This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft File: cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft (raw, json) Hash identifier: wVLKD9MDj438FfhWHgBQt9BoshCqQk2ouMNf8MD2vDQ= Subject key identifier: CD:F5:10:D3:0A:05:C4:B4:0D:AE:AF:9D:A4:34:4D:2F:FF:B7:33:9F Authority key identifier: 72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4 Certificate issuer: /CN=720c6323cf730930a03b0e44607f6fedf527a8c4 Certificate serial: 019B3AFE0F2980E9715EA3A59DE670E082D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft Manifest number: A4 Signing time: Sat 20 Dec 2025 09:01:27 +0000 Manifest this update: Sat 20 Dec 2025 09:01:27 +0000 Manifest next update: Sun 21 Dec 2025 09:01:27 +0000 Files and hashes: 1: cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl (hash: /7e5LpGOqfB1HapgEYLxirYPcCB6X7daieHptr5k2Do=) 2: jf136iTXxi12Hjt-tW87j6RLunU.roa (hash: Y2zqrXOARQyWLcKRC6gUKA6rctKZc3uE4RdzoYUkrrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:0f:29:80:e9:71:5e:a3:a5:9d:e6:70:e0:82:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=720c6323cf730930a03b0e44607f6fedf527a8c4 Validity Not Before: Dec 20 09:01:27 2025 GMT Not After : Dec 21 09:01:27 2025 GMT Subject: CN=cdf510d30a05c4b40daeaf9da4344d2fffb7339f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:51:e0:ee:54:7e:df:31:38:08:3c:c2:c5: 3c:f6:c5:6c:7d:7c:98:eb:52:50:8b:b5:84:1a:d6: 97:6b:6a:43:55:6e:e0:70:24:79:21:54:64:94:2e: 56:0b:45:bf:b6:ed:78:d5:cc:a0:cb:85:62:04:9e: 26:60:38:e8:c5:ff:96:8c:4b:69:bb:67:60:7d:1e: f9:32:76:1d:82:99:07:a1:fe:d4:15:5a:67:5d:6c: da:7f:d9:8a:e3:a1:27:28:4a:83:a1:1c:08:d1:62: d4:1d:d1:8b:af:31:ce:18:71:21:4b:d5:64:95:e6: b0:59:a4:d9:4e:d5:8f:b1:f2:f5:18:80:68:c3:9c: df:5d:3b:27:17:1c:d6:ce:c2:07:a6:52:94:29:2d: 12:46:f6:af:5a:99:28:a3:40:ad:6a:a5:8b:a6:93: b1:28:01:48:88:2d:8a:7f:cb:26:b9:68:5e:2b:77: f0:c3:01:ea:33:77:eb:75:97:51:45:aa:ee:02:ea: f9:8d:97:3e:ff:2f:8c:6c:63:a7:0a:a2:a7:71:9b: 9e:ae:61:e5:3f:23:7f:ad:6d:19:d2:fe:71:d8:1a: 4a:97:2d:8e:ad:d4:41:f1:b6:cb:72:62:91:92:58: 32:38:fc:de:77:2d:b2:e9:0c:a4:2d:bb:44:8e:c9: e5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F5:10:D3:0A:05:C4:B4:0D:AE:AF:9D:A4:34:4D:2F:FF:B7:33:9F X509v3 Authority Key Identifier: keyid:72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:15:56:63:6e:b3:38:5d:d2:2e:2b:22:2a:5c:86:47:93:a0: 36:28:02:43:61:ce:40:24:6d:ee:9e:69:2e:53:28:b2:f9:3e: 96:77:3b:29:2c:a5:ac:65:1b:cf:2a:b2:bb:a5:18:58:48:9d: 27:6d:f5:54:33:00:5d:15:7d:b5:58:41:03:48:9b:46:0c:6e: 86:21:b9:27:92:0d:0d:21:20:a4:47:a4:22:58:f8:e4:ca:01: 86:bd:86:aa:be:a8:20:8f:4f:1b:8c:3d:6c:83:3f:54:a6:01: 3a:56:11:05:8e:fa:1b:7a:9c:59:26:3d:f9:be:c3:03:5b:01: 21:f2:33:8a:81:6d:c8:04:b2:34:bc:44:dd:68:28:21:cb:db: 0a:14:7e:93:ad:19:3a:68:b8:6e:05:35:6d:92:d9:fb:70:af: 30:a9:9a:8f:64:ba:d5:58:ce:fc:81:5c:5f:4e:20:03:81:a3: b1:fa:88:c1:40:cb:e5:24:c3:62:01:dd:94:6d:27:bc:b5:88: b2:d9:5d:2c:79:3a:a9:99:73:f5:cd:f4:c6:01:a5:37:69:1b: 46:2f:42:0a:1d:3f:85:fc:da:58:e0:52:27:66:ad:f6:24:1a: e3:5e:b0:a7:00:58:06:97:cb:61:a1:30:7d:76:66:92:c4:52: fc:22:80:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/g8pgOlxXqOlneZw4ILUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMGM2MzIzY2Y3MzA5MzBhMDNiMGU0NDYwN2Y2ZmVkZjUy N2E4YzQwHhcNMjUxMjIwMDkwMTI3WhcNMjUxMjIxMDkwMTI3WjAzMTEwLwYDVQQD EyhjZGY1MTBkMzBhMDVjNGI0MGRhZWFmOWRhNDM0NGQyZmZmYjczMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRpR4O5Uft8xOAg8wsU89sVsfXyY 61JQi7WEGtaXa2pDVW7gcCR5IVRklC5WC0W/tu141cygy4ViBJ4mYDjoxf+WjEtp u2dgfR75MnYdgpkHof7UFVpnXWzaf9mK46EnKEqDoRwI0WLUHdGLrzHOGHEhS9Vk leawWaTZTtWPsfL1GIBow5zfXTsnFxzWzsIHplKUKS0SRvavWpkoo0CtaqWLppOx KAFIiC2Kf8smuWheK3fwwwHqM3frdZdRRaruAur5jZc+/y+MbGOnCqKncZuermHl PyN/rW0Z0v5x2BpKly2OrdRB8bbLcmKRklgyOPzedy2y6QykLbtEjsnlVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM31ENMKBcS0Da6vnaQ0TS//tzOfMB8GA1UdIwQY MBaAFHIMYyPPcwkwoDsORGB/b+31J6jEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNmRhZTgtZDk4ZS00YWEwLWI0YWQt NDI4MWUzOGE5YmYyLzEvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNmRhZTgtZDk4ZS00YWEwLWI0YWQtNDI4MWUzOGE5YmYy LzEvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRVWY26z OF3SLisiKlyGR5OgNigCQ2HOQCRt7p5pLlMosvk+lnc7KSylrGUbzyqyu6UYWEid J231VDMAXRV9tVhBA0ibRgxuhiG5J5INDSEgpEekIlj45MoBhr2Gqr6oII9PG4w9 bIM/VKYBOlYRBY76G3qcWSY9+b7DA1sBIfIzioFtyASyNLxE3WgoIcvbChR+k60Z Omi4bgU1bZLZ+3CvMKmaj2S61VjO/IFcX04gA4GjsfqIwUDL5STDYgHdlG0nvLWI stldLHk6qZlz9c30xgGlN2kbRi9CCh0/hfzaWOBSJ2at9iQa416wpwBYBpfLYaEw fXZmksRS/CKArA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:11:59 2025 by rpki-client