This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft File: C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json) Hash identifier: UrcXnXST9OEX1D3Ga5WaA555AzOBpB/NRxYs/R+axII= Subject key identifier: 80:69:EC:F8:92:C7:BD:E2:B7:7C:19:64:C3:0E:8B:7D:1A:2B:B2:3D Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 019B421226BDE856C0098578CC92FAD221C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft Manifest number: 17AB Signing time: Sun 21 Dec 2025 18:00:44 +0000 Manifest this update: Sun 21 Dec 2025 18:00:44 +0000 Manifest next update: Mon 22 Dec 2025 18:00:44 +0000 Files and hashes: 1: 7AEnLXSB1YaAfgMGKA-kT_KobA0.roa (hash: 5AKbmZJGLK7UnAttUygeGitl8Ob/t23TtR2u6flJg/c=) 2: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: Q3AWUdH4fsFIWqExLcIErz9SeenPlGOwsYTZhWHeI+A=) 3: Ufuhf0_wn9lleED4LQKhcdXKZLY.roa (hash: f4Ng8ktmuEshcdJiOHZjPJAwq7/nitwlptaYvO0/DHU=) 4: XFCPjaaIP04nEp4Rlitk1zUJ8nA.roa (hash: 9Hrw22EfwJiPVEvx9iOeq1/U32N9ujjXKgQDN7kPNnY=) 5: bzDr7kn2LfhqjYsoZQLZ-uHwvQI.roa (hash: ETCcL6Lmgpdi6iyG4gf+W9Umfg+Mzqif1q2dVBD62g4=) 6: e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa (hash: yWG15kNG/dsh9zB22D/eO5GMJKGaRyWMaUm0mhvs7uI=) 7: irmafOolxajIUAAu4T-WCDDYGuE.roa (hash: B2dN9t4bHqneaqFXcxWnKXREXDW4ZcJ7+Z7DVVfobpU=) 8: n7XNxY-sa2O-8oAFuyK34I07FxU.roa (hash: 7HgkBdxidw6ZJ5Ks5cBFOnu0xmnIR/zyHKV2JfMTPLM=) 9: nikI6XTmNMIUEKKUIOhaKpaRfTY.roa (hash: 3OTWr1t7MNgVLjxLDAQClENVYG0IMxrFr2dhuyh8iLU=) 10: pkcx_-V9HNVC8HzviAJSCvzoxJg.roa (hash: V4tEVQoUWw/5eT8C/Z8qztjVCTQ8kgfSRy2bETB0V2w=) 11: wq6Oybyru5PjGYeKDTrdRRIxOok.roa (hash: +NxS5vTeW/Lv7n0fJHcbikUT3d8Gb7EPQOKgAIeQnGs=) 12: xYF8GskQRTruWnq0Q7-vo_GqfiQ.roa (hash: cnwhIOGst+6jb701ygWNYFM0wdy5cssALvw1jcPBdd8=) 13: ze6Jy-wEyQOgUT5_tzw4Yi-9ljE.roa (hash: apVZ3JWIKH9e8JcSsM1dtB933XqOFmvSIVqu1auN2Gc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:12:26:bd:e8:56:c0:09:85:78:cc:92:fa:d2:21:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Dec 21 18:00:44 2025 GMT Not After : Dec 22 18:00:44 2025 GMT Subject: CN=8069ecf892c7bde2b77c1964c30e8b7d1a2bb23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:01:4c:c6:cf:70:c9:79:5c:4c:01:01:47:9a: 30:b7:25:28:54:c2:2c:c1:a5:ca:48:f0:d9:2a:cb: d4:12:08:5b:a3:8a:b2:9d:e4:1c:a3:fc:4f:98:9d: 8f:a0:1b:5c:3c:67:dc:80:3e:43:97:5e:c5:18:e3: d1:57:55:33:77:4d:d3:f9:a1:8c:d5:ba:59:9d:04: 58:f3:aa:3b:d1:44:bc:f8:60:23:44:89:7b:8d:9e: 62:8a:41:c1:07:62:04:ca:ed:82:51:df:c2:18:25: c2:b8:46:09:d0:49:86:7c:dc:5c:4c:3f:e4:a4:25: cf:95:bf:3a:b0:26:d9:3b:18:db:32:83:9c:bd:76: 