This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft File: CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json) Hash identifier: J6e3e2trp4p524H8bYJej/57YEnf0wRZio8VpvBnLhs= Subject key identifier: FB:50:D5:46:41:4D:8B:06:48:76:96:9F:BD:4D:B2:0E:FF:5C:D9:D6 Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75 Certificate issuer: /CN=0979f537b09ebeaddf9878749d1f88753c540c75 Certificate serial: 019B378E65DC1E9190D11E2D6EFC6E005332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 17:00:37 +0000 Manifest this update: Fri 19 Dec 2025 17:00:37 +0000 Manifest next update: Sat 20 Dec 2025 17:00:37 +0000 Files and hashes: 1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: /yrpyWS9K4fdU+IEMFo60+PAj4mYobN/kuc1+R6+QVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:65:dc:1e:91:90:d1:1e:2d:6e:fc:6e:00:53:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75 Validity Not Before: Dec 19 17:00:37 2025 GMT Not After : Dec 20 17:00:37 2025 GMT Subject: CN=fb50d546414d8b064876969fbd4db20eff5cd9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:0d:7a:80:db:29:f3:f1:e5:5b:46:aa:0d: 57:9c:03:30:9f:79:cf:a9:25:c7:cc:91:b0:f1:81: ea:e5:2a:e8:ec:a2:76:11:84:2a:20:50:91:7f:27: 99:6f:2b:cd:43:5f:04:e0:48:4a:dc:cb:09:eb:1f: cb:49:b6:aa:25:4c:59:05:d9:8c:a9:9e:8f:f1:76: c7:ed:18:05:86:0a:81:65:65:00:3b:01:c2:71:50: 4c:2f:5c:ec:7a:5f:07:eb:55:0c:65:35:bd:d1:e1: 9f:84:47:cd:6e:bf:a0:a2:57:0a:35:09:89:4b:86: 23:8f:6d:ab:2d:e1:8f:01:f9:e1:db:f9:48:03:b0: ad:b5:88:c2:f0:7e:5d:d4:fc:ef:48:5b:3d:22:e7: 10:ef:e7:86:26:45:72:22:11:c0:5a:86:9e:45:91: 87:14:ef:00:e7:02:8d:57:6b:29:6b:6c:a7:94:97: d8:91:28:c9:1f:fc:09:31:c2:21:be:ff:79:2f:84: cb:52:be:9d:6a:73:1a:ce:59:c9:e7:f1:0b:50:ed: f9:e0:77:e0:39:6e:8e:c5:07:e0:4b:fb:62:51:a6: 33:dd:4b:95:da:92:b3:5c:ad:21:a4:b5:b7:7f:ac: 8d:bb:8c:dc:1f:6f:e4:6c:63:22:c1:00:53:a6:51: 82:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:50:D5:46:41:4D:8B:06:48:76:96:9F:BD:4D:B2:0E:FF:5C:D9:D6 X509v3 Authority Key Identifier: keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:67:08:34:8e:39:b4:23:54:4a:15:c4:21:25:0f:af:ef:40: 5c:68:7c:c0:8b:fb:be:55:ac:c4:c6:d5:29:b4:fa:e5:fe:97: 54:05:2c:d0:8b:1c:f6:59:5f:11:13:cf:bf:41:32:c2:42:34: b9:55:b6:cc:cb:c5:8d:2d:be:5f:7a:00:1a:29:87:1b:36:a8: e8:ef:b5:a7:f4:15:b8:e9:dd:09:ef:89:fb:d2:01:5b:fa:42: 9a:be:08:36:7a:80:a9:78:7b:9c:8d:9b:a4:2d:24:24:48:d4: 88:bb:6f:25:1d:c8:b9:5c:7d:22:af:72:1e:4d:ae:c2:32:b5: 82:60:4c:78:96:10:d8:ec:8d:c9:8f:5b:e3:12:8b:89:47:ec: 82:73:1f:5f:37:5b:19:50:78:99:e7:53:d8:cc:78:c2:39:8c: a9:fa:9d:80:fc:66:b8:cf:73:1a:d2:10:21:af:a9:d9:05:fc: cd:f5:6b:40:9a:94:dc:4f:18:45:f0:b1:7c:53:7e:6a:d0:1f: c7:85:6d:b7:8b:f2:c0:2d:b1:58:98:68:12:df:6b:36:4e:3a: c8:ed:7a:d3:55:df:20:57:83:cf:98:34:0a:4b:ab:75:27:14: e7:24:30:40:cf:88:cd:4b:9f:6f:a6:b8:35:ac:aa:e5:5c:d2: 11:d5:16:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jmXcHpGQ0R4tbvxuAFMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NzlmNTM3YjA5ZWJlYWRkZjk4Nzg3NDlkMWY4ODc1M2M1 NDBjNzUwHhcNMjUxMjE5MTcwMDM3WhcNMjUxMjIwMTcwMDM3WjAzMTEwLwYDVQQD EyhmYjUwZDU0NjQxNGQ4YjA2NDg3Njk2OWZiZDRkYjIwZWZmNWNkOWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtsNeoDbKfPx5VtGqg1XnAMwn3nP qSXHzJGw8YHq5Sro7KJ2EYQqIFCRfyeZbyvNQ18E4EhK3MsJ6x/LSbaqJUxZBdmM qZ6P8XbH7RgFhgqBZWUAOwHCcVBML1zsel8H61UMZTW90eGfhEfNbr+golcKNQmJ S4Yjj22rLeGPAfnh2/lIA7CttYjC8H5d1PzvSFs9IucQ7+eGJkVyIhHAWoaeRZGH FO8A5wKNV2spa2ynlJfYkSjJH/wJMcIhvv95L4TLUr6danMazlnJ5/ELUO354Hfg OW6OxQfgS/tiUaYz3UuV2pKzXK0hpLW3f6yNu4zcH2/kbGMiwQBTplGCiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtQ1UZBTYsGSHaWn71Nsg7/XNnWMB8GA1UdIwQY MBaAFAl59Tewnr6t35h4dJ0fiHU8VAx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1huMU43Q2V2cTNmbUhoMG5SLUlkVHhVREhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83ZDhhMWEtMDk1ZS00MTg2LTk1ZTAt MDgyYjY4YjJjMDJhLzEvQ1huMU43Q2V2cTNmbUhoMG5SLUlkVHhVREhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS83ZDhhMWEtMDk1ZS00MTg2LTk1ZTAtMDgyYjY4YjJjMDJh LzEvQ1huMU43Q2V2cTNmbUhoMG5SLUlkVHhVREhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmcINI45 tCNUShXEISUPr+9AXGh8wIv7vlWsxMbVKbT65f6XVAUs0Isc9llfERPPv0EywkI0 uVW2zMvFjS2+X3oAGimHGzao6O+1p/QVuOndCe+J+9IBW/pCmr4INnqAqXh7nI2b pC0kJEjUiLtvJR3IuVx9Iq9yHk2uwjK1gmBMeJYQ2OyNyY9b4xKLiUfsgnMfXzdb GVB4medT2Mx4wjmMqfqdgPxmuM9zGtIQIa+p2QX8zfVrQJqU3E8YRfCxfFN+atAf x4Vtt4vywC2xWJhoEt9rNk46yO1601XfIFeDz5g0CkurdScU5yQwQM+IzUufb6a4 Nayq5VzSEdUWTA== -----END CERTIFICATE-----Generated at Fri Dec 19 21:11:57 2025 by rpki-client