This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json) Hash identifier: E4xer/n2bB7UrsAuKzRbVAMdGMFa4Lcn8i/DMd72IO4= Subject key identifier: 43:9E:46:78:76:63:B9:09:75:3A:7F:3C:85:93:5D:08:AD:8D:B0:62 Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9 Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9 Certificate serial: 019B3C7E9CD072F46CBB1CBE6415514E249C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft Manifest number: 0748 Signing time: Sat 20 Dec 2025 16:01:29 +0000 Manifest this update: Sat 20 Dec 2025 16:01:29 +0000 Manifest next update: Sun 21 Dec 2025 16:01:29 +0000 Files and hashes: 1: 4vVSxg0KLKszb_U4S9rSdoaFOw8.roa (hash: RPAXRjtOt5jMNeEYJ4PrQAbbA73WZ8/bw4emEczQVts=) 2: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: TV6HlLCq32xF+3PdglPVHS2m0htxNMwkTzBYSh744QY=) 3: t3uXJVNYIcETNH2wbIt0kGmTa3E.roa (hash: TpjYWQB/dEWPF8i95tLxQWL3noXfiwIkXuk9Gm2aR3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:9c:d0:72:f4:6c:bb:1c:be:64:15:51:4e:24:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9 Validity Not Before: Dec 20 16:01:29 2025 GMT Not After : Dec 21 16:01:29 2025 GMT Subject: CN=439e46787663b909753a7f3c85935d08ad8db062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:67:f7:0a:5f:2b:bc:18:d0:fa:f8:9f:e4: 61:7c:2d:99:90:a1:17:46:17:e1:4c:9d:c1:80:9f: 76:96:fb:29:65:1e:b4:e6:cf:ee:13:ba:c9:d4:76: 6d:e0:35:26:b0:02:5c:82:bc:fd:cc:9b:cf:6b:4d: 1f:10:7a:32:07:24:11:3e:bf:a3:bf:1f:18:2e:b8: 37:45:72:69:b3:c3:c3:52:12:9e:69:26:8b:50:c9: 80:04:88:76:1c:a6:07:e2:ac:5c:02:4e:dd:a2:8c: 12:b6:43:7d:c0:c0:42:41:fe:3d:33:dc:04:16:00: 9f:b4:55:96:d6:74:b7:ef:87:d6:49:6f:72:2a:46: 68:79:38:4c:49:89:2d:d4:a4:5a:a5:56:1c:66:05: 36:94:c6:09:44:a0:e5:3e:d8:a8:37:89:35:5a:df: 0a:04:a3:d8:7c:90:dc:e8:0b:12:58:bc:64:22:9e: b5:48:33:be:34:92:4f:1d:6b:95:33:ce:91:8d:4a: 2e:8e:10:df:d5:d1:f7:e2:5c:ba:c4:c9:91:bb:24: 9f:36:e8:d7:cb:2a:f1:fe:5c:31:68:bf:64:90:01: 32:78:bd:ab:f7:0e:6c:65:04:ab:36:87:d8:21:4a: c8:cc:a7:67:46:78:10:e4:d4:c0:f7:ce:a0:39:bf: dd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9E:46:78:76:63:B9:09:75:3A:7F:3C:85:93:5D:08:AD:8D:B0:62 X509v3 Authority Key Identifier: keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ef:c1:33:cb:26:2c:ef:b8:f7:13:fc:62:99:fa:45:42:be: 79:a8:7a:a5:a9:98:1e:2a:05:8e:89:fd:cd:23:0f:0f:61:41: 