This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft File: C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json) Hash identifier: XTcy4soJi0BZxwL7Jkk6MVPQYVF84VGnoX1VcI3Ianw= Subject key identifier: 59:95:3D:A0:97:2D:77:9D:41:9E:3A:7F:87:8F:FE:1A:F1:8F:B7:7B Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62 Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262 Certificate serial: 019B3D90E13B6872ACA4D7D5BE253D3AFA42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 21:01:03 +0000 Manifest this update: Sat 20 Dec 2025 21:01:03 +0000 Manifest next update: Sun 21 Dec 2025 21:01:03 +0000 Files and hashes: 1: BW3A__rx2CbIUTDEiMn83o5J6Rc.roa (hash: +W0IBSEcBlBjIDnc0zQLUrT47ugJKv3Fw0kJeub5rgs=) 2: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: qT3hQapOymDfB616j1wIg7idP797el1BXcaZFyFMmSM=) 3: ZmpmEj8tTClsfSBpmsl4GJc3wGI.roa (hash: j1YLYo9zhTMcstPOsjWFmkSiW90BAcTxpdKCd+nR3wg=) 4: kzlKteCWTjnwW6-aHGmzKaU89Tk.roa (hash: dZAgMsY9EZwDfLHL+nyzOll7nSrz5A+eCW3/ALWgVNM=) 5: zsrXwoAzaFEZ3CqmFCvRx34vf6s.roa (hash: F1hV7z0LQUY2X5RuZU9RZBKCovp02y2W3daH45B8zgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:e1:3b:68:72:ac:a4:d7:d5:be:25:3d:3a:fa:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262 Validity Not Before: Dec 20 21:01:03 2025 GMT Not After : Dec 21 21:01:03 2025 GMT Subject: CN=59953da0972d779d419e3a7f878ffe1af18fb77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dd:62:0f:f8:24:95:17:bc:8f:78:08:e3:cf: bb:fd:65:47:a8:f1:e9:0a:aa:1a:a1:88:c4:89:43: 4d:90:b1:bf:61:f9:cf:66:f8:65:46:4f:3a:fd:55: c4:c7:56:79:80:d3:99:81:d2:40:59:1e:48:b1:67: 76:70:5e:0f:e1:4b:07:df:b6:2b:11:fe:a5:91:b8: 1c:59:ed:b6:ca:64:cb:30:0d:e4:5c:31:bd:c8:57: 99:19:0b:76:f3:4c:34:b0:3d:8e:d0:df:04:ad:83: c6:45:31:ab:e6:26:33:70:a0:0e:c8:d5:6f:40:1d: 68:6f:14:da:c4:06:17:27:35:28:42:c5:90:53:a2: e2:00:e4:95:fd:f5:76:4c:8c:4c:c2:79:76:39:30: 68:95:4a:2e:86:36:95:59:df:95:bd:65:d5:bb:d4: b8:30:50:26:03:24:c4:df:e2:af:f7:aa:64:8a:e9: 02:69:2b:11:22:ef:d7:80:2f:8d:32:2b:b0:4e:fe: 5d:24:27:66:07:c2:8b:15:7a:74:7c:2d:76:98:b7: 31:38:b0:0f:00:5d:b0:2a:c0:de:05:30:e0:20:7b: b2:7c:f8:fa:8f:0d:ae:13:9d:2c:dc:d1:95:d9:f8: 9f:12:2f:49:bb:81:ef:da:3c:97:ff:f8:14:05:92: dc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:95:3D:A0:97:2D:77:9D:41:9E:3A:7F:87:8F:FE:1A:F1:8F:B7:7B