This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft File: C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json) Hash identifier: jlu9ZuPaOS9sgONqC42KpB02nrm3kyBvX5sQQbN0TX8= Subject key identifier: C9:B5:B2:01:A0:EC:D5:2A:74:EB:79:63:52:76:7B:F7:55:7A:2A:9F Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62 Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262 Certificate serial: 019B50E09E51E0B6B14A330B7C94D1450F1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 15:00:56 +0000 Manifest this update: Wed 24 Dec 2025 15:00:56 +0000 Manifest next update: Thu 25 Dec 2025 15:00:56 +0000 Files and hashes: 1: BW3A__rx2CbIUTDEiMn83o5J6Rc.roa (hash: +W0IBSEcBlBjIDnc0zQLUrT47ugJKv3Fw0kJeub5rgs=) 2: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: S+QXqh8NtSJG8/PtI4X98NIdAXdGoY7TRdr6onjmpKg=) 3: ZmpmEj8tTClsfSBpmsl4GJc3wGI.roa (hash: j1YLYo9zhTMcstPOsjWFmkSiW90BAcTxpdKCd+nR3wg=) 4: kzlKteCWTjnwW6-aHGmzKaU89Tk.roa (hash: dZAgMsY9EZwDfLHL+nyzOll7nSrz5A+eCW3/ALWgVNM=) 5: zsrXwoAzaFEZ3CqmFCvRx34vf6s.roa (hash: F1hV7z0LQUY2X5RuZU9RZBKCovp02y2W3daH45B8zgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:9e:51:e0:b6:b1:4a:33:0b:7c:94:d1:45:0f:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262 Validity Not Before: Dec 24 15:00:56 2025 GMT Not After : Dec 25 15:00:56 2025 GMT Subject: CN=c9b5b201a0ecd52a74eb796352767bf7557a2a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:ca:a7:ee:a6:57:e2:34:a5:ed:64:8e:de: 4c:4a:7c:f5:d9:de:02:5d:26:54:e5:bc:ce:27:fe: 91:f7:db:1c:a5:16:bd:9a:b4:96:35:a1:0d:21:b3: 66:82:86:dc:a4:ca:f7:8e:14:4d:00:41:ae:c9:e6: f9:a1:61:9f:73:f7:f9:7b:eb:ea:65:ef:f6:41:f0: 07:c8:d0:8e:76:29:e9:7b:82:bb:d3:d0:09:71:f9: ff:86:cd:d1:3f:13:1e:70:2e:9c:8b:6a:48:94:35: 93:fd:31:31:81:f4:fa:4c:e3:30:9d:12:2d:a5:00: 1b:5e:20:64:83:00:df:13:86:b6:5c:c1:00:81:49: 06:0d:ce:65:9b:7c:f7:23:a3:0d:e1:3d:d6:d7:16: 6d:43:e4:cc:d1:33:3a:d1:2f:a8:a7:bc:66:ed:94: 86:c5:d1:68:fc:af:cf:cb:ab:95:da:8b:43:68:66: 09:6d:37:05:ed:57:37:df:0e:3f:52:fb:87:1a:c6: 3e:67:01:94:1b:20:d5:cf:87:1a:c8:2c:d0:10:6a: 19:90:f8:9d:e8:04:ef:98:60:04:c4:0d:15:ae:84: c7:9a:68:c5:70:cb:1f:5a:69:aa:bb:1f:2c:dd:28: 5a:27:fe:35:28:e3:68:5b:a9:be:f8:b1:dd:7c:41: 7e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B5:B2:01:A0:EC:D5:2A:74:EB:79:63:52:76:7B:F7:55:7A:2A:9F