88:a2:8b:c9:d5:39:70:be:8d:db:2f:a5:41:4a:a0:9f:2e:a1: a7:34:43:8d:ee:39:8d:29:90:61:7d:e5:4e:fb:2c:8f:f9:0b: a1:c5:b5:65:5e:77:32:25:85:fe:3e:cf:69:10:a1:fa:1e:c0: c1:22:99:56:1c:49:d6:ff:96:fa:6a:92:28:a5:d3:de:40:68: 0f:39:b1:c6:d0:ba:19:37:d1:3b:b4:26:11:e4:19:a5:94:a8: 1a:a2:ac:19:92:13:99:f2:35:a3:d6:e7:cf:a2:4f:bb:bc:8d: 1e:71:d8:5f:4a:11:65:ce:5b:c4:7f:80:67:54:66:d2:d6:12: 63:49:d4:e5:e9:f6:10:37:05:75:8b:54:96:20:22:55:4c:58: 9c:1c:57:78:f4:e2:e7:ea:e4:9f:3b:5b:96:05:54:ab:ea:ce: 78:2c:d3:75:6f:92:33:c8:ec:a0:74:18:dd:37:09:a9:1e:73: 1f:3f:be:85:d6:e4:c3:27:cf:a1:32:f7:92:af:e5:b0:44:50: 6f:d5:ec:52:36:77:17:89:77:51:49:ba:ee:84:54:b9:6d:8c: c2:b3:cb:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fpzQcvRsuxy+ZBVRTiScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMTkzNjI4MWI4NjcwN2EwNWQ1NWEwMWY4OGIyZTY1M2Q3 YjNlZTkwHhcNMjUxMjIwMTYwMTI5WhcNMjUxMjIxMTYwMTI5WjAzMTEwLwYDVQQD Eyg0MzllNDY3ODc2NjNiOTA5NzUzYTdmM2M4NTkzNWQwOGFkOGRiMDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssln9wpfK7wY0Pr4n+RhfC2ZkKEX RhfhTJ3BgJ92lvspZR605s/uE7rJ1HZt4DUmsAJcgrz9zJvPa00fEHoyByQRPr+j vx8YLrg3RXJps8PDUhKeaSaLUMmABIh2HKYH4qxcAk7doowStkN9wMBCQf49M9wE FgCftFWW1nS374fWSW9yKkZoeThMSYkt1KRapVYcZgU2lMYJRKDlPtioN4k1Wt8K BKPYfJDc6AsSWLxkIp61SDO+NJJPHWuVM86RjUoujhDf1dH34ly6xMmRuySfNujX yyrx/lwxaL9kkAEyeL2r9w5sZQSrNofYIUrIzKdnRngQ5NTA986gOb/dDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOeRnh2Y7kJdTp/PIWTXQitjbBiMB8GA1UdIwQY MBaAFAsZNigbhnB6BdVaAfiLLmU9ez7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hrMktCdUdjSG9GMVZvQi1Jc3VaVDE3UHVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84NWVlMDItNmY0My00OTI3LWFiNWQt ZWQ1N2IyNGI0NDY1LzEvQ3hrMktCdUdjSG9GMVZvQi1Jc3VaVDE3UHVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi84NWVlMDItNmY0My00OTI3LWFiNWQtZWQ1N2IyNGI0NDY1 LzEvQ3hrMktCdUdjSG9GMVZvQi1Jc3VaVDE3UHVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAu/BM8sm LO+49xP8Ypn6RUK+eah6pamYHioFjon9zSMPD2FBiKKLydU5cL6N2y+lQUqgny6h pzRDje45jSmQYX3lTvssj/kLocW1ZV53MiWF/j7PaRCh+h7AwSKZVhxJ1v+W+mqS KKXT3kBoDzmxxtC6GTfRO7QmEeQZpZSoGqKsGZITmfI1o9bnz6JPu7yNHnHYX0oR Zc5bxH+AZ1Rm0tYSY0nU5en2EDcFdYtUliAiVUxYnBxXePTi5+rknztblgVUq+rO eCzTdW+SM8jsoHQY3TcJqR5zHz++hdbkwyfPoTL3kq/lsERQb9XsUjZ3F4l3UUm6 7oRUuW2MwrPLog== -----END CERTIFICATE-----Generated at Sat Dec 20 21:15:32 2025 by rpki-client