This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json) Hash identifier: 3KuoweBJzAj9OFkxA9V7kqsdJioBzVXflMew5yM7HT8= Subject key identifier: 31:77:22:45:BB:DC:19:24:B8:A8:CC:8F:E2:04:70:2A:92:9C:2C:81 Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48 Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48 Certificate serial: 019B4249E40A8D16714CF8D53175C01DF4B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft Manifest number: 109C Signing time: Sun 21 Dec 2025 19:01:37 +0000 Manifest this update: Sun 21 Dec 2025 19:01:37 +0000 Manifest next update: Mon 22 Dec 2025 19:01:37 +0000 Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: DqCF2D/PEAoa7wo8ldvC9DSbzmd8TkvbaDokRogwbn0=) 2: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (hash: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:e4:0a:8d:16:71:4c:f8:d5:31:75:c0:1d:f4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48 Validity Not Before: Dec 21 19:01:37 2025 GMT Not After : Dec 22 19:01:37 2025 GMT Subject: CN=31772245bbdc1924b8a8cc8fe204702a929c2c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:55:9e:48:fb:25:be:67:4f:a6:9f:25:ca: 22:9b:94:fa:1a:30:92:38:9b:c5:2c:36:f1:71:cb: 3e:3e:37:85:7d:91:f4:8e:a1:da:90:d5:31:58:c6: 69:7e:7a:ee:63:3e:9b:27:d1:f3:86:34:ee:6e:da: 94:cf:c3:41:2c:a0:8e:63:76:a1:8a:90:3a:85:a8: 94:71:be:b7:0b:ad:f1:21:47:70:77:3d:a1:50:45: ab:1a:8e:07:46:72:32:c0:de:17:10:c4:c0:32:19: ee:84:cc:6e:5f:69:61:f6:74:6a:62:86:66:f1:a4: bc:9e:0e:32:b7:3d:37:41:60:2b:cc:4a:69:ef:2a: 89:ab:48:7b:24:bc:df:79:c0:9d:ff:55:b9:68:0b: d5:5a:c7:ab:88:c3:74:23:a4:86:6e:09:a7:d7:d0: ea:89:15:bd:f8:0f:10:0f:81:65:2e:82:69:aa:ae: 81:f2:e2:8c:61:ff:e2:cb:23:46:a7:54:be:81:a9: fa:1e:80:73:62:c9:50:42:9d:f6:5f:0e:9e:40:e5: 48:31:cb:1d:4f:f6:d1:23:7d:c0:b2:56:cf:80:95: 81:a2:1e:a4:0d:a6:25:09:70:55:0c:a1:55:55:85: 22:ad:e9:7f:67:b6:f7:ca:cf:29:bf:ca:2c:92:e4: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:77:22:45:BB:DC:19:24:B8:A8:CC:8F:E2:04:70:2A:92:9C:2C:81 X509v3 Authority Key Identifier: keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e5:da:47:11:32:ba:39:a8:65:66:fa:df:8d:ad:88:7b:ab: 79:bd:33:64:05:2c:07:8a:3c:f1:19:ea:1b:57:c9:eb:4c:25: fb:f1:48:79:b8:71:47:80:4b:18:62:d8:d0:c5:59:60:83:2a: 25:32:df:98:a7:f9:9a:ff:13:d9:8c:27:d3:0c:60:fe:ee:7d: 4b:c3:5b:e7:79:79:be:b5:cd:2c:6d:86:36:3f:2f:f7:82:c8: ea:e4:70:fc:58:f8:1e:50:13:cf:98:64:b0:50:6d:bd:62:e2: b2:f9:10:73:38:cf:c8:b4:28:bb:d5:6c:99:69:28:fd:c1:72: 61:ea:bc:2c:3c:16:68:6b:1e:35:e0:35:eb:95:9d:25:91:66: 7f:d2:b7:73:b3:92:dc:62:6d:e3:a7:b0:df:55:19:3d:dd:b5: b4:47:a0:f9:75:93:c4:bc:03:79:3a:4a:c2:6f:42:e8:d6:01: 11:b1:93:5f:e0:31:ed:55:c2:c2:aa:2c:d2:2d:3b:af:86:ff: e5:42:39:a1:c1:ec:dc:dc:ad:fe:35:53:8f:d8:26:8c:a1:48: 61:55:58:4b:07:f4:79:33:60:44:bc:34:b6:60:50:87:aa:75: a3:0e:e3:a1:df:7c:17:26:6a:19:3e:c3:d2:cf:18:e5:ca:55: 7c:c4:6a:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSeQKjRZxTPjVMXXAHfS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YWFkMTdiMTA2Nzc1ZTQ4NGY2MWViYjVlYzEwNGMyN2Mx ODdlNDgwHhcNMjUxMjIxMTkwMTM3WhcNMjUxMjIyMTkwMTM3WjAzMTEwLwYDVQQD EygzMTc3MjI0NWJiZGMxOTI0YjhhOGNjOGZlMjA0NzAyYTkyOWMyYzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaJVnkj7Jb5nT6afJcoim5T6GjCS OJvFLDbxccs+PjeFfZH0jqHakNUxWMZpfnruYz6bJ9HzhjTubtqUz8NBLKCOY3ah ipA6haiUcb63C63xIUdwdz2hUEWrGo4HRnIywN4XEMTAMhnuhMxuX2lh9nRqYoZm 8aS8ng4ytz03QWArzEpp7yqJq0h7JLzfecCd/1W5aAvVWseriMN0I6SGbgmn19Dq iRW9+A8QD4FlLoJpqq6B8uKMYf/iyyNGp1S+gan6HoBzYslQQp32Xw6eQOVIMcsd T/bRI33AslbPgJWBoh6kDaYlCXBVDKFVVYUirel/Z7b3ys8pv8oskuQ1vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDF3IkW73BkkuKjMj+IEcCqSnCyBMB8GA1UdIwQY MBaAFAmq0XsQZ3XkhPYeu17BBMJ8GH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS84MmZiMWQtZjRmNC00MzZhLWE5OTMt YjRhMTcwMGYyMTcyLzEvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS84MmZiMWQtZjRmNC00MzZhLWE5OTMtYjRhMTcwMGYyMTcy LzEvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOXaRxEy ujmoZWb6342tiHureb0zZAUsB4o88RnqG1fJ60wl+/FIebhxR4BLGGLY0MVZYIMq JTLfmKf5mv8T2Ywn0wxg/u59S8Nb53l5vrXNLG2GNj8v94LI6uRw/Fj4HlATz5hk sFBtvWLisvkQczjPyLQou9VsmWko/cFyYeq8LDwWaGseNeA165WdJZFmf9K3c7OS 3GJt46ew31UZPd21tEeg+XWTxLwDeTpKwm9C6NYBEbGTX+Ax7VXCwqos0i07r4b/ 5UI5ocHs3Nyt/jVTj9gmjKFIYVVYSwf0eTNgRLw0tmBQh6p1ow7jod98FyZqGT7D 0s8Y5cpVfMRqxQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:05 2025 by rpki-client