This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft File: CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json) Hash identifier: nrcf8vb2sSIQoxvFW4+rX/ACTfukPUPPyH+Asb7tQ8s= Subject key identifier: 14:44:F8:85:89:B4:DD:3D:37:99:B0:2E:23:CB:C8:9B:BC:F6:34:83 Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df Certificate serial: 019B665563495A101F0FBC0DDF055A9E4875 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft Manifest number: 173A Signing time: Sun 28 Dec 2025 19:00:30 +0000 Manifest this update: Sun 28 Dec 2025 19:00:30 +0000 Manifest next update: Mon 29 Dec 2025 19:00:30 +0000 Files and hashes: 1: 4R0hMhGbrDC4YVyzf1jrL8oQuI4.roa (hash: TLs9gVQTwy70mjzgj5kCuIcV2uNBgbxlOI07lSwnnow=) 2: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: B1fYFCS3tSmespz0nuU8EcSwvSajYhbrbqk5+iKBaEI=) 3: cIX-WWQe1eTYBa5AEDfKv3ZFbSs.roa (hash: KXI7i+vv4GJ48vExO8crdEraeejXsQsIm7BOAxvY6pM=) 4: noPcixLpgkxwJ1ZxZM_fxPf4Csw.roa (hash: BthsLkB+ZFXPf15eE+Y7pQxlaiPPySEZY4ss84bAVsM=) 5: pkrI6iaUdda-z9WYMFjdcxpmXjo.roa (hash: hMCs1gjsYAVaOoAjArkJ6N1TgykfFMKnI+aiOTGukGc=) 6: tV6sObvzgTfPgUJ_zmLWZJP23Js.roa (hash: ruAGmOYz2wd7CtdLjtd2pZCz/+RLCcgBY+LOgFhOP3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:55:63:49:5a:10:1f:0f:bc:0d:df:05:5a:9e:48:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df Validity Not Before: Dec 28 19:00:30 2025 GMT Not After : Dec 29 19:00:30 2025 GMT Subject: CN=1444f88589b4dd3d3799b02e23cbc89bbcf63483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:b4:39:7e:87:5d:30:f8:6a:7c:6c:02:73: 98:e4:11:99:7f:fd:7c:43:44:49:4d:bd:38:1a:da: 7a:7f:cb:47:76:30:88:af:5d:fb:bb:75:fc:44:8e: 2a:f9:fa:f9:ea:b9:c6:46:a3:b9:21:f8:2f:f5:73: f7:48:54:bd:37:0e:7d:0f:98:87:d0:2d:04:84:91: d6:9e:7b:c7:34:7c:a7:78:26:32:27:63:0b:ce:d8: 38:35:ec:da:14:ba:ee:91:e6:4c:e7:d9:c6:04:5f: fb:95:fc:66:fa:fd:27:7d:d0:2e:81:07:cc:ed:d4: d7:d9:b9:83:be:3d:bd:b8:b7:e9:4b:67:c8:76:67: 1a:d6:f7:14:fd:1b:9d:c6:b0:f2:9a:b6:af:1b:a3: a7:1f:8c:0d:fc:1f:0a:c4:e9:85:86:52:a4:a4:43: 3d:4d:a7:4d:67:e7:7f:d7:c6:99:5c:b6:e9:2c:82: 6e:23:3c:68:58:f1:71:37:32:09:48:68:29:c6:23: 9f:d9:64:50:64:11:fe:20:a2:b2:92:83:71:68:5d: a4:fc:a4:0b:20:4e:60:1b:b2:e8:8c:4d:98:f6:b2: 51:6e:3d:cd:05:05:aa:11:31:f4:d6:cf:4a:b5:67: 57:02:7c:40:f4:93:28:8e:df:0c:d5:61:7a:9e:c5: 24:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:44:F8:85:89:B4:DD:3D:37:99:B0:2E:23:CB:C8:9B:BC:F6:34:83 