This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json) Hash identifier: AEBRfxvwqYdX3wEjmxnFU3FqYSU0WAyZV8z67ZpIey8= Subject key identifier: 9F:08:C9:64:23:33:49:9D:06:05:DA:93:D4:D5:76:C2:90:1B:1D:91 Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Certificate serial: 019B3456FAE1DA0F55E17379CFEAFF885481 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft Manifest number: 1799 Signing time: Fri 19 Dec 2025 02:01:13 +0000 Manifest this update: Fri 19 Dec 2025 02:01:13 +0000 Manifest next update: Sat 20 Dec 2025 02:01:13 +0000 Files and hashes: 1: 1qKATTVt2l9Amr30ivUd4qpcDQ8.roa (hash: D9mOfQXdZlNktupQVZacZwiNwms/ptwHflaY7QzV5Xk=) 2: 54AIlsCbzgy0XCYwE0wdAC4kiqw.roa (hash: yJyuDkNiVUNUnxXEpeacfSUjn5at6QtcOaws+zppt2w=) 3: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: tTSpY3oAd46g/M2W9h4X9PQ7Bp9X7eagDW5weGyudNc=) 4: XSix0k71H2Zb9YIt04I-2-4I8sA.roa (hash: tLM6K/svH3mdt3MnB92tM359DcHoAYR6hLSIdF3Sjb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:fa:e1:da:0f:55:e1:73:79:cf:ea:ff:88:54:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Validity Not Before: Dec 19 02:01:13 2025 GMT Not After : Dec 20 02:01:13 2025 GMT Subject: CN=9f08c9642333499d0605da93d4d576c2901b1d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f2:de:28:38:b3:13:91:4b:d0:d1:71:61:e2: 41:8a:c0:66:4a:80:dc:d5:04:a0:d5:df:2c:8c:68: 2a:5a:50:13:9e:bc:15:e1:23:b1:6e:77:b7:ff:15: 24:62:be:a7:f2:38:ce:0a:0d:6a:9b:77:53:e7:6d: 27:b9:0d:ed:b6:51:35:6f:a5:19:e2:77:78:4c:8c: 21:fd:d6:05:2b:bf:18:18:ed:b5:4b:22:87:95:3f: 67:e5:a0:b5:38:af:bf:57:dd:4d:a0:4f:2b:e3:5b: ed:68:77:6d:60:f6:1e:2f:de:5b:47:1a:37:7d:b5: 5c:6a:74:bd:d9:eb:0a:89:20:18:8c:8a:c1:ff:e6: 45:47:b0:a4:c9:ed:62:03:80:e5:44:55:a6:1d:94: 1e:d3:15:77:3f:e8:43:4a:89:30:df:a1:13:f6:40: b1:21:72:93:91:af:67:f8:67:d1:7e:7e:1c:9a:5a: c3:51:4b:98:37:2f:50:52:bc:6f:d8:e4:71:fd:05: 44:37:f1:f1:e8:d3:10:99:63:f8:b0:41:c9:06:45: 03:96:e2:30:16:0a:01:d9:02:ac:27:95:70:69:ba: 50:b7:e1:00:31:cf:a6:2a:81:07:06:ac:bb:e6:8b: 8a:b9:d4:48:00:44:11:61:cb:89:17:52:1b:7d:0e: 23:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:08:C9:64:23:33:49:9D:06:05:DA:93:D4:D5:76:C2:90:1B:1D:91 X509v3 Authority Key Identifier: keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:49:40:0e:ca:49:65:7f:2e:a9:c6:68:1a:e6:3b:51:3e:64: c2:bc:06:f1:53:34:75:b7:ad:58:df:f1:b0:4c:94:61:65:2f: 0e:80:77:db:2a:46:4d:55:a2:9e:8c:53:60:ed:cc:9f:9f:f2: d0:4e:9f:37:df:8d:ed:a9:5a:28:9a:6f:99:68:f8:da:5a:08: b1:0b:d7:3b:13:50:99:cd:02:61:45:23:73:8d:66:3d:d5:5e: 78:29:1b:b2:ea:d4:4a:11:fe:3d:7f:76:d0:3d:96:0d:79:e7: 02:48:7b:da:68:ac:3d:69:84:9d:6c:24:ba:26:c1:6b:25:0c: 91:5e:9c:ec:50:e3:8a:42:72:0c:ca:2a:a0:6e:da:80:89:40: 54:b9:e4:d8:05:0a:01:8d:10:30:47:15:27:6b:c7:90:e5:d9: 7d:a4:a2:0e:1c:04:52:f9:3c:1d:00:22:c6:68:16:61:2c:a3: 68:60:55:c5:5c:d3:61:5f:6b:5f:d7:ee:03:b3:d1:64:24:92: 00:d1:a4:cb:8a:5d:ec:90:43:03:24:4d:a4:40:31:6a:0e:9b: 3c:ae:2b:f3:18:a0:a9:2b:3e:1d:60:3d:61:1b:ec:86:65:6b: e7:72:33:aa:5d:b5:ef:b9:aa:10:33:1e:ef:07:82:34:be:80: 08:60:b6:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0Vvrh2g9V4XN5z+r/iFSBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWU3MmYzZDA5NTdmNWE2ZTNiZDFiODQ0YTEyYTYxNDc0 NDkwMjcwHhcNMjUxMjE5MDIwMTEzWhcNMjUxMjIwMDIwMTEzWjAzMTEwLwYDVQQD Eyg5ZjA4Yzk2NDIzMzM0OTlkMDYwNWRhOTNkNGQ1NzZjMjkwMWIxZDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvLeKDizE5FL0NFxYeJBisBmSoDc 1QSg1d8sjGgqWlATnrwV4SOxbne3/xUkYr6n8jjOCg1qm3dT520nuQ3ttlE1b6UZ 4nd4TIwh/dYFK78YGO21SyKHlT9n5aC1OK+/V91NoE8r41vtaHdtYPYeL95bRxo3 fbVcanS92esKiSAYjIrB/+ZFR7Ckye1iA4DlRFWmHZQe0xV3P+hDSokw36ET9kCx IXKTka9n+GfRfn4cmlrDUUuYNy9QUrxv2ORx/QVEN/Hx6NMQmWP4sEHJBkUDluIw FgoB2QKsJ5VwabpQt+EAMc+mKoEHBqy75ouKudRIAEQRYcuJF1IbfQ4jWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8IyWQjM0mdBgXak9TVdsKQGx2RMB8GA1UdIwQY MBaAFAsecvPQlX9abjvRuEShKmFHRJAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQt MDU0OGQzODk1YTU1LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQtMDU0OGQzODk1YTU1 LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUlADspJ ZX8uqcZoGuY7UT5kwrwG8VM0dbetWN/xsEyUYWUvDoB32ypGTVWinoxTYO3Mn5/y 0E6fN9+N7alaKJpvmWj42loIsQvXOxNQmc0CYUUjc41mPdVeeCkbsurUShH+PX92 0D2WDXnnAkh72misPWmEnWwkuibBayUMkV6c7FDjikJyDMoqoG7agIlAVLnk2AUK AY0QMEcVJ2vHkOXZfaSiDhwEUvk8HQAixmgWYSyjaGBVxVzTYV9rX9fuA7PRZCSS ANGky4pd7JBDAyRNpEAxag6bPK4r8xigqSs+HWA9YRvshmVr53Izql2177mqEDMe 7weCNL6ACGC2Qw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:43:27 2025 by rpki-client