:be:f2:32:e3:93:fe:02:10:f9:bb: 08:a9:84:9b:49:c1:99:04:f1:7b:d2:9b:3a:21:8f:ea:f3:ec: 33:fe:6e:8b:37:aa:26:99:a6:db:0b:b2:fe:a0:6b:b5:37:12: 87:41:6b:29:a1:93:92:4d:b8:7a:87:56:68:3f:c7:1b:8c:28: 0c:89:0c:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j4uDBgt+vW/5MU+Gr12MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMWQ5YWQ0MDRlY2RhZmE3MGVhOWE0YzlkMTBiOTgwMTgy OWVhMWYwHhcNMjUxMjIwMDcwMDQ0WhcNMjUxMjIxMDcwMDQ0WjAzMTEwLwYDVQQD EyhmOGQ4ZGNiNmE0NDMxMDU4NzdiMDY1M2Q3Yzg2Mzk2MTNlNWIwMTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCNjBifiahKffjpN+DGnNAGFy/aN 4ofXIlhu2chUfyAq9uhdaIJ8sL1N8DOw+ysfBjt89Dx1qB825gbhqCvClDln66Fj eAJpF0qTMinn0+9XhpGng47oz3FF8KyBkE8HB9yELPfb0Et634hNb7cRQI/LbHzo veF0eA2gpT1NSJK0m6D7fU1+KZK8Z94c5HEr42V1jI97U8mTdEf0+vuoZfxN79fs I3bkymS6e1/Q9VnRc6G0xfpnMPXeQhg8yZYMHMAVFeNQ3ErUr/Mge4ls83XjK5Yd it4HBtG35w6r0lHx7s42Rsc0/ualX/kkeOnP7+Kz/Gmb3P64PrgaBKnLmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjY3LakQxBYd7BlPXyGOWE+WwENMB8GA1UdIwQY MBaAFHMdmtQE7Nr6cOqaTJ0QuYAYKeofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYt ZTIwYTY1NGZjYTk1LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYtZTIwYTY1NGZjYTk1 LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzLbBtnf QG7bt8E3hpC6hCfo/++P4uzIIHFXmFZRV7Ur+ZQrNpNDMRDd11SsZZI0+xbvxCT0 ZjBC/ZjF7807eluSaPj5rz2aBRWMm09xuvsnzx84enytIygwESotF0FterOr/XfY mHeXYdk9Kd3iFiLT+6fHGf/UYd8y6KaIssSgJvMV7wK8nhof3szbM22fQVFdNXM4 LrtYXoIzalNUnJEXfDWP03SQIJRVjNjcTMO6cPlo56Ngb2BDv9a+8jLjk/4CEPm7 CKmEm0nBmQTxe9KbOiGP6vPsM/5uizeqJpmm2wuy/qBrtTcSh0FrKaGTkk24eodW aD/HG4woDIkMRw== -----END CERTIFICATE-----Generated at Sat Dec 20 11:02:04 2025 by rpki-client