This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json) Hash identifier: eSeOkpDoiWhmpOP/bq2gz/+0d0L7MPQtTvPFgXv6Hxk= Subject key identifier: 4F:39:A4:E1:09:20:26:0A:2E:00:FF:20:4C:9B:38:23:48:E3:2C:80 Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae Certificate serial: 019B40C922418C642938C53C486B44EBABCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 12:01:21 +0000 Manifest this update: Sun 21 Dec 2025 12:01:21 +0000 Manifest next update: Mon 22 Dec 2025 12:01:21 +0000 Files and hashes: 1: _Z-p7KxUVg6ghEbeseFL-OOEudI.roa (hash: su5vjqQnoBgVAVEbXkHU+T0GhwXhzdquZDKzgBwrhQ4=) 2: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: Tv20ZtHPjirPk4dLPagXcXR4W80CB4iwaazZZYM4oME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:22:41:8c:64:29:38:c5:3c:48:6b:44:eb:ab:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae Validity Not Before: Dec 21 12:01:21 2025 GMT Not After : Dec 22 12:01:21 2025 GMT Subject: CN=4f39a4e10920260a2e00ff204c9b382348e32c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:17:13:2d:83:42:f8:24:65:da:f3:47:a8:25: df:88:7a:1e:97:8c:20:fc:ab:fd:d7:9e:d4:8f:f0: bf:aa:e9:8c:64:46:14:63:b6:25:67:96:74:82:d5: 22:55:d8:82:cf:4d:af:61:49:ad:75:14:eb:c3:20: 65:34:94:6d:62:90:ea:c0:a8:12:d9:ed:ec:35:db: e1:94:18:82:b2:6e:1a:4b:2d:0a:20:c4:90:29:8d: 7c:34:52:8c:ce:e5:f1:7a:0e:34:d1:e6:28:9a:91: 72:82:32:e4:5d:6e:54:9b:de:cb:b4:94:e8:64:87: 43:7f:df:67:0a:83:ab:68:01:8e:4c:19:a2:8d:72: 1b:43:fc:cf:b7:5b:89:69:c3:c8:d2:d6:24:60:9f: e2:2a:7c:ec:f6:bd:37:b4:84:61:5f:4f:45:55:b3: 8a:47:34:0c:e1:2e:ea:90:0e:10:c0:2f:dd:66:fd: 87:d9:11:58:52:b5:d9:4a:57:53:d9:3b:65:a1:98: 99:18:a3:84:10:0e:bb:e0:57:ea:74:f2:28:7a:62: ab:74:d2:9d:5e:df:95:46:80:ae:d0:d7:fc:06:2d: 03:22:5f:7c:f5:f0:fc:ea:05:b8:b3:c9:d8:27:56: cd:76:12:8f:7e:da:82:2b:8c:0f:39:83:df:55:2f: 34:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:39:A4:E1:09:20:26:0A:2E:00:FF:20:4C:9B:38:23:48:E3:2C:80 X509v3 Authority Key Identifier: keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f6:f4:af:2b:9f:fa:1a:71:1e:84:15:84:b4:f0:a5:de:a2: 2d:e6:6b:ea:06:e7:b4:71:2b:2b:d1:9f:56:eb:bd:85:e2:ec: 96:87:4f:32:c6:fc:15:aa:04:6d:41:d9:10:4e:51:17:29:43: 98:cc:80:e5:21:d6:a2:fc:05:49:66:99:63:a1:03:d7:ef:ae: 79:78:66:fb:72:ab:02:c9:10:1c:ed:b5:0f:b7:77:2c:9b:6e: 85:48:f0:29:62:ac:07:6c:bc:af:52:d5:d7:d9:f3:ba:45:67: 65:cd:d5:fd:16:08:a2:3a:1d:91:d5:23:a7:8c:e7:35:28:30: da:da:75:e8:bd:3d:66:02:e2:dd:fe:95:1b:94:78:10:b7:5d: cd:21:a3:92:67:b0:4b:b0:d2:bc:bb:2e:0a:08:6e:d0:1e:9b: 73:76:8b:0f:69:cf:e3:65:50:75:ff:c1:b6:f5:ad:25:d6:92: f6:2c:ae:7e:34:cf:a1:b0:f3:3f:a5:ea:08:6c:f0:ba:9b:12: 12:fe:df:23:ef:2d:48:a5:72:1b:1f:fc:26:6b:65:7e:3e:0a: b8:1c:1e:be:34:d9:5f:0b:c9:3a:dd:8f:a8:06:3a:08:df:65: cd:8f:13:6e:e0:9f:47:ac:f1:d8:59:7f:23:b8:7c:b0:d0:33: 73:80:c8:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAySJBjGQpOMU8SGtE66vNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNzFkOGI0Y2Y2NzczYjU5ZjA3MzJlMGU5ZThkMjVhOWI3 NzNmYWUwHhcNMjUxMjIxMTIwMTIxWhcNMjUxMjIyMTIwMTIxWjAzMTEwLwYDVQQD Eyg0ZjM5YTRlMTA5MjAyNjBhMmUwMGZmMjA0YzliMzgyMzQ4ZTMyYzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBcTLYNC+CRl2vNHqCXfiHoel4wg /Kv9157Uj/C/qumMZEYUY7YlZ5Z0gtUiVdiCz02vYUmtdRTrwyBlNJRtYpDqwKgS 2e3sNdvhlBiCsm4aSy0KIMSQKY18NFKMzuXxeg400eYompFygjLkXW5Um97LtJTo ZIdDf99nCoOraAGOTBmijXIbQ/zPt1uJacPI0tYkYJ/iKnzs9r03tIRhX09FVbOK RzQM4S7qkA4QwC/dZv2H2RFYUrXZSldT2TtloZiZGKOEEA674FfqdPIoemKrdNKd Xt+VRoCu0Nf8Bi0DIl989fD86gW4s8nYJ1bNdhKPftqCK4wPOYPfVS80uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE85pOEJICYKLgD/IEybOCNI4yyAMB8GA1UdIwQY MBaAFHFx2LTPZ3O1nwcy4Ono0lqbdz+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85Nzc4YjYtZGMyYi00NTg2LTkxZGUt NTNhMDczNjhiOWVhLzEvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy85Nzc4YjYtZGMyYi00NTg2LTkxZGUtNTNhMDczNjhiOWVh LzEvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPb0ryuf +hpxHoQVhLTwpd6iLeZr6gbntHErK9GfVuu9heLslodPMsb8FaoEbUHZEE5RFylD mMyA5SHWovwFSWaZY6ED1++ueXhm+3KrAskQHO21D7d3LJtuhUjwKWKsB2y8r1LV 19nzukVnZc3V/RYIojodkdUjp4znNSgw2tp16L09ZgLi3f6VG5R4ELddzSGjkmew S7DSvLsuCghu0B6bc3aLD2nP42VQdf/BtvWtJdaS9iyufjTPobDzP6XqCGzwupsS Ev7fI+8tSKVyGx/8Jmtlfj4KuBwevjTZXwvJOt2PqAY6CN9lzY8TbuCfR6zx2Fl/ I7h8sNAzc4DIdQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:39:01 2025 by rpki-client