This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft File: cBxcPyilwHENvkgp0hbInpQu8Os.mft (raw, json) Hash identifier: uaqySZ/Cgkfn4o/g3PwaOEYLw5VbF9o0FlCiOe/h1bM= Subject key identifier: 1D:97:0F:A5:39:72:A1:61:1B:D1:41:82:7C:31:BC:2F:BB:C2:7E:6B Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB Certificate issuer: /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb Certificate serial: 019B5975EFB928B16E08577D731B1143C81C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 07:00:59 +0000 Manifest this update: Fri 26 Dec 2025 07:00:59 +0000 Manifest next update: Sat 27 Dec 2025 07:00:59 +0000 Files and hashes: 1: Ke6BIcKr553RdNTHAAiP-pm7d4U.roa (hash: YC8hk6oKhl67AQI7JSOSYdAfbuzkCnLEvEUsrgjHG4c=) 2: cBxcPyilwHENvkgp0hbInpQu8Os.crl (hash: 3QVYGCkrL2p5QfrZH89/3dZeHCnQENN9tEf3Q0P1zCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:ef:b9:28:b1:6e:08:57:7d:73:1b:11:43:c8:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb Validity Not Before: Dec 26 07:00:59 2025 GMT Not After : Dec 27 07:00:59 2025 GMT Subject: CN=1d970fa53972a1611bd141827c31bc2fbbc27e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d5:53:8f:c9:07:ba:74:95:a9:7c:26:cc:04: b1:a1:a4:00:2f:ea:c9:1d:5f:65:19:7d:a5:49:da: 0b:f9:e5:31:5a:6d:3c:8e:7d:db:ab:e3:d3:b4:ba: 6f:02:ab:33:c4:d8:df:35:9e:d6:d4:b9:95:a0:7d: 45:e4:3b:ca:74:6f:6c:31:c5:77:68:f0:8e:f5:2b: df:64:6c:9a:23:a6:6f:44:28:28:8c:b3:c0:f3:02: 5b:2d:7b:92:93:a5:c6:06:34:0f:5b:77:42:2f:a3: fd:28:8c:27:46:ff:11:11:2f:27:55:6b:94:fc:31: ae:f3:ac:90:71:b9:78:73:ba:a9:76:20:4a:2f:3d: a6:1b:84:40:14:62:aa:1c:5a:cd:44:af:c7:02:73: fc:ce:66:c1:5d:49:4b:b9:1f:42:05:44:ce:89:72: 6a:7a:c2:14:04:79:8e:1d:e0:cc:9b:30:41:58:49: e8:5a:b1:4f:a4:a0:7d:fc:08:23:de:2b:17:63:08: 51:7b:cc:9f:6c:3b:bb:fd:63:dc:60:82:3a:bd:eb: 67:23:1b:38:95:60:64:5c:8a:2d:35:e9:0f:cd:9a: e2:43:78:f6:3a:19:dc:f0:3a:32:c8:cf:fe:9a:c3: b2:55:be:2e:66:00:ee:23:a1:05:14:18:9f:ca:f6: 93:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:97:0F:A5:39:72:A1:61:1B:D1:41:82:7C:31:BC:2F:BB:C2:7E:6B X509v3 Authority Key Identifier: keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:c2:9d:27:f3:d5:d9:5f:6f:73:7c:75:97:d4:d6:af:e0:09: 7a:e8:e6:f3:20:27:99:d0:29:6d:fb:d1:14:9a:cf:d3:4f:42: 46:b1:95:21:7c:d4:df:d1:9d:09:87:be:00:30:ed:fa:c5:48: 94:f9:42:7b:38:09:9c:ff:f9:a0:64:3e:16:aa:35:f0:1d:d6: 73:35:d4:07:c2:68:70:fd:4f:a1:ba:e7:99:d8:3a:27:fd:c4: 16:9f:26:e3:39:b5:60:d3:01:fe:bb:a6:16:9f:68:20:36:e2: f8:38:95:e3:fb:81:e5:9a:87:f0:13:41:c9:23:48:06:51:e7: df:b7:11:f7:f1:f7:a1:b1:0f:0e:ca:9e:c8:4e:8a:38:c6:40: da:af:57:2a:05:da:b5:d6:00:77:39:fd:28:7b:d0:af:1b:f4: 82:0a:49:43:5e:8a:80:be:d7:66:22:b2:6d:31:4a:20:f5:90: 7f:a0:b3:bd:f7:9f:d9:4b:68:8c:97:92:c1:36:fc:11:d4:d0: 25:70:4d:a6:b5:04:05:e7:9a:19:36:72:0c:f8:4a:ee:ff:8d: 85:17:32:a9:2f:2c:ab:a4:2b:22:b5:ca:52:35:2f:16:5a:10: 08:6e:a4:b5:76:0b:dc:2c:97:2d:f5:00:ba:71:07:0d:39:c1: 37:ab:ae:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZde+5KLFuCFd9cxsRQ8gcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMWM1YzNmMjhhNWMwNzEwZGJlNDgyOWQyMTZjODllOTQy ZWYwZWIwHhcNMjUxMjI2MDcwMDU5WhcNMjUxMjI3MDcwMDU5WjAzMTEwLwYDVQQD EygxZDk3MGZhNTM5NzJhMTYxMWJkMTQxODI3YzMxYmMyZmJiYzI3ZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtVTj8kHunSVqXwmzASxoaQAL+rJ HV9lGX2lSdoL+eUxWm08jn3bq+PTtLpvAqszxNjfNZ7W1LmVoH1F5DvKdG9sMcV3 aPCO9SvfZGyaI6ZvRCgojLPA8wJbLXuSk6XGBjQPW3dCL6P9KIwnRv8RES8nVWuU /DGu86yQcbl4c7qpdiBKLz2mG4RAFGKqHFrNRK/HAnP8zmbBXUlLuR9CBUTOiXJq esIUBHmOHeDMmzBBWEnoWrFPpKB9/Agj3isXYwhRe8yfbDu7/WPcYII6vetnIxs4 lWBkXIotNekPzZriQ3j2Ohnc8DoyyM/+msOyVb4uZgDuI6EFFBifyvaTDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2XD6U5cqFhG9FBgnwxvC+7wn5rMB8GA1UdIwQY MBaAFHAcXD8opcBxDb5IKdIWyJ6ULvDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0J4Y1B5aWx3SEVOdmtncDBoYklucFF1OE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mYWM5MjEtZjU1Mi00YThhLThiNDkt NGZhOTg2MDFhZThjLzEvY0J4Y1B5aWx3SEVOdmtncDBoYklucFF1OE9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mYWM5MjEtZjU1Mi00YThhLThiNDktNGZhOTg2MDFhZThj LzEvY0J4Y1B5aWx3SEVOdmtncDBoYklucFF1OE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA08KdJ/PV 2V9vc3x1l9TWr+AJeujm8yAnmdApbfvRFJrP009CRrGVIXzU39GdCYe+ADDt+sVI lPlCezgJnP/5oGQ+Fqo18B3WczXUB8JocP1Pobrnmdg6J/3EFp8m4zm1YNMB/rum Fp9oIDbi+DiV4/uB5ZqH8BNBySNIBlHn37cR9/H3obEPDsqeyE6KOMZA2q9XKgXa tdYAdzn9KHvQrxv0ggpJQ16KgL7XZiKybTFKIPWQf6Czvfef2UtojJeSwTb8EdTQ JXBNprUEBeeaGTZyDPhK7v+NhRcyqS8sq6QrIrXKUjUvFloQCG6ktXYL3CyXLfUA unEHDTnBN6uuWA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:45 2025 by rpki-client