This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json) Hash identifier: C7Fugx3jAxFbgL0oKDmS7ItqyhQsQ8fe+0FvrSkbsrM= Subject key identifier: FF:5B:84:03:42:3D:28:90:76:EA:B2:F8:ED:52:38:CD:4A:EF:4F:12 Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c Certificate serial: 019B21E26A83F87AC10B04CD4C0C354F2041 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 12:00:44 +0000 Manifest this update: Mon 15 Dec 2025 12:00:44 +0000 Manifest next update: Tue 16 Dec 2025 12:00:44 +0000 Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: QRk5+KmvCU/iZJn3l1Dhvxzq7NOLQPbZnRHD8lltCZ4=) 2: LYov3s-RBNegs9sCI5mzwI0B-OM.roa (hash: Q5JNZZskubtUF3draKhRYhTL06FaQ8LhpyPNSVMlulo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:6a:83:f8:7a:c1:0b:04:cd:4c:0c:35:4f:20:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097e05516fc8793406868b8109e3c044b702716c Validity Not Before: Dec 15 12:00:44 2025 GMT Not After : Dec 16 12:00:44 2025 GMT Subject: CN=ff5b8403423d289076eab2f8ed5238cd4aef4f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:d6:87:d8:c0:37:32:65:88:e2:af:a9:e6: 1b:81:ae:5b:d0:b9:fc:b4:a1:42:53:54:6d:a0:a0: ca:a3:b8:41:77:00:b4:9f:ee:7b:16:58:b5:d4:dc: ff:d9:47:33:55:b7:d6:c4:80:38:e4:bf:8b:22:68: 2c:8c:dd:f6:e0:7e:0b:d2:94:57:a0:27:84:a0:67: 8f:37:39:d1:9c:b4:0d:01:c6:42:81:5e:39:90:82: 71:9a:af:fb:da:ab:07:2c:bf:e3:f2:82:f6:ee:58: b7:1f:3d:de:84:b7:a9:cd:16:05:76:fb:a6:01:a4: 85:d1:28:64:be:95:ed:1e:c2:80:a6:56:0d:3b:26: f2:80:4f:61:b7:09:e5:8d:c6:18:f0:75:ac:84:f7: 27:d8:5f:b8:c2:b2:05:e2:33:84:64:5d:a7:a1:ce: e2:86:a7:cd:60:37:d2:ce:97:a9:a5:2c:5e:b0:92: 48:e6:f9:2f:ae:d6:0d:5e:5a:40:13:62:6a:7f:50: b4:21:c6:38:b8:51:54:3b:d3:ac:31:7b:bd:47:d0: df:4a:33:ed:71:ea:a1:74:06:ac:70:c3:ce:b8:f8: be:48:f0:7f:c3:82:76:39:9f:9d:92:51:72:50:06: 42:15:8f:fc:a6:a6:0c:95:f9:8d:5c:a5:ea:4c:b3: b7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5B:84:03:42:3D:28:90:76:EA:B2:F8:ED:52:38:CD:4A:EF:4F:12 X509v3 Authority Key Identifier: keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:bb:bd:e9:51:3f:89:f4:c0:d2:50:19:34:08:c9:a6:ff:a1: 1b:77:e6:d4:9c:f3:3f:ad:5e:c1:94:53:31:d4:2c:77:c8:28: af:e1:52:46:30:b0:71:b7:e4:b1:dc:b6:e4:3b:fb:a6:66:9e: 57:e4:36:77:bd:9c:a6:55:6c:5b:dc:da:8e:17:a3:d1:ae:a4: 72:9e:2a:b8:0e:d3:d1:6a:b5:5e:69:65:1e:9e:ac:d4:32:78: 76:c8:83:cf:1a:f9:66:ff:77:39:53:44:bc:f5:82:51:ab:9c: 4b:78:30:47:45:38:9e:ef:e4:7f:42:f4:51:d6:72:ba:a0:c7: fc:ba:ce:98:a4:52:09:aa:59:fd:e4:21:d3:79:a0:88:ce:f3: bc:15:d0:96:dc:14:7c:bc:3a:71:36:4e:1b:09:0d:20:af:4a: 7d:33:a8:3a:5d:92:44:e9:6b:89:3c:79:d2:fd:bc:18:81:ab: 12:75:e8:ad:de:13:e6:98:03:08:5e:52:9c:d3:4a:7c:ca:3d: c2:c3:bc:bb:a6:0c:25:c6:a9:cb:13:9f:0e:ed:5d:52:83:d6: 9e:6b:40:2b:68:c7:aa:b8:31:5b:fe:ff:18:6f:df:6b:2e:0d: 35:b4:90:05:02:78:8d:c9:a1:e1:97:85:c6:ed:7c:3d:9c:8e: 4e:e7:69:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4mqD+HrBCwTNTAw1TyBBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5N2UwNTUxNmZjODc5MzQwNjg2OGI4MTA5ZTNjMDQ0Yjcw MjcxNmMwHhcNMjUxMjE1MTIwMDQ0WhcNMjUxMjE2MTIwMDQ0WjAzMTEwLwYDVQQD EyhmZjViODQwMzQyM2QyODkwNzZlYWIyZjhlZDUyMzhjZDRhZWY0ZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty7Wh9jANzJliOKvqeYbga5b0Ln8 tKFCU1RtoKDKo7hBdwC0n+57Fli11Nz/2UczVbfWxIA45L+LImgsjN324H4L0pRX oCeEoGePNznRnLQNAcZCgV45kIJxmq/72qsHLL/j8oL27li3Hz3ehLepzRYFdvum AaSF0ShkvpXtHsKAplYNOybygE9htwnljcYY8HWshPcn2F+4wrIF4jOEZF2noc7i hqfNYDfSzpeppSxesJJI5vkvrtYNXlpAE2Jqf1C0IcY4uFFUO9OsMXu9R9DfSjPt ceqhdAascMPOuPi+SPB/w4J2OZ+dklFyUAZCFY/8pqYMlfmNXKXqTLO35wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9bhANCPSiQduqy+O1SOM1K708SMB8GA1UdIwQY MBaAFAl+BVFvyHk0BoaLgQnjwES3AnFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hNTAzNzItZGEzOS00ODJlLTlhZDQt MzBiZWNmYzFiMzExLzEvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9hNTAzNzItZGEzOS00ODJlLTlhZDQtMzBiZWNmYzFiMzEx LzEvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbu96VE/ ifTA0lAZNAjJpv+hG3fm1JzzP61ewZRTMdQsd8gor+FSRjCwcbfksdy25Dv7pmae V+Q2d72cplVsW9zajhej0a6kcp4quA7T0Wq1XmllHp6s1DJ4dsiDzxr5Zv93OVNE vPWCUaucS3gwR0U4nu/kf0L0UdZyuqDH/LrOmKRSCapZ/eQh03mgiM7zvBXQltwU fLw6cTZOGwkNIK9KfTOoOl2SROlriTx50v28GIGrEnXord4T5pgDCF5SnNNKfMo9 wsO8u6YMJcapyxOfDu1dUoPWnmtAK2jHqrgxW/7/GG/fay4NNbSQBQJ4jcmh4ZeF xu18PZyOTudpTQ== -----END CERTIFICATE-----Generated at Mon Dec 15 15:02:46 2025 by rpki-client