This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json) Hash identifier: 4IC5gzQ8K6ukzo7cU9AQ1hsDc2OqQFGhtftAqNimHYw= Subject key identifier: 76:73:72:14:7B:CF:AB:69:E2:B7:DD:B2:F7:CB:1A:65:7F:4F:EF:A9 Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae Certificate serial: 019B1A28DD263048868239FA8F5459B0A47F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 00:00:44 +0000 Manifest this update: Sun 14 Dec 2025 00:00:44 +0000 Manifest next update: Mon 15 Dec 2025 00:00:44 +0000 Files and hashes: 1: _Z-p7KxUVg6ghEbeseFL-OOEudI.roa (hash: su5vjqQnoBgVAVEbXkHU+T0GhwXhzdquZDKzgBwrhQ4=) 2: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: 6vgcbdf7kSh3WdEch7S/ENfo6Ue6rRDKMSg/fEq0jW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:28:dd:26:30:48:86:82:39:fa:8f:54:59:b0:a4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae Validity Not Before: Dec 14 00:00:44 2025 GMT Not After : Dec 15 00:00:44 2025 GMT Subject: CN=767372147bcfab69e2b7ddb2f7cb1a657f4fefa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:75:22:1f:79:4f:17:d6:b6:14:ae:51:ff: 6d:11:0b:28:d2:db:88:66:d7:71:fe:25:9a:5e:c9: 96:fc:76:a9:e9:3e:fd:48:3f:f9:27:8a:67:42:c1: 16:09:8b:4f:67:21:09:a7:92:d8:3f:fd:d2:14:fc: a6:39:12:be:81:7f:44:25:f1:91:c5:e8:9e:93:6b: 65:60:58:91:31:14:3b:5e:e5:02:0c:ba:1c:6a:ab: 99:db:16:ff:cd:d4:73:a0:7a:d9:d5:8b:98:93:56: 9a:73:93:b3:96:49:fb:f2:fb:3b:07:9c:ed:99:c9: 43:a6:d9:ac:d6:b3:f8:49:21:40:03:c2:90:d2:ed: 50:68:af:50:14:df:f2:e9:95:bb:11:2b:4f:f9:b8: 3a:08:3f:37:a9:3a:b2:15:14:40:56:ee:39:92:f9: 40:f4:62:16:96:72:14:dc:4f:bb:83:d4:8e:b7:d9: 7d:c1:d9:15:25:23:0b:3f:a9:13:cc:0e:99:91:c1: 23:ee:2f:a4:a4:0f:e5:4a:87:cf:6e:ef:61:45:9c: 9c:b5:8d:9a:54:c4:99:2b:16:15:ce:b9:ac:a7:b9: ea:5d:b3:91:ac:66:76:00:11:3a:d6:96:a9:91:49: 06:d9:c4:f7:d8:f4:e6:99:94:ef:91:6a:fb:0d:1d: b5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:73:72:14:7B:CF:AB:69:E2:B7:DD:B2:F7:CB:1A:65:7F:4F:EF:A9 X509v3 Authority Key Identifier: keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f5:1d:71:5e:91:2f:5f:1c:80:4b:95:6b:bb:b9:ba:af:0e: bc:2e:fd:4e:f9:b0:7c:df:d7:33:8f:1c:ba:ca:7c:1d:e7:02: 42:31:1e:05:14:ea:1c:24:95:11:af:84:60:70:d9:81:22:3a: 82:db:c2:86:57:90:d6:46:aa:ca:82:ea:c6:d1:6f:10:55:4b: e5:07:1f:db:ff:ca:02:52:8f:a1:9a:f5:20:d7:bb:61:87:32: e7:6e:3a:fd:17:5b:d8:df:07:33:87:99:35:ac:ac:cb:94:e1: f4:3c:c0:2f:7c:19:f1:4b:b1:09:82:72:d6:32:bb:c3:8a:c3: e6:e1:24:4c:42:fa:c4:ba:ef:83:07:56:e9:15:7a:be:37:aa: d3:7b:b2:67:e4:50:49:b4:d8:40:49:cf:be:b7:22:8b:da:19: a2:a0:c5:8d:a5:e3:cb:95:86:50:de:ac:a5:36:ed:74:6e:2e: 19:6c:eb:b0:5f:31:c3:3d:2d:7e:03:86:c8:0a:10:31:f9:d8: 85:0e:bf:70:ab:fd:62:c6:02:98:6a:2c:2c:88:d9:0a:e5:8d: 22:74:1f:c0:f5:34:e1:22:0c:57:a2:6c:d5:b8:fc:fc:f6:f0: c0:4b:16:fc:0b:e8:48:89:96:ec:75:f9:b5:b0:f8:8e:cc:3d: d7:cf:ab:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKN0mMEiGgjn6j1RZsKR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNzFkOGI0Y2Y2NzczYjU5ZjA3MzJlMGU5ZThkMjVhOWI3 NzNmYWUwHhcNMjUxMjE0MDAwMDQ0WhcNMjUxMjE1MDAwMDQ0WjAzMTEwLwYDVQQD Eyg3NjczNzIxNDdiY2ZhYjY5ZTJiN2RkYjJmN2NiMWE2NTdmNGZlZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhR1Ih95TxfWthSuUf9tEQso0tuI Ztdx/iWaXsmW/Hap6T79SD/5J4pnQsEWCYtPZyEJp5LYP/3SFPymORK+gX9EJfGR xeiek2tlYFiRMRQ7XuUCDLocaquZ2xb/zdRzoHrZ1YuYk1aac5Ozlkn78vs7B5zt mclDptms1rP4SSFAA8KQ0u1QaK9QFN/y6ZW7EStP+bg6CD83qTqyFRRAVu45kvlA 9GIWlnIU3E+7g9SOt9l9wdkVJSMLP6kTzA6ZkcEj7i+kpA/lSofPbu9hRZyctY2a VMSZKxYVzrmsp7nqXbORrGZ2ABE61papkUkG2cT32PTmmZTvkWr7DR21WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZzchR7z6tp4rfdsvfLGmV/T++pMB8GA1UdIwQY MBaAFHFx2LTPZ3O1nwcy4Ono0lqbdz+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85Nzc4YjYtZGMyYi00NTg2LTkxZGUt NTNhMDczNjhiOWVhLzEvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy85Nzc4YjYtZGMyYi00NTg2LTkxZGUtNTNhMDczNjhiOWVh LzEvY1hIWXRNOW5jN1dmQnpMZzZlalNXcHQzUDY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvUdcV6R L18cgEuVa7u5uq8OvC79TvmwfN/XM48cusp8HecCQjEeBRTqHCSVEa+EYHDZgSI6 gtvChleQ1kaqyoLqxtFvEFVL5Qcf2//KAlKPoZr1INe7YYcy5246/Rdb2N8HM4eZ Naysy5Th9DzAL3wZ8UuxCYJy1jK7w4rD5uEkTEL6xLrvgwdW6RV6vjeq03uyZ+RQ SbTYQEnPvrcii9oZoqDFjaXjy5WGUN6spTbtdG4uGWzrsF8xwz0tfgOGyAoQMfnY hQ6/cKv9YsYCmGosLIjZCuWNInQfwPU04SIMV6Js1bj8/PbwwEsW/AvoSImW7HX5 tbD4jsw918+rrg== -----END CERTIFICATE-----Generated at Sun Dec 14 06:22:11 2025 by rpki-client