This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft File: CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json) Hash identifier: tD7wWUzvkIbg4JiVOfhFMgC9UlD9TU/LH0OhqbJAV7Y= Subject key identifier: 41:4B:8C:19:9E:D6:5B:00:C7:D6:FB:BA:B7:6E:7C:5B:88:BD:FC:C9 Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df Certificate serial: 019B39EB56DA0E97312E80B302D7F1D25894 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft Manifest number: 1723 Signing time: Sat 20 Dec 2025 04:01:23 +0000 Manifest this update: Sat 20 Dec 2025 04:01:23 +0000 Manifest next update: Sun 21 Dec 2025 04:01:23 +0000 Files and hashes: 1: 4R0hMhGbrDC4YVyzf1jrL8oQuI4.roa (hash: TLs9gVQTwy70mjzgj5kCuIcV2uNBgbxlOI07lSwnnow=) 2: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: 1iKEpucCk+y/7bhZpysbPQEKMhMr9VtasrN3rlGZZLg=) 3: cIX-WWQe1eTYBa5AEDfKv3ZFbSs.roa (hash: KXI7i+vv4GJ48vExO8crdEraeejXsQsIm7BOAxvY6pM=) 4: noPcixLpgkxwJ1ZxZM_fxPf4Csw.roa (hash: BthsLkB+ZFXPf15eE+Y7pQxlaiPPySEZY4ss84bAVsM=) 5: pkrI6iaUdda-z9WYMFjdcxpmXjo.roa (hash: hMCs1gjsYAVaOoAjArkJ6N1TgykfFMKnI+aiOTGukGc=) 6: tV6sObvzgTfPgUJ_zmLWZJP23Js.roa (hash: ruAGmOYz2wd7CtdLjtd2pZCz/+RLCcgBY+LOgFhOP3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:56:da:0e:97:31:2e:80:b3:02:d7:f1:d2:58:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df Validity Not Before: Dec 20 04:01:23 2025 GMT Not After : Dec 21 04:01:23 2025 GMT Subject: CN=414b8c199ed65b00c7d6fbbab76e7c5b88bdfcc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ed:d3:35:84:3f:4f:9c:55:fe:88:37:72:1b: 03:44:da:14:10:64:c7:d7:26:eb:ba:85:30:39:37: 82:4a:4e:b4:b2:43:d8:2e:29:22:47:25:11:70:c6: a6:f3:38:78:75:54:78:48:bc:44:64:85:c7:9d:46: 94:8a:a7:58:6f:39:2a:e6:de:52:07:30:f8:a2:fd: f9:c3:f6:f8:8b:60:ed:de:14:47:d6:df:10:43:7e: 39:3f:85:ea:bc:d1:98:15:4b:39:52:ea:bc:18:49: 43:2b:b4:4c:8d:98:32:b6:31:37:fb:a6:75:b1:8e: e7:ef:c1:23:09:5e:a3:2a:85:77:9c:d0:e2:b0:10: 16:23:ca:38:67:c3:8b:f8:44:fe:8c:53:17:9f:67: 51:ae:1e:20:8f:fa:2e:01:1e:77:01:ce:f2:40:4b: 0c:0c:b9:53:30:92:3c:8c:c0:5c:be:e7:66:3c:20: 0a:74:6a:e3:e1:18:b7:29:e2:87:c0:bc:d2:30:47: 2b:df:5b:5a:ec:59:89:43:d1:96:75:ef:bd:30:26: 83:05:82:7c:56:5b:83:18:42:0d:8c:08:5f:67:ec: 23:ed:4d:64:e6:ef:8e:ed:dc:44:59:8b:f6:bc:9e: 59:d7:90:c9:49:b6:44:49:9c:b5:27:1b:b9:fa:99: b8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4B:8C:19:9E:D6:5B:00:C7:D6:FB:BA:B7:6E:7C:5B:88:BD:FC:C9 