This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json) Hash identifier: JYLgHm4xFw1Ua6jGPX/URRaR0WtdjSOoWrzDE+or9pI= Subject key identifier: 40:22:D0:34:A5:CB:76:AD:47:4F:36:E4:A3:85:D5:33:C7:98:78:3C Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5 Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5 Certificate serial: 019B4A71C33C47B175178DB1C721784BEEE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 09:02:08 +0000 Manifest this update: Tue 23 Dec 2025 09:02:08 +0000 Manifest next update: Wed 24 Dec 2025 09:02:08 +0000 Files and hashes: 1: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: DNKq9AEVlqfeM8lW45HGQ/S2CC49yaW8qKFDiIUx+1w=) 2: TO80eqDFXQYl6CGIoinTDRQ723A.roa (hash: s5/qxS+QcBwb4YurVep+bFST0F2tBLYaOg/4Lpz+Qgk=) 3: bQ7_HzmWbxe1bpqsnmG8t2z9J54.roa (hash: uTKgZb6MWbd79qCA3p5te2MUGcoD6xRmcaj1CluWZYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:c3:3c:47:b1:75:17:8d:b1:c7:21:78:4b:ee:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5 Validity Not Before: Dec 23 09:02:08 2025 GMT Not After : Dec 24 09:02:08 2025 GMT Subject: CN=4022d034a5cb76ad474f36e4a385d533c798783c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cf:cd:f6:64:fe:bd:f7:d9:2d:75:8b:0a:14: 01:9f:61:66:86:7a:d2:de:a0:61:2b:c1:71:1a:a7: d8:29:03:c9:14:82:a8:94:5c:da:e1:bf:c5:41:da: ed:a1:fe:ef:b8:25:9a:64:a5:58:25:11:59:67:bb: 38:0c:29:a9:40:c4:fc:78:9c:42:20:d6:df:de:0f: 93:ed:06:1e:cf:4e:fd:51:b5:17:66:4b:42:16:f0: 5f:ba:30:b1:e7:34:53:13:30:95:38:56:c0:21:6d: e3:e8:d3:72:05:3b:a0:38:74:24:05:df:be:bc:fe: 7e:2b:17:5a:1f:c7:7e:15:ea:f7:cc:be:bf:f4:5b: d9:e6:09:5b:b3:8e:bd:87:5d:0f:97:9d:74:24:17: b4:6a:26:c5:76:11:b8:9d:ad:49:5d:d0:fd:9a:e5: 6a:9b:07:f4:07:69:37:82:60:91:91:32:bb:ac:d0: 2a:27:b7:c9:0b:b8:a3:4f:9a:6d:31:cd:cc:12:f9: a0:68:40:9c:71:8d:5d:3e:92:25:d8:ae:08:d6:f8: 3a:e9:a8:06:32:30:81:fb:11:b5:3d:0f:88:d3:b6: a5:86:5f:64:05:2d:6e:83:2f:5d:67:24:51:5b:cc: 09:9d:01:74:a9:bf:33:ec:0e:46:de:ce:52:96:1c: ea:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:22:D0:34:A5:CB:76:AD:47:4F:36:E4:A3:85:D5:33:C7:98:78:3C X509v3 Authority Key Identifier: keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:6a:67:da:d9:2c:e3:00:11:69:89:6c:a2:b2:f6:c9:b2:26: b9:a3:9f:78:16:86:2f:06:02:fc:36:9f:64:aa:aa:31:ec:15: 41:41:49:0f:97:b7:b0:b9:28:fd:30:c2:f3:33:53:cd:9e:f0: dd:64:ef:e7:79:88:9c:11:ac:3d:24:a0:1f:6e:2f:29:00:18: 40:9d:86:0d:2c:8d:58:7e:ff:de:9d:56:49:b4:3f:b4:f5:98: 74:c1:b8:5b:32:8a:e6:92:29:c7:3e:71:05:25:50:83:fc:11: e7:87:ab:f7:ff:f9:07:57:8c:ba:ca:8a:5e:9d:64:e4:69:88: e7:44:b2:0c:4f:85:60:08:99:32:ef:d8:34:c5:a9:cd:5a:47: d7:5d:cc:2d:79:c2:85:7e:ec:11:6f:80:93:2d:7d:12:6a:9d: 75:11:99:d5:3a:e4:42:b2:47:db:20:db:84:80:fd:6a:54:59: bf:5d:a9:dd:97:23:d6:e2:7d:88:e4:12:82:d3:c6:75:c6:c3: 8d:8b:a1:f1:fd:a5:ba:7f:5c:5a:2b:ce:f5:b2:0f:e0:30:47: c7:ac:17:41:49:25:0b:21:8e:0a:55:01:43:e1:26:5b:4f:60: f2:46:32:2f:bb:fa:80:2d:5f:b8:4c:f1:cc:6a:4a:91:39:7c: 05:e2:ed:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKccM8R7F1F42xxyF4S+7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWIzMThlNTA1N2ExYzEwMzQxNjA3Y2RkZGRhZGI0NmQ3 MWFiZjUwHhcNMjUxMjIzMDkwMjA4WhcNMjUxMjI0MDkwMjA4WjAzMTEwLwYDVQQD Eyg0MDIyZDAzNGE1Y2I3NmFkNDc0ZjM2ZTRhMzg1ZDUzM2M3OTg3ODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38/N9mT+vffZLXWLChQBn2FmhnrS 3qBhK8FxGqfYKQPJFIKolFza4b/FQdrtof7vuCWaZKVYJRFZZ7s4DCmpQMT8eJxC INbf3g+T7QYez079UbUXZktCFvBfujCx5zRTEzCVOFbAIW3j6NNyBTugOHQkBd++ vP5+KxdaH8d+Fer3zL6/9FvZ5glbs469h10Pl510JBe0aibFdhG4na1JXdD9muVq mwf0B2k3gmCRkTK7rNAqJ7fJC7ijT5ptMc3MEvmgaECccY1dPpIl2K4I1vg66agG MjCB+xG1PQ+I07alhl9kBS1ugy9dZyRRW8wJnQF0qb8z7A5G3s5Slhzq2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAi0DSly3atR0825KOF1TPHmHg8MB8GA1UdIwQY MBaAFAsbMY5QV6HBA0FgfN3drbRtcav1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2Yt NTllNmE2ZDRkNTc2LzEvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2YtNTllNmE2ZDRkNTc2 LzEvQ3hzeGpsQlhvY0VEUVdCODNkMnR0RzF4cV9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmpn2tks 4wARaYlsorL2ybImuaOfeBaGLwYC/DafZKqqMewVQUFJD5e3sLko/TDC8zNTzZ7w 3WTv53mInBGsPSSgH24vKQAYQJ2GDSyNWH7/3p1WSbQ/tPWYdMG4WzKK5pIpxz5x BSVQg/wR54er9//5B1eMusqKXp1k5GmI50SyDE+FYAiZMu/YNMWpzVpH113MLXnC hX7sEW+Aky19EmqddRGZ1TrkQrJH2yDbhID9alRZv12p3Zcj1uJ9iOQSgtPGdcbD jYuh8f2lun9cWivO9bIP4DBHx6wXQUklCyGOClUBQ+EmW09g8kYyL7v6gC1fuEzx zGpKkTl8BeLtBA== -----END CERTIFICATE-----Generated at Tue Dec 23 15:49:35 2025 by rpki-client