This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft File: cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json) Hash identifier: 1CRHDkVRB48Q9ePSaFyFw8PsL7rO+CYLhxgjTew8Uvk= Subject key identifier: A3:31:64:84:FB:B1:BF:B5:BF:C6:54:AB:85:3C:F9:9B:73:7A:88:13 Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8 Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8 Certificate serial: 019B3A900F9C905551481753D13096A622DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft Manifest number: 08E4 Signing time: Sat 20 Dec 2025 07:01:18 +0000 Manifest this update: Sat 20 Dec 2025 07:01:18 +0000 Manifest next update: Sun 21 Dec 2025 07:01:18 +0000 Files and hashes: 1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: +Rk5LSK1KqFhCybDn4jmuhunLe4VWAcVba365va2pPg=) 2: xsLt5XL-OWIaNdR6BZ8HbsppEGM.roa (hash: fVuO1qpyondG1qElrhxFzaCfBXaBgOTcL+nbs40PcY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:0f:9c:90:55:51:48:17:53:d1:30:96:a6:22:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8 Validity Not Before: Dec 20 07:01:18 2025 GMT Not After : Dec 21 07:01:18 2025 GMT Subject: CN=a3316484fbb1bfb5bfc654ab853cf99b737a8813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ac:84:dc:47:8a:c0:cd:a3:81:83:86:d0:65: 4c:9c:e5:17:0e:6f:7a:86:cf:10:45:4c:96:0c:ac: 7c:cd:a6:8f:fe:f1:74:f6:3d:55:28:58:a1:e1:3e: 27:37:4e:0c:28:36:dc:fd:d3:6c:d9:87:11:e9:1a: 4e:44:ef:72:9f:05:29:4c:10:8f:65:1d:d6:96:68: d1:1f:b9:a0:c5:34:45:44:41:4a:2c:35:33:9a:99: d0:c3:b7:66:5d:e0:65:54:33:66:df:3f:7e:d0:29: 5e:f3:fc:cf:6f:bf:6d:bd:54:42:66:29:d6:03:41: f1:51:75:58:45:56:7d:b4:71:c8:d6:17:1c:32:eb: 98:fa:1b:a8:ae:60:fd:d8:f7:36:f9:63:7b:1a:1b: b3:d4:1e:ab:47:11:af:aa:f4:94:46:5a:2c:1f:20: e4:00:ae:b0:26:7a:e1:c3:ba:bc:18:72:2e:74:7d: f1:4e:50:c4:c6:5b:59:43:70:01:65:33:1c:b5:ea: 63:52:be:d0:40:3d:cf:32:ad:11:e5:14:4f:15:bd: ba:b7:4a:b3:39:06:14:4b:bb:88:0f:b7:c4:14:bd: 5c:a3:5e:cf:2a:a4:4d:dd:d0:e9:6a:e5:e3:08:95: 1e:2b:c9:3b:84:65:4d:2e:ee:6e:6d:6e:43:3a:91: ec:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:31:64:84:FB:B1:BF:B5:BF:C6:54:AB:85:3C:F9:9B:73:7A:88:13 X509v3 Authority Key Identifier: keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:70:09:1b:69:d3:ed:93:7b:fe:92:61:5d:de:92:3a:7c:ef: 14:9b:fc:e8:77:9e:0c:2f:71:6b:8c:27:1d:8d:1a:42:c0:65: 49:05:d2:38:ab:ef:5b:a0:9f:7d:df:25:94:24:f7:0a:8c:ea: db:fe:37:f6:cf:8f:2a:5f:b8:1e:8e:7e:69:a6:75:d7:6b:f3: d2:10:a2:56:0b:cd:4b:58:8d:9e:c7:46:b6:4c:2e:c1:09:c5: c1:f8:f2:85:db:97:25:e3:4b:e2:0c:ee:bf:22:ca:1b:26:47: 57:68:64:0e:11:d8:6d:34:ca:0e:f8:9f:38:bb:b7:78:58:33: cb:66:58:64:c1:ca:2b:01:53:d8:05:de:cc:cf:49:63:cd:26: 60:3d:84:2b:71:33:76:7d:76:ef:80:57:14:17:93:6e:92:11: 50:6c:30:f8:f3:53:a7:13:5b:b6:82:e2:a5:d5:13:26:ce:6a: 8f:bb:91:9e:d0:1f:e3:87:02:ba:e5:9e:3e:db:2d:99:83:ec: 00:f3:d7:82:d6:4f:e5:52:27:68:e8:41:10:67:31:34:98:6f: de:cf:a0:07:f8:24:b1:22:2c:24:fb:0d:8d:51:d7:70:6a:c4: 56:ca:97:de:28:00:d3:7e:72:b0:ea:e3:19:e5:8e:a1:94:83: 1f:b7:b6:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kA+ckFVRSBdT0TCWpiLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMWMxMzgyODU4YjBkYzk1YTlhZGJlYTQ3MjhiMzFmOWUy MmMwZDgwHhcNMjUxMjIwMDcwMTE4WhcNMjUxMjIxMDcwMTE4WjAzMTEwLwYDVQQD EyhhMzMxNjQ4NGZiYjFiZmI1YmZjNjU0YWI4NTNjZjk5YjczN2E4ODEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKyE3EeKwM2jgYOG0GVMnOUXDm96 hs8QRUyWDKx8zaaP/vF09j1VKFih4T4nN04MKDbc/dNs2YcR6RpORO9ynwUpTBCP ZR3WlmjRH7mgxTRFREFKLDUzmpnQw7dmXeBlVDNm3z9+0Cle8/zPb79tvVRCZinW A0HxUXVYRVZ9tHHI1hccMuuY+huormD92Pc2+WN7Ghuz1B6rRxGvqvSURlosHyDk AK6wJnrhw7q8GHIudH3xTlDExltZQ3ABZTMctepjUr7QQD3PMq0R5RRPFb26t0qz OQYUS7uID7fEFL1co17PKqRN3dDpauXjCJUeK8k7hGVNLu5ubW5DOpHsNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMxZIT7sb+1v8ZUq4U8+ZtzeogTMB8GA1UdIwQY MBaAFHMcE4KFiw3JWprb6kcosx+eIsDYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xNzJlMGItOGNiYi00MDJlLThmMmMt ODU5NWI0NTAwODg0LzEvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xNzJlMGItOGNiYi00MDJlLThmMmMtODU5NWI0NTAwODg0 LzEvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXAJG2nT 7ZN7/pJhXd6SOnzvFJv86HeeDC9xa4wnHY0aQsBlSQXSOKvvW6Cffd8llCT3Cozq 2/439s+PKl+4Ho5+aaZ112vz0hCiVgvNS1iNnsdGtkwuwQnFwfjyhduXJeNL4gzu vyLKGyZHV2hkDhHYbTTKDvifOLu3eFgzy2ZYZMHKKwFT2AXezM9JY80mYD2EK3Ez dn1274BXFBeTbpIRUGww+PNTpxNbtoLipdUTJs5qj7uRntAf44cCuuWePtstmYPs APPXgtZP5VInaOhBEGcxNJhv3s+gB/gksSIsJPsNjVHXcGrEVsqX3igA035ysOrj GeWOoZSDH7e2FA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:59:24 2025 by rpki-client