This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft File: cX9V88YAexy91-ggiQVpAGdXs2Y.mft (raw, json) Hash identifier: jOdxNshf2R4z5OW1eBjTkuQYyLPiFv/i0DWIE9CgQbY= Subject key identifier: B2:E7:2E:79:8F:25:85:2B:6D:AC:3C:15:5D:85:22:3A:C3:0A:87:26 Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66 Certificate issuer: /CN=717f55f3c6007b1cbdd7e820890569006757b366 Certificate serial: 019B292F58EC531BADFD4F33A9FA6ECDA9A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft Manifest number: 0F0D Signing time: Tue 16 Dec 2025 22:02:07 +0000 Manifest this update: Tue 16 Dec 2025 22:02:07 +0000 Manifest next update: Wed 17 Dec 2025 22:02:07 +0000 Files and hashes: 1: BNamB5vKS8VYoQEENNZLcbAD0yY.roa (hash: AZc2M6A0pF1sMbjRSCCXbLIDgidX2dUycGenbS2p6qA=) 2: cX9V88YAexy91-ggiQVpAGdXs2Y.crl (hash: f5KJacMR4YeqhB7ysc+bRFqFLRWiQgumbI0dmOsYwmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2f:58:ec:53:1b:ad:fd:4f:33:a9:fa:6e:cd:a9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366 Validity Not Before: Dec 16 22:02:07 2025 GMT Not After : Dec 17 22:02:07 2025 GMT Subject: CN=b2e72e798f25852b6dac3c155d85223ac30a8726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:f4:21:cc:55:1c:80:d5:9f:cf:c9:c0:c3: 53:4c:02:a5:f8:fe:7d:33:3a:3c:f5:be:3a:29:c2: c7:0a:1b:dc:0d:db:c6:03:8f:77:08:a3:4a:9b:70: 3a:de:99:fb:d5:b4:b1:0c:69:33:26:78:13:11:c5: 0a:e2:79:09:93:1a:fb:d7:91:fd:14:d0:5f:ef:47: ce:65:bb:72:75:06:95:56:17:a6:45:5d:27:56:2d: 15:fd:36:14:95:22:69:d3:7d:1c:f9:9f:48:b4:0a: 8c:a6:15:83:b3:d9:ea:b6:d3:43:3d:f6:59:ed:15: eb:1a:24:99:d0:d8:30:ab:7e:27:8a:f9:6f:87:e2: 59:49:6b:92:36:16:a5:1f:c8:e0:71:79:e5:30:e8: eb:0c:5b:b8:fa:3e:4a:bd:99:8f:33:22:80:d6:54: 52:d4:fd:b6:36:8f:03:85:33:cf:7e:6f:9e:07:b5: 51:30:5a:ad:97:d2:ba:83:b9:d1:1c:f2:47:03:d4: ef:ba:c1:b7:7a:73:9f:0b:ec:e6:0d:1c:e6:e3:11: 82:14:68:6c:ca:65:d9:09:79:dc:8d:f1:95:11:ef: de:4d:6f:ae:c3:c5:21:a1:60:f8:31:da:4c:5e:58: aa:43:34:45:26:ee:4e:57:7c:04:6e:8d:50:8c:aa: 61:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E7:2E:79:8F:25:85:2B:6D:AC:3C:15:5D:85:22:3A:C3:0A:87:26 X509v3 Authority Key Identifier: keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e2:24:93:20:2f:05:04:d2:db:10:57:3e:d0:5f:4d:8e:86: c2:4e:1a:20:e5:70:19:56:20:e4:73:90:fc:f6:2c:68:cf:58: b8:4d:4d:f7:bb:76:ca:f8:51:82:9f:d9:c7:26:89:69:fe:31: ce:2e:05:49:74:f7:76:dd:e4:57:c8:57:fb:1d:40:c3:d8:71: e3:ce:4b:9f:a4:d3:4b:a2:12:21:df:47:7d:27:d8:92:3b:22: 65:91:53:42:1d:18:3f:3b:c2:4a:4c:2e:3b:c1:2e:96:60:b2: 2b:42:c9:61:7d:09:96:1c:f5:5f:5b:52:15:12:aa:14:94:eb: 2a:59:b8:6d:76:45:c2:b2:63:07:37:87:70:7a:96:f1:0c:19: 88:f2:fd:d8:4b:4b:ac:34:ea:07:f2:d8:1e:b0:34:73:4b:12: d8:04:18:9b:7c:77:41:ba:02:7b:f3:e0:f3:71:81:e0:9c:c7: a7:2c:4c:34:ba:e4:3e:5c:73:7a:5d:90:e5:04:73:80:d7:9c: 0a:74:f9:17:01:bc:0d:fa:2c:0d:8a:b9:87:f1:4e:5d:3d:03: b2:75:22:f6:dc:d5:17:1d:39:56:71:6a:d1:3d:02:ef:93:f0: 99:87:fb:1b:34:cb:99:d1:f6:7b:ae:02:e3:aa:d4:96:a5:7a: f1:f5:94:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspL1jsUxut/U8zqfpuzamhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxN2Y1NWYzYzYwMDdiMWNiZGQ3ZTgyMDg5MDU2OTAwNjc1 N2IzNjYwHhcNMjUxMjE2MjIwMjA3WhcNMjUxMjE3MjIwMjA3WjAzMTEwLwYDVQQD EyhiMmU3MmU3OThmMjU4NTJiNmRhYzNjMTU1ZDg1MjIzYWMzMGE4NzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHX0IcxVHIDVn8/JwMNTTAKl+P59 Mzo89b46KcLHChvcDdvGA493CKNKm3A63pn71bSxDGkzJngTEcUK4nkJkxr715H9 FNBf70fOZbtydQaVVhemRV0nVi0V/TYUlSJp030c+Z9ItAqMphWDs9nqttNDPfZZ 7RXrGiSZ0Ngwq34nivlvh+JZSWuSNhalH8jgcXnlMOjrDFu4+j5KvZmPMyKA1lRS 1P22No8DhTPPfm+eB7VRMFqtl9K6g7nRHPJHA9TvusG3enOfC+zmDRzm4xGCFGhs ymXZCXncjfGVEe/eTW+uw8UhoWD4MdpMXliqQzRFJu5OV3wEbo1QjKphZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLnLnmPJYUrbaw8FV2FIjrDCocmMB8GA1UdIwQY MBaAFHF/VfPGAHscvdfoIIkFaQBnV7NmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgt NjczNjQwMjMzNjY1LzEvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgtNjczNjQwMjMzNjY1 LzEvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+IkkyAv BQTS2xBXPtBfTY6Gwk4aIOVwGVYg5HOQ/PYsaM9YuE1N97t2yvhRgp/ZxyaJaf4x zi4FSXT3dt3kV8hX+x1Aw9hx485Ln6TTS6ISId9HfSfYkjsiZZFTQh0YPzvCSkwu O8EulmCyK0LJYX0Jlhz1X1tSFRKqFJTrKlm4bXZFwrJjBzeHcHqW8QwZiPL92EtL rDTqB/LYHrA0c0sS2AQYm3x3QboCe/Pg83GB4JzHpyxMNLrkPlxzel2Q5QRzgNec CnT5FwG8DfosDYq5h/FOXT0DsnUi9tzVFx05VnFq0T0C75PwmYf7GzTLmdH2e64C 46rUlqV68fWUVw== -----END CERTIFICATE-----Generated at Wed Dec 17 04:19:04 2025 by rpki-client