This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json) Hash identifier: +bNMEK+egptjctEktLKgHSaLkXCZwUgA2DUUiNHLx7g= Subject key identifier: 52:E0:BB:8E:3C:3E:16:3C:8E:DD:FC:9B:8F:AE:1D:A8:12:08:8B:CF Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48 Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48 Certificate serial: 019B53AB59A15CDD676BEAEA628781440A8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft Manifest number: 10A5 Signing time: Thu 25 Dec 2025 04:01:36 +0000 Manifest this update: Thu 25 Dec 2025 04:01:36 +0000 Manifest next update: Fri 26 Dec 2025 04:01:36 +0000 Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: dS4R407I9xVxtZyKKePLgiYakiq0gUl5LB00jH8t2IM=) 2: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (hash: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:59:a1:5c:dd:67:6b:ea:ea:62:87:81:44:0a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48 Validity Not Before: Dec 25 04:01:36 2025 GMT Not After : Dec 26 04:01:36 2025 GMT Subject: CN=52e0bb8e3c3e163c8eddfc9b8fae1da812088bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bf:c0:74:96:ce:a5:b8:39:3a:b7:a3:fd:75: 82:e5:0d:31:dc:81:23:13:9c:e9:02:e0:d0:72:a2: 13:42:c9:42:ef:c8:84:5a:b8:70:de:54:6f:66:d8: 92:b7:b5:d9:2a:33:16:8b:e4:70:d2:92:b0:bb:b3: 31:09:2d:fc:35:14:ab:f2:d3:1b:8a:d5:5b:5c:5a: f9:1a:02:ff:5f:9a:5c:51:87:4a:e3:d8:6f:9b:43: bf:32:b8:e7:16:67:ab:7e:ec:a6:d0:7c:f7:f4:96: 4c:7a:ba:1d:d3:bb:6a:c1:33:e2:75:95:ea:38:3e: 7d:b5:5d:3c:f1:cd:e7:27:25:ff:05:26:1b:f1:ee: 16:21:eb:5c:4e:a3:66:ce:95:0e:82:7d:5b:3d:17: 20:93:bf:1c:8c:8c:84:57:c5:46:18:1b:cb:fb:9f: 5f:b6:38:52:4b:66:f8:1f:5c:6c:fc:9a:91:e1:66: 03:d2:00:98:4f:8c:0e:98:e8:19:2f:0c:21:a2:18: ed:5e:7f:30:5c:71:10:5b:75:41:fc:06:2d:2a:2c: 09:bc:d4:21:d9:87:38:9a:ba:35:f9:63:11:8f:98: df:49:90:3f:93:46:60:6a:bf:29:92:23:26:bc:01: 0a:6a:bf:b8:25:27:1f:23:5b:ed:d4:5b:cb:8d:cf: 34:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E0:BB:8E:3C:3E:16:3C:8E:DD:FC:9B:8F:AE:1D:A8:12:08:8B:CF X509v3 Authority Key Identifier: keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d9:4e:da:42:65:84:52:8e:8c:95:d5:1c:66:69:ba:59:63: 59:8a:d0:ed:cd:0c:03:30:47:ae:e4:3c:15:7d:bd:a1:7e:a9: e2:59:74:00:f5:35:f2:85:72:19:d3:39:cb:19:f0:6c:a8:b6: 52:0b:c4:a5:66:4e:4a:b5:d1:a1:84:2c:11:8e:d1:a4:43:77: 9d:a6:7e:db:0b:af:27:91:d1:e1:0c:0a:a2:5b:d4:48:41:03: 3e:e6:ce:7a:e3:2a:36:11:3a:2f:25:d1:1c:67:6b:3a:10:5b: 2f:c6:56:a8:2a:d0:1c:b0:56:ed:36:d4:a0:9c:79:21:85:76: 01:90:46:a3:ff:48:a2:13:66:b2:54:0a:19:02:4e:fa:45:3c: 5f:92:90:8a:b3:5f:a0:c1:1b:98:17:98:8a:7f:1b:6b:72:ea: 78:bb:85:b9:64:56:d6:7b:34:71:f4:6f:ac:bf:1d:4e:f4:c5: e9:3e:6e:d5:41:a1:4a:0c:43:92:7d:12:e6:72:c0:30:3d:e5: 29:f1:c8:4d:f6:e3:3a:a9:eb:c6:fc:a2:a9:3d:ce:32:0d:b1: 76:b0:72:8d:12:32:45:c1:31:db:8a:99:22:b4:54:2e:3e:f9: b5:18:d1:b6:b6:73:d9:e8:17:bb:ff:02:a5:0b:a2:7c:fc:40: 5d:68:f9:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq1mhXN1na+rqYoeBRAqKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YWFkMTdiMTA2Nzc1ZTQ4NGY2MWViYjVlYzEwNGMyN2Mx ODdlNDgwHhcNMjUxMjI1MDQwMTM2WhcNMjUxMjI2MDQwMTM2WjAzMTEwLwYDVQQD Eyg1MmUwYmI4ZTNjM2UxNjNjOGVkZGZjOWI4ZmFlMWRhODEyMDg4YmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL/AdJbOpbg5Orej/XWC5Q0x3IEj E5zpAuDQcqITQslC78iEWrhw3lRvZtiSt7XZKjMWi+Rw0pKwu7MxCS38NRSr8tMb itVbXFr5GgL/X5pcUYdK49hvm0O/MrjnFmerfuym0Hz39JZMerod07tqwTPidZXq OD59tV088c3nJyX/BSYb8e4WIetcTqNmzpUOgn1bPRcgk78cjIyEV8VGGBvL+59f tjhSS2b4H1xs/JqR4WYD0gCYT4wOmOgZLwwhohjtXn8wXHEQW3VB/AYtKiwJvNQh 2Yc4mro1+WMRj5jfSZA/k0Zgar8pkiMmvAEKar+4JScfI1vt1FvLjc80FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLgu448PhY8jt38m4+uHagSCIvPMB8GA1UdIwQY MBaAFAmq0XsQZ3XkhPYeu17BBMJ8GH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS84MmZiMWQtZjRmNC00MzZhLWE5OTMt YjRhMTcwMGYyMTcyLzEvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS84MmZiMWQtZjRmNC00MzZhLWE5OTMtYjRhMTcwMGYyMTcy LzEvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtlO2kJl hFKOjJXVHGZpulljWYrQ7c0MAzBHruQ8FX29oX6p4ll0APU18oVyGdM5yxnwbKi2 UgvEpWZOSrXRoYQsEY7RpEN3naZ+2wuvJ5HR4QwKolvUSEEDPubOeuMqNhE6LyXR HGdrOhBbL8ZWqCrQHLBW7TbUoJx5IYV2AZBGo/9IohNmslQKGQJO+kU8X5KQirNf oMEbmBeYin8ba3LqeLuFuWRW1ns0cfRvrL8dTvTF6T5u1UGhSgxDkn0S5nLAMD3l KfHITfbjOqnrxvyiqT3OMg2xdrByjRIyRcEx24qZIrRULj75tRjRtrZz2egXu/8C pQuifPxAXWj5cg== -----END CERTIFICATE-----Generated at Thu Dec 25 07:11:00 2025 by rpki-client