This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft File: cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json) Hash identifier: MJ6jic8mqy+7/d83JhM6s15+fhGX2npvj1Du600tTHo= Subject key identifier: 9B:B5:1D:F1:A6:0D:17:5E:0E:89:D7:D6:DC:75:EB:BE:08:0E:BA:6D Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46 Certificate issuer: /CN=7316772efce2a133fb7f8720929d0560cef1db46 Certificate serial: 019B5A88702BB84E256A44EE35927835FB99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft Manifest number: 05A1 Signing time: Fri 26 Dec 2025 12:00:49 +0000 Manifest this update: Fri 26 Dec 2025 12:00:49 +0000 Manifest next update: Sat 27 Dec 2025 12:00:49 +0000 Files and hashes: 1: OFaqwNs5Dyg1d88HTW2H4gncFRI.roa (hash: wFSS58IXWFEAJ1x0fwOpm9Nk9TzQ4SMDP5LPnSI+dzw=) 2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: Ab1H6r3SsTiHm/y4yRpQKiHC6BTXrC1Dx21fHubC9IY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:70:2b:b8:4e:25:6a:44:ee:35:92:78:35:fb:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46 Validity Not Before: Dec 26 12:00:49 2025 GMT Not After : Dec 27 12:00:49 2025 GMT Subject: CN=9bb51df1a60d175e0e89d7d6dc75ebbe080eba6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:cc:55:17:3d:d7:2e:e7:e8:cc:65:8d:d8: 86:ac:49:6f:34:ce:04:44:52:e4:38:2e:e9:a2:f2: 31:ad:d8:19:e6:2a:1e:26:e7:ce:fa:9d:1d:78:2b: 0a:1e:e7:87:1e:75:e2:65:36:e8:88:25:78:8d:1a: 8c:71:5b:3a:19:05:89:e8:15:5d:57:12:54:2f:39: 09:23:81:32:9a:cb:12:55:6f:a2:88:48:3f:8a:c3: 10:14:47:83:81:b7:62:0f:4b:d8:3f:bd:b7:0f:53: 07:e6:bb:16:70:c7:91:46:1f:b9:d8:20:c5:fd:55: 5d:a3:b3:81:ce:25:ee:2b:9b:bf:d6:fc:d3:3a:ae: 0e:ae:ab:f3:e5:85:f3:21:58:e6:fc:ce:e7:ff:d3: d1:ae:a6:b1:a2:03:e0:fc:9d:1b:8e:24:77:ee:81: 5f:06:7c:c4:33:35:d3:6a:ff:8a:f5:f7:3d:ef:a1: 10:86:d7:06:5d:20:50:30:71:25:f4:c1:96:d8:f6: e0:41:29:39:52:d6:c1:79:68:8d:c9:05:48:8a:59: 9c:a5:fc:07:2f:9d:a0:f9:d7:97:e0:04:d3:52:1f: cd:f4:9d:7b:9a:2b:2c:6b:36:72:65:b9:ae:2c:c4: ed:59:ce:13:ba:c2:1e:b7:f9:40:6b:66:36:43:64: b4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B5:1D:F1:A6:0D:17:5E:0E:89:D7:D6:DC:75:EB:BE:08:0E:BA:6D X509v3 Authority Key Identifier: keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:8f:18:e8:87:3b:35:c5:e8:ef:77:0b:34:6f:20:7d:49:e8: 9f:d1:e9:bb:87:00:6b:99:56:39:10:58:e2:bf:68:a6:d8:ea: 2e:51:d0:7a:0c:cf:35:8e:0f:0a:f5:96:f8:64:5c:ab:ef:10: 58:c2:b1:12:81:04:df:47:6e:69:06:c7:ad:b0:68:86:1c:6f: f7:07:d0:e6:78:c5:f7:87:67:39:ff:ff:d3:38:0f:10:3f:2a: d1:ff:92:85:0a:5c:f8:63:e2:cb:27:2b:df:72:56:fa:0a:5d: d9:43:ea:bb:32:09:50:c2:6f:c0:6d:b1:f2:29:de:1c:1b:88: 6b:27:db:5a:b6:94:2c:9e:68:a6:ef:22:e7:80:14:4b:55:c5: 48:55:9c:3b:ac:f6:4d:ae:6f:be:2c:0c:3f:43:fc:01:18:d5: 8f:22:19:0f:6c:58:a4:a0:01:c2:a7:eb:1e:06:76:47:8e:88: 9a:de:8c:bf:86:5b:4b:47:bf:51:bb:eb:9e:4f:58:7b:d8:18: ce:2b:aa:a7:62:e9:50:2e:ce:81:66:81:a4:70:29:f4:54:76: 83:26:78:4b:62:5a:6b:97:dc:81:62:0e:2c:18:ee:4d:59:88: 32:4f:72:6a:f0:71:ce:7e:65:8d:9c:2d:51:0b:58:fd:19:a3: 01:00:ab:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiHAruE4lakTuNZJ4NfuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMTY3NzJlZmNlMmExMzNmYjdmODcyMDkyOWQwNTYwY2Vm MWRiNDYwHhcNMjUxMjI2MTIwMDQ5WhcNMjUxMjI3MTIwMDQ5WjAzMTEwLwYDVQQD Eyg5YmI1MWRmMWE2MGQxNzVlMGU4OWQ3ZDZkYzc1ZWJiZTA4MGViYTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/nMVRc91y7n6MxljdiGrElvNM4E RFLkOC7povIxrdgZ5ioeJufO+p0deCsKHueHHnXiZTboiCV4jRqMcVs6GQWJ6BVd VxJULzkJI4EymssSVW+iiEg/isMQFEeDgbdiD0vYP723D1MH5rsWcMeRRh+52CDF /VVdo7OBziXuK5u/1vzTOq4Orqvz5YXzIVjm/M7n/9PRrqaxogPg/J0bjiR37oFf BnzEMzXTav+K9fc976EQhtcGXSBQMHEl9MGW2PbgQSk5UtbBeWiNyQVIilmcpfwH L52g+deX4ATTUh/N9J17missazZyZbmuLMTtWc4TusIet/lAa2Y2Q2S0wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJu1HfGmDRdeDonX1tx1674IDrptMB8GA1UdIwQY MBaAFHMWdy784qEz+3+HIJKdBWDO8dtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80ZThkNTctNTNjYS00OWM1LTk3ZWYt MWM4NzZkYjQ0ZmUyLzEvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80ZThkNTctNTNjYS00OWM1LTk3ZWYtMWM4NzZkYjQ0ZmUy LzEvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmo8Y6Ic7 NcXo73cLNG8gfUnon9Hpu4cAa5lWORBY4r9optjqLlHQegzPNY4PCvWW+GRcq+8Q WMKxEoEE30duaQbHrbBohhxv9wfQ5njF94dnOf//0zgPED8q0f+ShQpc+GPiyycr 33JW+gpd2UPquzIJUMJvwG2x8ineHBuIayfbWraULJ5opu8i54AUS1XFSFWcO6z2 Ta5vviwMP0P8ARjVjyIZD2xYpKABwqfrHgZ2R46Imt6Mv4ZbS0e/Ubvrnk9Ye9gY ziuqp2LpUC7OgWaBpHAp9FR2gyZ4S2Jaa5fcgWIOLBjuTVmIMk9yavBxzn5ljZwt UQtY/RmjAQCrRA== -----END CERTIFICATE-----Generated at Fri Dec 26 17:58:54 2025 by rpki-client