This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft File: CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft (raw, json) Hash identifier: 6PtbTqAblOfiS/1azow+tsPAWkDfv6fs5+ArUWQF1Uk= Subject key identifier: 93:28:11:18:45:29:E7:BC:96:22:3A:18:20:37:36:50:67:F0:CA:32 Authority key identifier: 09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90 Certificate issuer: /CN=097b5d1490b385a2f80c2a0324fe98e351091490 Certificate serial: 019B21AC02AAE411C3AA6F9454AA76643EF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft Manifest number: 093D Signing time: Mon 15 Dec 2025 11:01:19 +0000 Manifest this update: Mon 15 Dec 2025 11:01:19 +0000 Manifest next update: Tue 16 Dec 2025 11:01:19 +0000 Files and hashes: 1: 4NykHTKnfSIJ0q7_RZtsAwpsqKA.roa (hash: w55fxLVLcagKRRaTKAUle3eBEN7JDI5LPLVo9zNJXVU=) 2: CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl (hash: VxneQGnR4PNm/rMPuJnh2du0n8PZ/S2yRhQ+G3+qTaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ac:02:aa:e4:11:c3:aa:6f:94:54:aa:76:64:3e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097b5d1490b385a2f80c2a0324fe98e351091490 Validity Not Before: Dec 15 11:01:19 2025 GMT Not After : Dec 16 11:01:19 2025 GMT Subject: CN=932811184529e7bc96223a182037365067f0ca32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fe:7d:24:d8:1a:b1:20:62:95:f8:5d:81:05: ae:cb:e5:62:7d:27:73:3d:05:a1:7c:e4:52:e2:6a: 5c:ed:66:57:16:cd:0e:4f:34:2b:32:40:82:a8:a3: c3:55:53:80:b1:48:62:3d:29:56:45:b7:ca:67:dc: 57:11:30:02:33:60:0e:8a:73:ba:d4:94:75:7d:f2: 0b:6a:69:c2:4b:90:a3:ab:3b:45:b5:56:dc:7a:1f: 02:09:02:8c:2b:4f:15:c5:8f:ed:4a:93:38:48:ab: 37:5c:c8:e3:63:7a:c0:9f:43:c5:d5:23:04:bd:b9: 18:f3:3c:6a:d7:9d:3b:32:19:87:70:96:06:5c:04: d2:46:19:17:96:c5:00:96:9f:1a:31:df:81:8c:f7: da:eb:f0:e2:88:9e:74:c4:8c:15:71:45:40:5c:19: c8:14:e1:19:3e:38:b6:a2:5c:cd:a4:76:90:50:04: 69:1c:66:df:d2:96:ef:ad:a2:4c:08:40:04:5c:3d: 01:c5:ff:0b:74:09:57:87:34:c3:fa:a5:df:6c:61: 0e:e5:eb:49:c9:0f:19:75:76:03:57:b4:12:fc:a4: 20:93:c0:90:4c:5a:fb:25:73:67:20:47:1b:14:c8: 85:f5:f6:93:de:18:da:34:20:5d:3f:7b:55:76:bd: f0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:28:11:18:45:29:E7:BC:96:22:3A:18:20:37:36:50:67:F0:CA:32 X509v3 Authority Key Identifier: keyid:09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:1b:a1:6b:fb:1d:2a:af:35:91:ed:68:44:ff:52:08:fc:fb: 