This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json) Hash identifier: il6mPFceEEXjgJ4eUFYlCaHjmQk0auB7vE7eV96w7Fc= Subject key identifier: 05:1C:34:8A:D3:7E:C8:EB:32:43:56:D4:0A:43:6A:3D:F1:D8:09:6D Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d Certificate serial: 019B26D231CFFCABF347C63FCA6D2F2B591F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft Manifest number: 11B3 Signing time: Tue 16 Dec 2025 11:01:08 +0000 Manifest this update: Tue 16 Dec 2025 11:01:08 +0000 Manifest next update: Wed 17 Dec 2025 11:01:08 +0000 Files and hashes: 1: 3vMVhDVuSakGpKEegLzmX9CZn_0.roa (hash: 0WA7LBg+VlA+MYR6g5nbmdux2cCvdzgMgFAqrxmL/5k=) 2: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: Q6DZyUYup9RxC8oEIUZsO7fEpPLRIyHeJJTNaoF7O2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:31:cf:fc:ab:f3:47:c6:3f:ca:6d:2f:2b:59:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d Validity Not Before: Dec 16 11:01:08 2025 GMT Not After : Dec 17 11:01:08 2025 GMT Subject: CN=051c348ad37ec8eb324356d40a436a3df1d8096d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:18:91:45:02:2e:54:3e:8d:a4:56:3e:dd:a4: 25:96:c8:c5:54:a8:5f:18:00:08:bf:11:6c:64:a2: 92:25:1d:81:a4:e8:e2:9e:02:cb:33:5b:4a:d7:0c: 38:cc:9c:c4:f8:8f:cb:06:64:81:07:96:86:ad:97: cd:fc:c1:4e:f7:e3:a1:cd:e4:c7:e7:52:ac:2d:8f: 8d:88:e2:05:a5:aa:dc:3d:c4:af:b4:f1:ea:c7:5b: a9:91:90:73:15:ba:76:d9:56:73:14:b4:e9:41:0f: cf:c3:54:e8:7b:49:15:de:92:ad:f4:54:e7:c9:cd: 96:72:c4:e7:a0:2c:98:0f:a8:79:ff:f9:5e:00:72: 23:fa:61:4a:e3:63:af:94:a9:f1:88:98:4a:ae:e9: 5d:00:92:8b:1a:db:71:cd:6c:33:e9:70:38:cd:87: cb:6e:8d:4e:c1:95:1d:7d:46:a8:fc:25:b6:47:fb: be:2b:4d:c0:f6:56:31:2b:f3:b8:42:59:0d:01:83: 98:e1:a3:58:7d:64:84:f1:60:d5:d8:a6:e6:23:1a: d1:91:87:66:3a:fa:62:3f:13:fc:46:97:e6:b5:3a: 9f:13:ee:a6:94:8f:3b:0e:e3:d1:7a:2e:e5:a4:a8: 5f:a9:af:df:ea:8d:f5:7a:3d:cc:fb:32:2d:38:0e: f4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1C:34:8A:D3:7E:C8:EB:32:43:56:D4:0A:43:6A:3D:F1:D8:09:6D X509v3 Authority Key Identifier: keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c2:3d:1d:ec:53:18:20:45:87:ee:08:f4:3f:7a:7a:97:c4: fb:90:19:39:4f:5b:1c:6f:6c:51:ce:8b:48:31:9b:74:54:d3: 1d:13:04:ba:7f:a0:6b:00:15:e8:91:2c:4e:63:8b:fc:e6:52: 4f:77:c3:f2:2f:83:fb:39:30:a3:14:17:0c:d2:51:db:71:a0: 57:3c:7d:0e:16:32:47:18:27:bd:8d:05:16:5a:54:8a:08:44: ca:fe:e6:c6:f4:ac:1a:af:51:7d:bd:7c:cb:43:12:48:cc:bc: ea:e8:00:f7:21:0c:0b:f5:b8:19:18:4b:9a:f4:2d:d5:41:65: 25:e1:e8:0f:43:6a:ed:00:aa:4d:26:c7:ce:d6:72:cf:1a:84: 2c:12:f2:d9:d6:39:4f:d1:fd:b3:6d:cb:38:76:7e:c4:dc:e8: e8:6c:0a:2c:5b:91:3b:de:8e:18:9f:4c:2c:44:04:31:a0:f0: a6:c9:4a:6d:e3:21:e9:9b:6a:e3:31:85:5d:4f:db:a2:48:07: 16:2c:6b:3f:66:3f:e0:59:0e:4c:1f:51:e2:d6:c6:74:44:1b: 3d:ae:47:22:e3:d6:d7:42:0a:94:0a:35:93:1d:8b:b2:ad:8d: 43:29:ae:a9:3c:ec:78:d1:f5:b1:b3:ca:f3:59:dc:a0:34:fb: 78:7b:fe:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0jHP/KvzR8Y/ym0vK1kfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMzVlMzg5NDYzNDQ4MmIwODMxNzc3NWM3OTY1N2U5Yjgz MTJkNGQwHhcNMjUxMjE2MTEwMTA4WhcNMjUxMjE3MTEwMTA4WjAzMTEwLwYDVQQD EygwNTFjMzQ4YWQzN2VjOGViMzI0MzU2ZDQwYTQzNmEzZGYxZDgwOTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RiRRQIuVD6NpFY+3aQllsjFVKhf GAAIvxFsZKKSJR2BpOjingLLM1tK1ww4zJzE+I/LBmSBB5aGrZfN/MFO9+OhzeTH 51KsLY+NiOIFparcPcSvtPHqx1upkZBzFbp22VZzFLTpQQ/Pw1Toe0kV3pKt9FTn yc2WcsTnoCyYD6h5//leAHIj+mFK42OvlKnxiJhKruldAJKLGttxzWwz6XA4zYfL bo1OwZUdfUao/CW2R/u+K03A9lYxK/O4QlkNAYOY4aNYfWSE8WDV2KbmIxrRkYdm OvpiPxP8RpfmtTqfE+6mlI87DuPRei7lpKhfqa/f6o31ej3M+zItOA70fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUcNIrTfsjrMkNW1ApDaj3x2AltMB8GA1UdIwQY MBaAFHE144lGNEgrCDF3dceWV+m4MS1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xY2I5ZmMtNmIzMy00MmQ1LTk0MjMt NzllY2Q4YTliNmQ2LzEvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xY2I5ZmMtNmIzMy00MmQ1LTk0MjMtNzllY2Q4YTliNmQ2 LzEvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMI9HexT GCBFh+4I9D96epfE+5AZOU9bHG9sUc6LSDGbdFTTHRMEun+gawAV6JEsTmOL/OZS T3fD8i+D+zkwoxQXDNJR23GgVzx9DhYyRxgnvY0FFlpUighEyv7mxvSsGq9Rfb18 y0MSSMy86ugA9yEMC/W4GRhLmvQt1UFlJeHoD0Nq7QCqTSbHztZyzxqELBLy2dY5 T9H9s23LOHZ+xNzo6GwKLFuRO96OGJ9MLEQEMaDwpslKbeMh6Ztq4zGFXU/bokgH FixrP2Y/4FkOTB9R4tbGdEQbPa5HIuPW10IKlAo1kx2Lsq2NQymuqTzseNH1sbPK 81ncoDT7eHv+Pg== -----END CERTIFICATE-----Generated at Tue Dec 16 19:17:03 2025 by rpki-client