This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft File: cX9V88YAexy91-ggiQVpAGdXs2Y.mft (raw, json) Hash identifier: WBFQgv0XvWNhBgX2kEOMr1SYd13D+kkZ9YwDJznJ4X8= Subject key identifier: 3B:66:50:B4:91:DE:0F:6C:E5:E2:C8:9F:77:2E:B5:9F:A2:C0:74:29 Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66 Certificate issuer: /CN=717f55f3c6007b1cbdd7e820890569006757b366 Certificate serial: 019B46261B2240E71FD7AE72C81E7A1AF85F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft Manifest number: 0F1C Signing time: Mon 22 Dec 2025 13:01:00 +0000 Manifest this update: Mon 22 Dec 2025 13:01:00 +0000 Manifest next update: Tue 23 Dec 2025 13:01:00 +0000 Files and hashes: 1: BNamB5vKS8VYoQEENNZLcbAD0yY.roa (hash: AZc2M6A0pF1sMbjRSCCXbLIDgidX2dUycGenbS2p6qA=) 2: cX9V88YAexy91-ggiQVpAGdXs2Y.crl (hash: VuO7Mt9jw+EoGU4ZcnWR0AoE2AkzuQLVtCwxZcqINS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:1b:22:40:e7:1f:d7:ae:72:c8:1e:7a:1a:f8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366 Validity Not Before: Dec 22 13:01:00 2025 GMT Not After : Dec 23 13:01:00 2025 GMT Subject: CN=3b6650b491de0f6ce5e2c89f772eb59fa2c07429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:b8:4f:08:66:eb:59:ae:cd:ee:e0:75:94: f2:49:99:51:77:38:f5:80:7e:0b:e9:4c:ef:09:0c: f8:f8:26:18:a6:a8:48:eb:a4:95:f7:24:95:b4:30: 60:6b:ab:4f:db:b0:d5:04:aa:c3:c1:f6:15:3b:fd: 57:a1:c9:70:5d:b5:8f:c5:e2:4d:7f:11:bf:f1:da: 84:81:e5:4d:5f:7b:dd:da:26:79:05:57:72:06:83: 39:8e:17:07:6f:31:dc:ab:d7:e1:0e:68:15:37:0b: 21:e5:09:2c:ff:67:32:e6:df:19:dc:9b:ce:4b:a6: 31:ba:5e:e3:d9:7a:f4:40:e8:d3:ce:d8:c7:3c:3a: d4:43:bc:08:d9:44:75:4c:22:3d:9c:ba:80:40:31: 42:9d:3f:b1:c7:bd:7e:3c:74:f3:f2:29:80:e1:ed: ce:b9:6c:99:65:92:a1:f9:e1:63:40:13:0a:c8:47: 85:db:46:81:f2:d0:a4:bf:f2:e8:4b:ec:94:65:2c: a2:c6:4f:3a:a3:97:0e:6e:d0:a5:9d:1d:a5:c3:27: 7e:ee:1b:82:ba:5c:60:58:4f:f0:d9:d0:01:85:15: 11:c1:b0:68:ef:16:5b:67:a7:7a:c7:31:7f:c9:d9: 04:b8:2c:0a:79:ec:65:8b:49:0a:02:42:9a:77:73: 2c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:66:50:B4:91:DE:0F:6C:E5:E2:C8:9F:77:2E:B5:9F:A2:C0:74:29 X509v3 Authority Key Identifier: keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:31:54:fb:a8:66:26:28:d3:6d:fa:82:f7:28:ca:90:84:b4: f0:39:81:cf:dc:60:d5:8c:2d:ee:ad:28:55:ff:31:80:ff:59: b7:51:d3:6e:ec:80:0c:9d:91:21:34:8c:fa:08:ea:0a:62:3a: de:e6:a9:ef:b7:e3:5e:53:3b:cd:75:c5:84:c3:05:e2:94:16: f7:9c:42:c2:7f:e0:2a:a1:1e:a8:22:11:da:91:9c:80:4d:e5: ae:8b:5b:be:66:86:9c:08:76:c1:48:58:c0:13:b0:26:03:eb: 8f:b4:47:93:09:a3:b5:92:fe:3e:32:86:60:c5:cf:e9:42:25: 65:c9:e3:06:34:cf:39:9f:ae:dc:d8:cb:a3:c8:57:34:76:18: 8d:11:98:6d:28:b5:34:68:44:21:c2:be:98:77:1b:9e:27:b8: cf:20:f1:51:a7:ec:ef:71:f3:8f:33:13:80:c7:5f:6f:8d:c6: 49:87:18:8e:80:f7:94:82:1b:b7:84:3e:86:30:03:78:f4:74: 95:e8:f6:a6:ce:40:6b:c0:26:f2:82:d8:8b:a3:44:07:82:2f: 99:af:28:35:2f:8a:ae:a8:cf:e2:ed:fc:88:cc:4d:51:31:82: 73:32:7c:bb:6a:e7:42:16:7e:07:4f:4a:e5:56:63:62:6a:00: 68:e1:f2:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJhsiQOcf165yyB56GvhfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxN2Y1NWYzYzYwMDdiMWNiZGQ3ZTgyMDg5MDU2OTAwNjc1 N2IzNjYwHhcNMjUxMjIyMTMwMTAwWhcNMjUxMjIzMTMwMTAwWjAzMTEwLwYDVQQD EygzYjY2NTBiNDkxZGUwZjZjZTVlMmM4OWY3NzJlYjU5ZmEyYzA3NDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPq4Twhm61muze7gdZTySZlRdzj1 gH4L6UzvCQz4+CYYpqhI66SV9ySVtDBga6tP27DVBKrDwfYVO/1XoclwXbWPxeJN fxG/8dqEgeVNX3vd2iZ5BVdyBoM5jhcHbzHcq9fhDmgVNwsh5Qks/2cy5t8Z3JvO S6Yxul7j2Xr0QOjTztjHPDrUQ7wI2UR1TCI9nLqAQDFCnT+xx71+PHTz8imA4e3O uWyZZZKh+eFjQBMKyEeF20aB8tCkv/LoS+yUZSyixk86o5cObtClnR2lwyd+7huC ulxgWE/w2dABhRURwbBo7xZbZ6d6xzF/ydkEuCwKeexli0kKAkKad3MsCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtmULSR3g9s5eLIn3cutZ+iwHQpMB8GA1UdIwQY MBaAFHF/VfPGAHscvdfoIIkFaQBnV7NmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgt NjczNjQwMjMzNjY1LzEvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgtNjczNjQwMjMzNjY1 LzEvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTFU+6hm JijTbfqC9yjKkIS08DmBz9xg1Ywt7q0oVf8xgP9Zt1HTbuyADJ2RITSM+gjqCmI6 3uap77fjXlM7zXXFhMMF4pQW95xCwn/gKqEeqCIR2pGcgE3lrotbvmaGnAh2wUhY wBOwJgPrj7RHkwmjtZL+PjKGYMXP6UIlZcnjBjTPOZ+u3NjLo8hXNHYYjRGYbSi1 NGhEIcK+mHcbnie4zyDxUafs73HzjzMTgMdfb43GSYcYjoD3lIIbt4Q+hjADePR0 lej2ps5Aa8Am8oLYi6NEB4Ivma8oNS+KrqjP4u38iMxNUTGCczJ8u2rnQhZ+B09K 5VZjYmoAaOHyAg== -----END CERTIFICATE-----Generated at Mon Dec 22 20:48:47 2025 by rpki-client