This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json) Hash identifier: bhqTuT5VyOBPhdxBEFFv3Mx0WQ/LYcx1B3teYgISRbM= Subject key identifier: ED:3D:A4:33:2C:27:BC:B1:DA:7E:CE:F4:81:D4:25:70:F2:B3:DF:D4 Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c Certificate serial: 019B3CEBD224F9F4FF2F86C1184F6EA2EE1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 18:00:46 +0000 Manifest this update: Sat 20 Dec 2025 18:00:46 +0000 Manifest next update: Sun 21 Dec 2025 18:00:46 +0000 Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: D4uUWKiFJm5PyLlWVx7Fn5EGSdODIorwdgpDwqA8Ixk=) 2: LYov3s-RBNegs9sCI5mzwI0B-OM.roa (hash: Q5JNZZskubtUF3draKhRYhTL06FaQ8LhpyPNSVMlulo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:d2:24:f9:f4:ff:2f:86:c1:18:4f:6e:a2:ee:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097e05516fc8793406868b8109e3c044b702716c Validity Not Before: Dec 20 18:00:46 2025 GMT Not After : Dec 21 18:00:46 2025 GMT Subject: CN=ed3da4332c27bcb1da7ecef481d42570f2b3dfd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:d4:74:46:dc:16:db:72:d8:80:c2:04:47: 04:0d:13:ef:f1:26:d4:d9:63:50:5e:da:47:7b:ed: 18:fe:d3:af:a7:0e:49:15:67:67:fd:bf:db:a5:4e: 6e:03:53:55:54:42:00:9e:67:b1:6d:9a:03:ac:85: f1:9e:b3:28:b3:27:f8:ed:cd:50:a2:30:ed:e5:58: d9:76:d6:b1:ed:43:c2:7e:08:93:9a:62:10:ab:7d: 98:d7:d2:a4:44:b3:9a:e1:03:13:29:1e:46:cc:b0: 0a:22:1c:79:e2:53:79:36:1f:5b:16:de:4a:f0:14: 74:69:c2:c0:a2:52:bc:cb:d0:d7:92:92:29:2d:42: e8:1e:8f:68:8d:a1:32:0f:9d:34:dc:ad:ab:29:18: 10:da:19:19:8d:fb:5c:ad:9e:84:b1:ed:01:8d:41: aa:43:44:5b:38:d0:8a:93:9f:59:3e:67:fd:8d:54: e6:5e:26:51:7f:2e:67:72:9f:ae:ab:b3:89:eb:a8: 8f:88:b5:67:8f:8e:90:73:ca:9b:aa:a8:3f:76:1b: 2b:d6:c5:c2:cb:78:91:f0:71:24:4d:62:ad:cb:43: ee:c9:17:8b:d3:aa:5d:5c:73:59:59:4d:6c:ef:b9: f4:fa:9c:c1:a3:39:28:d4:83:d2:a9:b0:34:a3:eb: b1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3D:A4:33:2C:27:BC:B1:DA:7E:CE:F4:81:D4:25:70:F2:B3:DF:D4 X509v3 Authority Key Identifier: keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7c:43:53:e8:4f:01:69:d3:e7:d6:f9:05:fd:fd:4a:3e:d5: 3e:0c:5b:e3:3e:ae:fe:9e:bc:e7:46:a6:80:4e:f9:15:ca:58: 49:8c:6e:27:e2:1f:99:f2:cb:f4:10:ca:4b:ed:2a:16:59:83: 1e:2a:e1:ae:db:e0:80:1a:26:98:46:98:21:95:de:06:6a:ca: 81:be:ca:83:1f:79:20:69:43:3e:b6:14:fb:ff:ce:ed:6a:a5: 0c:bc:b5:d7:ee:8b:68:01:ac:63:27:fb:b2:ab:d4:89:fc:df: c9:85:f0:c1:8d:f1:05:b2:e9:05:dd:af:69:5e:99:c4:8e:3b: b6:8e:60:a3:5f:fe:90:7a:c4:43:fa:98:2f:2d:82:5f:b0:55: 9e:91:89:c4:75:ab:07:00:eb:9a:98:2f:ce:dd:85:c7:6f:5a: 19:04:06:58:1c:28:f8:af:67:d6:05:32:ea:7e:be:f3:48:bf: 57:81:20:b9:48:d6:98:30:b8:e7:d6:f5:68:16:a1:b0:c1:49: a5:16:82:49:a8:93:e8:ab:64:6a:56:d9:01:51:dd:3c:d6:d5: 82:f1:b3:6d:d7:08:ad:cd:81:b0:d0:e4:b7:cb:90:39:3e:c1: ad:93:9d:73:06:b9:ea:3a:f9:e0:4c:c8:02:32:7c:c7:38:e6: 32:b8:41:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869Ik+fT/L4bBGE9uou4aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5N2UwNTUxNmZjODc5MzQwNjg2OGI4MTA5ZTNjMDQ0Yjcw MjcxNmMwHhcNMjUxMjIwMTgwMDQ2WhcNMjUxMjIxMTgwMDQ2WjAzMTEwLwYDVQQD EyhlZDNkYTQzMzJjMjdiY2IxZGE3ZWNlZjQ4MWQ0MjU3MGYyYjNkZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgzUdEbcFtty2IDCBEcEDRPv8SbU 2WNQXtpHe+0Y/tOvpw5JFWdn/b/bpU5uA1NVVEIAnmexbZoDrIXxnrMosyf47c1Q ojDt5VjZdtax7UPCfgiTmmIQq32Y19KkRLOa4QMTKR5GzLAKIhx54lN5Nh9bFt5K 8BR0acLAolK8y9DXkpIpLULoHo9ojaEyD5003K2rKRgQ2hkZjftcrZ6Ese0BjUGq Q0RbONCKk59ZPmf9jVTmXiZRfy5ncp+uq7OJ66iPiLVnj46Qc8qbqqg/dhsr1sXC y3iR8HEkTWKty0PuyReL06pdXHNZWU1s77n0+pzBozko1IPSqbA0o+uxWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO09pDMsJ7yx2n7O9IHUJXDys9/UMB8GA1UdIwQY MBaAFAl+BVFvyHk0BoaLgQnjwES3AnFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hNTAzNzItZGEzOS00ODJlLTlhZDQt MzBiZWNmYzFiMzExLzEvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9hNTAzNzItZGEzOS00ODJlLTlhZDQtMzBiZWNmYzFiMzEx LzEvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenxDU+hP AWnT59b5Bf39Sj7VPgxb4z6u/p6850amgE75FcpYSYxuJ+IfmfLL9BDKS+0qFlmD HirhrtvggBommEaYIZXeBmrKgb7Kgx95IGlDPrYU+//O7WqlDLy11+6LaAGsYyf7 sqvUifzfyYXwwY3xBbLpBd2vaV6ZxI47to5go1/+kHrEQ/qYLy2CX7BVnpGJxHWr BwDrmpgvzt2Fx29aGQQGWBwo+K9n1gUy6n6+80i/V4EguUjWmDC459b1aBahsMFJ pRaCSaiT6KtkalbZAVHdPNbVgvGzbdcIrc2BsNDkt8uQOT7BrZOdcwa56jr54EzI AjJ8xzjmMrhBZw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:26:14 2025 by rpki-client