X509v3 Authority Key Identifier: keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cd:e0:44:cb:49:9c:4f:ac:fc:db:e6:0b:40:dc:42:bc:6b: aa:1c:86:28:bf:37:07:d3:d6:8b:f3:b3:92:5d:d7:48:b3:d3: 89:37:69:49:de:85:34:17:62:26:3b:5e:bc:5d:6d:23:3f:46: dd:2b:da:24:0d:d6:6e:3b:08:77:eb:8d:c2:68:dd:58:b7:fb: 46:44:b7:2d:5a:5f:cd:ee:a1:8a:fc:31:01:d8:b0:2d:3e:6a: e0:6d:27:ab:96:a0:c0:69:aa:9f:45:5c:90:5d:12:4b:5a:87: 1a:7c:bb:c5:70:39:13:5c:33:2f:79:2a:30:9f:91:da:2d:9a: 99:16:6e:b5:32:fc:af:1a:fc:0e:8f:ce:bf:39:d2:b2:ff:6e: 1a:6e:3a:e7:f6:3d:c6:57:f7:0d:b6:4e:79:d5:95:18:83:42: b5:c7:5c:fa:e7:8e:37:7c:76:02:29:9e:05:ef:bb:47:0d:1e: aa:55:08:f5:9d:0b:9d:b8:40:84:c8:c9:c5:95:77:9b:42:59: 62:69:b2:b7:83:86:d9:bd:f1:86:65:e8:46:88:b8:b3:aa:26: 35:78:d5:60:40:19:94:db:da:a5:b9:03:67:c7:79:1d:3d:fc: d8:7b:9e:e7:e7:b3:58:5b:39:96:d6:f9:1f:74:4d:a2:6d:f3: 9f:3d:40:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs561baDpcxLoCzAtfx0liUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMTg3MGM5NmVmMDk3MjM4MTFmYjg5MjUwZWVhNmViYTk2 M2MwZGYwHhcNMjUxMjIwMDQwMTIzWhcNMjUxMjIxMDQwMTIzWjAzMTEwLwYDVQQD Eyg0MTRiOGMxOTllZDY1YjAwYzdkNmZiYmFiNzZlN2M1Yjg4YmRmY2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO3TNYQ/T5xV/og3chsDRNoUEGTH 1ybruoUwOTeCSk60skPYLikiRyURcMam8zh4dVR4SLxEZIXHnUaUiqdYbzkq5t5S BzD4ov35w/b4i2Dt3hRH1t8QQ345P4XqvNGYFUs5Uuq8GElDK7RMjZgytjE3+6Z1 sY7n78EjCV6jKoV3nNDisBAWI8o4Z8OL+ET+jFMXn2dRrh4gj/ouAR53Ac7yQEsM DLlTMJI8jMBcvudmPCAKdGrj4Ri3KeKHwLzSMEcr31ta7FmJQ9GWde+9MCaDBYJ8 VluDGEINjAhfZ+wj7U1k5u+O7dxEWYv2vJ5Z15DJSbZESZy1Jxu5+pm4OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFLjBme1lsAx9b7urdufFuIvfzJMB8GA1UdIwQY MBaAFAsYcMlu8JcjgR+4klDupuupY8DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMt YTJlMjRmOTgwYjNmLzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMtYTJlMjRmOTgwYjNm LzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANs3gRMtJ nE+s/NvmC0DcQrxrqhyGKL83B9PWi/Ozkl3XSLPTiTdpSd6FNBdiJjtevF1tIz9G 3SvaJA3WbjsId+uNwmjdWLf7RkS3LVpfze6hivwxAdiwLT5q4G0nq5agwGmqn0Vc kF0SS1qHGny7xXA5E1wzL3kqMJ+R2i2amRZutTL8rxr8Do/OvznSsv9uGm465/Y9 xlf3DbZOedWVGINCtcdc+ueON3x2AimeBe+7Rw0eqlUI9Z0LnbhAhMjJxZV3m0JZ Ymmyt4OG2b3xhmXoRoi4s6omNXjVYEAZlNvapbkDZ8d5HT382Hue5+ezWFs5ltb5 H3RNom3znz1AJA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:32:32 2025 by rpki-client