This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft File: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft (raw, json) Hash identifier: jh6DNKlGRauje7frG7k5mw86m6XUoTW2XDAa0poyX20= Subject key identifier: D2:AE:9A:0F:88:35:8C:3E:D6:9A:0A:26:A3:4E:6C:F4:33:82:B6:FE Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc Certificate serial: 019B5297EA905EBABA71DD221228F8CE9DC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 23:00:46 +0000 Manifest this update: Wed 24 Dec 2025 23:00:46 +0000 Manifest next update: Thu 25 Dec 2025 23:00:46 +0000 Files and hashes: 1: SCQLL9FrRwZS3_4QAQMFwFWEnMU.roa (hash: hA+a1SinlIIzAIvLt/cO3Kjqq6i5Xzb+bDE4vvr8VPM=) 2: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl (hash: J/ysnSVq+DVMax0i9OKygfzrYCPoTlvZ0iGRxIOHkVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:97:ea:90:5e:ba:ba:71:dd:22:12:28:f8:ce:9d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc Validity Not Before: Dec 24 23:00:46 2025 GMT Not After : Dec 25 23:00:46 2025 GMT Subject: CN=d2ae9a0f88358c3ed69a0a26a34e6cf43382b6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9e:cc:20:a2:cc:fc:8d:62:8b:3f:3a:9f:29: 2c:b2:b8:25:f1:a3:97:22:1f:63:1c:0b:b0:b2:10: d5:7a:0c:22:b3:a2:87:36:3c:1e:80:78:93:f0:d4: 18:24:79:bf:bc:65:1d:78:cb:82:79:03:81:a5:72: e6:0f:2f:3c:8f:bd:85:d6:ca:16:a4:f4:16:c6:64: d0:18:e2:b1:d1:74:24:ca:57:b6:84:22:2f:10:26: a7:29:6c:6a:fb:6a:e0:86:3b:c9:cf:7f:32:e8:cd: ee:f0:1d:be:d4:8f:e8:24:09:cd:fe:ae:d8:8b:94: 54:58:d8:16:ff:49:d9:c6:c3:84:69:47:1a:07:84: 4b:69:21:02:e7:ce:d3:b4:2c:1e:b9:8d:d8:0d:57: e6:d8:9e:e7:06:70:55:33:38:df:d3:b9:c4:6a:ab: 65:7f:df:d3:70:c7:54:1b:55:d7:eb:99:60:e0:07: d9:13:e9:42:9e:f8:85:d5:e7:23:c1:78:86:a4:e0: bf:b6:a1:37:e0:c1:7f:89:6a:80:e2:30:6b:ab:3c: 7a:50:a9:8f:43:2f:e5:32:4e:57:1c:ea:c9:27:15: be:8c:43:22:54:58:e7:de:c2:c2:81:5f:67:b3:85: 68:96:47:7f:27:d0:c8:ed:52:30:34:1b:26:1e:e8: c4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AE:9A:0F:88:35:8C:3E:D6:9A:0A:26:A3:4E:6C:F4:33:82:B6:FE X509v3 Authority Key Identifier: keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:56:ee:28:92:86:8c:df:31:cf:d7:73:f4:85:25:df:fe:2a: 89:2d:d1:e9:56:ae:94:1e:71:34:49:ca:f9:c4:7a:c6:15:26: 00:71:d9:f6:2f:b5:ff:d4:70:ae:bc:d1:12:f6:da:ae:1c:ea: 1d:5d:23:97:5a:4b:f2:64:ce:f0:22:ab:dc:4b:61:fd:3d:e8: 6e:0c:01:0d:5f:e0:c0:a7:5c:10:3f:ee:04:d2:42:a3:e1:9b: 5f:12:12:79:a7:2f:6f:36:f7:ed:31:86:16:12:94:a1:80:78: a0:6a:26:c2:5f:67:1b:62:ad:1d:40:7d:7c:c7:ba:ce:e7:72: 7d:3c:e7:4b:8a:39:2a:b3:56:bc:b2:eb:61:5a:c0:b6:68:05: 31:e8:5f:eb:5a:b7:bb:73:4a:11:1f:97:e8:a2:92:ba:45:6e: 7b:9b:aa:ab:fb:11:e0:d0:f5:70:21:23:32:d1:34:37:c6:5e: 71:8b:e4:aa:d3:bc:70:9b:bc:fc:08:54:9f:7a:55:fc:4e:4f: 0c:8a:0e:0f:47:a1:c9:c1:20:e9:a4:dd:fc:93:bd:f0:52:13: 19:35:b0:64:71:57:20:29:af:6d:ac:89:dc:6b:63:01:24:2e: d9:f0:33:ef:9c:34:01:d3:56:ea:7e:c7:db:65:4c:e4:90:8b: 72:6e:f9:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSl+qQXrq6cd0iEij4zp3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNzg3MDBmMTYxOWVjMWNkMzRkOTcwMDM5MjE1M2VjNGI2 MjMxZmMwHhcNMjUxMjI0MjMwMDQ2WhcNMjUxMjI1MjMwMDQ2WjAzMTEwLwYDVQQD EyhkMmFlOWEwZjg4MzU4YzNlZDY5YTBhMjZhMzRlNmNmNDMzODJiNmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp7MIKLM/I1iiz86nykssrgl8aOX Ih9jHAuwshDVegwis6KHNjwegHiT8NQYJHm/vGUdeMuCeQOBpXLmDy88j72F1soW pPQWxmTQGOKx0XQkyle2hCIvECanKWxq+2rghjvJz38y6M3u8B2+1I/oJAnN/q7Y i5RUWNgW/0nZxsOEaUcaB4RLaSEC587TtCweuY3YDVfm2J7nBnBVMzjf07nEaqtl f9/TcMdUG1XX65lg4AfZE+lCnviF1ecjwXiGpOC/tqE34MF/iWqA4jBrqzx6UKmP Qy/lMk5XHOrJJxW+jEMiVFjn3sLCgV9ns4Volkd/J9DI7VIwNBsmHujEyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKumg+INYw+1poKJqNObPQzgrb+MB8GA1UdIwQY MBaAFHF4cA8WGewc002XADkhU+xLYjH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMt ZDFkOGRiMTQ4ZWMyLzEvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMtZDFkOGRiMTQ4ZWMy LzEvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFbuKJKG jN8xz9dz9IUl3/4qiS3R6VaulB5xNEnK+cR6xhUmAHHZ9i+1/9RwrrzREvbarhzq HV0jl1pL8mTO8CKr3Eth/T3obgwBDV/gwKdcED/uBNJCo+GbXxISeacvbzb37TGG FhKUoYB4oGomwl9nG2KtHUB9fMe6zudyfTznS4o5KrNWvLLrYVrAtmgFMehf61q3 u3NKER+X6KKSukVue5uqq/sR4ND1cCEjMtE0N8ZecYvkqtO8cJu8/AhUn3pV/E5P DIoOD0ehycEg6aTd/JO98FITGTWwZHFXICmvbayJ3GtjASQu2fAz75w0AdNW6n7H 22VM5JCLcm75sg== -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:06 2025 by rpki-client