This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft File: cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft (raw, json) Hash identifier: U6rl5B4tPZbzIsydN089InsYBq+AgccHYL6hRPdnv/Y= Subject key identifier: BC:64:4C:E5:E3:9F:26:80:0C:9A:B0:78:75:B4:ED:8E:77:7D:96:E2 Authority key identifier: 72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4 Certificate issuer: /CN=720c6323cf730930a03b0e44607f6fedf527a8c4 Certificate serial: 019B23D093030E98791D06693CB116FA8DF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft Manifest number: 98 Signing time: Mon 15 Dec 2025 21:00:30 +0000 Manifest this update: Mon 15 Dec 2025 21:00:30 +0000 Manifest next update: Tue 16 Dec 2025 21:00:30 +0000 Files and hashes: 1: cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl (hash: nt/ZZ85nXxli7puKf3fwp1umKVhhz+ZFHANyGkT4SlY=) 2: jf136iTXxi12Hjt-tW87j6RLunU.roa (hash: Y2zqrXOARQyWLcKRC6gUKA6rctKZc3uE4RdzoYUkrrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:93:03:0e:98:79:1d:06:69:3c:b1:16:fa:8d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=720c6323cf730930a03b0e44607f6fedf527a8c4 Validity Not Before: Dec 15 21:00:30 2025 GMT Not After : Dec 16 21:00:30 2025 GMT Subject: CN=bc644ce5e39f26800c9ab07875b4ed8e777d96e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:43:e3:ac:47:f1:ec:d0:89:f7:15:1f:c1:a1: a4:0e:4f:97:b6:b3:fe:ab:95:e9:13:d8:46:bb:b7: 69:ec:1e:f1:78:0e:ad:dd:6d:55:08:16:4b:34:6e: 3a:30:21:fd:97:0f:58:ec:bf:b8:70:6e:e6:45:92: a6:ce:19:f0:e4:a0:40:4f:07:b8:e7:f5:fd:5b:76: 82:c0:04:0c:fb:f3:ea:6a:08:fc:54:d1:fe:32:58: 9d:59:de:3a:95:16:0e:7a:d4:7f:8d:fd:7e:bd:b0: c8:30:6b:70:5c:49:ec:67:48:04:43:74:be:ca:c9: 6d:c3:ad:7c:f2:e2:34:b6:cb:ce:5d:53:a4:0b:96: a1:97:0d:c7:b3:f8:81:27:c9:38:66:54:c4:6f:de: e3:a2:9a:e4:16:fc:6e:76:ae:0f:70:0f:cc:88:8b: be:bc:a5:3e:e2:d9:47:3a:3f:8e:73:4f:44:aa:5a: af:19:5d:79:93:24:d0:8b:63:c6:57:75:60:cf:be: e9:ee:87:90:6f:4f:65:6e:f5:59:09:f2:93:eb:5f: 20:6a:81:7a:89:7a:a8:a5:57:81:79:a9:79:9e:67: 1c:a5:34:62:93:ad:83:5a:20:26:2c:f8:8f:10:8e: 3d:d0:91:fb:59:53:3e:7e:2b:de:7f:fa:13:b4:fb: 2f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:64:4C:E5:E3:9F:26:80:0C:9A:B0:78:75:B4:ED:8E:77:7D:96:E2 X509v3 Authority Key Identifier: keyid:72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:01:47:20:f5:05:d0:ca:eb:1a:2c:5d:8b:9d:85:23:38:ab: 79:38:68:de:e6:40:79:98:64:86:90:ea:63:1f:92:f1:04:6a: cc:31:24:54:b7:bb:20:0b:c8:ce:12:23:41:6d:00:49:5c:43: 52:e7:07:3c:96:26:08:03:56:56:ad:02:b2:49:ca:b3:ed:96: fe:7f:76:56:7e:1b:3b:36:43:fa:71:18:13:59:a6:b0:48:a0: b4:7f:42:8d:1e:c9:67:b6:3f:93:2d:e6:6d:23:6e:e8:4b:59: fd:1c:8c:66:dc:42:b0:e2:5b:58:74:c1:d7:3c:13:44:36:8f: d3:ec:ff:55:0e:7e:46:1b:78:32:ed:fb:dd:59:e6:13:8f:9e: 36:c0:e7:4f:e4:d3:a2:70:88:34:e9:d6:23:0c:0c:2d:91:48: 95:91:e0:51:77:15:c8:83:73:44:80:54:ed:aa:73:2a:f7:89: ac:29:83:66:ba:36:97:5b:6a:b5:80:77:70:f5:ba:c4:07:10: 2f:96:32:d6:c0:05:cd:54:dc:1b:5a:9a:8d:4c:b7:0e:bc:c9: 29:78:57:da:3b:11:17:e4:83:1d:e6:2c:73:d1:5b:2f:b0:97: 08:10:ec:4f:1e:cf:e2:ad:f4:34:37:ef:2a:41:eb:3d:01:a3: 6f:5e:85:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0JMDDph5HQZpPLEW+o31MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMGM2MzIzY2Y3MzA5MzBhMDNiMGU0NDYwN2Y2ZmVkZjUy N2E4YzQwHhcNMjUxMjE1MjEwMDMwWhcNMjUxMjE2MjEwMDMwWjAzMTEwLwYDVQQD EyhiYzY0NGNlNWUzOWYyNjgwMGM5YWIwNzg3NWI0ZWQ4ZTc3N2Q5NmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UPjrEfx7NCJ9xUfwaGkDk+XtrP+ q5XpE9hGu7dp7B7xeA6t3W1VCBZLNG46MCH9lw9Y7L+4cG7mRZKmzhnw5KBATwe4 5/X9W3aCwAQM+/Pqagj8VNH+MlidWd46lRYOetR/jf1+vbDIMGtwXEnsZ0gEQ3S+ ysltw6188uI0tsvOXVOkC5ahlw3Hs/iBJ8k4ZlTEb97joprkFvxudq4PcA/MiIu+ vKU+4tlHOj+Oc09EqlqvGV15kyTQi2PGV3Vgz77p7oeQb09lbvVZCfKT618gaoF6 iXqopVeBeal5nmccpTRik62DWiAmLPiPEI490JH7WVM+fivef/oTtPsv+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxkTOXjnyaADJqweHW07Y53fZbiMB8GA1UdIwQY MBaAFHIMYyPPcwkwoDsORGB/b+31J6jEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNmRhZTgtZDk4ZS00YWEwLWI0YWQt NDI4MWUzOGE5YmYyLzEvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNmRhZTgtZDk4ZS00YWEwLWI0YWQtNDI4MWUzOGE5YmYy LzEvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAFHIPUF 0MrrGixdi52FIzireTho3uZAeZhkhpDqYx+S8QRqzDEkVLe7IAvIzhIjQW0ASVxD UucHPJYmCANWVq0CsknKs+2W/n92Vn4bOzZD+nEYE1mmsEigtH9CjR7JZ7Y/ky3m bSNu6EtZ/RyMZtxCsOJbWHTB1zwTRDaP0+z/VQ5+Rht4Mu373VnmE4+eNsDnT+TT onCINOnWIwwMLZFIlZHgUXcVyINzRIBU7apzKveJrCmDZro2l1tqtYB3cPW6xAcQ L5Yy1sAFzVTcG1qajUy3DrzJKXhX2jsRF+SDHeYsc9FbL7CXCBDsTx7P4q30NDfv KkHrPQGjb16FDA== -----END CERTIFICATE-----Generated at Tue Dec 16 00:22:32 2025 by rpki-client