This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft File: cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json) Hash identifier: j6WGe0OIhyC2FDIrAlo8NAt1IZSMN3O5aCQrR425Y3w= Subject key identifier: 56:D6:24:C1:68:53:3D:3A:08:7D:2D:11:2B:7F:89:C3:F7:8B:79:F8 Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8 Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8 Certificate serial: 019B6CC5DF21724F045FF8BD50850CA861FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft Manifest number: 08FE Signing time: Tue 30 Dec 2025 01:01:05 +0000 Manifest this update: Tue 30 Dec 2025 01:01:05 +0000 Manifest next update: Wed 31 Dec 2025 01:01:05 +0000 Files and hashes: 1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: 4rQSpr77JoZ8T866MT3/JL4cNAjeL/H74etNb7K/POo=) 2: xsLt5XL-OWIaNdR6BZ8HbsppEGM.roa (hash: fVuO1qpyondG1qElrhxFzaCfBXaBgOTcL+nbs40PcY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:df:21:72:4f:04:5f:f8:bd:50:85:0c:a8:61:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8 Validity Not Before: Dec 30 01:01:05 2025 GMT Not After : Dec 31 01:01:05 2025 GMT Subject: CN=56d624c168533d3a087d2d112b7f89c3f78b79f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:81:ca:63:e4:d0:9e:57:11:f5:b5:6c:81:15: 01:98:54:62:9c:42:fb:2c:f7:ce:0f:e8:60:f8:01: a1:f5:bc:73:40:be:02:3e:e6:11:bd:6b:ff:c3:74: 38:f5:87:ec:50:20:eb:4c:2f:38:04:c1:a3:3e:66: 65:da:72:4f:1d:e1:b2:06:a4:a5:23:ee:ae:c9:c8: a3:d0:ad:ef:da:dd:0d:38:4f:c3:00:da:93:21:55: 57:f9:77:95:08:81:30:23:ab:88:d2:7a:f7:e8:88: c4:a2:9c:32:46:64:52:d6:b3:d7:9d:43:63:08:40: cc:c7:bd:31:21:3b:d5:4e:76:80:f1:9c:ee:27:93: 9c:fd:e8:d7:05:01:fe:ec:87:4d:04:02:06:b2:e7: 3d:c5:63:68:2e:ef:d5:58:5b:c2:9c:28:a5:9c:c0: a3:e0:87:c4:88:79:ba:df:d6:14:53:a3:1d:a4:89: 18:e8:4b:bf:c8:b9:04:ce:00:df:4b:99:21:05:75: a1:ca:b0:0d:00:5a:30:4c:58:17:0c:ac:5e:9d:76: 67:8a:e7:79:da:3b:fa:14:00:bb:61:96:0d:ce:d4: 58:2d:a8:6a:cd:95:29:64:f3:1f:23:10:23:d0:1d: db:58:28:c1:ef:20:00:1b:0b:5b:a6:e1:77:eb:68: 57:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D6:24:C1:68:53:3D:3A:08:7D:2D:11:2B:7F:89:C3:F7:8B:79:F8 X509v3 Authority Key Identifier: keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:ac:fe:71:be:fb:e9:4f:59:d7:ea:e4:92:80:53:9d:9c:21: b8:74:e6:88:02:6c:ef:e6:6e:92:4b:f0:cd:c6:84:53:3b:1e: af:3d:58:67:35:4c:c7:a9:96:4f:58:9a:5b:7b:7d:d3:d5:fa: d1:33:c7:86:6b:d4:67:f1:93:f9:44:e1:37:22:ad:c3:ff:4f: 91:95:ee:7d:95:3e:03:fb:cc:88:04:69:d5:b8:d6:79:69:56: 39:28:cb:14:dc:1f:83:5a:d8:4c:65:70:40:b3:78:a1:14:4d: 56:3a:4b:22:fa:bf:d2:93:53:7a:5f:96:fc:cd:53:7d:e4:e5: 48:34:77:8a:fc:d2:88:75:b6:cc:5e:d6:1a:1e:b9:4c:0c:10: 65:91:72:75:de:1e:85:ce:2e:4e:3f:9a:8d:e4:c4:5a:51:86: dd:1a:93:b0:fd:d8:58:aa:28:03:08:74:92:64:cc:a5:e3:c8: a4:c5:ec:9a:24:f8:3e:f7:82:5b:94:19:e8:8f:4a:dd:0a:ed: 6d:a0:66:72:94:cd:b5:2d:36:6e:29:eb:b6:68:dd:34:62:3c: 99:bd:34:8f:51:34:8b:09:56:79:78:51:b6:92:40:28:4d:87: 71:b3:68:50:20:3d:41:91:83:4a:28:35:ed:f8:5b:af:1d:92: 54:3d:54:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxd8hck8EX/i9UIUMqGH7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMWMxMzgyODU4YjBkYzk1YTlhZGJlYTQ3MjhiMzFmOWUy MmMwZDgwHhcNMjUxMjMwMDEwMTA1WhcNMjUxMjMxMDEwMTA1WjAzMTEwLwYDVQQD Eyg1NmQ2MjRjMTY4NTMzZDNhMDg3ZDJkMTEyYjdmODljM2Y3OGI3OWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIHKY+TQnlcR9bVsgRUBmFRinEL7 LPfOD+hg+AGh9bxzQL4CPuYRvWv/w3Q49YfsUCDrTC84BMGjPmZl2nJPHeGyBqSl I+6uycij0K3v2t0NOE/DANqTIVVX+XeVCIEwI6uI0nr36IjEopwyRmRS1rPXnUNj CEDMx70xITvVTnaA8ZzuJ5Oc/ejXBQH+7IdNBAIGsuc9xWNoLu/VWFvCnCilnMCj 4IfEiHm639YUU6MdpIkY6Eu/yLkEzgDfS5khBXWhyrANAFowTFgXDKxenXZniud5 2jv6FAC7YZYNztRYLahqzZUpZPMfIxAj0B3bWCjB7yAAGwtbpuF362hXBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbWJMFoUz06CH0tESt/icP3i3n4MB8GA1UdIwQY MBaAFHMcE4KFiw3JWprb6kcosx+eIsDYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xNzJlMGItOGNiYi00MDJlLThmMmMt ODU5NWI0NTAwODg0LzEvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xNzJlMGItOGNiYi00MDJlLThmMmMtODU5NWI0NTAwODg0 LzEvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqz+cb77 6U9Z1+rkkoBTnZwhuHTmiAJs7+ZukkvwzcaEUzserz1YZzVMx6mWT1iaW3t909X6 0TPHhmvUZ/GT+UThNyKtw/9PkZXufZU+A/vMiARp1bjWeWlWOSjLFNwfg1rYTGVw QLN4oRRNVjpLIvq/0pNTel+W/M1TfeTlSDR3ivzSiHW2zF7WGh65TAwQZZFydd4e hc4uTj+ajeTEWlGG3RqTsP3YWKooAwh0kmTMpePIpMXsmiT4PveCW5QZ6I9K3Qrt baBmcpTNtS02binrtmjdNGI8mb00j1E0iwlWeXhRtpJAKE2HcbNoUCA9QZGDSig1 7fhbrx2SVD1UGA== -----END CERTIFICATE-----Generated at Tue Dec 30 08:54:04 2025 by rpki-client