This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json) Hash identifier: /8dakI5FwdUd5xJXZqegmak1t3z9ShZK3slf+9fR9Ig= Subject key identifier: 1E:EA:B5:48:40:C1:65:48:A0:EB:B1:D0:2B:F5:5F:3F:51:D9:A6:B6 Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f Certificate serial: 019B19BAE6097A16F8801ACE073DE15A6D34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft Manifest number: 11A7 Signing time: Sat 13 Dec 2025 22:00:37 +0000 Manifest this update: Sat 13 Dec 2025 22:00:37 +0000 Manifest next update: Sun 14 Dec 2025 22:00:37 +0000 Files and hashes: 1: 5kIp4bFmAr9lOCjBtU4-CSX7D0w.roa (hash: zS6XZLioq/dFM9rTCOe5dC9siPtnmQmcYc9glHbFesE=) 2: WZoVc8N-YD-8FMKAITneTMD8_4k.roa (hash: d546sm0t0rb46HppUnfY7MCyS/rnnp2kV23n3HY9/us=) 3: bZJxdCs0gWqYryxwQS8EGlLZ93c.roa (hash: ZMF+prTjcHa6DFcnagp286MUC0TlcS1uVKhgY1MMJNc=) 4: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: nsu4J6s37undIkNHMwELcDNCY02ZRm5YpYYw9VYiDGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:ba:e6:09:7a:16:f8:80:1a:ce:07:3d:e1:5a:6d:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f Validity Not Before: Dec 13 22:00:37 2025 GMT Not After : Dec 14 22:00:37 2025 GMT Subject: CN=1eeab54840c16548a0ebb1d02bf55f3f51d9a6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2d:22:c2:7a:f9:66:dc:86:ac:77:13:fb:f1: ab:c8:ab:be:c6:67:69:1c:23:78:1c:66:18:c5:ba: 7d:0b:2e:9d:3f:da:ab:55:3c:af:6b:f5:1a:72:18: da:65:92:81:69:87:70:22:f8:25:bd:56:9f:82:d1: 01:db:6b:6c:bd:84:b8:62:99:44:58:57:90:e9:f3: b5:d4:c8:30:7f:d6:c0:7c:19:7b:14:fa:9a:68:ac: 1e:d9:68:4f:57:64:e1:01:5b:b5:5f:fb:25:5e:01: 36:9e:3c:1f:fa:62:2b:5e:23:a6:7d:d7:1b:3b:87: 42:54:fb:b9:32:0a:04:7f:3b:e5:14:b6:f4:e1:4b: 70:17:00:7d:e5:7d:42:33:1e:d9:d6:31:c8:a8:56: cc:7b:21:56:9e:38:d1:7e:9a:6d:ab:02:77:52:35: 88:63:71:9b:3b:d2:db:01:10:97:ed:90:a6:1a:7c: b7:35:60:ba:65:27:2b:2f:ef:fd:ba:ab:ec:27:9d: 5e:cf:0c:40:7e:b2:f5:92:52:81:6f:e0:d3:8a:8a: dd:38:75:23:b6:cb:7c:54:b9:8a:88:b7:46:53:a9: ab:c1:23:f2:d3:94:44:25:c5:85:ac:fd:23:8e:84: ce:81:21:e7:4f:a0:b0:5f:97:13:b2:e5:02:f3:8e: 9a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:EA:B5:48:40:C1:65:48:A0:EB:B1:D0:2B:F5:5F:3F:51:D9:A6:B6 X509v3 Authority Key Identifier: keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:56:0d:ff:98:d0:d3:5a:b1:6d:19:34:c7:a9:f0:35:7e:b1: 1f:36:d5:ea:67:43:2e:b6:d4:25:b5:67:95:c6:3b:64:76:d4: aa:69:dd:54:31:fa:43:bf:32:93:d5:bb:25:41:23:20:4c:37: 9a:f9:e0:50:d0:61:7f:1d:f9:ce:df:4c:b6:8b:56:12:5b:58: 99:35:56:b8:fb:b3:b6:e4:3c:13:3e:24:0a:be:74:65:0d:05: 52:2d:2a:57:b2:5e:ef:39:e9:cf:c2:44:83:ef:77:c7:cd:ee: 2d:4e:48:1c:7f:47:9f:2e:e8:e8:35:69:0f:86:2b:83:ae:51: 55:57:f7:9d:08:72:4a:e2:bf:98:76:3c:c7:89:5f:f1:6e:ad: c8:de:19:1f:d7:82:85:27:b7:1a:8e:71:23:76:36:b4:f1:e7: 50:4c:d3:9e:20:ab:8a:4a:a3:74:05:d4:45:bd:68:46:79:d7: 38:67:90:dc:b3:80:8b:ef:8f:ef:5b:54:a8:7f:cb:6b:ec:1c: 57:fd:ef:ea:ae:da:96:59:df:f1:cf:64:2d:fc:38:5c:ae:d1: 59:4e:3c:cb:93:e1:28:ef:b7:ba:4a:d4:41:7c:ef:7d:0f:4b: 2e:0c:32:b5:0f:ee:21:3b:8d:c0:89:2a:5c:5f:4f:a9:7e:c0: cc:1c:02:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuuYJehb4gBrOBz3hWm00MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMWQ5YWQ0MDRlY2RhZmE3MGVhOWE0YzlkMTBiOTgwMTgy OWVhMWYwHhcNMjUxMjEzMjIwMDM3WhcNMjUxMjE0MjIwMDM3WjAzMTEwLwYDVQQD EygxZWVhYjU0ODQwYzE2NTQ4YTBlYmIxZDAyYmY1NWYzZjUxZDlhNmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS0iwnr5ZtyGrHcT+/GryKu+xmdp HCN4HGYYxbp9Cy6dP9qrVTyva/UachjaZZKBaYdwIvglvVafgtEB22tsvYS4YplE WFeQ6fO11Mgwf9bAfBl7FPqaaKwe2WhPV2ThAVu1X/slXgE2njwf+mIrXiOmfdcb O4dCVPu5MgoEfzvlFLb04UtwFwB95X1CMx7Z1jHIqFbMeyFWnjjRfpptqwJ3UjWI Y3GbO9LbARCX7ZCmGny3NWC6ZScrL+/9uqvsJ51ezwxAfrL1klKBb+DTiordOHUj tst8VLmKiLdGU6mrwSPy05REJcWFrP0jjoTOgSHnT6CwX5cTsuUC846aKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7qtUhAwWVIoOux0Cv1Xz9R2aa2MB8GA1UdIwQY MBaAFHMdmtQE7Nr6cOqaTJ0QuYAYKeofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYt ZTIwYTY1NGZjYTk1LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYtZTIwYTY1NGZjYTk1 LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFYN/5jQ 01qxbRk0x6nwNX6xHzbV6mdDLrbUJbVnlcY7ZHbUqmndVDH6Q78yk9W7JUEjIEw3 mvngUNBhfx35zt9MtotWEltYmTVWuPuztuQ8Ez4kCr50ZQ0FUi0qV7Je7znpz8JE g+93x83uLU5IHH9Hny7o6DVpD4Yrg65RVVf3nQhySuK/mHY8x4lf8W6tyN4ZH9eC hSe3Go5xI3Y2tPHnUEzTniCrikqjdAXURb1oRnnXOGeQ3LOAi++P71tUqH/La+wc V/3v6q7allnf8c9kLfw4XK7RWU48y5PhKO+3ukrUQXzvfQ9LLgwytQ/uITuNwIkq XF9PqX7AzBwCyg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:47:45 2025 by rpki-client