This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json) Hash identifier: 7dNEc9337K48OVx7xbqiyN3fvZ97YxIBkrToDfDBkYo= Subject key identifier: CE:BA:09:4C:76:6F:1F:D1:6D:B6:0A:07:CB:47:7C:D9:C5:17:9F:40 Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c Certificate serial: 019B2B8AC3E743634B2007AAC6258F8A85ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 09:01:12 +0000 Manifest this update: Wed 17 Dec 2025 09:01:12 +0000 Manifest next update: Thu 18 Dec 2025 09:01:12 +0000 Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: WdLlMrBoO1P3fmPv842cJum/8g9i80aOijC6kZVc1qE=) 2: LYov3s-RBNegs9sCI5mzwI0B-OM.roa (hash: Q5JNZZskubtUF3draKhRYhTL06FaQ8LhpyPNSVMlulo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:c3:e7:43:63:4b:20:07:aa:c6:25:8f:8a:85:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097e05516fc8793406868b8109e3c044b702716c Validity Not Before: Dec 17 09:01:12 2025 GMT Not After : Dec 18 09:01:12 2025 GMT Subject: CN=ceba094c766f1fd16db60a07cb477cd9c5179f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c0:e7:1a:8f:cb:45:f9:6d:03:c1:ae:df:1f: 8d:07:a1:89:90:80:7e:41:70:a6:41:55:18:99:60: 19:2f:ff:91:f8:63:6b:f5:46:ad:74:2d:3e:0a:5a: 78:39:36:be:da:b8:13:0d:db:66:df:1a:5c:e3:a8: f7:db:fe:6d:7f:69:60:9b:4d:68:c1:da:5d:3c:9e: 5c:70:ef:39:89:13:6d:25:2d:3a:a7:c2:e5:89:31: 26:4f:44:40:f1:aa:24:11:13:1d:dc:a1:96:fc:13: 57:42:b6:6e:74:10:69:0c:c8:cd:95:e9:17:88:83: 02:16:5d:c0:e5:d9:61:ad:31:0e:f0:88:f6:7b:e0: a9:e5:63:dc:8b:09:96:ff:59:f0:0d:8f:89:94:f1: 4c:3c:6d:11:ee:c7:f4:05:f3:e1:06:a9:83:99:08: 79:58:64:f9:37:00:0b:d5:09:a2:95:3e:1c:d3:a2: 1c:98:de:96:7a:04:db:40:8b:a7:28:e8:2b:63:47: 4e:f9:29:1b:78:a5:c6:77:cc:7a:25:6f:02:8d:1e: 48:11:3a:81:ca:38:a1:03:da:f6:ee:76:04:17:e9: c1:9c:bd:b8:08:40:8d:23:61:92:ed:cf:3b:80:0a: 0a:e5:9c:d7:24:bb:21:33:c8:f7:64:bc:14:66:c6: 18:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BA:09:4C:76:6F:1F:D1:6D:B6:0A:07:CB:47:7C:D9:C5:17:9F:40 X509v3 Authority Key Identifier: keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:94:c6:64:ee:8d:7b:48:99:19:a7:73:23:af:4a:95:19:48: 43:07:08:f3:e0:00:27:16:7d:ef:cf:24:1a:97:bb:10:98:09: 82:ad:2e:2a:35:8a:58:ce:85:d0:83:b8:87:c1:2c:de:e3:a2: 4c:88:e2:e7:3a:39:0e:15:8e:78:d5:df:ef:82:98:d0:9b:ef: 85:cc:0b:c9:72:b8:c8:46:23:8d:4c:d6:cd:e4:3f:e5:f9:02: fb:86:71:43:7a:8d:d0:dc:32:f8:fc:2c:bf:ff:4d:b7:4d:a8: 02:c5:b7:1e:15:cf:42:64:85:16:4a:ce:d5:64:4c:e7:60:23: a0:93:9e:40:7d:ff:06:49:a9:1e:9f:17:f2:fe:68:29:55:67: 36:93:eb:7c:26:a7:d5:70:a6:ce:bc:31:69:7b:70:ed:e5:02: 98:70:36:95:b3:68:da:8a:94:7e:75:9f:9b:72:13:cf:a4:61: ad:9e:5a:c5:66:ee:6e:b5:34:ef:d0:68:77:9d:0c:3b:68:38: 48:ac:5c:0a:2d:41:de:b1:2a:ae:90:cf:41:47:9a:8b:f8:97: 0c:6e:d6:b3:4c:b7:21:3e:97:4b:20:39:39:9d:e0:cf:16:2d: 07:58:c4:2e:d4:18:3d:e1:52:64:df:cf:33:5b:f4:32:3d:fb: 5f:68:a5:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrisPnQ2NLIAeqxiWPioXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5N2UwNTUxNmZjODc5MzQwNjg2OGI4MTA5ZTNjMDQ0Yjcw MjcxNmMwHhcNMjUxMjE3MDkwMTEyWhcNMjUxMjE4MDkwMTEyWjAzMTEwLwYDVQQD EyhjZWJhMDk0Yzc2NmYxZmQxNmRiNjBhMDdjYjQ3N2NkOWM1MTc5ZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cDnGo/LRfltA8Gu3x+NB6GJkIB+ QXCmQVUYmWAZL/+R+GNr9UatdC0+Clp4OTa+2rgTDdtm3xpc46j32/5tf2lgm01o wdpdPJ5ccO85iRNtJS06p8LliTEmT0RA8aokERMd3KGW/BNXQrZudBBpDMjNlekX iIMCFl3A5dlhrTEO8Ij2e+Cp5WPciwmW/1nwDY+JlPFMPG0R7sf0BfPhBqmDmQh5 WGT5NwAL1QmilT4c06IcmN6WegTbQIunKOgrY0dO+SkbeKXGd8x6JW8CjR5IETqB yjihA9r27nYEF+nBnL24CECNI2GS7c87gAoK5ZzXJLshM8j3ZLwUZsYYtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM66CUx2bx/RbbYKB8tHfNnFF59AMB8GA1UdIwQY MBaAFAl+BVFvyHk0BoaLgQnjwES3AnFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hNTAzNzItZGEzOS00ODJlLTlhZDQt MzBiZWNmYzFiMzExLzEvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9hNTAzNzItZGEzOS00ODJlLTlhZDQtMzBiZWNmYzFiMzEx LzEvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5TGZO6N e0iZGadzI69KlRlIQwcI8+AAJxZ9788kGpe7EJgJgq0uKjWKWM6F0IO4h8Es3uOi TIji5zo5DhWOeNXf74KY0JvvhcwLyXK4yEYjjUzWzeQ/5fkC+4ZxQ3qN0Nwy+Pws v/9Nt02oAsW3HhXPQmSFFkrO1WRM52AjoJOeQH3/BkmpHp8X8v5oKVVnNpPrfCan 1XCmzrwxaXtw7eUCmHA2lbNo2oqUfnWfm3ITz6RhrZ5axWbubrU079Bod50MO2g4 SKxcCi1B3rEqrpDPQUeai/iXDG7Ws0y3IT6XSyA5OZ3gzxYtB1jELtQYPeFSZN/P M1v0Mj37X2il2Q== -----END CERTIFICATE-----Generated at Wed Dec 17 19:06:31 2025 by rpki-client