This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft File: CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json) Hash identifier: sAmfhIYvWVItpcHhcHIIl1YSImn4YYEnUA6jYYvWtQA= Subject key identifier: B5:6B:C9:28:03:6D:26:CE:A9:FB:4D:FA:57:5B:10:81:79:A0:79:99 Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df Certificate serial: 019B20CFFBE9D818050D46D5C719EB6EAB06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft Manifest number: 1716 Signing time: Mon 15 Dec 2025 07:00:59 +0000 Manifest this update: Mon 15 Dec 2025 07:00:59 +0000 Manifest next update: Tue 16 Dec 2025 07:00:59 +0000 Files and hashes: 1: 4R0hMhGbrDC4YVyzf1jrL8oQuI4.roa (hash: TLs9gVQTwy70mjzgj5kCuIcV2uNBgbxlOI07lSwnnow=) 2: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: YioJ2x9iS0rF7qabcODNHldYAcLrsjzO1svurTCdP6Y=) 3: cIX-WWQe1eTYBa5AEDfKv3ZFbSs.roa (hash: KXI7i+vv4GJ48vExO8crdEraeejXsQsIm7BOAxvY6pM=) 4: noPcixLpgkxwJ1ZxZM_fxPf4Csw.roa (hash: BthsLkB+ZFXPf15eE+Y7pQxlaiPPySEZY4ss84bAVsM=) 5: pkrI6iaUdda-z9WYMFjdcxpmXjo.roa (hash: hMCs1gjsYAVaOoAjArkJ6N1TgykfFMKnI+aiOTGukGc=) 6: tV6sObvzgTfPgUJ_zmLWZJP23Js.roa (hash: ruAGmOYz2wd7CtdLjtd2pZCz/+RLCcgBY+LOgFhOP3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:fb:e9:d8:18:05:0d:46:d5:c7:19:eb:6e:ab:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df Validity Not Before: Dec 15 07:00:59 2025 GMT Not After : Dec 16 07:00:59 2025 GMT Subject: CN=b56bc928036d26cea9fb4dfa575b108179a07999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:be:d5:cc:ea:8a:ca:77:32:92:98:0c:6f:39: 0f:4e:15:42:bd:64:7c:2b:82:ce:14:d3:66:63:d9: f3:49:e1:fe:a0:0b:d0:a8:c4:82:17:12:45:e4:a5: e2:b9:1d:31:b2:e0:e7:94:b0:3f:9e:af:d6:f6:e5: bd:81:ad:90:d8:df:ca:b9:6e:b9:ed:24:f8:fa:4d: bd:be:58:80:c8:4e:5a:a8:31:8c:89:fb:14:3e:eb: 00:77:48:b4:8a:9c:5d:37:4b:f3:f0:c2:5e:1b:8d: 14:6a:0a:db:21:c0:6a:b4:f7:83:27:d1:95:61:7f: ec:77:cf:9f:b6:5c:6c:76:30:90:9c:91:4b:26:89: 56:00:f5:60:b4:a7:93:9c:54:9a:da:1d:aa:84:4b: 2a:e9:de:10:3f:8a:aa:95:29:b1:08:4c:94:41:4b: 43:62:5d:aa:cd:68:a2:ac:5a:17:34:7d:d1:1d:bd: e6:67:39:44:89:9c:c5:fe:00:9c:8e:fa:e5:80:c2: 16:19:b4:1d:89:b3:3f:d7:85:50:24:e7:7e:db:0f: 1f:96:98:08:4c:b4:14:92:d4:7a:d7:ac:1c:7e:6b: 5a:0a:01:52:ef:95:ab:f4:1e:03:86:30:a3:c4:ab: 5d:8e:fb:bc:e5:55:08:e3:ba:c3:3c:48:1b:ec:79: ab:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6B:C9:28:03:6D:26:CE:A9:FB:4D:FA:57:5B:10:81:79:A0:79:99 