X509v3 Authority Key Identifier: keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:7d:8d:a7:9f:65:59:3c:9e:21:da:4e:b2:6c:f8:81:3a:f5: d0:9d:0a:8b:19:f1:88:f7:76:7e:61:cf:91:2d:61:35:26:16: 6c:e0:31:90:10:c1:d6:f2:d0:28:53:e8:b4:a2:36:23:73:b6: 7e:f6:68:1f:78:ba:94:94:c9:95:24:f7:49:9b:42:c8:9a:0d: b9:91:6f:5e:c0:30:16:66:e5:d7:c7:24:17:c5:ae:25:21:d4: f6:cf:6b:2c:38:06:f6:ff:ca:4b:af:41:57:df:06:2d:e1:fe: 89:02:f1:de:7b:17:15:f6:45:0f:02:54:53:53:49:e3:6e:81: 65:c1:c9:94:f5:18:35:6e:ac:f8:9f:80:9e:ee:64:3a:f1:11: 6a:1a:eb:98:7f:a8:93:64:a1:1e:cc:ab:85:0a:5c:da:55:10: d0:ec:8c:29:71:e4:41:ae:20:df:38:e3:af:e4:09:c5:99:78: a0:1c:3b:8d:0d:71:cf:0b:62:0f:19:58:17:9c:ce:c0:9f:09: 12:91:b0:cd:e5:78:9b:33:a7:30:39:62:70:31:61:ad:ae:b7: 09:44:4a:4e:c3:6d:d6:28:bc:dc:33:d0:35:03:1c:02:ac:f3: 8f:c7:b9:9c:9f:bd:31:b4:e5:42:5d:be:bd:3b:74:30:8c:a2: 20:fa:9b:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kOE7aHKspNfVviU9OvpCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWNhZjI2MmZkYmZjYzVmZjMwZTI4YTUxMDQ2NDZlMjdh ODkyNjIwHhcNMjUxMjIwMjEwMTAzWhcNMjUxMjIxMjEwMTAzWjAzMTEwLwYDVQQD Eyg1OTk1M2RhMDk3MmQ3NzlkNDE5ZTNhN2Y4NzhmZmUxYWYxOGZiNzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N1iD/gklRe8j3gI48+7/WVHqPHp CqoaoYjEiUNNkLG/YfnPZvhlRk86/VXEx1Z5gNOZgdJAWR5IsWd2cF4P4UsH37Yr Ef6lkbgcWe22ymTLMA3kXDG9yFeZGQt280w0sD2O0N8ErYPGRTGr5iYzcKAOyNVv QB1obxTaxAYXJzUoQsWQU6LiAOSV/fV2TIxMwnl2OTBolUouhjaVWd+VvWXVu9S4 MFAmAyTE3+Kv96pkiukCaSsRIu/XgC+NMiuwTv5dJCdmB8KLFXp0fC12mLcxOLAP AF2wKsDeBTDgIHuyfPj6jw2uE50s3NGV2fifEi9Ju4Hv2jyX//gUBZLccQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmVPaCXLXedQZ46f4eP/hrxj7d7MB8GA1UdIwQY MBaAFAtcryYv2/zF/zDiilEEZG4nqJJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEt ZGYxZTk1ZDdlZGQ5LzEvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEtZGYxZTk1ZDdlZGQ5 LzEvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFH2Np59l WTyeIdpOsmz4gTr10J0KixnxiPd2fmHPkS1hNSYWbOAxkBDB1vLQKFPotKI2I3O2 fvZoH3i6lJTJlST3SZtCyJoNuZFvXsAwFmbl18ckF8WuJSHU9s9rLDgG9v/KS69B V98GLeH+iQLx3nsXFfZFDwJUU1NJ426BZcHJlPUYNW6s+J+Anu5kOvERahrrmH+o k2ShHsyrhQpc2lUQ0OyMKXHkQa4g3zjjr+QJxZl4oBw7jQ1xzwtiDxlYF5zOwJ8J EpGwzeV4mzOnMDlicDFhra63CURKTsNt1ii83DPQNQMcAqzzj8e5nJ+9MbTlQl2+ vTt0MIyiIPqb/A== -----END CERTIFICATE-----Generated at Sat Dec 20 22:43:08 2025 by rpki-client