This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json) Hash identifier: zoKxbzTAdV8an7GBxkzUGo+3IV2WKXNgHthwaPCaZx4= Subject key identifier: 61:35:5E:A3:39:7D:42:9F:49:D3:94:80:F0:7F:05:07:11:1D:0A:FF Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Certificate serial: 019B07EBA68242415F1B46C87FD03432F05B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft Manifest number: 1782 Signing time: Wed 10 Dec 2025 11:00:42 +0000 Manifest this update: Wed 10 Dec 2025 11:00:42 +0000 Manifest next update: Thu 11 Dec 2025 11:00:42 +0000 Files and hashes: 1: 1qKATTVt2l9Amr30ivUd4qpcDQ8.roa (hash: D9mOfQXdZlNktupQVZacZwiNwms/ptwHflaY7QzV5Xk=) 2: 54AIlsCbzgy0XCYwE0wdAC4kiqw.roa (hash: yJyuDkNiVUNUnxXEpeacfSUjn5at6QtcOaws+zppt2w=) 3: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: Jow7w8Ld3dMzfUfmRnX+CC/yU4ZRgLiB63Abp7j5bJs=) 4: XSix0k71H2Zb9YIt04I-2-4I8sA.roa (hash: tLM6K/svH3mdt3MnB92tM359DcHoAYR6hLSIdF3Sjb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:eb:a6:82:42:41:5f:1b:46:c8:7f:d0:34:32:f0:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Validity Not Before: Dec 10 11:00:42 2025 GMT Not After : Dec 11 11:00:42 2025 GMT Subject: CN=61355ea3397d429f49d39480f07f0507111d0aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:87:04:8c:8d:c9:48:22:9e:50:10:f2:1a:48: 09:18:0e:3f:b7:3b:6d:fc:23:60:a5:10:47:b2:4d: 5c:72:df:b0:78:6c:9f:ea:fd:ae:3d:46:d7:d1:bb: f4:bd:d1:d2:85:1f:97:c1:f4:94:17:da:bc:c4:c3: ea:b0:7a:ec:75:a4:f9:a1:04:0a:d5:e1:72:bd:45: d1:6c:80:7a:f8:09:50:ce:bf:21:20:bb:b5:47:e8: ed:31:f8:09:e1:07:09:2a:b8:89:51:b2:f4:13:04: 6d:9c:6d:a7:42:c0:53:16:a5:78:ba:5a:6c:b5:09: d6:56:e0:42:5c:2b:4c:0a:13:eb:3e:88:cd:d4:53: 13:fe:84:f4:9d:bb:c6:3e:04:03:9c:67:7f:23:3a: 35:72:fc:7b:7f:02:71:d2:c0:75:55:c6:8d:57:20: f5:93:3d:65:f1:ca:06:50:18:81:2d:4a:15:fa:f0: e1:e6:ae:a8:9c:f6:a3:6b:34:fb:6b:82:67:ee:fc: a5:6c:8d:2e:41:7c:55:96:90:9e:57:44:a2:f9:24: ec:07:64:14:7b:1b:04:40:63:ee:cc:14:51:f6:f9: 56:ef:b1:7f:15:b2:be:a7:32:96:56:45:09:56:0e: 93:b1:ad:57:ad:0a:12:6b:13:f2:7b:e1:40:33:fe: 4a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:35:5E:A3:39:7D:42:9F:49:D3:94:80:F0:7F:05:07:11:1D:0A:FF X509v3 Authority Key Identifier: keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:b8:f7:c9:8c:f7:00:fc:8d:1a:5b:c4:31:f9:db:5f:24:63: af:78:90:34:48:60:0d:7d:94:ff:79:d8:55:67:92:2e:8b:b3: 7a:f2:59:d7:9b:a4:19:7e:e3:59:13:cf:fa:4e:c0:90:2a:cb: fc:dc:44:df:c5:d7:1e:50:ca:25:a9:cb:07:99:2b:93:2f:56: 71:4a:d0:19:c3:18:bd:86:03:f3:2d:3d:50:96:be:a7:a5:c8: 8f:9e:a2:bb:9d:80:ec:54:5b:e1:50:8e:f2:0e:10:fc:b2:f6: d2:b6:40:3b:4f:8f:67:f9:47:e8:6d:97:00:57:3f:11:06:c7: 96:6a:31:4f:ed:eb:10:9e:33:31:aa:23:06:8c:57:ba:5a:44: e3:d0:1b:03:fc:43:ee:cd:06:f4:e9:60:5a:8d:f0:63:3d:6b: 4f:11:3b:80:f6:a4:4c:e5:86:f4:bb:1e:a3:fb:7b:62:61:5e: 03:a5:22:81:6f:c4:9f:bc:0c:2a:d1:01:c2:22:b9:2e:51:e0: 94:77:68:cf:03:67:28:ac:55:48:95:11:ee:2e:7f:b6:ee:42: 5a:05:10:dc:c4:7d:bd:66:f5:00:42:97:8f:b6:24:23:9a:09: 92:8c:44:47:8b:97:eb:e1:c0:55:7d:2a:a6:3a:05:82:16:44: 19:26:03:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsH66aCQkFfG0bIf9A0MvBbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWU3MmYzZDA5NTdmNWE2ZTNiZDFiODQ0YTEyYTYxNDc0 NDkwMjcwHhcNMjUxMjEwMTEwMDQyWhcNMjUxMjExMTEwMDQyWjAzMTEwLwYDVQQD Eyg2MTM1NWVhMzM5N2Q0MjlmNDlkMzk0ODBmMDdmMDUwNzExMWQwYWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54cEjI3JSCKeUBDyGkgJGA4/tztt /CNgpRBHsk1cct+weGyf6v2uPUbX0bv0vdHShR+XwfSUF9q8xMPqsHrsdaT5oQQK 1eFyvUXRbIB6+AlQzr8hILu1R+jtMfgJ4QcJKriJUbL0EwRtnG2nQsBTFqV4ulps tQnWVuBCXCtMChPrPojN1FMT/oT0nbvGPgQDnGd/Izo1cvx7fwJx0sB1VcaNVyD1 kz1l8coGUBiBLUoV+vDh5q6onPajazT7a4Jn7vylbI0uQXxVlpCeV0Si+STsB2QU exsEQGPuzBRR9vlW77F/FbK+pzKWVkUJVg6Tsa1XrQoSaxPye+FAM/5KKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGE1XqM5fUKfSdOUgPB/BQcRHQr/MB8GA1UdIwQY MBaAFAsecvPQlX9abjvRuEShKmFHRJAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQt MDU0OGQzODk1YTU1LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQtMDU0OGQzODk1YTU1 LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtLj3yYz3 APyNGlvEMfnbXyRjr3iQNEhgDX2U/3nYVWeSLouzevJZ15ukGX7jWRPP+k7AkCrL /NxE38XXHlDKJanLB5krky9WcUrQGcMYvYYD8y09UJa+p6XIj56iu52A7FRb4VCO 8g4Q/LL20rZAO0+PZ/lH6G2XAFc/EQbHlmoxT+3rEJ4zMaojBoxXulpE49AbA/xD 7s0G9OlgWo3wYz1rTxE7gPakTOWG9Lseo/t7YmFeA6UigW/En7wMKtEBwiK5LlHg lHdozwNnKKxVSJUR7i5/tu5CWgUQ3MR9vWb1AEKXj7YkI5oJkoxER4uX6+HAVX0q pjoFghZEGSYDEA== -----END CERTIFICATE-----Generated at Wed Dec 10 18:22:18 2025 by rpki-client