This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft File: C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json) Hash identifier: zzxX2JGb/Ml5NNeMqxAVltqldLXpZ3AUCcjWgCQSG8I= Subject key identifier: B3:F9:AB:33:93:3A:2E:B6:E8:2B:93:41:C9:4B:F4:B4:26:70:39:10 Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62 Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262 Certificate serial: 019B0F37CC14A73D2A58FD1ABFEC6765EAB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 21:01:13 +0000 Manifest this update: Thu 11 Dec 2025 21:01:13 +0000 Manifest next update: Fri 12 Dec 2025 21:01:13 +0000 Files and hashes: 1: BW3A__rx2CbIUTDEiMn83o5J6Rc.roa (hash: +W0IBSEcBlBjIDnc0zQLUrT47ugJKv3Fw0kJeub5rgs=) 2: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: XdWGvQ5V/GkeCx6hQI+TshgREqvVKwyH7zezD8BNXug=) 3: ZmpmEj8tTClsfSBpmsl4GJc3wGI.roa (hash: j1YLYo9zhTMcstPOsjWFmkSiW90BAcTxpdKCd+nR3wg=) 4: kzlKteCWTjnwW6-aHGmzKaU89Tk.roa (hash: dZAgMsY9EZwDfLHL+nyzOll7nSrz5A+eCW3/ALWgVNM=) 5: zsrXwoAzaFEZ3CqmFCvRx34vf6s.roa (hash: F1hV7z0LQUY2X5RuZU9RZBKCovp02y2W3daH45B8zgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:cc:14:a7:3d:2a:58:fd:1a:bf:ec:67:65:ea:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262 Validity Not Before: Dec 11 21:01:13 2025 GMT Not After : Dec 12 21:01:13 2025 GMT Subject: CN=b3f9ab33933a2eb6e82b9341c94bf4b426703910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bf:c1:33:38:2d:7c:93:5e:07:14:0d:a0:de: 35:e6:36:01:74:3d:c7:e5:f2:35:b2:d0:ce:6c:da: a6:da:4a:4d:df:28:17:6e:46:e8:04:17:ab:97:eb: 03:2c:e8:d7:12:e1:e0:07:5a:73:80:cd:53:36:6b: ce:ec:0b:f6:96:29:40:ed:24:f8:f8:6e:b0:9d:c9: 17:af:07:8f:0a:e6:80:88:3a:14:60:36:bc:ae:ec: 2b:8a:51:50:16:25:ad:5f:d4:1f:8b:ad:2a:38:50: b0:7c:83:f8:69:5b:aa:3c:10:d9:84:3a:c0:aa:4e: 1f:c7:45:be:b7:d2:de:e6:9e:7c:50:da:d8:bc:d4: 66:69:b0:2d:33:2a:56:52:55:2e:37:c8:c4:a1:f7: 0a:49:e3:93:67:13:46:7f:0b:c6:c6:c4:ef:ef:da: 2b:6f:64:03:e1:b1:58:cc:c4:9a:98:ea:9a:56:41: 0a:08:10:ee:56:fa:f4:65:41:ab:64:bc:07:75:c2: 47:e2:11:10:72:e4:8c:38:5c:68:04:9e:56:be:e4: 98:8e:e9:1b:0e:47:9b:e8:56:1c:a1:0f:7c:23:c8: 2c:52:b5:25:67:c3:ec:e7:98:62:d6:66:b3:09:31: bd:cb:79:e4:77:47:b9:16:e2:76:39:e1:79:69:0b: 8e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F9:AB:33:93:3A:2E:B6:E8:2B:93:41:C9:4B:F4:B4:26:70:39:10 