This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json) Hash identifier: FcUp23abo1PRH7GSSa78a3dwPVUVc5EOoGD6gocma0M= Subject key identifier: 73:58:D3:E3:6D:67:7C:15:78:E3:C9:D4:89:1F:F9:CD:48:67:0C:E1 Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Certificate serial: 019B1B3BE8310FAEED753ED095B748118380 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft Manifest number: 178C Signing time: Sun 14 Dec 2025 05:01:09 +0000 Manifest this update: Sun 14 Dec 2025 05:01:09 +0000 Manifest next update: Mon 15 Dec 2025 05:01:09 +0000 Files and hashes: 1: 1qKATTVt2l9Amr30ivUd4qpcDQ8.roa (hash: D9mOfQXdZlNktupQVZacZwiNwms/ptwHflaY7QzV5Xk=) 2: 54AIlsCbzgy0XCYwE0wdAC4kiqw.roa (hash: yJyuDkNiVUNUnxXEpeacfSUjn5at6QtcOaws+zppt2w=) 3: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: nY9TJzKwHD2ILXaAhuX8JlIvAXTwV1TpcVkrC/vZXJI=) 4: XSix0k71H2Zb9YIt04I-2-4I8sA.roa (hash: tLM6K/svH3mdt3MnB92tM359DcHoAYR6hLSIdF3Sjb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:e8:31:0f:ae:ed:75:3e:d0:95:b7:48:11:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Validity Not Before: Dec 14 05:01:09 2025 GMT Not After : Dec 15 05:01:09 2025 GMT Subject: CN=7358d3e36d677c1578e3c9d4891ff9cd48670ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:27:9e:ef:4f:c2:26:61:e4:98:90:56:ff: 9a:35:29:09:0f:57:10:60:7c:53:af:bf:44:02:7a: c5:9e:83:e2:cb:db:8c:89:33:aa:c5:38:2a:f5:de: d3:a6:32:f3:e2:01:68:c2:43:3b:b3:d7:69:4e:8c: 72:7b:db:51:d4:16:1d:2d:ca:9d:af:49:22:2a:66: be:48:4e:64:80:49:94:a6:24:5d:88:c7:47:ab:99: f0:c1:85:a8:ec:9c:d3:9b:29:bb:1d:f0:95:3d:1e: e3:18:0a:a9:a7:e5:bc:a0:90:74:7e:e1:a7:93:80: 81:b8:6c:47:8b:12:27:f7:a4:db:3a:9a:a4:3a:e7: b0:45:16:85:4f:29:c4:8d:e2:d8:20:fc:d7:71:52: a0:c7:72:b3:b8:0d:20:86:3c:5f:7d:b4:39:35:58: af:d7:2b:af:2c:94:23:f1:9b:89:82:f4:d9:53:11: f2:b2:4b:82:b7:28:d2:1d:a2:34:de:82:0b:cc:e8: 27:61:07:75:04:ac:96:e2:e9:86:8f:2c:cd:64:87: 4a:12:28:87:63:22:1f:67:18:ad:48:c7:da:d2:6b: 45:5c:1a:c9:8c:8d:a6:68:45:0e:92:84:26:7c:ec: fb:28:47:08:08:e7:3f:95:9e:fd:28:cc:d4:61:7d: 1d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:58:D3:E3:6D:67:7C:15:78:E3:C9:D4:89:1F:F9:CD:48:67:0C:E1 X509v3 Authority Key Identifier: keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:50:46:63:bf:bd:c2:5d:17:a9:e7:b5:ff:35:ae:bc:06:bc: e5:03:ed:fd:21:d2:3e:fd:17:4a:2b:1d:d0:8e:ca:79:93:e7: 87:c5:75:39:c8:3b:30:c9:32:b8:89:fc:d3:5a:c2:27:cb:aa: 4e:47:f5:00:f4:4e:92:36:0a:74:29:11:e0:f9:2b:69:d8:88: b6:6a:85:06:3d:f3:c9:58:55:47:37:a1:e3:73:46:ad:69:a7: 90:46:04:72:77:86:7d:08:68:a6:df:32:fb:fc:4a:bc:35:cb: 90:e4:f7:cb:fc:fd:9e:ee:92:8f:78:1c:e7:52:09:0f:19:f4: 3b:1e:a8:9d:32:36:d0:22:f6:04:dd:51:fa:14:19:80:b7:c2: cc:23:36:19:53:5d:5b:3f:0f:b2:bd:0f:ca:84:d1:5d:c3:e0: b2:45:3b:f5:ec:0d:69:d0:95:ba:45:cc:f5:97:61:a5:2b:b4: e4:4b:f1:96:7f:e4:0a:f9:1e:14:c9:67:55:3a:13:f7:a9:e9: 76:ce:b6:12:25:a3:a3:a2:79:ee:bc:45:6e:2f:c8:79:d7:05: 30:f3:b6:a5:98:d4:d8:4d:58:f4:de:e8:ae:c8:c1:01:a3:f2: cf:20:1d:98:e5:d0:6e:ce:71:52:23:c3:7b:73:41:55:3a:8e: 7c:bb:5d:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO+gxD67tdT7QlbdIEYOAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWU3MmYzZDA5NTdmNWE2ZTNiZDFiODQ0YTEyYTYxNDc0 NDkwMjcwHhcNMjUxMjE0MDUwMTA5WhcNMjUxMjE1MDUwMTA5WjAzMTEwLwYDVQQD Eyg3MzU4ZDNlMzZkNjc3YzE1NzhlM2M5ZDQ4OTFmZjljZDQ4NjcwY2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLMnnu9PwiZh5JiQVv+aNSkJD1cQ YHxTr79EAnrFnoPiy9uMiTOqxTgq9d7TpjLz4gFowkM7s9dpToxye9tR1BYdLcqd r0kiKma+SE5kgEmUpiRdiMdHq5nwwYWo7JzTmym7HfCVPR7jGAqpp+W8oJB0fuGn k4CBuGxHixIn96TbOpqkOuewRRaFTynEjeLYIPzXcVKgx3KzuA0ghjxffbQ5NViv 1yuvLJQj8ZuJgvTZUxHyskuCtyjSHaI03oILzOgnYQd1BKyW4umGjyzNZIdKEiiH YyIfZxitSMfa0mtFXBrJjI2maEUOkoQmfOz7KEcICOc/lZ79KMzUYX0dJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNY0+NtZ3wVeOPJ1Ikf+c1IZwzhMB8GA1UdIwQY MBaAFAsecvPQlX9abjvRuEShKmFHRJAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQt MDU0OGQzODk1YTU1LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQtMDU0OGQzODk1YTU1 LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVBGY7+9 wl0Xqee1/zWuvAa85QPt/SHSPv0XSisd0I7KeZPnh8V1Ocg7MMkyuIn801rCJ8uq Tkf1APROkjYKdCkR4PkradiItmqFBj3zyVhVRzeh43NGrWmnkEYEcneGfQhopt8y +/xKvDXLkOT3y/z9nu6Sj3gc51IJDxn0Ox6onTI20CL2BN1R+hQZgLfCzCM2GVNd Wz8Psr0PyoTRXcPgskU79ewNadCVukXM9ZdhpSu05Evxln/kCvkeFMlnVToT96np ds62EiWjo6J57rxFbi/IedcFMPO2pZjU2E1Y9N7orsjBAaPyzyAdmOXQbs5xUiPD e3NBVTqOfLtd0g== -----END CERTIFICATE-----Generated at Sun Dec 14 09:34:06 2025 by rpki-client