This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json) Hash identifier: KcPGIy50OK7V22EQU1HlakrnLKVJ/W+lYy05+yKm6EA= Subject key identifier: D6:08:8D:9C:EE:69:77:B7:37:4D:30:4C:A5:B2:FB:12:2A:3E:C7:0A Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62 Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62 Certificate serial: 019B7F70C607C4EB09922F495B2EE223B0AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft Manifest number: 1687 Signing time: Fri 02 Jan 2026 16:00:55 +0000 Manifest this update: Fri 02 Jan 2026 16:00:55 +0000 Manifest next update: Sat 03 Jan 2026 16:00:55 +0000 Files and hashes: 1: KFAbKKe7jo2XjrWvMFjbhME-DXc.roa (hash: 4OtvIQVEiPvcGG7i9r46Rvs1hJ/uhdVoDzjyfUfIYZk=) 2: TMosgBiabWiuRyi5Ssatcr00sSE.roa (hash: F+7FnUFFY40UIl2jFbgxyGZqPlinYg7PSVeRNWNABjs=) 3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: BgnTdWr2flnKNRWpu+7lXfTwQ0BeQQaYwLaW2ojOzAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:70:c6:07:c4:eb:09:92:2f:49:5b:2e:e2:23:b0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62 Validity Not Before: Jan 2 16:00:55 2026 GMT Not After : Jan 3 16:00:55 2026 GMT Subject: CN=d6088d9cee6977b7374d304ca5b2fb122a3ec70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:52:18:b9:4a:4d:bd:61:26:a4:03:ba:8a:59: 5a:31:42:9a:28:25:1d:44:76:2c:74:e6:45:31:c6: 3e:12:fa:a2:de:41:d1:50:b9:ca:5c:e1:19:ef:1d: 35:1b:45:c7:f4:87:fe:c3:27:ba:fc:32:89:86:69: 02:8e:6c:10:b4:cc:4a:ca:f0:4f:06:db:ae:61:bf: f2:a1:44:7e:75:f6:47:f8:38:c3:8e:6f:78:3d:f2: 67:44:3a:a9:ad:f7:f9:a3:5d:b4:cd:2d:a2:29:39: ee:09:c4:c8:f5:76:2d:c0:b6:48:50:9e:f3:ce:bb: 86:9c:f4:a6:14:b5:3f:dd:ba:b5:55:bc:e7:e0:e1: 5f:43:c8:37:99:fa:5a:52:f8:2f:ff:24:81:67:91: 50:00:1b:d3:7f:07:7d:1e:55:39:d6:79:c0:62:ec: 0b:b6:ee:5e:bc:15:60:34:2f:c4:eb:c5:19:77:76: 99:c8:0d:d4:80:38:98:07:cf:16:01:4b:87:e4:36: 2e:2d:2a:fa:01:18:fe:d5:86:6a:47:3d:f1:b5:89: eb:c0:48:d9:0b:9e:2f:b3:ac:c6:98:bd:cf:d7:57: bf:20:a0:3d:3c:6a:ab:04:e2:3f:2c:34:67:38:5f: eb:68:75:2f:db:a1:3d:a9:42:09:6a:7e:c6:eb:9a: 36:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:08:8D:9C:EE:69:77:B7:37:4D:30:4C:A5:B2:FB:12:2A:3E:C7:0A X509v3 Authority Key Identifier: keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b0:ef:3f:df:4b:a7:69:6f:64:2c:69:ff:9a:00:66:9a:56: 4f:31:97:31:94:2e:9d:11:82:9b:9b:56:a8:45:02:6e:4f:4b: ea:9d:87:79:68:cf:c8:8e:83:f2:29:8a:0f:71:97:2c:aa:92: 11:4e:40:70:11:e0:e6:09:05:3b:4a:98:8d:7a:a0:e2:75:62: da:f0:b3:2d:89:5a:72:cc:63:fa:6f:5f:88:db:94:77:cc:ee: 7d:ae:5c:37:b0:5f:15:bf:6d:18:23:81:8c:7f:1b:58:00:95: 71:21:7b:7e:f3:f2:00:29:26:c6:0c:13:d3:5d:d1:bd:9c:1c: d8:a7:d8:4f:05:9f:38:90:a3:41:20:41:74:f9:e3:78:e5:4a: c2:17:22:53:7d:f3:a2:b6:af:a7:dc:c2:e8:02:83:b2:cc:ba: e4:89:fe:d4:53:a6:55:67:60:17:ac:ce:92:a1:e8:68:8b:96: db:90:d2:35:7f:83:56:d5:34:90:d9:24:f6:d8:e9:ee:a9:20: 9c:38:2d:ed:45:c0:d2:0d:82:19:e6:c1:2a:08:08:41:ba:89: bc:47:7c:10:ad:8f:5a:77:b1:44:44:93:04:3f:88:d6:d1:c3: a4:c5:19:08:8b:81:49:a2:ee:01:8b:83:b1:2f:c9:24:a8:bb: 6a:d1:5e:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/cMYHxOsJki9JWy7iI7CsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMTUzNWEyZWFlYmM2OGMxNjU3YWFmY2Y1YTc4OGM4NzUx ZDliNjIwHhcNMjYwMTAyMTYwMDU1WhcNMjYwMTAzMTYwMDU1WjAzMTEwLwYDVQQD EyhkNjA4OGQ5Y2VlNjk3N2I3Mzc0ZDMwNGNhNWIyZmIxMjJhM2VjNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFIYuUpNvWEmpAO6illaMUKaKCUd RHYsdOZFMcY+Evqi3kHRULnKXOEZ7x01G0XH9If+wye6/DKJhmkCjmwQtMxKyvBP BtuuYb/yoUR+dfZH+DjDjm94PfJnRDqprff5o120zS2iKTnuCcTI9XYtwLZIUJ7z zruGnPSmFLU/3bq1Vbzn4OFfQ8g3mfpaUvgv/ySBZ5FQABvTfwd9HlU51nnAYuwL tu5evBVgNC/E68UZd3aZyA3UgDiYB88WAUuH5DYuLSr6ARj+1YZqRz3xtYnrwEjZ C54vs6zGmL3P11e/IKA9PGqrBOI/LDRnOF/raHUv26E9qUIJan7G65o2LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYIjZzuaXe3N00wTKWy+xIqPscKMB8GA1UdIwQY MBaAFHMVNaLq68aMFleq/PWniMh1HZtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTkt NDM1YmRhNWJkMDQ4LzEvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTktNDM1YmRhNWJkMDQ4 LzEvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7DvP99L p2lvZCxp/5oAZppWTzGXMZQunRGCm5tWqEUCbk9L6p2HeWjPyI6D8imKD3GXLKqS EU5AcBHg5gkFO0qYjXqg4nVi2vCzLYlacsxj+m9fiNuUd8zufa5cN7BfFb9tGCOB jH8bWACVcSF7fvPyACkmxgwT013RvZwc2KfYTwWfOJCjQSBBdPnjeOVKwhciU33z oravp9zC6AKDssy65In+1FOmVWdgF6zOkqHoaIuW25DSNX+DVtU0kNkk9tjp7qkg nDgt7UXA0g2CGebBKggIQbqJvEd8EK2PWnexRESTBD+I1tHDpMUZCIuBSaLuAYuD sS/JJKi7atFegQ== -----END CERTIFICATE-----Generated at Fri Jan 2 23:52:28 2026 by rpki-client