This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft File: cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json) Hash identifier: 4dkF6uUUVRXTY9h22Vs8ibF0dksBfYyNR10dLJdMtZw= Subject key identifier: 68:F8:54:AB:30:4C:E3:DB:87:3C:25:60:BD:AA:99:6B:8C:00:BF:44 Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46 Certificate issuer: /CN=7316772efce2a133fb7f8720929d0560cef1db46 Certificate serial: 019B2475ECDEDE7BF053559CB241B19CBFE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft Manifest number: 0585 Signing time: Tue 16 Dec 2025 00:01:06 +0000 Manifest this update: Tue 16 Dec 2025 00:01:06 +0000 Manifest next update: Wed 17 Dec 2025 00:01:06 +0000 Files and hashes: 1: OFaqwNs5Dyg1d88HTW2H4gncFRI.roa (hash: wFSS58IXWFEAJ1x0fwOpm9Nk9TzQ4SMDP5LPnSI+dzw=) 2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: YR/HMu7SDeq3JQ1ewneuvSIrbuyZoYhq5RzFV33OWzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:75:ec:de:de:7b:f0:53:55:9c:b2:41:b1:9c:bf:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46 Validity Not Before: Dec 16 00:01:06 2025 GMT Not After : Dec 17 00:01:06 2025 GMT Subject: CN=68f854ab304ce3db873c2560bdaa996b8c00bf44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:be:31:fd:3c:c9:d7:b2:49:42:80:4f:c0: 58:80:92:e2:f0:90:e2:94:20:69:5c:fd:81:a3:fc: 0b:b4:ea:5c:4f:ea:74:c0:6d:ae:e3:28:a2:a0:0d: 7c:5e:3c:04:1a:43:94:0e:9c:57:a5:19:55:1b:44: 46:52:8b:31:bd:d5:00:cd:64:3c:7c:67:86:e3:52: b1:45:0e:6a:e5:be:0f:47:11:a4:ad:d8:2b:dc:b4: f8:47:3e:c3:3a:38:c0:36:63:10:61:0e:78:81:61: 21:d6:f3:b7:f5:00:56:f1:33:b7:5e:59:49:0a:55: fd:b2:16:d8:fa:b7:5f:b1:3f:3f:20:ce:94:b6:32: 46:21:0f:cf:d3:5e:73:89:45:90:45:57:ca:47:3b: 84:67:28:5e:91:06:43:0f:9e:f2:e6:1c:b4:48:00: 7d:27:b9:f9:6e:9e:8c:85:d1:35:17:09:23:dc:5d: 3c:9c:90:bf:8a:3a:d2:3d:e2:24:11:de:58:82:eb: 6f:66:d8:c8:52:8d:6f:47:14:4a:dc:40:87:8c:36: 2b:dd:30:0c:d4:bc:41:65:b4:47:e3:b5:39:3f:f2: b9:4c:45:cf:88:18:dd:dd:e7:af:b3:7a:72:6a:ed: 56:24:de:6a:71:c0:b9:d8:2f:87:e6:70:bd:bf:0e: 41:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F8:54:AB:30:4C:E3:DB:87:3C:25:60:BD:AA:99:6B:8C:00:BF:44 X509v3 Authority Key Identifier: keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:7d:1f:b3:4b:8c:79:a3:2b:71:29:56:cb:8a:db:2f:10:02: 85:4d:ed:6a:d8:f3:81:a7:21:f1:93:b1:3c:09:0f:5e:c0:66: 1e:41:da:f2:7b:d9:8b:dc:17:92:66:ab:1c:41:e9:a4:6a:15: 3a:5b:d4:a2:d2:be:38:8a:f5:4f:d8:81:00:b3:18:e7:79:c7: bf:e4:58:ea:ab:6b:a2:e1:26:5e:f0:83:89:d5:93:4d:58:9e: 33:eb:6c:ad:34:a5:81:62:57:80:c1:44:8d:7e:77:d5:9c:40: fe:b7:6a:03:5c:4e:ca:2d:69:10:7b:ce:bd:d1:a0:30:54:5c: c3:d7:33:fc:4a:2f:82:88:ab:01:86:74:90:28:a9:df:8f:98: 31:5b:9a:e4:7f:7a:ab:f8:9b:3e:1a:8b:9e:f4:73:5e:0c:8f: 4f:ab:39:db:df:d8:1e:6f:d4:4c:77:a1:e4:42:4a:ef:34:28: 40:78:5a:eb:28:35:da:45:92:cc:fe:92:5e:fc:08:ed:ec:c5: 47:48:f5:fb:c6:53:d6:ea:9b:2c:f7:2d:26:88:7a:af:a9:ff: f0:94:a7:b9:f3:89:aa:1c:77:c0:ff:3a:15:91:d4:c2:02:5a: 22:b4:97:75:2e:a9:82:e5:ed:3b:01:cc:48:bf:bf:fc:e1:a2: 15:aa:5a:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdeze3nvwU1WcskGxnL/gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMTY3NzJlZmNlMmExMzNmYjdmODcyMDkyOWQwNTYwY2Vm MWRiNDYwHhcNMjUxMjE2MDAwMTA2WhcNMjUxMjE3MDAwMTA2WjAzMTEwLwYDVQQD Eyg2OGY4NTRhYjMwNGNlM2RiODczYzI1NjBiZGFhOTk2YjhjMDBiZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysy+Mf08ydeySUKAT8BYgJLi8JDi lCBpXP2Bo/wLtOpcT+p0wG2u4yiioA18XjwEGkOUDpxXpRlVG0RGUosxvdUAzWQ8 fGeG41KxRQ5q5b4PRxGkrdgr3LT4Rz7DOjjANmMQYQ54gWEh1vO39QBW8TO3XllJ ClX9shbY+rdfsT8/IM6UtjJGIQ/P015ziUWQRVfKRzuEZyhekQZDD57y5hy0SAB9 J7n5bp6MhdE1Fwkj3F08nJC/ijrSPeIkEd5YgutvZtjIUo1vRxRK3ECHjDYr3TAM 1LxBZbRH47U5P/K5TEXPiBjd3eevs3pyau1WJN5qccC52C+H5nC9vw5B4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGj4VKswTOPbhzwlYL2qmWuMAL9EMB8GA1UdIwQY MBaAFHMWdy784qEz+3+HIJKdBWDO8dtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80ZThkNTctNTNjYS00OWM1LTk3ZWYt MWM4NzZkYjQ0ZmUyLzEvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80ZThkNTctNTNjYS00OWM1LTk3ZWYtMWM4NzZkYjQ0ZmUy LzEvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACX0fs0uM eaMrcSlWy4rbLxAChU3tatjzgach8ZOxPAkPXsBmHkHa8nvZi9wXkmarHEHppGoV OlvUotK+OIr1T9iBALMY53nHv+RY6qtrouEmXvCDidWTTVieM+tsrTSlgWJXgMFE jX531ZxA/rdqA1xOyi1pEHvOvdGgMFRcw9cz/EovgoirAYZ0kCip34+YMVua5H96 q/ibPhqLnvRzXgyPT6s529/YHm/UTHeh5EJK7zQoQHha6yg12kWSzP6SXvwI7ezF R0j1+8ZT1uqbLPctJoh6r6n/8JSnufOJqhx3wP86FZHUwgJaIrSXdS6pguXtOwHM SL+//OGiFapagA== -----END CERTIFICATE-----Generated at Tue Dec 16 03:12:21 2025 by rpki-client