66:db:c5:82:5b:f8:69:f6:3a:5f:f3:7e:e0:22:a7: ad:f3:89:a5:c3:b4:b7:ee:3d:e9:a4:66:a4:ab:f0: 03:86:57:39:bd:fb:b9:61:fb:0d:cc:cb:2c:fb:a1: 12:65:f0:4b:90:3f:e5:f1:78:ae:df:f1:9b:5f:77: 11:46:ef:01:68:ed:76:90:c3:59:b4:e5:8b:c5:39: e9:e7:dc:98:ad:05:6a:46:26:d9:85:30:44:cc:ed: b3:b4:d8:63:53:87:d3:2b:0a:00:ce:ba:91:39:a4: cd:e3:a4:2e:16:b2:f3:39:35:a5:8d:1c:eb:f3:93: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:69:EC:F8:92:C7:BD:E2:B7:7C:19:64:C3:0E:8B:7D:1A:2B:B2:3D X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b0:18:59:b1:2d:d7:1c:cc:8a:5b:56:39:14:ea:14:0a:13: 22:cd:07:82:05:95:f4:4b:22:93:30:8f:0d:f9:98:e7:bf:aa: ac:99:ce:d8:1d:b7:38:74:96:ab:f8:61:fd:ea:6b:72:ff:ec: 74:12:a0:17:6f:ec:9c:49:77:8c:6b:02:3a:96:42:01:2a:7e: 9a:98:78:b8:8d:6b:30:0f:d6:92:f9:8b:e9:c2:9e:d4:db:4a: 47:f7:07:29:16:74:2e:2d:b4:ee:dd:38:b3:0f:a7:e7:0c:87: 4a:66:fa:6f:e3:7e:c8:96:91:71:44:6f:a6:53:d0:7b:c2:9d: 29:c7:44:76:41:ae:61:0d:1d:04:7b:33:ce:3e:c5:b6:ed:3d: 74:c8:f9:f3:f4:05:d5:ba:4e:cf:11:aa:d9:bc:12:bd:e9:59: 64:bf:66:81:2a:35:c4:77:56:17:d0:56:1b:d5:e2:d0:54:b1: a4:3d:59:6a:ac:1f:f5:3b:5c:a0:6c:cb:05:36:15:ec:e5:d6: 0c:aa:7b:be:96:cb:ef:b3:64:49:96:59:c6:2b:f8:90:b0:97: 2d:82:04:9b:4d:f4:db:02:56:41:10:61:b1:f8:e6:dc:bb:26: 5d:73:93:7e:2b:81:09:e4:f3:92:0c:29:e0:0f:64:9e:af:2c: 37:7b:d2:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCEia96FbACYV4zJL60iHBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjUxMjIxMTgwMDQ0WhcNMjUxMjIyMTgwMDQ0WjAzMTEwLwYDVQQD Eyg4MDY5ZWNmODkyYzdiZGUyYjc3YzE5NjRjMzBlOGI3ZDFhMmJiMjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowFMxs9wyXlcTAEBR5owtyUoVMIs waXKSPDZKsvUEghbo4qyneQco/xPmJ2PoBtcPGfcgD5Dl17FGOPRV1Uzd03T+aGM 1bpZnQRY86o70US8+GAjRIl7jZ5iikHBB2IEyu2CUd/CGCXCuEYJ0EmGfNxcTD/k pCXPlb86sCbZOxjbMoOcvXZm28WCW/hp9jpf837gIqet84mlw7S37j3ppGakq/AD hlc5vfu5YfsNzMss+6ESZfBLkD/l8Xiu3/GbX3cRRu8BaO12kMNZtOWLxTnp59yY rQVqRibZhTBEzO2ztNhjU4fTKwoAzrqROaTN46QuFrLzOTWljRzr85OdcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBp7PiSx73it3wZZMMOi30aK7I9MB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLAYWbEt 1xzMiltWORTqFAoTIs0HggWV9EsikzCPDfmY57+qrJnO2B23OHSWq/hh/eprcv/s dBKgF2/snEl3jGsCOpZCASp+mph4uI1rMA/WkvmL6cKe1NtKR/cHKRZ0Li207t04 sw+n5wyHSmb6b+N+yJaRcURvplPQe8KdKcdEdkGuYQ0dBHszzj7Ftu09dMj58/QF 1bpOzxGq2bwSvelZZL9mgSo1xHdWF9BWG9Xi0FSxpD1Zaqwf9TtcoGzLBTYV7OXW DKp7vpbL77NkSZZZxiv4kLCXLYIEm0302wJWQRBhsfjm3LsmXXOTfiuBCeTzkgwp 4A9knq8sN3vS5g== -----END CERTIFICATE-----Generated at Mon Dec 22 04:05:09 2025 by rpki-client