X509v3 Authority Key Identifier: keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:74:50:58:7d:52:3f:69:d8:cf:cf:2e:1a:09:fe:0d:8f:3d: ce:e2:fb:1b:1d:64:d7:a4:2c:68:29:9b:09:9d:8f:98:43:ad: be:e5:9c:41:3f:3b:a8:03:72:8b:f8:a2:58:73:96:49:7a:dc: 47:13:cf:13:ba:13:da:dc:a0:d0:4b:ec:7e:9f:1b:17:81:97: 94:21:c5:95:6c:16:be:c7:f4:ad:f3:18:de:4f:d9:80:cd:fb: e0:8c:ae:b5:a3:c3:a1:15:90:f2:e3:04:3e:27:ff:4e:56:97: f8:99:26:fe:8a:c7:3a:53:d7:b6:40:2e:8c:7e:93:0e:0c:fd: 79:bd:02:1c:be:01:f0:9c:a8:52:e5:5a:2e:10:08:7b:a3:2b: 1a:e7:55:72:12:7a:e0:37:ab:ae:bb:3a:aa:d3:44:b5:8e:09: 2b:ec:e0:46:67:16:b8:26:4a:fa:1c:d4:40:9f:39:6d:e6:2e: a9:fb:58:6d:ca:9c:a4:c8:7c:2e:90:1a:fc:5e:3b:6f:59:3e: 21:5d:30:4b:c5:05:e8:59:54:f5:90:f4:8c:e3:7b:26:81:de: e4:ec:f2:63:73:7e:37:14:aa:b1:24:40:03:c3:41:c8:25:1f: 67:a3:d8:1d:7c:f2:c1:a3:7c:64:90:8b:93:99:35:89:42:81: 80:65:a6:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVWNJWhAfD7wN3wVankh1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMTg3MGM5NmVmMDk3MjM4MTFmYjg5MjUwZWVhNmViYTk2 M2MwZGYwHhcNMjUxMjI4MTkwMDMwWhcNMjUxMjI5MTkwMDMwWjAzMTEwLwYDVQQD EygxNDQ0Zjg4NTg5YjRkZDNkMzc5OWIwMmUyM2NiYzg5YmJjZjYzNDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpS0OX6HXTD4anxsAnOY5BGZf/18 Q0RJTb04Gtp6f8tHdjCIr137u3X8RI4q+fr56rnGRqO5Ifgv9XP3SFS9Nw59D5iH 0C0EhJHWnnvHNHyneCYyJ2MLztg4NezaFLrukeZM59nGBF/7lfxm+v0nfdAugQfM 7dTX2bmDvj29uLfpS2fIdmca1vcU/RudxrDymravG6OnH4wN/B8KxOmFhlKkpEM9 TadNZ+d/18aZXLbpLIJuIzxoWPFxNzIJSGgpxiOf2WRQZBH+IKKykoNxaF2k/KQL IE5gG7LojE2Y9rJRbj3NBQWqETH01s9KtWdXAnxA9JMojt8M1WF6nsUk+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRE+IWJtN09N5mwLiPLyJu89jSDMB8GA1UdIwQY MBaAFAsYcMlu8JcjgR+4klDupuupY8DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMt YTJlMjRmOTgwYjNmLzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMtYTJlMjRmOTgwYjNm LzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3RQWH1S P2nYz88uGgn+DY89zuL7Gx1k16QsaCmbCZ2PmEOtvuWcQT87qANyi/iiWHOWSXrc RxPPE7oT2tyg0Evsfp8bF4GXlCHFlWwWvsf0rfMY3k/ZgM374IyutaPDoRWQ8uME Pif/TlaX+Jkm/orHOlPXtkAujH6TDgz9eb0CHL4B8JyoUuVaLhAIe6MrGudVchJ6 4Derrrs6qtNEtY4JK+zgRmcWuCZK+hzUQJ85beYuqftYbcqcpMh8LpAa/F47b1k+ IV0wS8UF6FlU9ZD0jON7JoHe5OzyY3N+NxSqsSRAA8NByCUfZ6PYHXzywaN8ZJCL k5k1iUKBgGWmbQ== -----END CERTIFICATE-----Generated at Sun Dec 28 20:30:16 2025 by rpki-client