X509v3 Authority Key Identifier: keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:cc:a8:c5:86:aa:3a:ff:2c:1e:1b:87:eb:3b:94:82:c0:84: 96:5a:90:d1:0c:70:c1:07:68:ac:fa:28:c5:f7:0a:7d:19:02: 2c:ae:f4:d4:f5:1a:ad:a7:74:b8:ce:51:d6:7c:88:fb:cc:c5: c9:37:a9:22:0c:0a:00:77:71:3c:8c:12:b0:25:27:29:04:32: 21:e1:3c:e9:d6:b9:19:16:d4:b6:38:9f:09:41:15:85:a2:ee: 0e:5a:79:d5:2f:fd:99:07:5a:d6:9a:73:88:0a:1b:90:38:5f: 58:7d:ca:14:76:07:81:a2:14:94:f3:86:f4:9a:ff:19:d8:eb: 48:7a:f0:05:bb:9e:c0:02:be:be:50:6c:21:f2:fe:be:d7:61: aa:92:da:3d:07:44:31:72:c1:4b:34:97:f1:87:1c:41:96:52: f3:16:8c:46:a9:a1:0b:74:1e:78:c5:26:f3:cb:d4:df:2e:ec: cb:6f:99:d1:ab:c7:e4:2c:81:87:4e:32:a8:65:d6:9e:1d:8e: 55:06:96:13:82:26:9c:90:d7:25:25:04:ea:2f:82:49:20:50: 2f:e8:e6:66:98:78:91:b8:2c:92:bd:ec:17:18:f7:22:11:c8: c0:ee:33:cf:4d:68:a1:3c:4c:21:8e:e7:62:55:a9:b6:52:4d: 48:af:cf:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4J5R4LaxSjMLfJTRRQ8fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWNhZjI2MmZkYmZjYzVmZjMwZTI4YTUxMDQ2NDZlMjdh ODkyNjIwHhcNMjUxMjI0MTUwMDU2WhcNMjUxMjI1MTUwMDU2WjAzMTEwLwYDVQQD EyhjOWI1YjIwMWEwZWNkNTJhNzRlYjc5NjM1Mjc2N2JmNzU1N2EyYTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYbKp+6mV+I0pe1kjt5MSnz12d4C XSZU5bzOJ/6R99scpRa9mrSWNaENIbNmgobcpMr3jhRNAEGuyeb5oWGfc/f5e+vq Ze/2QfAHyNCOdinpe4K709AJcfn/hs3RPxMecC6ci2pIlDWT/TExgfT6TOMwnRIt pQAbXiBkgwDfE4a2XMEAgUkGDc5lm3z3I6MN4T3W1xZtQ+TM0TM60S+op7xm7ZSG xdFo/K/Py6uV2otDaGYJbTcF7Vc33w4/UvuHGsY+ZwGUGyDVz4cayCzQEGoZkPid 6ATvmGAExA0VroTHmmjFcMsfWmmqux8s3ShaJ/41KONoW6m++LHdfEF+iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMm1sgGg7NUqdOt5Y1J2e/dVeiqfMB8GA1UdIwQY MBaAFAtcryYv2/zF/zDiilEEZG4nqJJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEt ZGYxZTk1ZDdlZGQ5LzEvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEtZGYxZTk1ZDdlZGQ5 LzEvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8yoxYaq Ov8sHhuH6zuUgsCEllqQ0QxwwQdorPooxfcKfRkCLK701PUarad0uM5R1nyI+8zF yTepIgwKAHdxPIwSsCUnKQQyIeE86da5GRbUtjifCUEVhaLuDlp51S/9mQda1ppz iAobkDhfWH3KFHYHgaIUlPOG9Jr/GdjrSHrwBbuewAK+vlBsIfL+vtdhqpLaPQdE MXLBSzSX8YccQZZS8xaMRqmhC3QeeMUm88vU3y7sy2+Z0avH5CyBh04yqGXWnh2O VQaWE4ImnJDXJSUE6i+CSSBQL+jmZph4kbgskr3sFxj3IhHIwO4zz01ooTxMIY7n YlWptlJNSK/PKQ== -----END CERTIFICATE-----Generated at Wed Dec 24 18:07:19 2025 by rpki-client