6c:0b:6b:8f:4f:0a:a4:19:81:a1:06:87:c0:b4:3b:ad:6d:b5: ab:07:f2:c3:e4:d6:54:08:47:26:b0:30:2d:75:82:3b:f2:43: 8e:55:b1:16:74:e4:d9:a2:00:79:c0:ef:b8:db:9e:d4:21:60: f9:81:47:21:e3:1d:bd:56:da:71:60:92:8e:6c:b2:4c:13:2b: b5:ac:49:f2:6a:f0:fc:1d:0b:aa:d9:b2:2f:ea:19:f8:ac:6b: a4:4c:aa:e4:44:80:59:b5:ce:91:30:7c:05:ec:26:6b:03:6e: 1c:09:70:82:ff:47:10:02:30:85:1e:ca:33:d0:b5:82:df:15: c6:44:b4:ff:82:94:de:8e:59:18:9f:40:0e:bb:62:9b:a4:b7: c3:2a:76:a0:56:0b:85:d7:50:57:8b:3d:0d:a2:7e:a6:1e:0a: bd:9b:a6:35:8a:7f:d6:ee:76:1f:fe:27:eb:58:a1:b9:b8:f4: 4b:bd:d5:8f:c9:9c:67:b0:b7:2f:c2:8d:b8:bc:f0:3b:0c:9e: 2a:56:87:1b:2e:56:c0:8b:f8:d9:30:9f:a7:d1:0a:b1:15:5e: 63:63:ff:ef:0f:a2:0f:8f:27:16:f9:44:e4:e6:9d:26:ae:38: ca:67:50:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshrAKq5BHDqm+UVKp2ZD70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5N2I1ZDE0OTBiMzg1YTJmODBjMmEwMzI0ZmU5OGUzNTEw OTE0OTAwHhcNMjUxMjE1MTEwMTE5WhcNMjUxMjE2MTEwMTE5WjAzMTEwLwYDVQQD Eyg5MzI4MTExODQ1MjllN2JjOTYyMjNhMTgyMDM3MzY1MDY3ZjBjYTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5v59JNgasSBilfhdgQWuy+VifSdz PQWhfORS4mpc7WZXFs0OTzQrMkCCqKPDVVOAsUhiPSlWRbfKZ9xXETACM2AOinO6 1JR1ffILamnCS5CjqztFtVbceh8CCQKMK08VxY/tSpM4SKs3XMjjY3rAn0PF1SME vbkY8zxq1507MhmHcJYGXATSRhkXlsUAlp8aMd+BjPfa6/DiiJ50xIwVcUVAXBnI FOEZPji2olzNpHaQUARpHGbf0pbvraJMCEAEXD0Bxf8LdAlXhzTD+qXfbGEO5etJ yQ8ZdXYDV7QS/KQgk8CQTFr7JXNnIEcbFMiF9faT3hjaNCBdP3tVdr3w+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMoERhFKee8liI6GCA3NlBn8MoyMB8GA1UdIwQY MBaAFAl7XRSQs4Wi+AwqAyT+mONRCRSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1h0ZEZKQ3poYUw0RENvREpQNlk0MUVKRkpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83ZTM4MTYtOGM4ZS00N2EwLTk0ZWMt NGZjOWYwZDJhY2EzLzEvQ1h0ZEZKQ3poYUw0RENvREpQNlk0MUVKRkpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83ZTM4MTYtOGM4ZS00N2EwLTk0ZWMtNGZjOWYwZDJhY2Ez LzEvQ1h0ZEZKQ3poYUw0RENvREpQNlk0MUVKRkpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxuha/sd Kq81ke1oRP9SCPz7bAtrj08KpBmBoQaHwLQ7rW21qwfyw+TWVAhHJrAwLXWCO/JD jlWxFnTk2aIAecDvuNue1CFg+YFHIeMdvVbacWCSjmyyTBMrtaxJ8mrw/B0Lqtmy L+oZ+KxrpEyq5ESAWbXOkTB8BewmawNuHAlwgv9HEAIwhR7KM9C1gt8VxkS0/4KU 3o5ZGJ9ADrtim6S3wyp2oFYLhddQV4s9DaJ+ph4KvZumNYp/1u52H/4n61ihubj0 S73Vj8mcZ7C3L8KNuLzwOwyeKlaHGy5WwIv42TCfp9EKsRVeY2P/7w+iD48nFvlE 5OadJq44ymdQpg== -----END CERTIFICATE-----Generated at Mon Dec 15 18:54:47 2025 by rpki-client