This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft File: CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json) Hash identifier: dj3Y7bM9F4TgFLfRdLrbox5YHBpH3Q6A//Ez8CWHVzI= Subject key identifier: 48:86:1D:C3:98:C5:59:A9:30:DF:AF:87:AA:FC:70:FE:B3:EF:26:21 Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75 Certificate issuer: /CN=0979f537b09ebeaddf9878749d1f88753c540c75 Certificate serial: 019B0F003BB19835BCCEE2C2CCB520D10A4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft Manifest number: 176D Signing time: Thu 11 Dec 2025 20:00:31 +0000 Manifest this update: Thu 11 Dec 2025 20:00:31 +0000 Manifest next update: Fri 12 Dec 2025 20:00:31 +0000 Files and hashes: 1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: sodsE9Ffc7jFVpW/nNWsb2MO1KKu3M8QDaam9WjaVRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:3b:b1:98:35:bc:ce:e2:c2:cc:b5:20:d1:0a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75 Validity Not Before: Dec 11 20:00:31 2025 GMT Not After : Dec 12 20:00:31 2025 GMT Subject: CN=48861dc398c559a930dfaf87aafc70feb3ef2621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:21:e0:68:f8:d2:8d:ef:cc:27:dc:7e:de: 81:47:5f:8a:ce:4c:8e:99:8d:cc:c8:3f:3c:4d:58: 8b:32:07:56:52:0c:7e:51:26:10:1a:ca:65:24:14: 0e:34:cb:96:34:d4:e8:31:73:bd:00:99:48:e2:ba: d4:f4:1a:cf:94:64:d8:71:ee:67:6d:ce:7e:5e:05: b0:9e:79:03:6c:bb:93:86:ec:fd:53:3c:18:26:84: 98:30:67:ea:1c:d3:0d:ab:a5:05:5e:d5:2d:9e:f0: a6:1d:f9:a0:b4:8d:6e:f6:f1:cc:05:e1:73:07:3b: 4b:5a:59:bc:0e:92:42:3c:38:e0:8d:10:4e:32:59: d0:23:3f:3c:8f:f0:ee:1e:df:a0:2e:57:11:d3:6d: 45:2c:b6:a3:21:81:be:02:44:49:89:85:10:58:08: dd:f5:c2:1e:57:ac:36:3b:e4:1d:14:00:87:41:5b: fa:55:ab:02:ab:a8:4f:25:7d:f5:d4:62:dd:ee:9b: 92:45:98:28:e9:2f:67:79:c8:1b:60:18:e6:65:1c: bc:31:c1:0e:c5:53:0b:95:ae:cf:2a:4a:c0:1c:d6: 38:02:52:7a:4c:25:4d:c1:b4:62:17:2b:6f:c9:88: 61:2a:2d:71:1a:02:1b:8b:b8:e1:52:58:44:9a:34: a2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:86:1D:C3:98:C5:59:A9:30:DF:AF:87:AA:FC:70:FE:B3:EF:26:21 X509v3 Authority Key Identifier: keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:45:f3:74:d3:9c:f7:d9:8b:a2:fd:52:4b:8e:db:b1:6d:5e: 31:bf:a0:37:74:ce:d3:1a:a3:f5:32:36:de:a8:1b:e0:9e:2c: 10:84:a6:e0:b3:89:27:93:c0:1c:83:db:de:1e:af:f2:e2:71: a3:92:24:73:d1:66:20:5e:a9:02:d1:ea:47:f5:fe:0b:3f:81: d4:ec:e9:ab:09:cd:a1:76:d4:04:16:01:fd:a4:53:f2:0b:67: 6b:ec:1a:6c:f0:75:9a:50:5c:1e:80:76:6e:3b:2e:60:16:1a: 94:af:16:1f:47:d1:c5:a7:1e:36:65:0a:3b:6a:fd:98:42:be: bd:dc:bd:56:ca:25:c5:8d:e3:9b:b7:ce:ce:8e:25:5a:87:dd: 87:ef:e6:21:a4:ef:e6:14:7d:35:10:ab:ac:0f:ee:5a:3c:f7: 7c:a9:dc:b6:b4:da:33:69:dc:d5:db:d8:b3:ad:64:31:06:6a: af:27:bc:47:5b:9d:58:c3:20:70:53:43:ae:e3:e1:c5:9e:6a: 8c:fb:24:35:32:a6:f5:38:c2:22:49:eb:19:e9:59:76:36:fe: 5e:02:28:a2:40:3a:5c:4e:58:fc:f5:f2:4e:c9:8f:98:bb:2b: 8b:92:cf:c8:c1:89:1e:2e:ee:87:b4:95:e8:1a:33:fb:07:07: 0f:15:17:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPADuxmDW8zuLCzLUg0QpPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NzlmNTM3YjA5ZWJlYWRkZjk4Nzg3NDlkMWY4ODc1M2M1 NDBjNzUwHhcNMjUxMjExMjAwMDMxWhcNMjUxMjEyMjAwMDMxWjAzMTEwLwYDVQQD Eyg0ODg2MWRjMzk4YzU1OWE5MzBkZmFmODdhYWZjNzBmZWIzZWYyNjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkYh4Gj40o3vzCfcft6BR1+KzkyO mY3MyD88TViLMgdWUgx+USYQGsplJBQONMuWNNToMXO9AJlI4rrU9BrPlGTYce5n bc5+XgWwnnkDbLuThuz9UzwYJoSYMGfqHNMNq6UFXtUtnvCmHfmgtI1u9vHMBeFz BztLWlm8DpJCPDjgjRBOMlnQIz88j/DuHt+gLlcR021FLLajIYG+AkRJiYUQWAjd 9cIeV6w2O+QdFACHQVv6VasCq6hPJX311GLd7puSRZgo6S9necgbYBjmZRy8McEO xVMLla7PKkrAHNY4AlJ6TCVNwbRiFytvyYhhKi1xGgIbi7jhUlhEmjSizQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiGHcOYxVmpMN+vh6r8cP6z7yYhMB8GA1UdIwQY MBaAFAl59Tewnr6t35h4dJ0fiHU8VAx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1huMU43Q2V2cTNmbUhoMG5SLUlkVHhVREhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83ZDhhMWEtMDk1ZS00MTg2LTk1ZTAt MDgyYjY4YjJjMDJhLzEvQ1huMU43Q2V2cTNmbUhoMG5SLUlkVHhVREhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS83ZDhhMWEtMDk1ZS00MTg2LTk1ZTAtMDgyYjY4YjJjMDJh LzEvQ1huMU43Q2V2cTNmbUhoMG5SLUlkVHhVREhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEXzdNOc 99mLov1SS47bsW1eMb+gN3TO0xqj9TI23qgb4J4sEISm4LOJJ5PAHIPb3h6v8uJx o5Ikc9FmIF6pAtHqR/X+Cz+B1OzpqwnNoXbUBBYB/aRT8gtna+wabPB1mlBcHoB2 bjsuYBYalK8WH0fRxaceNmUKO2r9mEK+vdy9VsolxY3jm7fOzo4lWofdh+/mIaTv 5hR9NRCrrA/uWjz3fKnctrTaM2nc1dvYs61kMQZqrye8R1udWMMgcFNDruPhxZ5q jPskNTKm9TjCIknrGelZdjb+XgIookA6XE5Y/PXyTsmPmLsri5LPyMGJHi7uh7SV 6Boz+wcHDxUXhA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:02:08 2025 by rpki-client