X509v3 Authority Key Identifier: keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:84:96:4b:d1:35:31:e0:e2:e0:e2:1c:b5:9a:fe:fb:8d:69: 4b:32:ac:43:1d:57:84:58:d5:fb:7e:49:e0:2f:0a:d0:20:8d: 74:f8:fd:0d:55:7b:c7:f0:fe:9a:9d:05:ac:de:b0:c2:14:7d: 7c:f0:58:7b:00:e3:86:aa:aa:f8:bd:8e:67:39:db:49:dc:8d: 7d:d0:4b:02:b5:4a:44:c2:1b:3e:b4:3a:7c:13:4d:9a:1d:0e: 52:fa:12:2c:49:e7:3b:c9:e9:0d:66:74:8f:01:c4:39:72:a8: 68:3d:48:a8:fd:2d:80:b5:2e:6e:99:49:24:b9:b8:13:5d:60: f9:27:78:39:56:df:e2:8e:bc:dd:fc:38:71:46:6a:04:58:2c: 4c:bc:d6:3b:36:fe:dd:df:3a:9f:95:2e:7e:c8:81:7d:20:26: 5b:5f:86:69:ec:45:fc:2e:0b:e8:28:36:ae:66:96:24:83:11: 2f:ac:d8:3c:7c:15:98:cd:b2:28:8f:46:7c:2a:b2:b3:93:b1: 28:5a:9c:12:5e:3d:9c:93:b5:2f:06:7d:5e:da:93:8d:44:97: bb:d3:7c:d3:55:89:cb:cb:00:dd:db:30:f4:e3:8a:98:3f:70: 4b:c0:07:50:bf:c8:ed:17:08:41:94:e2:97:37:84:99:5c:fc: 84:c4:5a:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN8wUpz0qWP0av+xnZeqzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWNhZjI2MmZkYmZjYzVmZjMwZTI4YTUxMDQ2NDZlMjdh ODkyNjIwHhcNMjUxMjExMjEwMTEzWhcNMjUxMjEyMjEwMTEzWjAzMTEwLwYDVQQD EyhiM2Y5YWIzMzkzM2EyZWI2ZTgyYjkzNDFjOTRiZjRiNDI2NzAzOTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr/BMzgtfJNeBxQNoN415jYBdD3H 5fI1stDObNqm2kpN3ygXbkboBBerl+sDLOjXEuHgB1pzgM1TNmvO7Av2lilA7ST4 +G6wnckXrwePCuaAiDoUYDa8ruwrilFQFiWtX9Qfi60qOFCwfIP4aVuqPBDZhDrA qk4fx0W+t9Le5p58UNrYvNRmabAtMypWUlUuN8jEofcKSeOTZxNGfwvGxsTv79or b2QD4bFYzMSamOqaVkEKCBDuVvr0ZUGrZLwHdcJH4hEQcuSMOFxoBJ5WvuSYjukb Dkeb6FYcoQ98I8gsUrUlZ8Ps55hi1mazCTG9y3nkd0e5FuJ2OeF5aQuOzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLP5qzOTOi626CuTQclL9LQmcDkQMB8GA1UdIwQY MBaAFAtcryYv2/zF/zDiilEEZG4nqJJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEt ZGYxZTk1ZDdlZGQ5LzEvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEtZGYxZTk1ZDdlZGQ5 LzEvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYSWS9E1 MeDi4OIctZr++41pSzKsQx1XhFjV+35J4C8K0CCNdPj9DVV7x/D+mp0FrN6wwhR9 fPBYewDjhqqq+L2OZznbSdyNfdBLArVKRMIbPrQ6fBNNmh0OUvoSLEnnO8npDWZ0 jwHEOXKoaD1IqP0tgLUubplJJLm4E11g+Sd4OVbf4o683fw4cUZqBFgsTLzWOzb+ 3d86n5UufsiBfSAmW1+GaexF/C4L6Cg2rmaWJIMRL6zYPHwVmM2yKI9GfCqys5Ox KFqcEl49nJO1LwZ9XtqTjUSXu9N801WJy8sA3dsw9OOKmD9wS8AHUL/I7RcIQZTi lzeEmVz8hMRa6Q== -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:32 2025 by rpki-client