X509v3 Authority Key Identifier: keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:08:3d:9d:38:77:2c:0a:92:f9:33:4e:fd:85:d4:37:ac:ce: fa:e1:1c:d2:65:d1:ea:bf:4f:de:71:5a:16:00:a8:80:0a:95: 15:ae:85:a4:bf:85:3a:64:42:76:52:84:26:ee:53:d8:3d:c4: 39:31:83:8c:d0:d8:d0:b6:2a:26:15:56:6b:5f:2a:09:48:c9: ff:1e:47:b3:59:4e:2e:ae:e5:f4:59:9c:c6:09:e4:8d:98:85: 98:c1:c9:9e:e6:a2:ae:53:09:1c:7a:94:ba:d7:fb:23:c7:ce: e5:2d:5a:1e:ab:d4:d6:b8:0f:3d:50:c5:bf:cc:38:ea:64:17: 19:ed:c0:d5:1a:ee:5a:fb:38:70:4f:0e:72:c0:8b:36:ae:74: b5:9a:c3:17:46:f3:01:6e:27:ca:04:76:b1:0a:c9:31:5d:98: b5:43:55:64:8a:5a:cb:09:0d:30:38:f0:80:ef:f2:31:27:83: 07:5b:d5:b1:d7:5c:b4:99:29:e5:92:0a:79:e2:c7:1e:01:37: a9:32:a8:cf:03:75:fd:0a:5d:df:ba:97:80:13:ba:67:f1:4f: e8:b9:d1:ce:af:f7:d4:73:60:e7:26:b4:6e:c4:b4:8a:16:4c: 09:fe:d5:1c:f4:55:7f:37:d5:76:82:b2:e5:f6:39:29:69:2f: b1:3d:4c:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz/vp2BgFDUbVxxnrbqsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMTg3MGM5NmVmMDk3MjM4MTFmYjg5MjUwZWVhNmViYTk2 M2MwZGYwHhcNMjUxMjE1MDcwMDU5WhcNMjUxMjE2MDcwMDU5WjAzMTEwLwYDVQQD EyhiNTZiYzkyODAzNmQyNmNlYTlmYjRkZmE1NzViMTA4MTc5YTA3OTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb7VzOqKyncykpgMbzkPThVCvWR8 K4LOFNNmY9nzSeH+oAvQqMSCFxJF5KXiuR0xsuDnlLA/nq/W9uW9ga2Q2N/KuW65 7ST4+k29vliAyE5aqDGMifsUPusAd0i0ipxdN0vz8MJeG40UagrbIcBqtPeDJ9GV YX/sd8+ftlxsdjCQnJFLJolWAPVgtKeTnFSa2h2qhEsq6d4QP4qqlSmxCEyUQUtD Yl2qzWiirFoXNH3RHb3mZzlEiZzF/gCcjvrlgMIWGbQdibM/14VQJOd+2w8flpgI TLQUktR616wcfmtaCgFS75Wr9B4DhjCjxKtdjvu85VUI47rDPEgb7Hmr0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVrySgDbSbOqftN+ldbEIF5oHmZMB8GA1UdIwQY MBaAFAsYcMlu8JcjgR+4klDupuupY8DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMt YTJlMjRmOTgwYjNmLzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMtYTJlMjRmOTgwYjNm LzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwg9nTh3 LAqS+TNO/YXUN6zO+uEc0mXR6r9P3nFaFgCogAqVFa6FpL+FOmRCdlKEJu5T2D3E OTGDjNDY0LYqJhVWa18qCUjJ/x5Hs1lOLq7l9FmcxgnkjZiFmMHJnuairlMJHHqU utf7I8fO5S1aHqvU1rgPPVDFv8w46mQXGe3A1RruWvs4cE8OcsCLNq50tZrDF0bz AW4nygR2sQrJMV2YtUNVZIpaywkNMDjwgO/yMSeDB1vVsddctJkp5ZIKeeLHHgE3 qTKozwN1/Qpd37qXgBO6Z/FP6LnRzq/31HNg5ya0bsS0ihZMCf7VHPRVfzfVdoKy 5fY5KWkvsT1Mvg== -----END CERTIFICATE-----Generated at Mon Dec 15 09:18:53 2025 by rpki-client