This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json) Hash identifier: Z5wUVGugiBveGpKFlhDydH+hquqEgFSS+l++l6c/HeI= Subject key identifier: 90:A8:12:BC:39:1A:E5:DA:5B:74:CC:98:CF:03:4D:99:8A:8C:A7:8A Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb Certificate serial: 019B5298CD3E737C429AEF7107DD6FC5BE1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 23:01:44 +0000 Manifest this update: Wed 24 Dec 2025 23:01:44 +0000 Manifest next update: Thu 25 Dec 2025 23:01:44 +0000 Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: C6MdSA5qzZBhoBu6HHfkAolv1Fh6f5pNyq/tIqKAv/w=) 2: xnuUEnVXaSzz9cF5USCrsyD97so.roa (hash: j10VBwI4MUaDD8l8nXJ3vdwJpNrClSEXJCQ84BCSTro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:cd:3e:73:7c:42:9a:ef:71:07:dd:6f:c5:be:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb Validity Not Before: Dec 24 23:01:44 2025 GMT Not After : Dec 25 23:01:44 2025 GMT Subject: CN=90a812bc391ae5da5b74cc98cf034d998a8ca78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f1:58:1f:95:af:74:60:e7:0f:41:01:d0:b0: a9:67:96:1b:89:a2:7e:cb:a4:37:ae:f1:fb:97:fb: 99:6f:12:af:c9:80:77:23:33:90:86:5d:3c:78:7f: 70:a7:ef:b8:16:74:ed:d1:b5:0b:ff:09:b8:3f:0a: 5e:6e:44:1f:51:d3:91:0a:97:20:28:4b:b3:9d:0c: a1:ff:12:21:85:b8:88:38:a5:b6:ba:c8:d6:1c:a9: bc:3f:02:64:53:58:ea:de:bb:47:56:c8:74:c0:c0: 0b:c5:44:64:da:f4:26:c2:72:36:18:03:bd:d4:fa: 9b:a1:12:fc:55:7a:57:ac:1a:83:51:87:20:8f:bb: f0:45:5a:5e:98:dd:50:d6:3e:0f:e2:98:14:40:90: 91:82:15:d7:04:60:1c:97:f7:13:6e:7e:89:ef:fc: 18:43:09:b1:73:0e:44:a0:59:bd:ec:78:a3:92:04: a2:09:4d:50:1d:05:a9:b6:5e:a1:1d:81:0e:26:90: 75:c2:94:e1:1d:74:24:f9:c0:79:00:d4:3e:60:7b: ed:b2:39:d4:9f:30:49:0c:7f:b2:a7:a9:2d:d7:11: 42:0d:0f:8d:9c:3b:3b:7e:49:04:04:5d:78:f1:69: a9:03:1d:73:6a:26:c6:5f:31:ce:86:04:c1:f9:84: 55:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A8:12:BC:39:1A:E5:DA:5B:74:CC:98:CF:03:4D:99:8A:8C:A7:8A X509v3 Authority Key Identifier: keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:3f:6c:2f:bc:06:24:e6:33:66:d3:d5:ac:73:2b:2e:a7:2b: 25:bc:8f:18:86:e6:f3:aa:91:f5:f2:e2:1a:76:1e:7a:3a:1e: 69:0d:a9:16:45:8b:34:d2:e4:a4:72:ea:d1:2d:25:3e:4f:2e: bb:95:40:d3:0f:3e:8d:29:c6:ea:d3:a8:c9:9b:61:f8:5f:24: 2f:24:74:e5:21:ff:6c:66:95:0f:37:bb:e1:aa:44:71:84:d1: 8b:7c:f2:6b:75:57:6d:03:ab:0a:b5:ff:60:d5:fe:fe:b2:0b: cb:54:fe:2d:4b:98:d6:75:3a:3a:2a:e8:73:41:a1:d9:c7:85: 54:90:bb:60:4c:c2:2e:00:6e:f5:ca:c1:02:18:91:21:93:bb: 49:65:f4:f1:ed:c9:35:5f:94:31:39:5e:64:f0:11:3f:d9:7f: da:a4:57:24:70:88:68:e7:ee:e9:1d:3e:44:7c:c4:2c:b1:3b: 6c:5f:ae:d4:3b:d9:bf:b0:2f:9c:9a:09:17:d0:e8:86:3b:d4: 35:6d:df:40:6f:35:04:1a:c6:9f:cf:90:a3:9b:af:1f:ab:e4: 1a:6b:54:46:39:cd:58:e8:70:9c:b6:73:b2:19:83:68:13:2d: f3:c9:7f:f6:6c:82:a0:2e:c5:3a:7c:5f:9b:35:12:5b:84:f9: 3a:38:49:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmM0+c3xCmu9xB91vxb4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMDZiNjVjYmI5NzY2N2FiZGZmOWI4NjFhMjJmOWQwMWQx ZDQ2Y2IwHhcNMjUxMjI0MjMwMTQ0WhcNMjUxMjI1MjMwMTQ0WjAzMTEwLwYDVQQD Eyg5MGE4MTJiYzM5MWFlNWRhNWI3NGNjOThjZjAzNGQ5OThhOGNhNzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vFYH5WvdGDnD0EB0LCpZ5YbiaJ+ y6Q3rvH7l/uZbxKvyYB3IzOQhl08eH9wp++4FnTt0bUL/wm4PwpebkQfUdORCpcg KEuznQyh/xIhhbiIOKW2usjWHKm8PwJkU1jq3rtHVsh0wMALxURk2vQmwnI2GAO9 1PqboRL8VXpXrBqDUYcgj7vwRVpemN1Q1j4P4pgUQJCRghXXBGAcl/cTbn6J7/wY Qwmxcw5EoFm97HijkgSiCU1QHQWptl6hHYEOJpB1wpThHXQk+cB5ANQ+YHvtsjnU nzBJDH+yp6kt1xFCDQ+NnDs7fkkEBF148WmpAx1zaibGXzHOhgTB+YRVIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCoErw5GuXaW3TMmM8DTZmKjKeKMB8GA1UdIwQY MBaAFAoGtly7l2Z6vf+bhhoi+dAdHUbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yZTE4ZjctMDljNy00NWIxLWJjYjct OWY2Njg2ZTQyODAwLzEvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8yZTE4ZjctMDljNy00NWIxLWJjYjctOWY2Njg2ZTQyODAw LzEvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAT9sL7wG JOYzZtPVrHMrLqcrJbyPGIbm86qR9fLiGnYeejoeaQ2pFkWLNNLkpHLq0S0lPk8u u5VA0w8+jSnG6tOoyZth+F8kLyR05SH/bGaVDze74apEcYTRi3zya3VXbQOrCrX/ YNX+/rILy1T+LUuY1nU6Oiroc0Gh2ceFVJC7YEzCLgBu9crBAhiRIZO7SWX08e3J NV+UMTleZPARP9l/2qRXJHCIaOfu6R0+RHzELLE7bF+u1DvZv7AvnJoJF9DohjvU NW3fQG81BBrGn8+Qo5uvH6vkGmtURjnNWOhwnLZzshmDaBMt88l/9myCoC7FOnxf mzUSW4T5OjhJvw== -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:14 2025 by rpki-client